$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft File: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json) Hash identifier: Hl5SLMaD1kglleUsMwtuH9wWBGpTLyfP/9QCMgm8IS4= Subject key identifier: 09:E0:60:26:8D:3B:94:AB:9C:BE:52:A5:29:18:C5:67:F2:2C:12:09 Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Certificate serial: 77A09BCC44831FE352C9F581D1C9ACE6FDBEDCDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft Manifest number: 03C9 Signing time: Sat 28 Jun 2025 05:12:22 +0000 Manifest this update: Sat 28 Jun 2025 05:07:22 +0000 Manifest next update: Sun 29 Jun 2025 07:36:22 +0000 Files and hashes: 1: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 7gdiZpTYF4VKwdmEsTHKuwi6oAiZC6mVLx4cpcdl/GE=) 2: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: +6pKiWIr1xfpXpXCXiVMVMi0tFetJIO1JWmpuLH4c10=) 3: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W9T8aPnkMAlNbGOA+isd3U8U+YdKRxlDW0/+vHw4iGg=) 4: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: vCrLMX0eSFK/WsSjH4NPI6BnYmwIN7ZEFJbozFxO6uE=) 5: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: 4JL3Gtu7UsX3IaHs3LaQwmdxUfCfFV6YWJerzJoc+wE=) 6: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mOAttZBNx/CTeO/Z3xtwFj9TNAzOHD7wWSzttDopHBY=) 7: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: hFAW06mmhAPSV/HJ4B8aC2PvIR5CrcKx3FcqsTikSiM=) 8: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: twheygdBU9M/hWK8PwEKS7vel1IBGYLsGKuF6NDPdmA=) 9: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: QlNtxapPtCDVmKsd/rR7Y2Bq1QIkmg64gwg6mpWc9ZY=) 10: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: q/tmnbq1kdd2hUMwbcuSKcZt7pux1EaGGpLbn7IfofI=) 11: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: dqiC7sfkexEdY4bNAfWo7TkIe5GTWHX5uIAGfupS9Ro=) 12: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: 1jWpw+W9zeIRwNdxwEeWvA1uKZ5XVqeLW/yed0hU+d4=) 13: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: S7PYQmgyaS+nUukOrNi+7gU0SVsm2vupfOTXwPtPOXM=) 14: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: DudKC7EbN/x1z3E3UcohZZDxNJCJJwujdDPss+8DrkI=) 15: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: qWp9paAJXWyG6T4NlWTD/O+mrcUKf+wb2OOSJ/RUTQM=) 16: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: kVZlSJSrWOIFgbVyyqSUiD6jECTpvfhx5mx8hRL1cGE=) 17: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: nrTdofG3QiyT59ifvXqBtX8pF4lYbmqFJc6mO1yyOW0=) 18: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: ld9bmw/lU5ViE7fFfnUAARe92vzpSXeZ47xTrIGHE2Y=) 19: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: Pgs5ueHQXHOzRUAnFpUKAel9Ig4WE+HMpXX4wHeR3SY=) 20: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: uWYPVYjRnhouz2kB1gip220mm9ixJ1+yxtSXIITlxEw=) 21: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: /LejqbWiFUxs1DgkjzVItnmcQXCtVjOkQxj/fIk9rAQ=) 22: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: iksl6QO5bGAwqBp6Vth9mckUoVZxpFnDxq6gmgw5QDs=) 23: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: K+XATkjc49zIfoICoMVv8JXGtteA9Zt7an1DPq0n754=) 24: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 8htEN27nXC1XFUYvScmaKLGazPRUUosEipnSlN6XgBk=) 25: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: yiPh36TU1+o+jLX45pyYr1yhJEOI86BPrMUwrS94mMI=) 26: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: YcmyLeFBQ+WK9MxW4qT13yT/CsdMqFWcCNcHges7cNY=) 27: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 3LQCLtbZ2cAzmsqD8inTKmHS0+b4RIJVefCUUonuvB0=) 28: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: mr8O2GLITID87EQbUR0mW/IyDelg6k8ezJcKyZbdo9E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 07:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a0:9b:cc:44:83:1f:e3:52:c9:f5:81:d1:c9:ac:e6:fd:be:dc:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae Validity Not Before: Jun 28 05:07:22 2025 GMT Not After : Jun 29 07:36:22 2025 GMT Subject: CN=09E060268D3B94AB9CBE52A52918C567F22C1209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:77:c9:dd:99:f0:1c:14:b5:04:d5:77:08:20: 9a:12:07:46:27:b3:9d:7b:ce:5d:d2:55:13:53:52: 2a:3d:cd:5f:07:23:fd:43:74:a6:ff:f9:49:06:7a: 45:84:13:2d:08:be:e6:d7:ba:b4:44:90:4f:b8:ff: cb:17:ef:f0:ce:09:3a:88:4d:a8:a5:f4:1d:f9:8f: 4b:cd:51:ef:37:e9:d6:0c:33:7b:53:8d:9b:f4:d3: 9d:cc:32:0d:7f:5e:9a:76:cb:66:ca:9f:eb:3e:28: b0:c0:cb:6e:56:85:b1:f7:71:9a:f5:3c:56:95:23: 8f:ed:25:8e:a8:e4:3d:c7:b6:3e:1e:50:d3:f3:0d: b6:60:4e:53:83:c6:5f:72:49:04:70:a2:e1:28:ff: 50:14:d9:bd:93:8b:e7:ad:b1:ac:69:3e:ff:56:0e: 61:78:53:a7:86:08:d8:c7:74:39:a0:fa:d5:7a:b8: e3:d6:77:31:a3:d8:d9:a4:86:3d:fd:d3:03:2a:82: f1:9a:d2:7d:42:d6:bd:7b:22:f4:7e:52:12:9c:7d: 1a:42:2e:6b:67:23:a5:71:6c:90:ce:fe:18:13:14: cd:a8:61:85:63:5f:4d:16:fd:74:d0:bf:93:82:15: 04:88:9c:1f:13:c7:e3:86:90:51:50:d5:99:6e:0e: 57:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E0:60:26:8D:3B:94:AB:9C:BE:52:A5:29:18:C5:67:F2:2C:12:09 X509v3 Authority Key Identifier: keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:13:a5:42:88:b4:b0:ed:4c:58:70:21:33:f7:0c:46:91:ac: 53:12:00:ef:cd:ed:5f:62:56:ab:d0:0f:ec:ea:df:9d:09:24: ec:8a:73:49:21:21:97:49:33:34:e4:29:f9:11:2f:c8:26:c3: 14:97:64:64:2c:0c:c8:e5:2b:e8:27:8e:ab:50:13:33:dd:00: 55:d6:5b:6c:12:ae:aa:75:c2:8b:cb:1c:50:c3:93:de:42:6f: dc:09:5b:23:f1:9b:6c:32:78:79:21:99:35:56:99:72:ce:4c: c0:84:ca:98:0e:8c:70:40:bb:bf:dd:37:6d:57:9b:9a:86:8e: 38:88:90:d4:eb:23:71:b9:05:79:29:49:a3:f6:1b:d7:f3:5c: 50:37:03:30:87:09:5f:15:dc:36:b1:31:3d:cf:da:2b:e8:af: 59:ae:18:3b:09:e6:f3:16:5c:53:cf:a6:20:a5:ad:81:86:93: 4b:5e:6f:02:68:10:10:9b:3c:3f:a9:b3:aa:bd:5a:17:35:92: 4b:3e:1e:a7:1a:5b:78:7a:fd:c1:fc:1f:ff:24:d5:9c:7d:71: 5e:9f:a3:22:46:6d:3d:62:a9:a7:a2:1b:9d:8a:23:3d:e0:db: 64:da:be:51:d1:e0:a2:85:97:e3:c7:b5:b6:e5:90:94:2b:62: d4:55:58:df -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUd6CbzESDH+NSyfWB0cms5v2+3NswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh MDIxNDRhZTAeFw0yNTA2MjgwNTA3MjJaFw0yNTA2MjkwNzM2MjJaMDMxMTAvBgNV BAMTKDA5RTA2MDI2OEQzQjk0QUI5Q0JFNTJBNTI5MThDNTY3RjIyQzEyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYd8ndmfAcFLUE1XcIIJoSB0Yn s517zl3SVRNTUio9zV8HI/1DdKb/+UkGekWEEy0IvubXurREkE+4/8sX7/DOCTqI Tail9B35j0vNUe836dYMM3tTjZv0053MMg1/Xpp2y2bKn+s+KLDAy25WhbH3cZr1 PFaVI4/tJY6o5D3Htj4eUNPzDbZgTlODxl9ySQRwouEo/1AU2b2Ti+etsaxpPv9W DmF4U6eGCNjHdDmg+tV6uOPWdzGj2Nmkhj390wMqgvGa0n1C1r17IvR+UhKcfRpC LmtnI6VxbJDO/hgTFM2oYYVjX00W/XTQv5OCFQSInB8Tx+OGkFFQ1ZluDld5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUCeBgJo07lKucvlKlKRjFZ/IsEgkwHwYDVR0j BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0 M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB aFJLNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJlMGJhMy1m ZTYwLTQ1YjEtOTE2MC04NjhhMmY4YTQzYjEvMy85REY4NTk5N0IxQjlCMzU4RTFD NDNGMzY3NjVBQTBBNEEwMjE0NEFFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhOlQoi0sO1MWHAhM/cM RpGsUxIA783tX2JWq9AP7OrfnQkk7IpzSSEhl0kzNOQp+REvyCbDFJdkZCwMyOUr 6CeOq1ATM90AVdZbbBKuqnXCi8scUMOT3kJv3AlbI/GbbDJ4eSGZNVaZcs5MwITK mA6McEC7v903bVebmoaOOIiQ1OsjcbkFeSlJo/Yb1/NcUDcDMIcJXxXcNrExPc/a K+ivWa4YOwnm8xZcU8+mIKWtgYaTS15vAmgQEJs8P6mzqr1aFzWSSz4epxpbeHr9 wfwf/yTVnH1xXp+jIkZtPWKpp6IbnYojPeDbZNq+UdHgooWX48e1tuWQlCti1FVY 3w== -----END CERTIFICATE-----Generated at Sat Jun 28 21:00:31 2025 by rpki-client