$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json) Hash identifier: KmQnr+NBuJ9np/EigGDK2DV5cgHTvS6DCKFiKtIEjdU= Subject key identifier: 1C:27:60:E9:53:27:A7:D3:10:13:77:8C:3F:F1:C1:2E:C9:A4:4F:8C Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 0C41EDC78793712D0F0887CAEE8222AD440D3E94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft Manifest number: 0120 Signing time: Sun 15 Jun 2025 07:17:58 +0000 Manifest this update: Sun 15 Jun 2025 07:12:58 +0000 Manifest next update: Mon 16 Jun 2025 10:11:58 +0000 Files and hashes: 1: 33312e32322e3130372e302f32342d3234203d3e20313337353137.roa (hash: zucU5bamNfYRw/esvivyzaXHMAl8N0xQ+Q3coI+3JvA=) 2: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: iK+yx/VtDctRGDFOE/NGNWTyR4u7o2tFGRI6U0bUYZU=) 3: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: jNzQvK975k0nFSky/OYcsFfueNL1XvYeIp3mtR/7WPY=) 4: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (hash: 4XlIN+3Y2uvivj3jKKbdxnHiR3dRqeJ7/xmTE8uipj8=) 5: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: BqbUmbythNNYP4WqssroNY2sOPvoyuRgXIRAVuIytpA=) 6: 3130332e34392e3132382e302f32332d3234203d3e20383334.roa (hash: cwv6U5HtTbEKzJMeb3nfWtIwqYRG9Jzq6qWtzvszezA=) 7: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: y9uevaBeLo1M0NZi4w3HJOyvLkMWIaZEJFCi8snsYYY=) 8: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: yHVodRBAsBlx/8p8lQvX33hmgwPZB9Uj6k/5yqbIyfs=) 9: 3130332e34392e3133312e302f32342d3234203d3e20313531313036.roa (hash: /tFw1lzpQWvvpuYCQnIjFSZLwGcls1xoTiwGuGyPuCE=) 10: 3130332e34392e3133302e302f32342d3234203d3e20383334.roa (hash: 2kviFL54lDpfPzXEFZx4nMFKp96iC4oZ7nWuGME1pqQ=) 11: 33312e32322e3131302e302f32342d3234203d3e2039333034.roa (hash: 4/DyfQef3JM+QDXadF+flhTmwriSDAeEuVFVt/FGtTg=) 12: 34332e3233302e38342e302f32342d3234203d3e203231383430.roa (hash: 0jlXbJYw2GWQ/DylqYAmM4dC2o3pqpBbNQAmAAMOqvc=) 13: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: /sEfHCz+sBGh3yBlccUZ7iXUeEr5D8j1FM7R1J3d5wE=) 14: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: hoZQSGqkvoyh+Fwe28UicpO6RAJD80P7rklT/Di/mQU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 10:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:41:ed:c7:87:93:71:2d:0f:08:87:ca:ee:82:22:ad:44:0d:3e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Jun 15 07:12:58 2025 GMT Not After : Jun 16 10:11:58 2025 GMT Subject: CN=1C2760E95327A7D31013778C3FF1C12EC9A44F8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:48:cb:3e:fa:fd:cb:65:c2:8f:1c:40:68:23: 31:c7:8f:4a:f5:44:14:b6:70:51:0b:00:fa:1e:fc: 46:7d:a0:f3:5e:67:04:ec:e8:68:80:95:b1:b3:af: 9c:0d:3f:bf:40:e5:ca:51:c8:5c:69:a6:d9:33:27: 56:43:8a:ee:a6:b5:8e:bb:4c:68:26:7b:fc:fa:51: b5:12:6f:a4:1b:ef:e8:29:48:92:56:4c:be:61:5d: ba:ad:4e:f4:c9:77:24:9e:e9:38:2e:90:e4:37:63: 6a:f2:6b:91:53:de:15:71:51:e2:bb:a8:1e:74:1d: cf:0f:0a:13:fb:04:9d:67:16:50:1a:8e:a0:6c:a9: bb:98:fb:99:df:c4:fd:5a:f6:61:c7:50:9c:fb:d4: 86:70:ba:6a:34:b4:9d:9c:5f:00:3d:be:a5:71:78: 61:5e:32:3d:bc:a9:cf:7f:93:93:d0:d8:a5:9d:86: 15:f2:d1:73:9f:86:19:42:f5:71:9a:78:04:58:c8: ae:51:83:a6:9a:84:37:51:93:e0:02:b7:75:ca:9a: f2:f5:93:3f:01:33:fa:52:cf:26:65:b2:4d:f1:a8: 38:0d:1e:0d:a4:e8:74:9f:a9:33:87:80:01:09:27: b4:3a:78:6d:67:89:9f:32:0b:52:10:bf:93:79:0a: f6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:27:60:E9:53:27:A7:D3:10:13:77:8C:3F:F1:C1:2E:C9:A4:4F:8C X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:0d:61:98:c4:49:4c:79:91:9a:75:d2:9a:a7:89:17:33:32: ab:9b:37:58:49:a3:4c:88:5e:14:a9:fd:8d:50:1b:ed:3d:b2: 3e:ae:40:f1:9d:30:e5:7b:d4:a5:11:9b:47:39:47:bf:22:d7: a3:11:fa:f2:90:d3:be:d2:ff:5f:6c:0a:d4:e8:3c:4e:bc:d6: 48:0b:be:55:9f:63:03:68:14:bf:71:1a:b1:35:2e:47:88:cf: 5e:59:be:0c:9c:02:0f:cb:44:69:f6:f5:9c:f2:f6:ef:f1:2b: 1b:22:88:c8:3e:e0:9e:fb:c6:33:c9:e7:4f:e1:4f:08:3e:cf: ec:d9:15:66:9f:d9:1c:d3:4b:18:06:89:07:ec:0a:bb:f6:87: 28:18:76:87:93:9e:9f:a3:3b:b8:f9:88:a2:fd:d5:2f:e6:92: bf:5c:74:05:4b:32:0e:0b:10:f1:7c:f5:09:78:bc:8f:9b:44: f0:fe:43:a3:4f:4f:b5:51:83:df:7c:a3:6a:58:5b:1f:4b:f2: 71:6c:96:20:5a:68:1d:3b:09:3f:b6:fc:c8:e5:f6:2c:99:a5: 0e:9a:0a:ba:e1:07:de:5a:68:c9:9e:3e:f0:22:97:e6:18:5d: ea:22:b9:7a:9d:a4:44:93:4d:db:54:ce:b5:e0:f8:6b:fd:ad: 12:d8:ee:73 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDEHtx4eTcS0PCIfK7oIirUQNPpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNTA2MTUwNzEyNThaFw0yNTA2MTYxMDExNThaMDMxMTAvBgNV BAMTKDFDMjc2MEU5NTMyN0E3RDMxMDEzNzc4QzNGRjFDMTJFQzlBNDRGOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0SMs++v3LZcKPHEBoIzHHj0r1 RBS2cFELAPoe/EZ9oPNeZwTs6GiAlbGzr5wNP79A5cpRyFxpptkzJ1ZDiu6mtY67 TGgme/z6UbUSb6Qb7+gpSJJWTL5hXbqtTvTJdySe6TgukOQ3Y2rya5FT3hVxUeK7 qB50Hc8PChP7BJ1nFlAajqBsqbuY+5nfxP1a9mHHUJz71IZwumo0tJ2cXwA9vqVx eGFeMj28qc9/k5PQ2KWdhhXy0XOfhhlC9XGaeARYyK5Rg6aahDdRk+ACt3XKmvL1 kz8BM/pSzyZlsk3xqDgNHg2k6HSfqTOHgAEJJ7Q6eG1niZ8yC1IQv5N5CvYRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHCdg6VMnp9MQE3eMP/HBLsmkT4wwHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02 ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5 QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeg1hmMRJTHmRmnXSmqeJ FzMyq5s3WEmjTIheFKn9jVAb7T2yPq5A8Z0w5XvUpRGbRzlHvyLXoxH68pDTvtL/ X2wK1Og8TrzWSAu+VZ9jA2gUv3EasTUuR4jPXlm+DJwCD8tEafb1nPL27/ErGyKI yD7gnvvGM8nnT+FPCD7P7NkVZp/ZHNNLGAaJB+wKu/aHKBh2h5Oen6M7uPmIov3V L+aSv1x0BUsyDgsQ8Xz1CXi8j5tE8P5Do09PtVGD33yjalhbH0vycWyWIFpoHTsJ P7b8yOX2LJmlDpoKuuEH3lpoyZ4+8CKX5hhd6iK5ep2kRJNN21TOteD4a/2tEtju cw== -----END CERTIFICATE-----Generated at Sun Jun 15 16:54:46 2025 by rpki-client