$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json) Hash identifier: 9ZTNxxn87Eoz9S5Ab3vAevgpna0E+DOrfHiuP/v02DA= Subject key identifier: B5:BA:90:84:3A:01:66:46:36:C1:A6:FB:00:30:BE:4B:4D:D5:DB:4E Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 5E0FE88D80C71B8DF5D88FBBAF9A93A66E121FD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft Manifest number: 0169 Signing time: Mon 04 Aug 2025 02:42:18 +0000 Manifest this update: Mon 04 Aug 2025 02:37:18 +0000 Manifest next update: Tue 05 Aug 2025 06:24:18 +0000 Files and hashes: 1: 3130332e34392e3132392e302f32342d3234203d3e20313531373334.roa (hash: 28TId/fsDF05nZ10xdOe7gDgnSUwJs5SpkbS0V0fefA=) 2: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: hoZQSGqkvoyh+Fwe28UicpO6RAJD80P7rklT/Di/mQU=) 3: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: iK+yx/VtDctRGDFOE/NGNWTyR4u7o2tFGRI6U0bUYZU=) 4: 34332e3233302e38342e302f32342d3234203d3e203231383539.roa (hash: SVFfgjYJoyDeeqzPyXuYrjyRbvwTEkox9PAuxc1c2+U=) 5: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (hash: 4XlIN+3Y2uvivj3jKKbdxnHiR3dRqeJ7/xmTE8uipj8=) 6: 3130332e34392e3133302e302f32342d3234203d3e20323036303333.roa (hash: v7D054EN2gERBe7aLvFn0V17UtLvh1fmGSVfmRoK+KQ=) 7: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: yHVodRBAsBlx/8p8lQvX33hmgwPZB9Uj6k/5yqbIyfs=) 8: 33312e32322e3130372e302f32342d3234203d3e20313337353137.roa (hash: zucU5bamNfYRw/esvivyzaXHMAl8N0xQ+Q3coI+3JvA=) 9: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: BqbUmbythNNYP4WqssroNY2sOPvoyuRgXIRAVuIytpA=) 10: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: oEeiRbfOG61pCbSAy5yQ5FBHGPmeJW7QCucIGneH+Kg=) 11: 33312e32322e3131302e302f32342d3234203d3e2039333034.roa (hash: 4/DyfQef3JM+QDXadF+flhTmwriSDAeEuVFVt/FGtTg=) 12: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: jNzQvK975k0nFSky/OYcsFfueNL1XvYeIp3mtR/7WPY=) 13: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: y9uevaBeLo1M0NZi4w3HJOyvLkMWIaZEJFCi8snsYYY=) 14: 3130332e34392e3132382e302f32342d3234203d3e20383334.roa (hash: f69Ng9E7cmqBwiI0B0WK6huEhniZtrLM96PEK5iUE1I=) 15: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: yKZlfj+dim9IpeOPok1lfUiZi1MHzmaDZPGLMC3tfYU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 06:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0f:e8:8d:80:c7:1b:8d:f5:d8:8f:bb:af:9a:93:a6:6e:12:1f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Aug 4 02:37:18 2025 GMT Not After : Aug 5 06:24:18 2025 GMT Subject: CN=B5BA90843A01664636C1A6FB0030BE4B4DD5DB4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f8:e3:9b:43:51:c7:06:1a:1f:28:d8:e2:4b: d4:44:81:98:59:1f:c5:77:fc:01:da:c2:25:09:22: bd:9e:5b:08:f8:2b:0d:c2:4d:f9:0a:e4:33:bc:b6: b8:00:b4:6a:9a:7c:55:58:1d:77:cd:ba:c4:f6:96: 8f:b6:f5:7f:cd:57:ca:5d:a6:c8:06:13:ac:b2:4d: f4:e5:aa:48:b4:e2:e3:02:7a:cb:cc:ff:63:88:cc: dd:5e:cc:37:5f:69:f7:08:89:1c:f7:ea:92:56:c6: aa:28:80:a9:09:7c:fc:4a:e5:71:20:dd:cb:91:a8: 96:d3:81:c8:80:fd:66:36:3a:64:76:a4:5c:ff:a1: 61:21:9a:82:19:7e:c2:04:3e:e7:60:5f:df:86:6d: 5b:c1:58:cf:47:8f:e5:90:d5:9d:b4:8b:52:eb:13: 4f:89:61:ab:c2:dd:a5:e0:78:ab:7b:1e:a7:05:6c: b7:c3:21:02:7b:48:0b:e0:e4:97:d7:62:8b:b3:ec: b8:b0:5f:d5:a2:91:10:c3:0f:20:e7:79:f1:61:c1: 37:f8:4f:78:77:5e:c0:d7:67:99:f7:a7:21:70:6b: 67:82:d4:7a:52:67:01:f4:69:39:e3:36:5d:db:9f: c8:07:63:5d:a7:55:e0:2f:85:ab:6a:9e:c1:3b:80: 88:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BA:90:84:3A:01:66:46:36:C1:A6:FB:00:30:BE:4B:4D:D5:DB:4E X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8b:fd:64:6e:41:85:74:a3:42:4c:50:6f:4b:54:ef:86:de: a4:4e:94:78:12:ed:7b:46:5d:70:75:b0:ae:fc:63:15:0d:35: 75:5e:b8:fc:ca:d0:c6:a5:ec:cd:05:df:ea:f0:a3:4c:57:b6: c1:c3:e3:30:9e:60:50:08:aa:11:37:eb:08:09:2a:44:45:7d: 51:dc:0a:fe:83:08:68:51:12:1b:92:d2:43:4a:77:12:71:31: 8b:7f:28:b6:9c:d6:16:b2:e9:88:80:be:60:b3:0b:9f:76:e6: ff:78:a9:59:3b:5f:3a:a9:aa:a1:28:cd:b0:da:94:61:f1:29: a3:c1:0f:2d:96:b4:a4:52:fb:49:e1:09:36:17:e3:b3:90:34: 04:c6:bb:0f:1a:e9:8d:68:15:14:b9:3a:f5:79:cb:ce:21:f2: 40:84:a3:47:bb:1d:11:2a:51:58:31:45:57:ef:cf:e4:c0:14: 2a:49:59:d2:64:6a:bb:62:1c:d1:49:af:39:d0:c0:be:b0:36: f7:86:a8:91:2a:0f:58:ee:08:b9:d5:95:3f:d0:60:da:df:e7: ae:20:f7:d8:36:b1:e5:b8:d3:95:c1:83:38:b7:35:9a:5d:a8: 52:1a:6c:10:3d:c7:d1:ea:0b:4a:bb:c8:9f:fd:41:97:61:29: d0:af:b8:5e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXg/ojYDHG4312I+7r5qTpm4SH9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNTA4MDQwMjM3MThaFw0yNTA4MDUwNjI0MThaMDMxMTAvBgNV BAMTKEI1QkE5MDg0M0EwMTY2NDYzNkMxQTZGQjAwMzBCRTRCNERENURCNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj+OObQ1HHBhofKNjiS9REgZhZ H8V3/AHawiUJIr2eWwj4Kw3CTfkK5DO8trgAtGqafFVYHXfNusT2lo+29X/NV8pd psgGE6yyTfTlqki04uMCesvM/2OIzN1ezDdfafcIiRz36pJWxqoogKkJfPxK5XEg 3cuRqJbTgciA/WY2OmR2pFz/oWEhmoIZfsIEPudgX9+GbVvBWM9Hj+WQ1Z20i1Lr E0+JYavC3aXgeKt7HqcFbLfDIQJ7SAvg5JfXYouz7LiwX9WikRDDDyDnefFhwTf4 T3h3XsDXZ5n3pyFwa2eC1HpSZwH0aTnjNl3bn8gHY12nVeAvhatqnsE7gIirAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUtbqQhDoBZkY2wab7ADC+S03V204wHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02 ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5 QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIv9ZG5BhXSjQkxQb0tU 74bepE6UeBLte0ZdcHWwrvxjFQ01dV64/MrQxqXszQXf6vCjTFe2wcPjMJ5gUAiq ETfrCAkqREV9UdwK/oMIaFESG5LSQ0p3EnExi38otpzWFrLpiIC+YLMLn3bm/3ip WTtfOqmqoSjNsNqUYfEpo8EPLZa0pFL7SeEJNhfjs5A0BMa7DxrpjWgVFLk69XnL ziHyQISjR7sdESpRWDFFV+/P5MAUKklZ0mRqu2Ic0UmvOdDAvrA294aokSoPWO4I udWVP9Bg2t/nriD32Dax5bjTlcGDOLc1ml2oUhpsED3H0eoLSrvIn/1Bl2Ep0K+4 Xg== -----END CERTIFICATE-----Generated at Mon Aug 4 18:23:10 2025 by rpki-client