$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft File: 3134EE987E08D8B5583FEEF621A03150C4F35434.mft (raw, json) Hash identifier: ZuAUEsQgFnAoTefTsmyZH53FjHih02j1pvkG9JANoCM= Subject key identifier: AB:32:B7:A7:D1:C0:39:A9:AE:D7:A8:A9:7F:44:1A:53:74:0F:21:C0 Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434 Certificate serial: 42F3831485446FCBCBAF7A34B2D3025A255C4EC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft Manifest number: 029F Signing time: Sat 28 Jun 2025 14:16:25 +0000 Manifest this update: Sat 28 Jun 2025 14:11:25 +0000 Manifest next update: Sun 29 Jun 2025 16:51:25 +0000 Files and hashes: 1: 326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa (hash: Kuq/T5/58120SUpTorsr1ML70JXySqoRjipE0Min4z0=) 2: 326131343a316563373a666130303a3a2f34302d3438203d3e20323134333635.roa (hash: mfRAEfAM/Ik+prWgDH92jLkjVIcmPRfzo1kMxVmUq4c=) 3: 326131343a316563373a666661303a3a2f34382d3438203d3e20323133353135.roa (hash: uw8e5+V55rs+wlENeJdGRICWtffz7xQmePuL+3U/nIU=) 4: 326131343a316563373a666230303a3a2f34302d3438203d3e20323134373435.roa (hash: nezQHcq4MVb+lW9u+9DC3TKuGQsy0c5l+5+DxrvsPzo=) 5: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer (hash: jLV89odZdgTYzYRcumFoTReP+gmmk+raXpcoYf0+wxA=) 6: 326131343a316563373a313030303a3a2f33362d3438203d3e20323134343831.roa (hash: mAC3tE41nQDojIaT/TKY9BuNdhC77RQ6VPm5O+XWCIE=) 7: 326131343a316563373a313130303a3a2f34302d3438203d3e20323135343337.roa (hash: LSZWA34YwCO9D6JtWEG8LpUQ1o3Anb+MGXWPU43gT4A=) 8: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer (hash: TzD6pGlBEMmZI/OlLFvK4Q5nKNXovDA7wOkDjfwohQo=) 9: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer (hash: BF/TWOjb2Ii4r0osOdYS/rUG+zOQPpS2tAXbzEo5Wzo=) 10: 326131343a316563373a666530303a3a2f34302d3438203d3e20323135343637.roa (hash: 8asU86WRYRMPRuHXiCGWb31YsN6wlyGCHOUyjPq08QE=) 11: 326131343a316563373a666666633a3a2f34382d3438203d3e20323136333339.roa (hash: Xpu7YHsE9Uu/Z34+AM32q6wFmIndeEkcOzm4kV29gZU=) 12: 326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa (hash: cQGzH58GG/5AlClFkvMjXXZFAsalmfdZS0xTjTmJx5Q=) 13: 3134EE987E08D8B5583FEEF621A03150C4F35434.crl (hash: 5Nh9nsIIO6yQOjVsg1j8OYAu4Sll8nSpdQVsyUFog5g=) 14: 326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa (hash: svJE9s6z+thIvIbk0ivLw3r/3W8HiAYka1FWVnsnFgw=) 15: 326131343a316563373a666666663a3a2f34382d3438203d3e20323030313739.roa (hash: jxX5jejatt6POI8r69/OIdC4tpqjlqDh7/l5cMHt1Lc=) 16: 326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa (hash: tXMEYMrTa38uR0L+SQ9LimzmDrpxo8zhMIaTp0PKkR0=) 17: 326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa (hash: ei7uKbr21cStunIFD4/+QnxpXX+lUv4yRtUBnFqqQIw=) 18: 326131343a316563373a663130303a3a2f34302d3438203d3e20323134313838.roa (hash: gXY2AMFw8/+rSlIvUcyO+0lq7UArJ6lUsKRFR48Pbdc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f3:83:14:85:44:6f:cb:cb:af:7a:34:b2:d3:02:5a:25:5c:4e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434 Validity Not Before: Jun 28 14:11:25 2025 GMT Not After : Jun 29 16:51:25 2025 GMT Subject: CN=AB32B7A7D1C039A9AED7A8A97F441A53740F21C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3a:cc:19:f3:0e:e9:72:61:38:c6:6a:0b:f9: 13:6e:87:45:b5:f3:e6:3e:ea:6b:fd:9f:b1:1b:22: f1:bb:4a:7f:37:56:d3:ca:af:e1:01:94:93:03:2c: d6:19:d8:30:c8:6f:60:bf:c9:c0:f3:2b:67:63:9e: bb:c9:9a:97:bd:97:84:2b:6c:d1:9b:f9:11:4d:73: 33:24:91:3b:b8:3a:d4:e5:eb:7e:a0:24:a7:85:91: fa:0f:47:94:00:09:0a:6f:8e:71:31:fa:87:d0:9c: b6:f8:46:b5:be:83:59:9c:b7:9f:76:41:c1:28:76: b6:34:76:38:c6:33:6b:7f:a6:61:65:22:35:38:95: d5:82:3d:20:82:5a:6d:95:ec:db:c3:9d:57:aa:ef: c8:4b:d3:f2:49:80:fc:53:7c:b4:ef:c5:d3:ea:e2: 90:00:09:31:c2:db:ca:7c:a2:57:ed:dc:1b:6e:54: f4:77:a6:ab:2f:b0:af:5b:79:f7:82:cd:a4:92:34: d3:cb:a3:35:dc:21:96:0c:84:ff:cc:c0:e0:37:8c: 84:59:04:d7:e6:10:ce:68:b6:76:78:6e:e9:2d:48: 03:f8:f1:29:dc:d7:05:94:cf:43:50:15:3a:e8:bf: bd:65:a3:07:8c:3f:50:ef:25:7e:06:36:85:ff:d0: bd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:32:B7:A7:D1:C0:39:A9:AE:D7:A8:A9:7F:44:1A:53:74:0F:21:C0 X509v3 Authority Key Identifier: keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:51:a1:dc:88:b5:4f:c6:e1:3b:54:16:cf:ab:ef:11:c2:b2: ca:4a:34:ff:6b:cc:ce:06:aa:01:36:f5:48:e1:98:43:86:7b: 85:c3:4e:32:9d:5c:42:cc:48:2e:fb:92:8e:e9:a5:11:59:15: 73:2e:57:77:b5:5f:64:56:f6:2f:fb:87:99:3a:d7:9c:9d:9f: 51:35:92:c5:a3:3e:59:ee:f5:bf:3e:42:22:c3:52:6f:e3:ed: 00:aa:3b:61:50:2b:8d:37:39:d1:9c:64:98:a1:87:fb:06:2e: 51:77:05:ea:5a:c4:91:00:13:f3:d1:f5:06:a3:19:41:97:70: ec:6c:8b:24:74:65:0f:f7:5a:23:7f:f7:06:87:33:5d:60:3d: 61:3b:20:43:2f:89:5f:f4:d5:45:fc:d0:10:6a:d5:cb:d3:c2: c1:3a:2e:1d:f7:b4:d3:0e:a9:e8:ac:c0:d4:d9:8d:c3:d0:75: c5:0b:bc:1e:a6:7a:28:f5:49:06:a2:f9:3b:78:0f:91:b8:50: fe:bd:b8:3c:20:36:99:ae:67:58:3b:95:9f:fa:7c:c9:b4:29: 0d:fe:b8:84:fe:ac:19:21:4c:ea:33:02:3a:4a:87:62:bd:fc: 4a:20:bd:a9:2a:94:5d:da:1f:b0:1d:8b:71:86:67:07:96:75: bc:f0:91:74 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQvODFIVEb8vLr3o0stMCWiVcTskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj NGYzNTQzNDAeFw0yNTA2MjgxNDExMjVaFw0yNTA2MjkxNjUxMjVaMDMxMTAvBgNV BAMTKEFCMzJCN0E3RDFDMDM5QTlBRUQ3QThBOTdGNDQxQTUzNzQwRjIxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7OswZ8w7pcmE4xmoL+RNuh0W1 8+Y+6mv9n7EbIvG7Sn83VtPKr+EBlJMDLNYZ2DDIb2C/ycDzK2djnrvJmpe9l4Qr bNGb+RFNczMkkTu4OtTl636gJKeFkfoPR5QACQpvjnEx+ofQnLb4RrW+g1mct592 QcEodrY0djjGM2t/pmFlIjU4ldWCPSCCWm2V7NvDnVeq78hL0/JJgPxTfLTvxdPq 4pAACTHC28p8olft3BtuVPR3pqsvsK9befeCzaSSNNPLozXcIZYMhP/MwOA3jIRZ BNfmEM5otnZ4buktSAP48Snc1wWUz0NQFTrov71loweMP1DvJX4GNoX/0L2NAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUqzK3p9HAOamu16ipf0QaU3QPIcAwHwYDVR0j BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4 NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U elZEUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05 OGE0LTRjN2UtYTBlMS04MDU3YTRmMDg2YzkvMC8zMTM0RUU5ODdFMDhEOEI1NTgz RkVFRjYyMUEwMzE1MEM0RjM1NDM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVGh3Ii1T8bhO1QWz6vv EcKyyko0/2vMzgaqATb1SOGYQ4Z7hcNOMp1cQsxILvuSjumlEVkVcy5Xd7VfZFb2 L/uHmTrXnJ2fUTWSxaM+We71vz5CIsNSb+PtAKo7YVArjTc50ZxkmKGH+wYuUXcF 6lrEkQAT89H1BqMZQZdw7GyLJHRlD/daI3/3BoczXWA9YTsgQy+JX/TVRfzQEGrV y9PCwTouHfe00w6p6KzA1NmNw9B1xQu8HqZ6KPVJBqL5O3gPkbhQ/r24PCA2ma5n WDuVn/p8ybQpDf64hP6sGSFM6jMCOkqHYr38SiC9qSqUXdofsB2LcYZnB5Z1vPCR dA== -----END CERTIFICATE-----Generated at Sat Jun 28 19:37:17 2025 by rpki-client