$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft File: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json) Hash identifier: J12rjZsPoJqttFWwJiai5Iqo2QMZl8Ooei5gWUZj4qA= Subject key identifier: E3:2C:81:E7:40:E5:BE:49:06:8F:2D:A0:18:CF:07:A8:A6:6D:C5:4B Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94 Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94 Certificate serial: 2124C66E8586187CDA0B6074BE615AF5F34AA297 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft Manifest number: 61 Signing time: Wed 02 Jul 2025 16:49:27 +0000 Manifest this update: Wed 02 Jul 2025 16:44:27 +0000 Manifest next update: Thu 03 Jul 2025 17:43:27 +0000 Files and hashes: 1: 39352e3231342e3138312e302f32342d3234203d3e20323134303235.roa (hash: 1UxYccK9JJCwmCQOcrxMzUmtYqXMEA+sXJKMK+TMi4g=) 2: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: EnyfxlxrEZoOAQu439Mhaj0MSgN4o3Cr584mhVLUCgw=) 3: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: yeHT2siMw+46e40lrxlb+yyyQe2+Rk/4CH0GwC6laEg=) 4: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: 7RDjli52ea3Y5rIxOBi7CoAOYzObgN76cF1oNhGaH/0=) 5: 39352e3231342e3137352e302f32342d3234203d3e20313335333931.roa (hash: dZLABnxKpTxFiKmt1/yK20i3zGqpWgZ6NnQoPD/883U=) 6: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: NfkJ1dHaY6YNNqR7pDi70dMjf5RQq8FmRJEum36Mgt4=) 7: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: JaeJstE2poR1Rlm8a7RHcBFfHeeu7vNkxKzYr0p4Jc8=) 8: 39352e3231342e3138332e302f32342d3234203d3e20323039313831.roa (hash: lTsB3YA1lHFbSl1Cmaufvak87ZyxIaRmoFdP+J/wwxc=) 9: 39352e3231342e3138322e302f32342d3234203d3e20323132333834.roa (hash: ahvCpQCYKDC5UmCWINUE1+9+R3CEuxDs9xpt+/mHGMc=) 10: 3138352e3131352e3230372e302f32342d3234203d3e20313939373037.roa (hash: 5Sl2Z3ptNbtvr3FBhOdZcqrM9plEnj22ST5HcnfsBGc=) 11: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: PxR9Gj8WOc/7LwGO5t67j8SuO3iXayzi64SIiemjFkw=) 12: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 9KX5zC7UuI47N7heL//vNyLO3x7YEi1CucEhFX8SUR0=) 13: 39352e3231342e3137332e302f32342d3234203d3e203433363431.roa (hash: lEcRDdf6cIhY1Oa3628nbp4zU28+wjCf+aFM7KnL8Ho=) 14: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: eK18gsMy8+wzgYZmaz7TkcO08JcfPTkHAWlv0aJXuz0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 17:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:24:c6:6e:85:86:18:7c:da:0b:60:74:be:61:5a:f5:f3:4a:a2:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94 Validity Not Before: Jul 2 16:44:27 2025 GMT Not After : Jul 3 17:43:27 2025 GMT Subject: CN=E32C81E740E5BE49068F2DA018CF07A8A66DC54B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1a:3a:e0:27:1f:0f:fb:21:68:78:2d:1c:f9: bc:d4:0a:7a:46:50:4c:fd:0b:af:69:dd:2e:60:4f: ce:ee:05:3a:de:07:3d:b7:3d:3a:9f:21:5b:b8:a7: f1:16:85:3e:b0:e4:90:74:ac:72:f3:81:46:29:5f: 4b:f1:7f:f7:e0:1e:70:51:07:09:5c:77:57:7f:49: b2:0a:ec:a2:53:b8:41:c8:f2:1d:00:3e:90:7a:34: e1:1b:b1:f1:42:61:9a:c7:f1:83:68:e1:ef:05:7f: 99:24:e3:62:f5:9c:e8:f1:1f:99:e6:a6:02:92:c9: e0:f9:21:cc:38:b0:c9:d7:46:6a:1e:fb:01:3b:fe: dc:6d:5d:3c:4c:2f:f3:e9:77:7b:b4:b2:3d:ff:f8: 09:96:62:a6:17:f2:a9:61:6a:0b:a8:89:7d:54:ba: 23:fe:c7:c1:71:fa:50:d5:09:77:e8:f1:2e:a6:93: 31:c1:92:da:00:8d:72:aa:89:e7:96:8b:da:7b:0d: 8d:63:39:dd:5c:08:8b:87:cf:f9:f3:2f:30:8b:65: 50:64:ed:1e:22:9a:5c:17:9b:47:5b:69:ee:71:3b: 92:7d:ea:ab:00:db:63:5d:18:cb:bb:b5:d9:5b:68: 16:ee:79:f0:4e:6d:23:ec:8d:ed:2c:25:43:fe:66: 3e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2C:81:E7:40:E5:BE:49:06:8F:2D:A0:18:CF:07:A8:A6:6D:C5:4B X509v3 Authority Key Identifier: keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ff:a0:1a:cf:4d:6f:a3:fa:f2:99:eb:9a:a8:5a:3a:e9:55: a3:b6:aa:c4:8f:c3:d5:35:79:55:87:34:cc:be:25:57:5e:0b: 10:3a:95:06:97:4f:db:99:5d:b2:69:ab:28:a7:13:d5:c9:2a: 2d:a4:36:87:c1:dc:e5:13:88:de:e4:d9:e4:04:6a:09:08:07: 20:81:63:a4:0e:9e:e9:ce:d5:e0:a5:ab:07:7b:4d:6a:e6:f9: b3:4b:9f:25:7e:4b:83:e8:5e:d3:e0:c0:91:32:b1:53:1a:2c: e8:34:09:fe:08:fc:0a:de:b1:7b:c0:a5:08:2d:b5:6e:29:3b: c0:da:ab:9c:2e:49:e1:e8:f2:48:00:a9:a8:ea:69:ae:74:14: f5:e9:f1:71:a8:c1:f2:64:85:5f:9a:d5:c6:c1:fb:08:b5:bb: 3a:77:3f:a6:13:7e:7d:38:80:81:cf:25:94:f7:bc:91:ef:02: 7a:34:d4:9d:63:fe:85:54:09:fb:fe:7e:84:b1:2d:e5:1f:14: 1e:b5:36:03:20:47:fe:37:cf:6b:1f:40:a8:69:1e:d1:07:e8: 28:6e:d8:b6:73:fe:cc:2e:04:01:97:bd:15:e3:b5:55:45:77: 42:81:20:14:b6:8d:a7:6d:e9:97:b0:0a:af:a1:eb:b4:59:5e: 78:65:76:cd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUISTGboWGGHzaC2B0vmFa9fNKopcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJmNDlkZTg2ODRmMTI4N2Y0ZjZjYjE4NWQ1Y2Y3ZGU4 MGM5MGI5NDAeFw0yNTA3MDIxNjQ0MjdaFw0yNTA3MDMxNzQzMjdaMDMxMTAvBgNV BAMTKEUzMkM4MUU3NDBFNUJFNDkwNjhGMkRBMDE4Q0YwN0E4QTY2REM1NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkGjrgJx8P+yFoeC0c+bzUCnpG UEz9C69p3S5gT87uBTreBz23PTqfIVu4p/EWhT6w5JB0rHLzgUYpX0vxf/fgHnBR Bwlcd1d/SbIK7KJTuEHI8h0APpB6NOEbsfFCYZrH8YNo4e8Ff5kk42L1nOjxH5nm pgKSyeD5Icw4sMnXRmoe+wE7/txtXTxML/Ppd3u0sj3/+AmWYqYX8qlhaguoiX1U uiP+x8Fx+lDVCXfo8S6mkzHBktoAjXKqieeWi9p7DY1jOd1cCIuHz/nzLzCLZVBk 7R4imlwXm0dbae5xO5J96qsA22NdGMu7tdlbaBbuefBObSPsje0sJUP+Zj5FAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4yyB50DlvkkGjy2gGM8HqKZtxUswHwYDVR0j BBgwFoAUkvSd6GhPEof09ssYXVz33oDJC5QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjA5MjMzODktMmJkZS00M2UwLWIwZDUtZmMyNDRhNjMw M2QwLzAvOTJGNDlERTg2ODRGMTI4N0Y0RjZDQjE4NUQ1Q0Y3REU4MEM5MEI5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2t2U2Q2R2hQRW9mMDlzc1lYVnozM29E SkM1US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MDkyMzM4OS0y YmRlLTQzZTAtYjBkNS1mYzI0NGE2MzAzZDAvMC85MkY0OURFODY4NEYxMjg3RjRG NkNCMTg1RDVDRjdERTgwQzkwQjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAef+gGs9Nb6P68pnrmqha OulVo7aqxI/D1TV5VYc0zL4lV14LEDqVBpdP25ldsmmrKKcT1ckqLaQ2h8Hc5ROI 3uTZ5ARqCQgHIIFjpA6e6c7V4KWrB3tNaub5s0ufJX5Lg+he0+DAkTKxUxos6DQJ /gj8Ct6xe8ClCC21bik7wNqrnC5J4ejySACpqOpprnQU9enxcajB8mSFX5rVxsH7 CLW7Onc/phN+fTiAgc8llPe8ke8CejTUnWP+hVQJ+/5+hLEt5R8UHrU2AyBH/jfP ax9AqGke0QfoKG7YtnP+zC4EAZe9FeO1VUV3QoEgFLaNp23pl7AKr6HrtFleeGV2 zQ== -----END CERTIFICATE-----Generated at Thu Jul 3 09:16:23 2025 by rpki-client