$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft File: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json) Hash identifier: 7kda+PyciyL+XfkKbZDBdJG6OSoAtQ2tzOhMXc2U0ko= Subject key identifier: 37:C1:EC:C6:CA:BF:EC:0B:E0:01:14:11:53:4E:CA:18:41:77:7B:2F Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Certificate serial: 7CAF5316483C5987DD1B389DDB7230DEE2B8954F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft Manifest number: 040F Signing time: Fri 22 Aug 2025 15:00:47 +0000 Manifest this update: Fri 22 Aug 2025 14:55:47 +0000 Manifest next update: Sat 23 Aug 2025 18:00:47 +0000 Files and hashes: 1: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: uWYPVYjRnhouz2kB1gip220mm9ixJ1+yxtSXIITlxEw=) 2: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: Pgs5ueHQXHOzRUAnFpUKAel9Ig4WE+HMpXX4wHeR3SY=) 3: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: DudKC7EbN/x1z3E3UcohZZDxNJCJJwujdDPss+8DrkI=) 4: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W9T8aPnkMAlNbGOA+isd3U8U+YdKRxlDW0/+vHw4iGg=) 5: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: hFAW06mmhAPSV/HJ4B8aC2PvIR5CrcKx3FcqsTikSiM=) 6: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: BUx4VI7uZVXx99NRtgVg5SvWYV5Es0YmvvDgBeOzPRY=) 7: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: YcmyLeFBQ+WK9MxW4qT13yT/CsdMqFWcCNcHges7cNY=) 8: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: 4JL3Gtu7UsX3IaHs3LaQwmdxUfCfFV6YWJerzJoc+wE=) 9: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: S7PYQmgyaS+nUukOrNi+7gU0SVsm2vupfOTXwPtPOXM=) 10: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: nrTdofG3QiyT59ifvXqBtX8pF4lYbmqFJc6mO1yyOW0=) 11: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: iksl6QO5bGAwqBp6Vth9mckUoVZxpFnDxq6gmgw5QDs=) 12: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: 1jWpw+W9zeIRwNdxwEeWvA1uKZ5XVqeLW/yed0hU+d4=) 13: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 7gdiZpTYF4VKwdmEsTHKuwi6oAiZC6mVLx4cpcdl/GE=) 14: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: /LejqbWiFUxs1DgkjzVItnmcQXCtVjOkQxj/fIk9rAQ=) 15: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 3LQCLtbZ2cAzmsqD8inTKmHS0+b4RIJVefCUUonuvB0=) 16: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: qWp9paAJXWyG6T4NlWTD/O+mrcUKf+wb2OOSJ/RUTQM=) 17: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: yiPh36TU1+o+jLX45pyYr1yhJEOI86BPrMUwrS94mMI=) 18: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: ld9bmw/lU5ViE7fFfnUAARe92vzpSXeZ47xTrIGHE2Y=) 19: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: +6pKiWIr1xfpXpXCXiVMVMi0tFetJIO1JWmpuLH4c10=) 20: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mOAttZBNx/CTeO/Z3xtwFj9TNAzOHD7wWSzttDopHBY=) 21: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: QlNtxapPtCDVmKsd/rR7Y2Bq1QIkmg64gwg6mpWc9ZY=) 22: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: q/tmnbq1kdd2hUMwbcuSKcZt7pux1EaGGpLbn7IfofI=) 23: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: twheygdBU9M/hWK8PwEKS7vel1IBGYLsGKuF6NDPdmA=) 24: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: mr8O2GLITID87EQbUR0mW/IyDelg6k8ezJcKyZbdo9E=) 25: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: vCrLMX0eSFK/WsSjH4NPI6BnYmwIN7ZEFJbozFxO6uE=) 26: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 8htEN27nXC1XFUYvScmaKLGazPRUUosEipnSlN6XgBk=) 27: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: dqiC7sfkexEdY4bNAfWo7TkIe5GTWHX5uIAGfupS9Ro=) 28: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: kVZlSJSrWOIFgbVyyqSUiD6jECTpvfhx5mx8hRL1cGE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 18:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:af:53:16:48:3c:59:87:dd:1b:38:9d:db:72:30:de:e2:b8:95:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Validity Not Before: Aug 22 14:55:47 2025 GMT Not After : Aug 23 18:00:47 2025 GMT Subject: CN=37C1ECC6CABFEC0BE0011411534ECA1841777B2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c3:da:ba:f8:e1:98:5d:26:48:06:de:98:d5: 9c:03:87:9c:1d:0c:de:c1:a1:2b:d9:5d:4b:c9:5e: 3d:4c:66:51:36:43:b9:b0:64:57:80:7b:95:a1:22: b4:ee:b8:73:d4:43:63:18:3a:c1:07:95:51:5b:52: ed:fe:6a:6f:96:07:17:24:07:32:65:3b:40:46:42: 2f:ac:88:b0:b4:00:57:e9:4d:0c:df:a7:00:2d:34: 59:3f:9d:a4:8b:ea:a7:62:71:73:2d:cf:e1:34:ad: ee:68:b2:15:4f:dc:b6:dc:67:41:c6:c1:c1:c7:15: c7:3b:e1:67:44:10:39:1a:19:8b:00:53:b9:22:8f: be:48:fc:dc:49:28:33:2d:02:4f:80:27:81:91:be: c2:b8:66:6f:01:42:01:2d:08:37:dc:48:f1:fa:81: 7b:42:97:1a:32:37:4b:c4:f7:73:04:b9:af:2c:4e: 11:1f:34:f0:18:12:83:75:48:80:fb:10:f4:54:04: b7:cd:f4:30:6a:d1:be:e0:f1:cb:d1:d8:0b:88:eb: aa:40:b7:1c:aa:d2:74:e6:bc:27:d6:65:63:93:6c: 34:3c:1f:49:a9:f4:81:1c:68:43:71:f2:e4:80:d9: 6b:f6:6f:3b:f1:b2:4d:52:49:ae:c7:31:ca:13:73: 5a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C1:EC:C6:CA:BF:EC:0B:E0:01:14:11:53:4E:CA:18:41:77:7B:2F X509v3 Authority Key Identifier: keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:70:11:2f:3a:91:e5:c0:a2:30:13:0b:e6:06:2e:cb:02:1f: 96:70:41:44:82:3a:e2:2c:bf:4d:35:cc:96:e9:4f:c9:d4:86: 61:20:ee:4d:16:0a:b3:8e:2d:68:98:fb:7d:95:09:1a:2d:21: bc:0f:36:ff:21:f6:85:b8:19:67:1b:da:81:61:76:0a:d1:b2: ed:6d:98:a9:fb:ce:13:04:67:7b:35:8d:c5:23:c8:9f:76:54: 4b:48:26:ac:68:b9:27:53:e3:04:c7:34:fc:a2:9a:db:c5:7f: b6:f5:00:78:46:78:81:4d:c5:db:46:44:67:52:4e:17:e1:ba: 67:48:b5:9b:32:ea:20:06:dc:9b:f6:97:bf:b8:b4:e1:c8:3d: ef:d1:02:22:ee:d0:6d:72:34:10:69:d4:4e:53:ec:d4:ee:0f: 9d:c1:dc:23:44:9d:8c:1f:4c:32:ea:2c:11:56:4b:14:90:56: 12:7e:50:ea:36:a3:4a:a2:27:2c:f0:66:f9:09:95:15:f7:45: 7e:94:51:f8:d3:c5:78:34:35:dd:35:c4:ea:67:a3:d8:2a:e9: ce:8a:3a:31:2c:93:77:b6:60:c0:f2:ab:5c:62:fe:f0:77:65: 80:97:91:ba:ad:f4:27:e9:a2:f5:e1:b1:e6:38:dd:96:37:68: 90:b3:c7:f1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfK9TFkg8WYfdGzid23Iw3uK4lU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh MDIxNDRhZTAeFw0yNTA4MjIxNDU1NDdaFw0yNTA4MjMxODAwNDdaMDMxMTAvBgNV BAMTKDM3QzFFQ0M2Q0FCRkVDMEJFMDAxMTQxMTUzNEVDQTE4NDE3NzdCMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOw9q6+OGYXSZIBt6Y1ZwDh5wd DN7BoSvZXUvJXj1MZlE2Q7mwZFeAe5WhIrTuuHPUQ2MYOsEHlVFbUu3+am+WBxck BzJlO0BGQi+siLC0AFfpTQzfpwAtNFk/naSL6qdicXMtz+E0re5oshVP3LbcZ0HG wcHHFcc74WdEEDkaGYsAU7kij75I/NxJKDMtAk+AJ4GRvsK4Zm8BQgEtCDfcSPH6 gXtClxoyN0vE93MEua8sThEfNPAYEoN1SID7EPRUBLfN9DBq0b7g8cvR2AuI66pA txyq0nTmvCfWZWOTbDQ8H0mp9IEcaENx8uSA2Wv2bzvxsk1SSa7HMcoTc1pRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUN8Hsxsq/7AvgARQRU07KGEF3ey8wHwYDVR0j BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0 M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB aFJLNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJlMGJhMy1m ZTYwLTQ1YjEtOTE2MC04NjhhMmY4YTQzYjEvMy85REY4NTk5N0IxQjlCMzU4RTFD NDNGMzY3NjVBQTBBNEEwMjE0NEFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3ARLzqR5cCiMBML5gYu ywIflnBBRII64iy/TTXMlulPydSGYSDuTRYKs44taJj7fZUJGi0hvA82/yH2hbgZ ZxvagWF2CtGy7W2YqfvOEwRnezWNxSPIn3ZUS0gmrGi5J1PjBMc0/KKa28V/tvUA eEZ4gU3F20ZEZ1JOF+G6Z0i1mzLqIAbcm/aXv7i04cg979ECIu7QbXI0EGnUTlPs 1O4PncHcI0SdjB9MMuosEVZLFJBWEn5Q6jajSqInLPBm+QmVFfdFfpRR+NPFeDQ1 3TXE6mej2Crpzoo6MSyTd7ZgwPKrXGL+8HdlgJeRuq30J+mi9eGx5jjdljdokLPH 8Q== -----END CERTIFICATE-----Generated at Sat Aug 23 10:31:25 2025 by rpki-client