$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: Q6kRJs+tqbjAsHG1Lj05WQmEJ8xEFtb+IP3qbEZjRx4= Subject key identifier: 77:E8:E7:78:8D:E9:A8:9C:76:36:01:63:B8:2E:B8:DB:69:5C:A5:F2 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 59FB53401C3A67FAC9998CFD81C49A060EE74E43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 0506 Signing time: Sat 14 Jun 2025 10:22:53 +0000 Manifest this update: Sat 14 Jun 2025 10:17:53 +0000 Manifest next update: Sun 15 Jun 2025 12:46:53 +0000 Files and hashes: 1: 33362e3235352e39342e302f32332d3233203d3e203632323430.roa (hash: cEllpKs9D7QXOnlcaRDylPTaKGxvLoUwJx/hEnrKHPU=) 2: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: 7MRl2ndToXr+/Nwpi0fWFQSP/EKXsP73R/4IMWd5dgM=) 3: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: +zgqg7oCfaFMqowtNn81ipaj3irDs5wSCtc6B41Oes8=) 4: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: KhYwWjM/5tZMAc1Ys2Qi/Z3IxKzkYaHG79mNsaA679A=) 5: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: OQY6w4Q7ZQH092Yj40TGy9LpmPXnSdGe58D7QhrLuAk=) 6: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: mH/CiZmwU0yIfVsdjhTMAG/KAtonINfckXbmsVpawiw=) 7: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: O475B5YNr+mk4vbByMFVmoqbRTenx4kmx66C3HIfdsg=) 8: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: ezbmX/yRe+yRvkLs/8FFZoupwCiBI67aZ+0JqkrMl4Q=) 9: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: GFt7MPBQXAoRbBAZf/a6ypM3reYPwEU6C1kyEqDInRE=) 10: 3138352e3232392e3230332e302f32342d3234203d3e20323036373335.roa (hash: FZGdNF2bcBn3tP8pVRjxMkfCiiAE12vqIDQ0utFcBVs=) 11: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: RdOuxQjMUqkQryMcrXonWYYeJva5RY8rohAdG2ITJdw=) 12: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: W9NdT6aoX4s9PghUA97T0GAxnEF0Q0u3VMj+QX70R5Y=) 13: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: L+rO+MXrQK3tGBKkhTiQd3Pp/oT0n0nJ8NfAxPcZ/Ik=) 14: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=) 15: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: aTFuiZRKSKlOcP1bFw/QEJGr9kwsAqFvqfR62oNQfMc=) 16: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: utowtZRAfJFhUzwdo/zemeUkebNpdCD5pImpgn9nnfM=) 17: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: NTiGjgrJWtlD9Roa9FRQtbjOAAcPR35U4Ayfj8SpKuI=) 18: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: fyEm36B55a1pd4HLESzxtTjALoxzu4leetK2j/pzqHY=) 19: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: 2mJFb3j98iS3WwOyYDzT/44zu56P1Mt1+w22nAIK9Eo=) 20: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: /OGL5Xocpa/mA4GEutGuQoiWc4p3DBj9VM0kpmdQZxo=) 21: 33362e3235352e39322e302f32332d3234203d3e203230343733.roa (hash: n+NW7CIboSad7G7qrJiCYcaG5y4V5KnwqXZRxtAjPBQ=) 22: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=) 23: 3138352e3232392e3230302e302f32342d3234203d3e203139343337.roa (hash: EP6RD+ZuD8/aeGRdu5DeM51xsrxE2M7oAfAneTY5Btg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:fb:53:40:1c:3a:67:fa:c9:99:8c:fd:81:c4:9a:06:0e:e7:4e:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Jun 14 10:17:53 2025 GMT Not After : Jun 15 12:46:53 2025 GMT Subject: CN=77E8E7788DE9A89C76360163B82EB8DB695CA5F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d2:5a:f9:50:fe:16:61:94:4f:3d:20:1a:fd: fe:fc:f1:3a:48:33:e3:04:7c:24:70:8c:23:c3:4e: cc:1a:e9:d3:38:c7:98:ee:40:b6:82:7a:94:c5:59: f8:90:d2:b1:34:67:69:0f:ec:fe:37:aa:62:16:4c: 48:4e:32:39:88:3c:25:4f:62:4f:44:00:24:03:62: 88:fe:03:6f:a4:b6:dd:cc:3d:a5:14:1c:37:62:f9: 3b:c8:0e:7e:1a:4e:23:42:8b:ce:39:e3:f6:6c:4f: d1:59:8c:b1:1d:47:f1:53:ed:7b:5c:21:cb:44:71: 31:9c:69:c8:fc:c3:ba:cc:2e:9e:32:ae:cc:be:aa: 7e:22:e8:d9:b3:f8:f2:3d:ba:fd:46:45:79:7a:d4: a9:6a:67:72:a4:8f:ba:ff:58:b6:b7:80:b1:9e:88: a7:43:58:4c:de:37:a8:e6:9a:cb:7b:e7:b9:df:54: 03:97:0a:5c:2d:aa:e3:5d:0a:97:9a:3e:0f:e3:59: 5a:0a:4a:06:de:ad:44:d4:b1:31:df:b7:34:c6:2b: c5:5c:53:a1:81:fb:16:5a:64:31:97:23:fa:9d:58: 24:5b:05:c6:58:18:34:34:3d:52:26:ea:c5:31:b5: 09:5d:e9:5a:48:36:e6:81:a9:64:b4:96:d4:f7:e4: c8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E8:E7:78:8D:E9:A8:9C:76:36:01:63:B8:2E:B8:DB:69:5C:A5:F2 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:a4:a9:2b:9d:31:90:f1:e0:cb:69:04:5c:f3:f0:16:71:56: 9a:38:40:2d:aa:2d:35:d0:78:db:0a:6a:96:83:82:ac:54:c9: 43:7b:5e:55:9d:14:13:75:ce:9c:81:cb:35:61:6d:03:a0:96: ea:3e:25:c2:bc:05:be:f7:ff:be:b8:36:2f:6d:df:0f:ea:54: 03:ac:35:37:6d:db:ed:0a:9e:da:99:76:c0:b7:85:3a:24:f0: 1b:1c:e9:60:c5:08:f8:33:65:f9:66:d5:ab:a2:c7:95:69:8c: 71:27:c7:70:b3:3e:28:94:6e:a2:e6:ce:96:38:5b:d5:02:b1: e2:79:74:5e:ef:9e:39:94:2a:97:f2:46:9c:4f:7e:20:66:d7: ce:7f:97:72:98:5a:06:70:8e:72:e6:a7:cc:49:73:55:f2:b7: 39:24:09:aa:3c:4b:c2:7b:36:bc:4b:d8:35:64:70:8e:3f:51: 1a:e1:b3:3d:fb:de:1f:10:59:3f:0b:d5:fb:86:fa:20:3d:84: 5d:63:70:98:0e:cf:8a:3b:8d:12:77:dd:a5:7c:42:b7:f8:a3: fa:80:da:bd:75:fe:3e:22:ed:71:50:68:c3:f8:41:96:53:f0: d9:72:41:dd:6d:7f:e7:0b:94:bb:a5:05:e3:5c:18:4f:27:cb: fb:20:a1:8a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWftTQBw6Z/rJmYz9gcSaBg7nTkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNTA2MTQxMDE3NTNaFw0yNTA2MTUxMjQ2NTNaMDMxMTAvBgNV BAMTKDc3RThFNzc4OERFOUE4OUM3NjM2MDE2M0I4MkVCOERCNjk1Q0E1RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo0lr5UP4WYZRPPSAa/f788TpI M+MEfCRwjCPDTswa6dM4x5juQLaCepTFWfiQ0rE0Z2kP7P43qmIWTEhOMjmIPCVP Yk9EACQDYoj+A2+ktt3MPaUUHDdi+TvIDn4aTiNCi8454/ZsT9FZjLEdR/FT7Xtc IctEcTGcacj8w7rMLp4yrsy+qn4i6Nmz+PI9uv1GRXl61KlqZ3Kkj7r/WLa3gLGe iKdDWEzeN6jmmst757nfVAOXClwtquNdCpeaPg/jWVoKSgberUTUsTHftzTGK8Vc U6GB+xZaZDGXI/qdWCRbBcZYGDQ0PVIm6sUxtQld6VpINuaBqWS0ltT35MjtAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUd+jneI3pqJx2NgFjuC6422lcpfIwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKSpK50xkPHgy2kEXPPw FnFWmjhALaotNdB42wpqloOCrFTJQ3teVZ0UE3XOnIHLNWFtA6CW6j4lwrwFvvf/ vrg2L23fD+pUA6w1N23b7Qqe2pl2wLeFOiTwGxzpYMUI+DNl+WbVq6LHlWmMcSfH cLM+KJRuoubOljhb1QKx4nl0Xu+eOZQql/JGnE9+IGbXzn+XcphaBnCOcuanzElz VfK3OSQJqjxLwns2vEvYNWRwjj9RGuGzPfveHxBZPwvV+4b6ID2EXWNwmA7PijuN EnfdpXxCt/ij+oDavXX+PiLtcVBow/hBllPw2XJB3W1/5wuUu6UF41wYTyfL+yCh ig== -----END CERTIFICATE-----Generated at Sat Jun 14 22:15:04 2025 by rpki-client