$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft File: 3134EE987E08D8B5583FEEF621A03150C4F35434.mft (raw, json) Hash identifier: XXOZ+6RHMPVdwG/wETWZdJNf65f+hUuUm2/HMIMxI/U= Subject key identifier: AC:48:1E:B1:4F:75:4B:AC:4B:97:31:11:6A:D1:FB:77:35:C9:38:F4 Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434 Certificate serial: 5676CDDF35733397FB9C1FB2502039A3BB142367 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft Manifest number: 02EA Signing time: Fri 22 Aug 2025 22:26:12 +0000 Manifest this update: Fri 22 Aug 2025 22:21:12 +0000 Manifest next update: Sun 24 Aug 2025 02:00:12 +0000 Files and hashes: 1: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer (hash: BF/TWOjb2Ii4r0osOdYS/rUG+zOQPpS2tAXbzEo5Wzo=) 2: 326131343a316563373a663130303a3a2f34302d3438203d3e20323134313838.roa (hash: l6K8Ipuv+LpAjKBvLV7xS+N25xPDi1Q5md9XNlMDt3o=) 3: 3134EE987E08D8B5583FEEF621A03150C4F35434.crl (hash: GcL7rInEo3kLNPuleWY98uhkU18mNow9RNtVhwq3anY=) 4: 326131343a316563373a666330303a3a2f34302d3438203d3e20323130363435.roa (hash: D0UhxJixjH/6ED4b7asHdvZhN16xQRz9JstOKq1KOMc=) 5: 326131343a316563373a666230303a3a2f34302d3438203d3e20323134373435.roa (hash: nezQHcq4MVb+lW9u+9DC3TKuGQsy0c5l+5+DxrvsPzo=) 6: 326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa (hash: tXMEYMrTa38uR0L+SQ9LimzmDrpxo8zhMIaTp0PKkR0=) 7: 326131343a316563373a666666633a3a2f34382d3438203d3e20323136333339.roa (hash: Xpu7YHsE9Uu/Z34+AM32q6wFmIndeEkcOzm4kV29gZU=) 8: 326131343a316563373a666666663a3a2f34382d3438203d3e20323030313739.roa (hash: jxX5jejatt6POI8r69/OIdC4tpqjlqDh7/l5cMHt1Lc=) 9: 326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa (hash: cQGzH58GG/5AlClFkvMjXXZFAsalmfdZS0xTjTmJx5Q=) 10: 326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa (hash: Kuq/T5/58120SUpTorsr1ML70JXySqoRjipE0Min4z0=) 11: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer (hash: TzD6pGlBEMmZI/OlLFvK4Q5nKNXovDA7wOkDjfwohQo=) 12: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer (hash: jLV89odZdgTYzYRcumFoTReP+gmmk+raXpcoYf0+wxA=) 13: 326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa (hash: svJE9s6z+thIvIbk0ivLw3r/3W8HiAYka1FWVnsnFgw=) 14: 326131343a316563373a313130303a3a2f34302d3438203d3e20323135343337.roa (hash: LSZWA34YwCO9D6JtWEG8LpUQ1o3Anb+MGXWPU43gT4A=) 15: 326131343a316563373a666130303a3a2f34302d3438203d3e20323134333635.roa (hash: mfRAEfAM/Ik+prWgDH92jLkjVIcmPRfzo1kMxVmUq4c=) 16: 326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa (hash: ei7uKbr21cStunIFD4/+QnxpXX+lUv4yRtUBnFqqQIw=) 17: 326131343a316563373a666661303a3a2f34382d3438203d3e20323133353135.roa (hash: uw8e5+V55rs+wlENeJdGRICWtffz7xQmePuL+3U/nIU=) 18: 326131343a316563373a666530303a3a2f34302d3438203d3e20323135343637.roa (hash: 8asU86WRYRMPRuHXiCGWb31YsN6wlyGCHOUyjPq08QE=) 19: 326131343a316563373a313030303a3a2f33362d3438203d3e20323134343831.roa (hash: mAC3tE41nQDojIaT/TKY9BuNdhC77RQ6VPm5O+XWCIE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 02:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:76:cd:df:35:73:33:97:fb:9c:1f:b2:50:20:39:a3:bb:14:23:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434 Validity Not Before: Aug 22 22:21:12 2025 GMT Not After : Aug 24 02:00:12 2025 GMT Subject: CN=AC481EB14F754BAC4B9731116AD1FB7735C938F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5f:f2:95:f1:0a:07:30:26:65:2f:ab:86:6b: d6:d1:cb:ae:6a:69:46:dc:65:ab:fe:fc:24:6e:b3: 3d:12:7b:e5:3f:c3:40:cd:f5:91:70:39:f8:82:f2: 52:67:45:1d:15:c6:44:04:cb:7d:e0:4b:3b:dd:54: 12:fd:a4:ce:8b:c5:b5:8e:0a:39:ff:b8:ed:3b:75: 35:a8:9d:49:d6:6b:ee:ba:77:3c:97:e3:b2:eb:05: 82:b2:f4:0c:90:e1:d3:21:bb:2f:d4:ff:ea:22:96: df:e2:e2:75:b3:d4:c5:7b:0e:be:7b:2e:b8:12:7a: 47:6c:f3:93:c1:19:9b:2f:66:22:95:8e:bd:d1:19: 7b:33:6c:2a:1a:79:b7:80:c1:3f:a0:58:c1:3a:60: ae:3b:2c:12:97:d9:fe:9d:7b:75:ca:85:09:38:f6: 23:06:16:72:98:30:3d:a3:77:67:4f:10:20:6f:e2: 64:18:0a:61:e4:30:be:73:26:96:7d:7a:11:30:4a: df:2c:aa:50:bd:64:1d:4c:d0:7d:65:b6:3e:17:14: c7:7a:e0:75:07:cf:b4:3e:cc:b9:ba:0f:77:b8:e4: c8:36:63:9f:50:26:f3:c7:97:40:f3:e1:18:80:03: ad:ed:96:86:83:ba:88:62:ac:06:db:fa:17:70:6e: 11:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:48:1E:B1:4F:75:4B:AC:4B:97:31:11:6A:D1:FB:77:35:C9:38:F4 X509v3 Authority Key Identifier: keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d5:40:0b:74:7d:b6:eb:f0:89:67:8c:80:6a:34:13:ef:37: 56:5d:ed:1f:4a:db:15:b8:57:81:99:92:b4:c0:cb:f5:42:a2: 05:b0:8a:22:fd:05:35:88:30:37:98:a7:f1:58:8b:a7:d3:7a: b7:e9:f5:ad:3c:b1:ae:ee:68:29:a0:45:75:38:fc:b4:65:a0: b1:24:30:dc:87:df:39:83:4d:09:0a:05:59:b8:71:5a:c5:1f: 01:35:c5:95:cb:ac:9e:dd:2f:83:90:a4:51:5f:73:f3:b3:eb: 14:64:96:24:31:bd:00:29:ff:1f:fb:84:d1:7f:ac:e8:0e:55: 0b:1f:3d:6f:38:74:04:b0:74:1d:7c:fb:b7:45:49:3a:6b:95: f2:81:b7:8e:7e:50:a7:2e:82:5e:41:ed:b8:41:94:68:c0:6b: 2c:c3:3c:c5:a0:21:5e:c1:8a:6e:34:cb:ae:33:27:36:d8:91: 68:97:e3:7e:79:21:81:40:7e:6c:a3:1d:8e:69:bd:a9:df:96: 07:b3:83:75:e5:45:ba:cf:aa:cd:d9:84:81:5b:82:5f:84:a3: f8:ef:7f:10:ba:d0:40:11:ea:cd:8b:a9:da:04:82:c0:3e:9c: 89:3a:d6:87:c4:f9:17:e5:20:b6:7b:cb:b9:de:46:98:45:e2: 54:7c:26:64 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVnbN3zVzM5f7nB+yUCA5o7sUI2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj NGYzNTQzNDAeFw0yNTA4MjIyMjIxMTJaFw0yNTA4MjQwMjAwMTJaMDMxMTAvBgNV BAMTKEFDNDgxRUIxNEY3NTRCQUM0Qjk3MzExMTZBRDFGQjc3MzVDOTM4RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZX/KV8QoHMCZlL6uGa9bRy65q aUbcZav+/CRusz0Se+U/w0DN9ZFwOfiC8lJnRR0VxkQEy33gSzvdVBL9pM6LxbWO Cjn/uO07dTWonUnWa+66dzyX47LrBYKy9AyQ4dMhuy/U/+oilt/i4nWz1MV7Dr57 LrgSekds85PBGZsvZiKVjr3RGXszbCoaebeAwT+gWME6YK47LBKX2f6de3XKhQk4 9iMGFnKYMD2jd2dPECBv4mQYCmHkML5zJpZ9ehEwSt8sqlC9ZB1M0H1ltj4XFMd6 4HUHz7Q+zLm6D3e45Mg2Y59QJvPHl0Dz4RiAA63tloaDuohirAbb+hdwbhFhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUrEgesU91S6xLlzERatH7dzXJOPQwHwYDVR0j BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4 NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U elZEUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05 OGE0LTRjN2UtYTBlMS04MDU3YTRmMDg2YzkvMC8zMTM0RUU5ODdFMDhEOEI1NTgz RkVFRjYyMUEwMzE1MEM0RjM1NDM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndVAC3R9tuvwiWeMgGo0 E+83Vl3tH0rbFbhXgZmStMDL9UKiBbCKIv0FNYgwN5in8ViLp9N6t+n1rTyxru5o KaBFdTj8tGWgsSQw3IffOYNNCQoFWbhxWsUfATXFlcusnt0vg5CkUV9z87PrFGSW JDG9ACn/H/uE0X+s6A5VCx89bzh0BLB0HXz7t0VJOmuV8oG3jn5Qpy6CXkHtuEGU aMBrLMM8xaAhXsGKbjTLrjMnNtiRaJfjfnkhgUB+bKMdjmm9qd+WB7ODdeVFus+q zdmEgVuCX4Sj+O9/ELrQQBHqzYup2gSCwD6ciTrWh8T5F+UgtnvLud5GmEXiVHwm ZA== -----END CERTIFICATE-----Generated at Sat Aug 23 10:52:27 2025 by rpki-client