$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft File: B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft (raw, json) Hash identifier: xAXEFfxOzawOKm3Z71i9wQKVKwaYdk1VhcvhkiLj81M= Subject key identifier: 02:11:65:34:20:5F:AF:B3:01:1A:D8:0B:13:34:29:CC:53:24:86:CF Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0 Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0 Certificate serial: 12C473FC2BD0AEDA20669E391ADB8C05ECD368B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft Manifest number: 0409 Signing time: Sat 28 Jun 2025 07:04:09 +0000 Manifest this update: Sat 28 Jun 2025 06:59:09 +0000 Manifest next update: Sun 29 Jun 2025 07:23:09 +0000 Files and hashes: 1: 3138352e3232362e3135332e302f32342d3234203d3e20323131343430.roa (hash: rGW7/8GB609/SHNrTEWoAaTI5dQHouhe15jjA9R2QwM=) 2: 3138352e3232362e3135322e302f32342d3234203d3e203432383331.roa (hash: 2iZuFtoo8q53yETNgCmRHTR4lUa6RiA7X1J8o6k1GHg=) 3: 3138352e3135362e3231392e302f32342d3234203d3e203630343538.roa (hash: 8XkoDAvNeGNoBWLohtYrD/bWj0oa0HEtFyjdhTJh8rk=) 4: 3138352e3232362e3135352e302f32342d3234203d3e203634323637.roa (hash: BphaL/Q+MmU9qXxX06J/d3Yz3MPwKV/7sGiY2uy2MYY=) 5: 39312e3139392e3130382e302f32342d3234203d3e203630343538.roa (hash: Ltqzgt94mzKk47x8Q+jGxz5JrNySG/Y0tzlAfjYhG0M=) 6: 3138352e3230322e3134342e302f32342d3234203d3e203630343538.roa (hash: wz4+Z748yPCelmg+RPJx6JGtTSzenzKPpdD84rUDauM=) 7: 3138352e3136372e32342e302f32342d3234203d3e203630343538.roa (hash: bOe+V/bSkHZWJOaV1Qj2XTs/2xeIT/LkKzSKku71Icc=) 8: 36322e3132322e3138392e302f32342d3234203d3e2033313730.roa (hash: mbpZXZK/fM7vaFZ5y82xMnQ6rCPjr7XSXm9Q6bD78C4=) 9: 3138352e33372e3232382e302f32332d3233203d3e203630343538.roa (hash: vZ0xeNj44WIw/+zpqjsYVz/OQXDqqT3PO1sgTbLjyjI=) 10: 3138352e3230322e3134352e302f32342d3234203d3e203630343538.roa (hash: W83bzJQhGHobYnfM1tmulNDtSSyNf73jimSZ1AGOpI0=) 11: 3139352e382e34392e302f32342d3234203d3e203630343538.roa (hash: 4nPeE4WDot0aQzE1E2AL4UC2dMhv5fMNvAbvgkN5zUQ=) 12: 3138352e33372e3233302e302f32342d3234203d3e203630343538.roa (hash: IY6mHaJKET6LoAapCaxdFKM5n9LWTpQVBjwiMh+lOuI=) 13: 3138352e3136322e3137312e302f32342d3234203d3e203630343538.roa (hash: dIPcyVrIf7ut3mplg6I+FaMP77/taZ1uyGrgWAEtw1I=) 14: 39312e3139392e3132332e302f32342d3234203d3e203630343538.roa (hash: BatNReK7gXNaqXPa5VRtj5h++zM7ew2F8IoAg/I/2U8=) 15: 34352e3133312e38302e302f32322d3232203d3e203630343538.roa (hash: oqXmbxyjeaOX95W9eJVEUG/807pdk0CrvL0gbJu3djk=) 16: 3138352e3135362e3231372e302f32342d3234203d3e203630343538.roa (hash: rjDp5tr7Ibp1svXb6aTy1VUyxTkkVlR9zj5PgrnqiGs=) 17: 3138352e3230322e3134372e302f32342d3234203d3e203630343538.roa (hash: 4WWLNzVcecuIV7DQH3TBRPk5m1a8bolBgWM4/XkK+mA=) 18: 3138352e3132352e37382e302f32342d3234203d3e203630343538.roa (hash: p8VAezPiQ82kk+zpMKLkJeAo6bWXq8DJwyiOE3M0QAE=) 19: 3138352e33372e3232382e302f32342d3234203d3e203630343538.roa (hash: mw435AXz9xHWhN238pBrnHfvo9tx+w0yMNZcNgIAnFw=) 20: B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl (hash: 7uLCKe9uenAtYGrjZRflsK6We6EyW8EaTHfyvUE/g7U=) 21: 3139352e3231312e35312e302f32342d3234203d3e20343030393039.roa (hash: 0gSBq8V9lU7SHxebbh3UieoZZ+QMrAfR0WkkimNMOGY=) 22: 3138352e3231372e3134302e302f32342d3234203d3e20323131333733.roa (hash: hNnRgizTxivmocfPjGcdnyRRZ7RF0OREZEdxCth7bFY=) 23: 3139352e382e34382e302f32342d3234203d3e203630343538.roa (hash: 0QQ/atSVhgxbxnMmZi2CZaSsjgioOzPYv64es6L7MGQ=) 24: 3138352e3136372e32362e302f32342d3234203d3e203630343538.roa (hash: AU1XTzixRsIIk2ZdZN58IrYKd8IFItgt7vU8fJub8+o=) 25: 3138352e3230322e3134362e302f32342d3234203d3e203630343538.roa (hash: RGdxLEzytt0V9LWy9RSfzKHfvGrjEh/8BhnnQWUWyk0=) 26: 3138352e3132352e37362e302f32342d3234203d3e203630343538.roa (hash: E1EBzi/x9bAqWwU2+c2DtydupdQVlQih+ZQ9KG5XJM8=) 27: 3138352e3135362e3231362e302f32342d3234203d3e203630343538.roa (hash: EvCO85+TEFrCa3fyF2Hvn+tlr4Nv9RYk07bI6yFMPvw=) 28: 3138352e3231352e3131342e302f32342d3234203d3e203631333137.roa (hash: R9WhNu2MdPr1NOFjMmZeGBiIE2nwtlE4Jo64OX4u4HA=) 29: 33312e3231372e3235302e302f32342d3234203d3e2039303039.roa (hash: L+538BnpKcoPw9UMvgnBDsovbAC1nWxPwoO/WNMOxrE=) 30: 3138352e3135362e3231382e302f32342d3234203d3e203630343538.roa (hash: IhLfWMdp3wfBoJIgMf1dZQYIiVjH+IC6uyZDFZApUo0=) 31: 3138352e3136322e3136382e302f32332d3233203d3e203630343538.roa (hash: FhpX/C9zk9FVjj10PImD/wKS/RfpAC0kUdP0bDZAwyg=) 32: 39312e3139392e3130322e302f32342d3234203d3e203630343538.roa (hash: RopopLlJOVRjGz4avSxfYPvo0OC9G/eDY75KWGAV/aw=) 33: 3139352e382e3131392e302f32342d3234203d3e203630343538.roa (hash: uYf/vuY3IMzkKnywh+WrIJi9K5kM4HORH0NByn4xLTY=) 34: 34352e3134332e3134382e302f32322d3232203d3e203630343538.roa (hash: Sww7+LIBcy25xOjBNTHS8houn90nQJV29QTFkg33x0A=) 35: 3138352e3130302e37322e302f32322d3232203d3e203630343538.roa (hash: tt+7v33pgcfL/OR4IEoj2XRjnG0uMYFwUsQyGd/wSJQ=) 36: 34352e3135312e3139322e302f32322d3232203d3e203630343538.roa (hash: MsQjsESlTuEcbjS9mONurH+MDUvuc4E1Aq8WiShITro=) 37: 3138352e3132352e37392e302f32342d3234203d3e203630343538.roa (hash: chFrGzVrsGDgHbR9U302S1vgNYtyu8hjjwKJPtAYWHA=) 38: 3139342e35392e3232332e302f32342d3234203d3e20313939363134.roa (hash: Q+aTRZ6Bj34jlOI880qva89jcDljlnRfljW0rbqvKUM=) 39: 3138352e33372e3233312e302f32342d3234203d3e203630343538.roa (hash: fMMz/NMrWe4m6FBXtQw+qCDaXqsRssd0JOLvgwTj808=) 40: 3138352e3136322e3137302e302f32342d3234203d3e203630343538.roa (hash: v9yukWrQuv+5l5wy9/dUA6cYOeUvX0B8QwsY9W2Wlgk=) 41: 39312e3139392e39302e302f32342d3234203d3e203630343538.roa (hash: 24Wi6BO1o+rN9DTXADpFgbBkLMPIwcsuYBHhIDkNNJk=) 42: 34352e3134362e3138382e302f32322d3232203d3e203630343538.roa (hash: oKJ0nojLfMNgIC0ZVHO9adCFA5GxNLUlSGYZ+ppZl7U=) 43: 3138352e3136372e32352e302f32342d3234203d3e203630343538.roa (hash: PR56mJAfACxvVOTWCWLvFZ+zDPcod8MGy8q5KeWDe1I=) 44: 3138352e33372e3232392e302f32342d3234203d3e203630343538.roa (hash: HYaWDlREHWbcyxGyqKTrHitDp9vR4XbaPjWC/NS6hv0=) 45: 3138352e3136372e32372e302f32342d3234203d3e203630343538.roa (hash: qmcJVcdT4rmfgLdWbchNjQUjUr84q4fznJ3O5A3Ac6k=) 46: 3138352e3132352e37372e302f32342d3234203d3e203630343538.roa (hash: iBX/+QeuXYuSCTlJT7cmF+tQX/4HCmniMjyG8lOqUWA=) 47: 3138352e3232362e3135342e302f32342d3234203d3e20323030303139.roa (hash: 96QSwOxwyYqTqJ3XjUWn9gHjbPepDDirLYFilwesJ0U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 07:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c4:73:fc:2b:d0:ae:da:20:66:9e:39:1a:db:8c:05:ec:d3:68:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0 Validity Not Before: Jun 28 06:59:09 2025 GMT Not After : Jun 29 07:23:09 2025 GMT Subject: CN=02116534205FAFB3011AD80B133429CC532486CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e5:34:4e:83:ee:ee:cc:f7:ab:89:68:3e:46: e9:3f:13:3a:a6:e6:3b:cf:83:93:9d:c1:c2:04:d5: 29:5e:d4:d1:fb:ed:40:c1:27:50:e8:89:c1:66:c7: 80:19:23:90:02:cd:4d:4f:e2:d2:4e:54:2c:17:dc: be:2d:18:1b:82:c8:ac:03:ac:69:7f:ce:7e:c0:bc: e6:c1:d8:cb:cf:18:72:e9:c2:31:c2:da:b5:4c:7b: 1a:a7:0c:13:00:37:72:49:c2:8e:e7:31:7b:51:b4: 84:fe:f8:d7:63:9c:07:be:6e:ef:1d:94:1c:df:fc: 93:9f:9b:b0:59:b1:6d:c2:85:b7:40:1f:2c:6e:df: 8e:ef:05:07:0b:83:7d:e8:4c:09:8d:77:dc:fb:d9: 73:46:99:1d:78:e1:80:3a:81:f2:c1:45:be:8f:5b: 3a:76:17:12:d6:a5:9c:cc:d3:60:9c:13:a6:0e:e8: 96:61:9a:92:91:fb:d6:28:be:17:bd:03:e8:d9:37: a4:91:6c:d8:78:a8:d2:87:8b:1a:47:29:04:4c:3f: e1:21:48:c7:84:88:e3:c4:5f:12:1e:83:06:c3:af: 11:56:8a:e2:1a:15:5b:93:2d:1a:a0:50:49:48:f9: 32:8d:d8:38:8e:c1:a8:19:c7:24:f5:c8:b0:fb:a2: ad:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:11:65:34:20:5F:AF:B3:01:1A:D8:0B:13:34:29:CC:53:24:86:CF X509v3 Authority Key Identifier: keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:aa:e0:c3:36:16:3b:54:3b:20:a9:b9:21:95:57:52:45:a6: b7:56:d0:12:2c:25:51:03:f3:76:2c:cb:9a:16:65:f6:c2:1b: ae:73:01:43:b5:9d:5d:7c:b0:80:8c:78:03:59:c6:75:de:c9: 0c:ae:ef:24:7a:6c:3e:6f:47:7a:ed:5f:97:2b:18:f6:38:83: 8a:26:67:c5:7f:05:f0:1d:9e:d9:62:1c:a1:51:b6:93:2f:54: 98:d2:4f:a1:e7:ed:9d:6a:4c:5c:9c:87:d1:34:0d:20:d4:de: 78:2e:22:4d:98:46:35:90:5b:d5:54:0f:9c:50:db:21:1c:8f: 9d:c6:6f:e2:d5:22:80:76:24:23:74:7f:8b:bd:b9:05:49:03: 0a:64:77:a6:a7:02:8f:85:0f:c0:9e:0e:09:cb:df:aa:09:b7: b8:56:36:ae:7e:24:28:00:45:54:1f:34:72:15:38:3c:d3:7f: c1:5d:e0:b1:94:3e:a6:ac:61:69:f3:38:02:94:99:e4:ee:bc: 4d:38:68:88:18:dc:b7:b9:f7:18:2e:e0:0b:1f:e8:5a:83:ee: 22:ff:f9:42:30:a7:8e:83:d0:0e:fd:44:36:48:0e:8f:75:d3: 7c:11:a2:62:a5:cb:7a:b7:40:75:98:69:2e:ea:f3:a1:83:49: cb:17:9c:89 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEsRz/CvQrtogZp45GtuMBezTaLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm N2M5YWNhMDAeFw0yNTA2MjgwNjU5MDlaFw0yNTA2MjkwNzIzMDlaMDMxMTAvBgNV BAMTKDAyMTE2NTM0MjA1RkFGQjMwMTFBRDgwQjEzMzQyOUNDNTMyNDg2Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd5TROg+7uzPeriWg+Ruk/Ezqm 5jvPg5OdwcIE1Sle1NH77UDBJ1DoicFmx4AZI5ACzU1P4tJOVCwX3L4tGBuCyKwD rGl/zn7AvObB2MvPGHLpwjHC2rVMexqnDBMAN3JJwo7nMXtRtIT++NdjnAe+bu8d lBzf/JOfm7BZsW3ChbdAHyxu347vBQcLg33oTAmNd9z72XNGmR144YA6gfLBRb6P Wzp2FxLWpZzM02CcE6YO6JZhmpKR+9Yovhe9A+jZN6SRbNh4qNKHixpHKQRMP+Eh SMeEiOPEXxIegwbDrxFWiuIaFVuTLRqgUElI+TKN2DiOwagZxyT1yLD7oq0BAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUAhFlNCBfr7MBGtgLEzQpzFMkhs8wHwYDVR0j BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm SnJLQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83YTc4OWU4Ny1m NDg0LTQyM2QtYTFkNy0yYzJkNTg2MGQyZWMvMC9CMDE3MEFCREM5NTVBQTE3NkJF MkFGMjYyOTk2NzhGMkY3QzlBQ0EwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKrgwzYWO1Q7IKm5IZVX UkWmt1bQEiwlUQPzdizLmhZl9sIbrnMBQ7WdXXywgIx4A1nGdd7JDK7vJHpsPm9H eu1flysY9jiDiiZnxX8F8B2e2WIcoVG2ky9UmNJPoeftnWpMXJyH0TQNINTeeC4i TZhGNZBb1VQPnFDbIRyPncZv4tUigHYkI3R/i725BUkDCmR3pqcCj4UPwJ4OCcvf qgm3uFY2rn4kKABFVB80chU4PNN/wV3gsZQ+pqxhafM4ApSZ5O68TThoiBjct7n3 GC7gCx/oWoPuIv/5QjCnjoPQDv1ENkgOj3XTfBGiYqXLerdAdZhpLurzoYNJyxec iQ== -----END CERTIFICATE-----Generated at Sat Jun 28 22:06:55 2025 by rpki-client