$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: hG6S3IwM72DE6YQ6kVIcarXpiKiYk8WHlkBMmyRlDmo= Subject key identifier: FA:9E:71:BD:85:1C:C5:7C:20:79:CB:FE:8C:A1:2B:AE:EF:3C:BA:C3 Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: 78F3E750BCF5BBF09D95605B2EDAF1A90FFE559D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 03B1 Signing time: Fri 13 Jun 2025 19:49:45 +0000 Manifest this update: Fri 13 Jun 2025 19:44:45 +0000 Manifest next update: Sat 14 Jun 2025 22:56:45 +0000 Files and hashes: 1: AS48070.asa (hash: YsK0/rV2BmXeHeRJ0VrNqX7Hbez3e33zUXMrV6bup5Y=) 2: 326131313a353730343a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: e6pNQA8izdBKRkcuzWtfOOmNK456AAkxlNJ6pMTNpsc=) 3: 326131313a353730313a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 0SF0WfEKn6tAt+SqtI0zWos8/5DwYGM33/T6SlnO8Oc=) 4: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: kKBl+tVpAJ9VTz7UUfi4OCjiiSdxGvUn05SXW7blpDk=) 5: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: 242POLRepYH713AUptOGvBkM/JpRNVCsIm5BodQGTyY=) 6: 326131313a353730353a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: YvH+3atWqaB4zJsHYK1cEoa4+J3Y8wbDOetaRpGkY9U=) 7: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: ma+wlMqMsb7J0TC2Gy822cEZS57hTDfS/GzCjZsgQ1k=) 8: 326131313a353730323a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: zY7Phzmd75TKCthkmSaY4oyTFaKkCEl/y4pnJz6mHMw=) 9: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: wQ/YXS5V0WqyAz3I38Grxwtf2vC7Tnq0YU0pMolmNpk=) 10: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: SY6OvQv9R/Ut8R5yFxdy0RVK/9dKsg8ZwmC3iNS9Rpw=) 11: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: VIdYFIOIqW5zJ3T1LDGwWjmJ764XjM+ac+86S8Ja5hk=) 12: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: /8dVa93viKNoM1pCJooeH0rtbsVAVvDJFpjlC3WNZyI=) 13: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: Fqs+xGh2wCPoRebx3WWGGz8gG+3wDYrzV+eGaABVra0=) 14: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: S5WIAkzllTXfMiWpREUuucFgM0BSw7Pb5gT995rR5+k=) 15: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: NDHvIIcUiAk7uX5boyMA8yHxKUGe6BZWK+cptlXNnOA=) 16: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: IiLsd5rWyRAEtPC2BRNztBwgXOWFkCLAq6FHsMnhQxg=) 17: 326131313a353730333a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: amyhppkunQUKDCiBGMFxQfAHBmd/6ZM1Y2JA6Xv6mjw=) 18: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: Pc4F216M/oD/fxZDUk8HLynWg8D1IQ0ANHs5N2ZC0VQ=) 19: 326131313a353730373a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 11LkJhM5pGNm95iRuza8Ye8pvz7Hby+G2YVPV9KFFMI=) 20: 326131313a353730363a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: +GiVUNSbcYm0MXNlVgxa6VflGOlRp9hOfbY/aidYY1U=) 21: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: EEtfGKQPQ42nFzzdsRfixi4zKQ5tTYPEdAQ1iAcmdE4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 22:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f3:e7:50:bc:f5:bb:f0:9d:95:60:5b:2e:da:f1:a9:0f:fe:55:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: Jun 13 19:44:45 2025 GMT Not After : Jun 14 22:56:45 2025 GMT Subject: CN=FA9E71BD851CC57C2079CBFE8CA12BAEEF3CBAC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d8:f2:d4:4a:8e:05:5d:46:46:82:bc:c9:26: 8a:88:ca:68:1c:11:79:05:98:7b:06:53:95:d0:43: db:c8:46:f8:c2:38:34:4b:13:59:17:f4:d0:1e:a1: a3:88:a1:fa:13:7b:f7:87:cb:c0:d1:60:db:36:04: 5d:02:e0:0a:84:12:24:bb:7d:bc:82:84:6d:e5:cf: 3b:59:88:65:bc:d2:d3:f0:7a:19:a0:be:24:c2:6c: f8:09:71:6d:4f:af:ac:ea:31:c1:17:7c:b8:b9:ac: c0:bc:6a:60:be:da:63:75:53:85:7f:b7:9f:b4:b8: ac:e5:b4:7f:26:90:f2:33:4c:11:8a:62:49:a4:eb: b2:7c:51:a2:76:27:88:ec:3e:92:72:5d:ac:65:a0: 27:00:15:78:fc:5b:1c:7f:96:6e:9d:31:5b:98:51: 30:64:dc:e2:49:26:c0:8d:54:6d:9f:ce:af:fa:d2: a8:24:15:a6:f9:6b:10:78:40:86:a8:5e:51:27:16: 0e:dd:5e:92:d6:b7:f2:e1:ce:44:b6:ec:3c:97:fb: 67:df:31:9a:72:26:b9:59:e8:15:d2:c0:4e:0c:5e: dc:6f:0a:4a:b8:a1:3d:fc:0d:60:f9:49:d4:0a:25: 31:a0:18:31:9f:69:7c:33:c7:08:e3:c9:03:b6:50: ec:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9E:71:BD:85:1C:C5:7C:20:79:CB:FE:8C:A1:2B:AE:EF:3C:BA:C3 X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:1f:78:92:87:a4:a8:0b:ca:cc:df:97:5c:16:12:72:26:90: 87:00:b8:cb:bd:50:aa:20:0e:07:a9:ef:cc:ce:fa:78:87:37: 4d:b2:56:16:b3:22:56:4b:97:e2:a1:f9:34:28:c2:59:fa:35: 6d:00:39:af:0a:4f:eb:7a:d0:3e:63:10:a9:14:1a:be:7b:0d: fc:64:8e:96:2f:1f:6a:09:74:c4:e3:c4:0c:13:aa:d0:18:6d: bd:b9:38:54:66:a9:0e:ce:a1:62:8e:12:6f:67:ca:e2:b8:d3: 54:6b:0a:52:df:cf:11:f4:0e:18:d4:88:e9:8d:0d:df:46:19: 38:ec:a9:6b:9d:a6:ea:b1:1e:b1:be:ef:c2:63:54:0b:3e:7b: a9:97:90:fe:1b:2c:41:48:0d:ee:e8:aa:64:4f:01:89:85:2b: af:0d:41:16:ec:1b:f0:94:b2:c1:88:f2:ce:2b:c3:65:dc:1f: 6a:64:11:03:75:30:37:b7:83:6b:02:d6:82:b8:3f:e5:5e:9e: a4:ba:04:1f:95:e9:4b:a3:68:2c:81:c6:a1:f6:a4:fb:eb:45: 33:9d:bd:81:6e:2f:14:bd:6c:91:af:fc:c1:9d:90:ba:91:90: 12:15:06:f4:9a:be:46:1c:5a:6b:a1:1c:fd:92:c0:48:45:0d: 6c:d8:3d:b1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUePPnULz1u/CdlWBbLtrxqQ/+VZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNTA2MTMxOTQ0NDVaFw0yNTA2MTQyMjU2NDVaMDMxMTAvBgNV BAMTKEZBOUU3MUJEODUxQ0M1N0MyMDc5Q0JGRThDQTEyQkFFRUYzQ0JBQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk2PLUSo4FXUZGgrzJJoqIymgc EXkFmHsGU5XQQ9vIRvjCODRLE1kX9NAeoaOIofoTe/eHy8DRYNs2BF0C4AqEEiS7 fbyChG3lzztZiGW80tPwehmgviTCbPgJcW1Pr6zqMcEXfLi5rMC8amC+2mN1U4V/ t5+0uKzltH8mkPIzTBGKYkmk67J8UaJ2J4jsPpJyXaxloCcAFXj8Wxx/lm6dMVuY UTBk3OJJJsCNVG2fzq/60qgkFab5axB4QIaoXlEnFg7dXpLWt/LhzkS27DyX+2ff MZpyJrlZ6BXSwE4MXtxvCkq4oT38DWD5SdQKJTGgGDGfaXwzxwjjyQO2UOyLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+p5xvYUcxXwgecv+jKErru88usMwHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhx94koekqAvKzN+XXBYS ciaQhwC4y71QqiAOB6nvzM76eIc3TbJWFrMiVkuX4qH5NCjCWfo1bQA5rwpP63rQ PmMQqRQavnsN/GSOli8fagl0xOPEDBOq0Bhtvbk4VGapDs6hYo4Sb2fK4rjTVGsK Ut/PEfQOGNSI6Y0N30YZOOypa52m6rEesb7vwmNUCz57qZeQ/hssQUgN7uiqZE8B iYUrrw1BFuwb8JSywYjyzivDZdwfamQRA3UwN7eDawLWgrg/5V6epLoEH5XpS6No LIHGofak++tFM529gW4vFL1ska/8wZ2QupGQEhUG9Jq+Rhxaa6Ec/ZLASEUNbNg9 sQ== -----END CERTIFICATE-----Generated at Sat Jun 14 11:16:32 2025 by rpki-client