$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft File: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json) Hash identifier: uo08juNgYOg3hsr7+VT7E+kVZ9zugUgFcHIZRbUNecE= Subject key identifier: FD:DB:9B:13:15:9A:24:9E:F7:36:46:93:A9:23:7C:C5:37:04:2B:22 Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Certificate serial: 733D3897561C33947E602BCEC584E93CDB45531E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft Manifest number: B1 Signing time: Sun 11 May 2025 23:25:38 +0000 Manifest this update: Sun 11 May 2025 23:20:38 +0000 Manifest next update: Mon 12 May 2025 23:40:38 +0000 Files and hashes: 1: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: g03b1IthT7R6emRcKoovUUAfL6xJm+JexZ6oxCLs8E4=) 2: 352e3232362e3139302e302f32342d3234203d3e20323132323338.roa (hash: 5uRy3fwcHi7ZXw2Sw8r6ACVnyaenvRlrPt9RLdCW31M=) 3: 3130392e3233342e3231322e302f32342d3234203d3e203231383539.roa (hash: diQRASQkPTWUXKiBml6BzeJ9LDVpqvRcV2AZKe4Sd4c=) 4: 352e3232362e3138342e302f32342d3234203d3e203235313938.roa (hash: g/SuuyMEvFJIWbz5EwrvLhOxD8VKMLPH98EweA0bDg4=) 5: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: uhM+/0v8HioS/qE+KkDqR673YS11oQr5aznZkyp/yx4=) 6: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: Ej1HuQzuhYe60A2HNErPZLUdfpH5EaYPpZ+PpBEwVxY=) 7: 352e3232362e3138362e302f32342d3234203d3e2035303635.roa (hash: oF2kHy0s+EeqI6lqLIx6U+pqHDpvQPMe+7smngOEl4M=) 8: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: 6TrR9eiRNzBfJRrubefTFudn86wqW7t6u+0cIxHNR5g=) 9: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: fQsEWjsrThcFlJLP0H4ir/IvOeNDAQWZ1RZpyw7wV08=) 10: 3137382e3133322e3139332e302f32342d3234203d3e20313332393235.roa (hash: 0r49mcG2J+PGpW4jvN3NhokfFp5wtP+NHxkfXTC2C/Y=) 11: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: pWCIuSrDYwp+tan25QY6TeO9jMNRWP/W0zj94P0620Y=) 12: 3137382e3133322e3139352e302f32342d3234203d3e20313335333931.roa (hash: RVvsf+GbQ+gvRF/WRSFeBmTdyh0atmXnd8DAVmdlYaw=) 13: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: 4qmNKGx6VCIK53hbSqHwJPgKKMACqFJu608tkfoDU90=) 14: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: nFzeEleWTSIYtIbjgNdPg9c+CwbgHF8u+W2VGtxEBpQ=) 15: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: 0XlqzvD5WZeVhzrMIb+ArV6j60KVoqxW88qIB/mg2yk=) 16: 352e3232362e3138342e302f32342d3234203d3e20323133383936.roa (hash: U3Zw6x4PkdzeEgLvqIYw4y+/XBwfGSTzEu9F3fSuE+4=) 17: 352e3232362e3138372e302f32342d3234203d3e2039323332.roa (hash: L10rHUQX4TGH4LKEy8+xW98uNY8br3AyCv26QQGltu4=) 18: 3130392e3233342e3230382e302f32342d3234203d3e2039323332.roa (hash: 5NSQUssnpHxq31TditVRCOjbCirLEcMHfF76GuFM7co=) 19: 3130392e3233342e3231342e302f32342d3234203d3e203632323430.roa (hash: yJVBSNvtQsHe0PNYzL5JRIv242s6ICu9PWhfIuLAOZQ=) 20: 3137382e3133322e3139372e302f32342d3234203d3e2033333230.roa (hash: MuzLKtyseOT68ju0FOjjeN3pxilqG43fi3IvFyF1hyA=) 21: 3137382e3133322e3139362e302f32342d3234203d3e203432383331.roa (hash: rMB7/8cyQIx/9c3HD2ZadKHLx3HKQvyXwwaVPb+xesA=) 22: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: UgtgsSF4DmUx+FqAs5WV6TWI9fyKhqfkEeJgaHpzYEc=) 23: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: xGDSj9rMMdhGkci1rj9QS/c2p6IRznTgPF56svMZjZY=) 24: 352e3232362e3138392e302f32342d3234203d3e203134363138.roa (hash: W5RSzcuC1NRqUmarwMyiabGjcoNk6+K+D+yepMOENN0=) 25: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: TXuvESUo+z6GOXUeTeiaUzHHtDdgTg/ymGwCbd1y6WA=) 26: 352e3232362e3139312e302f32342d3234203d3e203230343733.roa (hash: UPFXIsNngs7ii0fChRVSrq5M20PxfDmf/pm0ZfcYEhU=) 27: 3130392e3233342e3231302e302f32342d3234203d3e20323131303134.roa (hash: 4MSVPqiQDKA8SKRIIRsT8w0YWOClRX08NcPzC8FEPc0=) 28: 352e3232362e3138392e302f32342d3234203d3e203136353039.roa (hash: kr8izgLHpyQBspO5iJHck3IkjuDOsdRfI0aINRgfnKo=) 29: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: 7XlPdZ+5k5dznfPMoT3Ni5uRfyL41Likgo5fplEaDTA=) 30: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 5LOGXsAFfY8MpN+3dgrjf5uTyIh00nk/J0/MSXxVmy4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:3d:38:97:56:1c:33:94:7e:60:2b:ce:c5:84:e9:3c:db:45:53:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Validity Not Before: May 11 23:20:38 2025 GMT Not After : May 12 23:40:38 2025 GMT Subject: CN=FDDB9B13159A249EF7364693A9237CC537042B22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:93:d2:65:86:34:11:b8:99:bb:f3:ea:fb:63: 63:1f:4b:8f:65:03:a8:82:27:21:23:a3:62:fc:fb: 18:d3:f5:bd:16:2d:be:7d:b8:da:e6:4d:2a:81:0e: 5c:56:3d:ce:7f:2a:52:d9:e4:e5:7e:7f:91:e8:0e: 96:a9:90:f7:cc:57:b6:89:3e:bd:b5:e4:75:6e:46: 37:a4:70:27:1b:66:d0:10:2f:34:25:a4:2b:55:f0: bd:28:fe:b6:14:c2:65:62:6d:dc:26:d8:b3:60:5e: 26:2f:75:c9:cc:d2:5a:61:6b:7d:77:57:27:8d:f3: 50:36:cb:46:de:26:4d:08:58:94:43:59:ad:21:be: 9d:62:9c:65:12:b2:44:bb:1d:7a:d8:3a:2e:a5:42: cc:11:91:23:f3:0a:5d:04:c0:c6:e6:92:d4:1f:e6: 9e:29:a6:31:43:5c:87:4f:a4:45:af:72:f4:e1:b3: ae:b6:bc:76:ce:fe:19:ad:ad:5e:6f:44:16:25:fd: e1:15:a4:7d:ea:9c:68:c3:f5:36:ee:eb:95:bc:f4: ad:6d:94:03:84:20:45:ac:0c:3b:f9:15:40:23:92: d6:68:2f:2a:56:99:21:92:21:5a:af:f4:19:b7:74: 86:bb:37:e5:d0:63:dc:36:ad:3b:05:61:88:db:05: 27:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DB:9B:13:15:9A:24:9E:F7:36:46:93:A9:23:7C:C5:37:04:2B:22 X509v3 Authority Key Identifier: keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e5:9b:2d:9c:4b:e0:b7:d7:65:c5:78:00:a5:fe:7a:99:1f: 0a:64:78:01:f3:88:23:82:cf:20:62:ce:5c:d7:a3:03:8d:df: fe:76:04:81:45:ba:99:27:26:8a:f2:69:6c:ea:d8:e3:41:f2: a2:a3:f3:3f:dd:50:56:7e:69:51:12:60:46:67:c3:b2:e6:6e: 01:a0:dd:40:77:76:16:26:82:ee:f0:ab:cf:83:aa:c1:36:52: 49:48:84:4d:e6:6b:da:c4:44:1f:2f:21:ae:2a:93:d0:43:cc: 9e:21:59:7d:b5:a5:11:e7:13:c8:3c:5c:54:a5:39:f0:e6:0b: 9d:2a:10:9d:95:e6:46:a0:be:ca:a6:79:7d:ee:42:34:3f:36: e2:36:f3:ae:bc:f0:ba:43:16:2f:3a:4c:77:e3:48:7c:3d:ee: d3:c3:e0:12:db:6d:68:0e:16:e5:a0:de:3e:f2:3d:70:71:8d: 89:c4:36:67:dc:41:ad:e1:5c:7a:0a:c3:dc:92:61:86:59:2b: 90:31:40:34:06:76:39:f1:1b:51:89:c5:da:6a:7f:88:18:4c: 11:c9:27:09:ec:35:69:1a:c6:07:e8:47:76:4f:75:d0:27:10: a0:9e:dd:ef:c9:d3:88:1b:27:2a:38:3b:3b:8a:be:bb:5d:4e: fd:5d:30:25 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcz04l1YcM5R+YCvOxYTpPNtFUx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk MTZjZWVkMzAeFw0yNTA1MTEyMzIwMzhaFw0yNTA1MTIyMzQwMzhaMDMxMTAvBgNV BAMTKEZEREI5QjEzMTU5QTI0OUVGNzM2NDY5M0E5MjM3Q0M1MzcwNDJCMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7k9JlhjQRuJm78+r7Y2MfS49l A6iCJyEjo2L8+xjT9b0WLb59uNrmTSqBDlxWPc5/KlLZ5OV+f5HoDpapkPfMV7aJ Pr215HVuRjekcCcbZtAQLzQlpCtV8L0o/rYUwmVibdwm2LNgXiYvdcnM0lpha313 VyeN81A2y0beJk0IWJRDWa0hvp1inGUSskS7HXrYOi6lQswRkSPzCl0EwMbmktQf 5p4ppjFDXIdPpEWvcvThs662vHbO/hmtrV5vRBYl/eEVpH3qnGjD9Tbu65W89K1t lAOEIEWsDDv5FUAjktZoLypWmSGSIVqv9Bm3dIa7N+XQY9w2rTsFYYjbBSfzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/dubExWaJJ73NkaTqSN8xTcEKyIwHwYDVR0j BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0 NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G czd0TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wY2MwODczNy05 MjY3LTQwMmEtOTlkNC03YWFhZmVhNDQ0ZWQvMC9GNzY4RkY2RTY4MTg1OEMwRUMx OUYzQTkzRkExNzkyQ0QxNkNFRUQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOWbLZxL4LfXZcV4AKX+ epkfCmR4AfOII4LPIGLOXNejA43f/nYEgUW6mScmivJpbOrY40HyoqPzP91QVn5p URJgRmfDsuZuAaDdQHd2FiaC7vCrz4OqwTZSSUiETeZr2sREHy8hriqT0EPMniFZ fbWlEecTyDxcVKU58OYLnSoQnZXmRqC+yqZ5fe5CND824jbzrrzwukMWLzpMd+NI fD3u08PgEtttaA4W5aDePvI9cHGNicQ2Z9xBreFcegrD3JJhhlkrkDFANAZ2OfEb UYnF2mp/iBhMEcknCew1aRrGB+hHdk910CcQoJ7d78nTiBsnKjg7O4q+u11O/V0w JQ== -----END CERTIFICATE-----Generated at Mon May 12 02:24:21 2025 by rpki-client