$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft File: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft (raw, json) Hash identifier: qWuJi510a2mNHd8wsxgJTwD3Nwh/qmBbDay543ObIV4= Subject key identifier: 0E:C1:13:4C:CA:23:4B:C1:C5:E2:35:46:D0:0D:F1:A7:F7:DB:61:7A Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27 Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27 Certificate serial: 236686E243A6AC29B978CFB4D6F85EC12E2617 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft Manifest number: 72 Signing time: Sat 10 May 2025 18:05:33 +0000 Manifest this update: Sat 10 May 2025 18:00:33 +0000 Manifest next update: Sun 11 May 2025 19:10:33 +0000 Files and hashes: 1: 326131333a646130333a3a2f33322d3332203d3e20323135343632.roa (hash: +zJlwocjllLnsQbU3Pz9rSlrsgFZqIsBvJ2vFa1jc64=) 2: 326131333a646130323a3a2f33322d3332203d3e20323135343230.roa (hash: /XIIDyQLovgvuWo+FMAvONj9QZYopmDAHKNtoUoPi4w=) 3: 3137382e32332e3138382e302f32342d3234203d3e2033333230.roa (hash: GKO1xHzUJGinckXhhCthyQ7yu4eOcaWTxHAnYAzelTo=) 4: 37372e3234362e3234302e302f32342d3234203d3e203133333437.roa (hash: 8dmyIVl1xfWSQlImAzdtHKnEErtwf9VZhG0c0l+lwWM=) 5: 33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa (hash: GO8jazaT07yHqE0/NadQwAelqQjPVTo+2xINwt+os7M=) 6: 36322e3132322e3138382e302f32342d3234203d3e2035363530.roa (hash: 6OwCLICEQXAEg/tDtW6A/oDneiVaxu+1cpVQR9TCH00=) 7: 326131333a653430313a3a2f33322d3332203d3e20323134393637.roa (hash: H3nzZLDuD+hMyo0VXetwr0aEFusgjbaL4Ptg0xbrpOA=) 8: 326131333a653430303a3a2f33322d3332203d3e203530353830.roa (hash: rFtvfsVQHKCdQAqKZM/z0xrzFdBj+H8lvhfwWrdW4dw=) 9: 3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa (hash: yzlstLnidlbzwukvV9D/QvVE7rWc67Q28lja1LYs6xM=) 10: 326131333a646130313a3a2f33322d3332203d3e20323134393637.roa (hash: zj1ARbGG0KKWVGhyBIQnR9Ua0u7oCe2HCtyMecubnF8=) 11: 36322e3132322e3138382e302f32342d3234203d3e203133333437.roa (hash: r1huf6kbJmsHFssAQxCRNN3d80N61L6+aVoF7yxiSko=) 12: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl (hash: SXHsxJ/kC+xarQrtBYaFzpu44R9IrDcVQ8iTNwiPk3k=) 13: 39342e3132342e37322e302f32342d3234203d3e20343030303339.roa (hash: uDISVLlw/nJy4wy96JtWj7K3NXKh8ecGghWlBzzixw0=) 14: 326131333a653430333a3a2f33322d3332203d3e20323135343632.roa (hash: 0f4WAabP3xZvH36q2OTX1i3if9moXyHYYV6+CfUNtlk=) 15: 326131333a653430353a3a2f33322d3332203d3e20323134393430.roa (hash: HZ1FcP6uKIG0ErisyoB210/El4Tl/fdKRO4f//GIOhY=) 16: 326131333a646130303a3a2f33322d3332203d3e203530353830.roa (hash: OHKDfo5l5/jEy46ijNWjc2QXFRSDD6WocUfsgvZEdnk=) 17: 3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa (hash: gBowB4M9spFJyhtGeGBV6pXmZemrPQZEhgmMEW2ghgQ=) 18: 3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa (hash: wE97ifCwuCsHZoyv+UtvDLCrOhOpwPEVh3JX3wVqIpE=) 19: 326131333a653430323a3a2f33322d3332203d3e20323135343230.roa (hash: 4kV2/I3YxBchjG3IOXi1hr0lRxiFuT7fxsWyAbTDWfo=) 20: 326131333a646130353a3a2f33322d3332203d3e20323134393430.roa (hash: 4U+lv5fdVNtShdj/snUUKz+UGwwRicG7k/GaBlfpAoA=) 21: 3231332e352e3132392e302f32342d3234203d3e20323132323338.roa (hash: y+MccKPhc/2KhhvHGoqYvoNRkkUTzEwbJt4GOMeUfuU=) 22: 326131333a646130343a3a2f33322d3332203d3e20323135333130.roa (hash: +nnxoDraZp1GnJqnPBkJVf2tvjIfmjIdjzZ1kJJ3DOg=) 23: 326131333a623930323a3a2f33322d3332203d3e2035363530.roa (hash: fgX7JOs0CLQUJu45+RMzl8sB0KWTVxumN6S/L327z0k=) 24: 326131333a623930343a3a2f33322d3332203d3e2035363530.roa (hash: NxII85muRlkPy6Ue9rBPty6Qe2NOTHZ5aybygZpMWdo=) 25: 37372e3234362e3234302e302f32342d3234203d3e2035363530.roa (hash: yxk4TFt/ObXReJM9hZWCrSiaxkBBnmZ/PajmEhPrCIU=) 26: 39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa (hash: DmLW24LZ1vnZeM7Yk9oInpGtra92p8B8+f/VK3l3ndo=) 27: 3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa (hash: x+RYo6wjWwk6+BVxPpNh5bRjqAt+Gok7rpn9qho5bkg=) 28: 38342e3234362e3131312e302f32342d3234203d3e2033333230.roa (hash: C4YEp8j4LdYsTYvi6G+irz5U3tTH6rayAYxhSvLGLbo=) 29: 326131333a623930303a3a2f33322d3332203d3e2035363530.roa (hash: O/uOtyjfl4MlQDYp72kf544XXXljSkWM6HF13huBkEM=) 30: 3231332e3233322e3235322e302f32342d3234203d3e2033333230.roa (hash: /Kq4VkHWPBjYK33PPSBMXdIWaIDemEZf9s/0PNOi978=) 31: 36322e3230342e33372e302f32342d3234203d3e20313938323331.roa (hash: I6eMklUSFiAulRI2b++yFtpDHfGf+yyRunITvHHP3rY=) 32: 326131333a653430343a3a2f33322d3332203d3e20323135333130.roa (hash: uyzQxNfCQuPRUilhbFb9igirZqWyG0ghryABccswsyE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 19:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:66:86:e2:43:a6:ac:29:b9:78:cf:b4:d6:f8:5e:c1:2e:26:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27 Validity Not Before: May 10 18:00:33 2025 GMT Not After : May 11 19:10:33 2025 GMT Subject: CN=0EC1134CCA234BC1C5E23546D00DF1A7F7DB617A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:85:dc:36:7b:12:0e:61:e6:1a:7b:40:42:de: df:75:08:be:02:f1:5e:48:0e:09:60:81:43:02:9a: 3a:8f:f9:54:32:36:e5:eb:aa:09:be:3e:a1:eb:e5: 97:e6:0e:a8:c8:c0:18:f5:ff:18:c7:0f:54:d2:5f: 0d:b4:de:92:ec:60:66:fc:72:64:ca:21:c4:1c:c5: f4:f8:2f:c0:db:a7:75:78:0c:47:b3:91:d7:52:01: f8:b9:f4:e2:f1:2d:77:3b:a6:48:76:8a:ea:fb:03: ff:82:56:69:dc:a5:97:37:dd:09:27:6c:a1:80:5f: f2:61:91:6e:dc:68:8c:ad:d5:45:34:49:ff:d6:b8: 11:70:4c:37:95:81:05:f8:41:47:d0:70:55:2b:fc: 3f:db:7c:5b:64:5a:19:d3:c2:c4:6a:6b:29:44:0a: be:f8:c6:85:e9:74:e2:65:5a:7b:ba:57:0d:1e:ff: cf:6a:44:7b:9f:18:f0:14:d9:a9:02:26:1e:7e:07: 54:52:62:b3:6d:0e:e5:13:58:16:94:13:59:37:a7: 88:98:06:27:48:d2:38:8b:d2:0a:d0:cb:4a:fe:77: 7d:4a:b6:e2:fd:4f:27:c7:25:35:4e:23:1b:d5:18: c0:e4:4f:70:60:44:8a:81:ee:4f:87:4c:e3:f7:ff: 70:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C1:13:4C:CA:23:4B:C1:C5:E2:35:46:D0:0D:F1:A7:F7:DB:61:7A X509v3 Authority Key Identifier: keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:87:cf:a6:1e:cf:f0:a0:4e:51:d9:18:16:26:3e:85:a6:99: 60:b6:fb:d7:d8:77:98:bb:57:72:2d:2c:42:47:10:bb:e9:1b: 82:cf:16:41:68:d1:19:3d:ac:be:55:6c:ff:c1:36:3f:01:4e: c1:2a:4c:c5:d3:a0:11:6c:64:48:75:5e:e0:7c:78:1d:5b:9b: 96:cc:9a:d7:26:d0:bb:21:86:11:f1:72:f0:5b:8b:67:99:3d: bc:eb:81:38:62:ac:94:d6:35:7b:91:ad:65:da:0e:32:c9:d3: 27:ef:93:f1:94:64:74:95:4c:7a:bc:5e:8e:15:23:e0:a1:ee: 29:00:d7:82:11:b9:92:85:4e:ea:95:1d:38:65:5f:06:70:8c: 5c:ca:4e:7a:4a:b4:87:59:31:df:f7:96:56:3d:e1:02:e6:f4: 92:a5:c6:d0:bb:d2:66:a2:f7:1c:89:74:11:a6:ea:bd:4b:a8: 8d:f3:2c:97:f6:3e:98:bd:23:32:58:05:7c:30:54:e9:ef:c9: 53:80:3c:24:f4:90:14:72:4c:70:f8:c6:e1:b3:6a:bf:5e:10: 9b:16:f3:c9:c9:26:54:fd:42:6a:33:22:09:dc:0d:33:0f:6a: 5d:3a:39:4c:a4:55:a2:b8:02:f8:42:38:40:7e:c6:2b:5d:4f: aa:30:9f:e5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgITI2aG4kOmrCm5eM+01vhewS4mFzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhmZjQyNmYxOWJhNjdiYzg5ZGU1YWU2ZGY0ODdjMWM4YzFl NzUyZTI3MB4XDTI1MDUxMDE4MDAzM1oXDTI1MDUxMTE5MTAzM1owMzExMC8GA1UE AxMoMEVDMTEzNENDQTIzNEJDMUM1RTIzNTQ2RDAwREYxQTdGN0RCNjE3QTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOaF3DZ7Eg5h5hp7QELe33UIvgLx XkgOCWCBQwKaOo/5VDI25euqCb4+oevll+YOqMjAGPX/GMcPVNJfDbTekuxgZvxy ZMohxBzF9PgvwNundXgMR7OR11IB+Ln04vEtdzumSHaK6vsD/4JWadyllzfdCSds oYBf8mGRbtxojK3VRTRJ/9a4EXBMN5WBBfhBR9BwVSv8P9t8W2RaGdPCxGprKUQK vvjGhel04mVae7pXDR7/z2pEe58Y8BTZqQImHn4HVFJis20O5RNYFpQTWTeniJgG J0jSOIvSCtDLSv53fUq24v1PJ8clNU4jG9UYwORPcGBEioHuT4dM4/f/cP8CAwEA AaOCAkcwggJDMB0GA1UdDgQWBBQOwRNMyiNLwcXiNUbQDfGn99thejAfBgNVHSME GDAWgBT/Qm8Zume8id5a5t9IfByMHnUuJzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS80NjhiMDgxZS1iYTkzLTQ2NWYtOWI2ZS03ZmJkNjNiZGZm NjMvMC9GRjQyNkYxOUJBNjdCQzg5REU1QUU2REY0ODdDMUM4QzFFNzUyRTI3LmNy bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvXzBKdkdicG52SW5lV3ViZlNId2NqQjUx TGljLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ2OGIwODFlLWJh OTMtNDY1Zi05YjZlLTdmYmQ2M2JkZmY2My8wL0ZGNDI2RjE5QkE2N0JDODlERTVB RTZERjQ4N0MxQzhDMUU3NTJFMjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKh8+mHs/woE5R2RgWJj6F pplgtvvX2HeYu1dyLSxCRxC76RuCzxZBaNEZPay+VWz/wTY/AU7BKkzF06ARbGRI dV7gfHgdW5uWzJrXJtC7IYYR8XLwW4tnmT2864E4YqyU1jV7ka1l2g4yydMn75Px lGR0lUx6vF6OFSPgoe4pANeCEbmShU7qlR04ZV8GcIxcyk56SrSHWTHf95ZWPeEC 5vSSpcbQu9JmovcciXQRpuq9S6iN8yyX9j6YvSMyWAV8MFTp78lTgDwk9JAUckxw +Mbhs2q/XhCbFvPJySZU/UJqMyIJ3A0zD2pdOjlMpFWiuAL4QjhAfsYrXU+qMJ/l -----END CERTIFICATE-----Generated at Sun May 11 10:47:45 2025 by rpki-client