$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft File: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json) Hash identifier: yZhqgYnv+LYDcPsTtgHRpMxhQMCBKChc0tUT3F9oVmY= Subject key identifier: 4C:69:3A:8D:66:22:33:84:7F:D3:98:EF:13:6F:87:C3:AC:11:92:4A Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Certificate serial: 1E681E66C502F442AD36B6C9687A78431A615F73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft Manifest number: 038C Signing time: Mon 12 May 2025 12:40:33 +0000 Manifest this update: Mon 12 May 2025 12:35:33 +0000 Manifest next update: Tue 13 May 2025 15:13:33 +0000 Files and hashes: 1: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: q/tmnbq1kdd2hUMwbcuSKcZt7pux1EaGGpLbn7IfofI=) 2: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: qWp9paAJXWyG6T4NlWTD/O+mrcUKf+wb2OOSJ/RUTQM=) 3: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: 4JL3Gtu7UsX3IaHs3LaQwmdxUfCfFV6YWJerzJoc+wE=) 4: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: YcmyLeFBQ+WK9MxW4qT13yT/CsdMqFWcCNcHges7cNY=) 5: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: kVZlSJSrWOIFgbVyyqSUiD6jECTpvfhx5mx8hRL1cGE=) 6: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: uWYPVYjRnhouz2kB1gip220mm9ixJ1+yxtSXIITlxEw=) 7: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: Pgs5ueHQXHOzRUAnFpUKAel9Ig4WE+HMpXX4wHeR3SY=) 8: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: 1jWpw+W9zeIRwNdxwEeWvA1uKZ5XVqeLW/yed0hU+d4=) 9: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: twheygdBU9M/hWK8PwEKS7vel1IBGYLsGKuF6NDPdmA=) 10: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: ld9bmw/lU5ViE7fFfnUAARe92vzpSXeZ47xTrIGHE2Y=) 11: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 3LQCLtbZ2cAzmsqD8inTKmHS0+b4RIJVefCUUonuvB0=) 12: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: yiPh36TU1+o+jLX45pyYr1yhJEOI86BPrMUwrS94mMI=) 13: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: hFAW06mmhAPSV/HJ4B8aC2PvIR5CrcKx3FcqsTikSiM=) 14: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: QlNtxapPtCDVmKsd/rR7Y2Bq1QIkmg64gwg6mpWc9ZY=) 15: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: v8cC4rv/n9sk2kZ5Sooy1orRBSWhcGzZ+S44FlCO/MM=) 16: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: DudKC7EbN/x1z3E3UcohZZDxNJCJJwujdDPss+8DrkI=) 17: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 7gdiZpTYF4VKwdmEsTHKuwi6oAiZC6mVLx4cpcdl/GE=) 18: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: nrTdofG3QiyT59ifvXqBtX8pF4lYbmqFJc6mO1yyOW0=) 19: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mOAttZBNx/CTeO/Z3xtwFj9TNAzOHD7wWSzttDopHBY=) 20: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: /LejqbWiFUxs1DgkjzVItnmcQXCtVjOkQxj/fIk9rAQ=) 21: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: mr8O2GLITID87EQbUR0mW/IyDelg6k8ezJcKyZbdo9E=) 22: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: S7PYQmgyaS+nUukOrNi+7gU0SVsm2vupfOTXwPtPOXM=) 23: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: iksl6QO5bGAwqBp6Vth9mckUoVZxpFnDxq6gmgw5QDs=) 24: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: vCrLMX0eSFK/WsSjH4NPI6BnYmwIN7ZEFJbozFxO6uE=) 25: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: +6pKiWIr1xfpXpXCXiVMVMi0tFetJIO1JWmpuLH4c10=) 26: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: dqiC7sfkexEdY4bNAfWo7TkIe5GTWHX5uIAGfupS9Ro=) 27: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W9T8aPnkMAlNbGOA+isd3U8U+YdKRxlDW0/+vHw4iGg=) 28: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 8htEN27nXC1XFUYvScmaKLGazPRUUosEipnSlN6XgBk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 May 2025 13:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:68:1e:66:c5:02:f4:42:ad:36:b6:c9:68:7a:78:43:1a:61:5f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Validity Not Before: May 12 12:35:33 2025 GMT Not After : May 13 15:13:33 2025 GMT Subject: CN=4C693A8D662233847FD398EF136F87C3AC11924A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ff:b4:f7:ae:9c:ca:f7:4f:c0:09:86:01:ea: 1d:0e:36:86:32:b1:3f:bc:ea:2b:26:78:22:8b:8f: a9:87:31:7f:71:8d:54:69:d3:cc:d5:6d:e4:a4:ef: bd:ab:5b:8e:a0:77:1e:e4:9a:ec:0d:18:7e:13:43: 84:a0:75:d2:8d:ee:d4:90:05:7e:68:09:ca:53:c3: 0f:2a:a2:22:ac:57:40:32:e7:89:a7:8c:66:96:fb: c1:fc:82:2a:7f:9a:0d:e2:c5:a9:44:33:ae:03:00: a2:a8:54:05:e8:0f:e3:55:7a:c2:20:a0:17:33:cc: bd:b3:b9:44:4b:14:1b:38:7d:3d:e7:6b:ca:02:34: 60:be:5f:26:c3:4b:2e:32:bf:53:ee:e3:05:b7:97: 1b:f4:4e:40:bd:7c:11:4c:bc:b3:31:15:48:2a:01: 15:d5:de:66:4f:e5:cd:4d:5f:ca:03:91:ed:d7:8a: 9f:da:35:47:45:c1:d5:cc:eb:58:c1:7b:5a:2d:df: a7:ee:b5:00:90:47:58:bd:87:cc:f7:af:9b:be:a1: 47:f4:1c:46:92:0d:67:53:64:09:d7:e8:0d:f9:ed: 77:17:09:9c:b6:9d:3e:ab:26:9a:5d:7e:87:96:5d: e8:f4:a1:c5:ab:bc:1e:17:08:e8:1c:ca:2d:ad:c7: 54:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:69:3A:8D:66:22:33:84:7F:D3:98:EF:13:6F:87:C3:AC:11:92:4A X509v3 Authority Key Identifier: keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:76:0f:2a:50:7a:c5:83:77:ae:2a:8b:9e:27:e6:7f:a4:23: 5e:8b:06:2f:07:d5:19:01:3f:d1:67:57:01:2b:17:41:a8:ed: af:52:89:59:34:ae:6c:b7:d8:58:d4:d1:97:63:c0:4d:94:00: f5:d0:7e:86:07:e3:f3:22:77:13:d3:c1:7c:65:a3:23:e8:ae: 53:d5:c9:9f:4c:c1:ce:a7:24:90:4e:f1:9a:46:93:e2:d2:d0: b1:36:72:b0:8b:8e:97:82:ae:d7:b0:c0:5d:99:b8:a4:e6:ff: a7:d8:e9:b9:df:9c:e3:6e:3a:54:49:fd:16:1d:54:14:74:be: c0:fc:20:25:27:3f:52:90:f7:87:e4:6d:39:a5:9a:1b:02:28: da:ec:27:0a:56:8a:13:6f:c8:1b:13:ed:5b:08:0e:6a:55:a9: 03:d0:04:43:8a:25:f8:0a:85:4c:ba:72:ce:5c:d6:6b:64:dd: b0:36:8e:a3:77:d1:19:cd:3b:6b:1d:63:f8:fd:36:0d:ef:33: 50:4f:2a:18:ad:12:12:8c:41:a3:36:6b:d2:54:05:7a:1f:be: 30:96:f3:21:ce:51:0b:80:69:99:5c:88:98:2d:88:1c:9c:9a: 95:b0:1a:c8:fe:1d:ba:f2:74:6a:b4:d9:d1:c4:9c:15:00:df: cc:b3:e8:d2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHmgeZsUC9EKtNrbJaHp4QxphX3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh MDIxNDRhZTAeFw0yNTA1MTIxMjM1MzNaFw0yNTA1MTMxNTEzMzNaMDMxMTAvBgNV BAMTKDRDNjkzQThENjYyMjMzODQ3RkQzOThFRjEzNkY4N0MzQUMxMTkyNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr/7T3rpzK90/ACYYB6h0ONoYy sT+86ismeCKLj6mHMX9xjVRp08zVbeSk772rW46gdx7kmuwNGH4TQ4SgddKN7tSQ BX5oCcpTww8qoiKsV0Ay54mnjGaW+8H8gip/mg3ixalEM64DAKKoVAXoD+NVesIg oBczzL2zuURLFBs4fT3na8oCNGC+XybDSy4yv1Pu4wW3lxv0TkC9fBFMvLMxFUgq ARXV3mZP5c1NX8oDke3Xip/aNUdFwdXM61jBe1ot36futQCQR1i9h8z3r5u+oUf0 HEaSDWdTZAnX6A357XcXCZy2nT6rJppdfoeWXej0ocWrvB4XCOgcyi2tx1SnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUTGk6jWYiM4R/05jvE2+Hw6wRkkowHwYDVR0j BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0 M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB aFJLNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJlMGJhMy1m ZTYwLTQ1YjEtOTE2MC04NjhhMmY4YTQzYjEvMy85REY4NTk5N0IxQjlCMzU4RTFD NDNGMzY3NjVBQTBBNEEwMjE0NEFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3YPKlB6xYN3riqLnifm f6QjXosGLwfVGQE/0WdXASsXQajtr1KJWTSubLfYWNTRl2PATZQA9dB+hgfj8yJ3 E9PBfGWjI+iuU9XJn0zBzqckkE7xmkaT4tLQsTZysIuOl4Ku17DAXZm4pOb/p9jp ud+c4246VEn9Fh1UFHS+wPwgJSc/UpD3h+RtOaWaGwIo2uwnClaKE2/IGxPtWwgO alWpA9AEQ4ol+AqFTLpyzlzWa2TdsDaOo3fRGc07ax1j+P02De8zUE8qGK0SEoxB ozZr0lQFeh++MJbzIc5RC4BpmVyImC2IHJyalbAayP4duvJ0arTZ0cScFQDfzLPo 0g== -----END CERTIFICATE-----Generated at Mon May 12 16:08:22 2025 by rpki-client