$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft File: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json) Hash identifier: T/OenQ1nfOUx9QISy1LHEXbkJAnD0bivoKwx0vVdCjU= Subject key identifier: 8D:BA:A9:A0:34:4B:37:41:BC:61:28:64:83:C4:4E:05:E3:F4:9D:11 Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Certificate serial: 764936F3911A7A7BCB068AADB92FD22867CE3207 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft Manifest number: F4 Signing time: Sat 28 Jun 2025 19:54:11 +0000 Manifest this update: Sat 28 Jun 2025 19:49:11 +0000 Manifest next update: Sun 29 Jun 2025 23:53:11 +0000 Files and hashes: 1: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: 6TrR9eiRNzBfJRrubefTFudn86wqW7t6u+0cIxHNR5g=) 2: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: 7XlPdZ+5k5dznfPMoT3Ni5uRfyL41Likgo5fplEaDTA=) 3: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: UAeHXbW3QhFNKys+iIRYQQp2rK+CbLJVmAbT44zmQ1k=) 4: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: xGDSj9rMMdhGkci1rj9QS/c2p6IRznTgPF56svMZjZY=) 5: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: UgtgsSF4DmUx+FqAs5WV6TWI9fyKhqfkEeJgaHpzYEc=) 6: 3130392e3233342e3230382e302f32342d3234203d3e2039323332.roa (hash: 5NSQUssnpHxq31TditVRCOjbCirLEcMHfF76GuFM7co=) 7: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 5LOGXsAFfY8MpN+3dgrjf5uTyIh00nk/J0/MSXxVmy4=) 8: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: 0XlqzvD5WZeVhzrMIb+ArV6j60KVoqxW88qIB/mg2yk=) 9: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: fQsEWjsrThcFlJLP0H4ir/IvOeNDAQWZ1RZpyw7wV08=) 10: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: 9E5lnuJJJJra0zMyq4QFrZxObuQQP0TtSUNmqndS7RY=) 11: 3137382e3133322e3139332e302f32342d3234203d3e203539343332.roa (hash: 2WBDusHWUq99xTu0ZxVx6iJ/cgBviWpO2frc88B7PQ8=) 12: 3137382e3133322e3139362e302f32342d3234203d3e203432383331.roa (hash: rMB7/8cyQIx/9c3HD2ZadKHLx3HKQvyXwwaVPb+xesA=) 13: 3130392e3233342e3231342e302f32342d3234203d3e203632323430.roa (hash: yJVBSNvtQsHe0PNYzL5JRIv242s6ICu9PWhfIuLAOZQ=) 14: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: pWCIuSrDYwp+tan25QY6TeO9jMNRWP/W0zj94P0620Y=) 15: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: 4qmNKGx6VCIK53hbSqHwJPgKKMACqFJu608tkfoDU90=) 16: 352e3232362e3138392e302f32342d3234203d3e2039333034.roa (hash: KMYDoKnPWH3TUSOlAA/wzDsC66Y3O5PlUt+i9WMB8YA=) 17: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: Ej1HuQzuhYe60A2HNErPZLUdfpH5EaYPpZ+PpBEwVxY=) 18: 352e3232362e3139302e302f32342d3234203d3e203239383032.roa (hash: IcG7713dyebDFbZHRU+x1BJJOLqYlSEgaSMS202odCw=) 19: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: uhM+/0v8HioS/qE+KkDqR673YS11oQr5aznZkyp/yx4=) 20: 352e3232362e3138342e302f32342d3234203d3e20323133383936.roa (hash: U3Zw6x4PkdzeEgLvqIYw4y+/XBwfGSTzEu9F3fSuE+4=) 21: 3137382e3133322e3139352e302f32342d3234203d3e20313335333931.roa (hash: RVvsf+GbQ+gvRF/WRSFeBmTdyh0atmXnd8DAVmdlYaw=) 22: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: nFzeEleWTSIYtIbjgNdPg9c+CwbgHF8u+W2VGtxEBpQ=) 23: 352e3232362e3138372e302f32342d3234203d3e2039323332.roa (hash: L10rHUQX4TGH4LKEy8+xW98uNY8br3AyCv26QQGltu4=) 24: 352e3232362e3138342e302f32342d3234203d3e203235313938.roa (hash: g/SuuyMEvFJIWbz5EwrvLhOxD8VKMLPH98EweA0bDg4=) 25: 3137382e3133322e3139372e302f32342d3234203d3e2033333230.roa (hash: MuzLKtyseOT68ju0FOjjeN3pxilqG43fi3IvFyF1hyA=) 26: 3130392e3233342e3231302e302f32342d3234203d3e20323131303134.roa (hash: 4MSVPqiQDKA8SKRIIRsT8w0YWOClRX08NcPzC8FEPc0=) 27: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: g03b1IthT7R6emRcKoovUUAfL6xJm+JexZ6oxCLs8E4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:49:36:f3:91:1a:7a:7b:cb:06:8a:ad:b9:2f:d2:28:67:ce:32:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Validity Not Before: Jun 28 19:49:11 2025 GMT Not After : Jun 29 23:53:11 2025 GMT Subject: CN=8DBAA9A0344B3741BC61286483C44E05E3F49D11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:be:2a:0a:c4:e1:82:8a:e3:27:1a:40:23:45: fa:4a:b7:c6:c8:d0:28:44:55:72:08:27:fe:ee:a4: ea:6f:c9:49:a1:1c:1a:b9:58:02:d4:da:46:07:80: da:8d:0a:b2:29:36:f3:ad:3c:53:15:65:8d:d5:45: a8:a2:e8:b1:1a:f4:62:8d:e9:fd:92:d0:b6:29:48: ba:f7:19:f9:fb:e6:af:3e:df:53:4b:09:3a:73:a4: 8a:c3:fe:ea:f9:9e:4e:ca:3c:48:30:aa:bd:e3:1b: 4b:aa:39:ac:67:4c:cb:9e:4e:4b:38:19:3e:ea:e4: 94:18:88:6c:8d:b9:1f:09:c3:14:d5:93:e9:88:77: a5:0c:a9:3e:df:ae:4e:ce:c8:5a:b3:57:4c:63:3e: 09:1e:bc:8d:4b:5b:1c:7a:b3:8b:e1:3d:79:b0:17: e1:b0:c9:27:d3:83:c3:df:47:61:e7:af:09:17:37: c9:2f:1a:a2:3a:7b:f5:71:dd:69:b0:b8:bf:78:9c: 4d:f4:43:89:d8:3b:15:9e:21:bb:ee:56:12:7e:15: 06:c0:b8:5b:11:0b:6b:bb:fa:8f:58:9b:7a:f6:13: 45:86:3f:11:a0:18:5a:50:5d:d6:83:bd:6c:5f:3b: 8c:35:0c:ab:d5:cc:03:1c:4a:59:f5:e3:ea:9c:50: 7e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:BA:A9:A0:34:4B:37:41:BC:61:28:64:83:C4:4E:05:E3:F4:9D:11 X509v3 Authority Key Identifier: keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f1:d0:27:d8:d3:f3:ed:de:96:a3:fd:86:84:f0:a5:3c:71: 56:40:14:51:cb:23:43:c5:ec:bc:0c:19:f3:a3:be:74:fa:c6: ce:ee:59:3b:5a:a3:97:29:e6:d2:54:05:c4:dd:75:73:ba:27: 8c:da:3a:27:aa:bb:3b:f4:96:fb:8d:cd:b2:9f:ee:3e:08:b3: 03:35:0f:d0:94:75:55:16:d5:1f:c3:da:87:ed:1e:0e:2c:e3: b7:59:7b:36:c0:58:22:04:53:81:bb:31:5a:47:41:aa:d8:18: e4:d5:28:a3:ba:0e:ae:05:b4:a3:86:6e:b5:3f:79:ac:f3:ea: 37:4b:df:b1:32:d7:8d:40:63:6e:67:66:e0:3f:42:8a:c6:49: e0:e4:a7:c5:99:8f:18:87:e7:d6:52:3c:24:c1:42:fd:cc:ff: b3:d4:9b:ad:a2:35:fc:ce:95:41:7f:a6:35:05:af:f7:f2:31: 30:f1:f4:11:82:3a:aa:8a:0c:1f:13:ea:24:2b:35:00:09:d5: 45:b3:58:61:1d:bd:ea:e8:6b:13:f2:b4:0a:b1:b0:7b:c1:a9: 48:2a:d7:01:1e:ae:68:14:51:01:c3:18:57:40:27:85:16:35: 7f:54:4b:7d:4f:4b:3a:ba:2f:62:30:97:78:0b:7c:26:22:40: e1:36:6f:02 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdkk285EaenvLBoqtuS/SKGfOMgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk MTZjZWVkMzAeFw0yNTA2MjgxOTQ5MTFaFw0yNTA2MjkyMzUzMTFaMDMxMTAvBgNV BAMTKDhEQkFBOUEwMzQ0QjM3NDFCQzYxMjg2NDgzQzQ0RTA1RTNGNDlEMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCevioKxOGCiuMnGkAjRfpKt8bI 0ChEVXIIJ/7upOpvyUmhHBq5WALU2kYHgNqNCrIpNvOtPFMVZY3VRaii6LEa9GKN 6f2S0LYpSLr3Gfn75q8+31NLCTpzpIrD/ur5nk7KPEgwqr3jG0uqOaxnTMueTks4 GT7q5JQYiGyNuR8JwxTVk+mId6UMqT7frk7OyFqzV0xjPgkevI1LWxx6s4vhPXmw F+GwySfTg8PfR2HnrwkXN8kvGqI6e/Vx3WmwuL94nE30Q4nYOxWeIbvuVhJ+FQbA uFsRC2u7+o9Ym3r2E0WGPxGgGFpQXdaDvWxfO4w1DKvVzAMcSln14+qcUH5ZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUjbqpoDRLN0G8YShkg8ROBeP0nREwHwYDVR0j BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0 NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G czd0TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wY2MwODczNy05 MjY3LTQwMmEtOTlkNC03YWFhZmVhNDQ0ZWQvMC9GNzY4RkY2RTY4MTg1OEMwRUMx OUYzQTkzRkExNzkyQ0QxNkNFRUQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfHQJ9jT8+3elqP9hoTw pTxxVkAUUcsjQ8XsvAwZ86O+dPrGzu5ZO1qjlynm0lQFxN11c7onjNo6J6q7O/SW +43Nsp/uPgizAzUP0JR1VRbVH8Pah+0eDizjt1l7NsBYIgRTgbsxWkdBqtgY5NUo o7oOrgW0o4ZutT95rPPqN0vfsTLXjUBjbmdm4D9CisZJ4OSnxZmPGIfn1lI8JMFC /cz/s9SbraI1/M6VQX+mNQWv9/IxMPH0EYI6qooMHxPqJCs1AAnVRbNYYR296uhr E/K0CrGwe8GpSCrXAR6uaBRRAcMYV0AnhRY1f1RLfU9LOrovYjCXeAt8JiJA4TZv Ag== -----END CERTIFICATE-----Generated at Sat Jun 28 22:38:31 2025 by rpki-client