$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft File: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json) Hash identifier: NFWRiLVjlgULemLLqpy04bCRx+FeeWz2yn/COvtfWsQ= Subject key identifier: 8B:63:94:A3:10:89:45:03:C7:CA:76:82:47:B4:36:8C:5F:99:E0:EF Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 3A7522BF8BDD0562C4082C141CEBCCD1BB122D04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft Manifest number: 0116 Signing time: Sat 28 Jun 2025 18:54:11 +0000 Manifest this update: Sat 28 Jun 2025 18:49:11 +0000 Manifest next update: Sun 29 Jun 2025 22:12:11 +0000 Files and hashes: 1: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: tD+eYvXQsGkCcpnz6s7EBRYpOf8Iu4vdb3Qy27wUI6g=) 2: 38352e3131372e3232392e302f32342d3234203d3e20323132323338.roa (hash: qWG9h0hKE/+rc67V6b0QtNqJKNBV/dmrN+3owun/5GY=) 3: 3139342e33342e3235322e302f32342d3234203d3e20323036393731.roa (hash: aYNcu7SgqRw6uDvPDAGSj8gsUX4syWa+JAG6WdaKU+4=) 4: 3138352e3231332e3234382e302f32342d3234203d3e203239383032.roa (hash: TocpFgr3lw4Jm1vyRTcynQHMSP/aSZA84xcK/bfrENk=) 5: 3139342e33342e3235342e302f32342d3234203d3e20313532363732.roa (hash: hBCTJH2VP/g2W82hp9JFwDkEQwn2f5ZxdgSFMedjM7Q=) 6: 3139342e33342e3235352e302f32342d3234203d3e20383334.roa (hash: sWRad4mWldO9xLik8rL1xnTcoxRiYLKker+8Ja89ZOQ=) 7: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: 4O3foUV7f18NUYJQaeBYgK+aW1lr+7o+ea8CcQjVzCw=) 8: 38352e3131372e3232382e302f32342d3234203d3e20323135303236.roa (hash: WUrbTcKV2+qO0uflme+Vda37GmhrcRAgBhkN6Ok9SGQ=) 9: 3138352e3231332e3235312e302f32342d3234203d3e203632323430.roa (hash: r8RD1SHQl6OybEgdZXTaDzaRDBKJoFWuS6Yc77FVHmo=) 10: 3138352e3231332e3235302e302f32342d3234203d3e20323132323338.roa (hash: ygSJr7gJnzCgddZdASy6lFYbTZobnImgktqUZvda03k=) 11: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: KVUcFIunYrkvSumpwjrzcrmsEP2tA68Fo7niWonBV8c=) 12: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (hash: ohyXGo6Fwg3029u2hdROae+jQf4VI2skgvLUXH3jI8w=) 13: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: 8/mMTd8OI6hx+rEazKaA5i9flVTt9So8wwSfFF6xpVo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 22:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:75:22:bf:8b:dd:05:62:c4:08:2c:14:1c:eb:cc:d1:bb:12:2d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Jun 28 18:49:11 2025 GMT Not After : Jun 29 22:12:11 2025 GMT Subject: CN=8B6394A310894503C7CA768247B4368C5F99E0EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:30:c3:86:f9:93:4f:88:2e:bc:a2:0c:75:92: 89:97:ef:33:06:5e:a6:1b:f9:04:8d:23:ac:f5:a3: f6:a4:46:00:8d:b3:62:e4:7a:86:4a:cd:19:0e:94: 63:26:33:df:0a:b7:38:c1:d0:99:31:2e:e8:9a:95: 78:1f:3b:0b:d2:59:b8:16:04:30:c5:60:ff:0b:52: 7e:78:f6:64:45:26:08:01:be:53:9b:9b:71:5b:8e: db:7e:59:17:9f:47:c3:85:e5:a3:01:90:3c:57:23: 6f:80:a3:6c:9d:57:ae:34:3f:1e:f7:15:7d:4f:e8: 00:d0:ea:12:91:9b:bb:2e:70:06:4e:3a:92:77:ad: 26:52:3b:0c:4a:95:4f:e6:20:c8:43:51:f7:6c:cd: a1:ff:f5:30:5b:ec:ad:bd:b8:81:91:4d:01:8b:eb: 4f:08:03:d6:af:f9:70:10:ac:4c:ac:e6:ce:9d:a5: fe:63:d1:f7:48:9d:c7:41:f5:68:38:19:41:7b:04: 44:a7:76:d0:44:fe:a2:25:cf:ee:da:5e:e9:3c:81: cc:b0:3a:72:fe:e4:1f:3b:5d:c3:f0:0d:d8:1a:d0: 5e:c7:a9:7a:1e:2f:d6:6c:b2:fc:f7:77:c8:95:9b: 95:1e:0f:66:d2:bb:84:56:28:7d:84:5d:d7:23:ee: 5d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:63:94:A3:10:89:45:03:C7:CA:76:82:47:B4:36:8C:5F:99:E0:EF X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:30:6a:37:e9:a3:ef:94:ac:ff:e4:6f:47:dd:bf:91:e2:99: 49:6b:d5:4f:fa:84:8c:d9:45:e1:93:18:0a:4d:6d:51:0a:63: 8c:49:14:93:58:7d:a5:05:27:f7:e6:b7:1d:00:04:11:39:2c: 1d:98:a4:1b:f6:d3:90:e7:9b:05:4a:27:c9:ee:a3:e5:cd:f3: 7b:9f:ee:9f:c7:43:e1:86:07:45:da:d4:4f:f8:b9:65:47:09: 11:41:23:8d:7e:89:a1:1c:17:64:ed:8c:08:32:2b:71:d3:8b: 4a:cb:d2:3d:09:ee:76:3d:06:42:04:34:af:04:c3:94:02:40: dd:d8:dd:8a:d9:3f:c8:e3:70:b0:71:e5:24:2a:07:ee:d0:5c: e1:34:88:ef:5f:13:c5:57:73:6b:8a:6f:af:5d:29:6f:5c:3c: ae:ad:60:e7:25:bf:fa:76:d6:be:2f:ff:a3:12:cc:55:3e:11: 7c:13:70:63:4b:d3:29:b2:ce:cb:5d:db:eb:04:35:42:92:c7: 30:8d:60:d8:4a:fe:61:48:20:ef:d6:69:d9:d8:ce:91:0f:ab: 07:6a:97:2b:4e:14:2e:2e:69:84:dd:92:27:66:b3:0b:b8:42: 17:17:32:67:47:2f:9e:90:dc:a5:06:08:41:90:74:99:15:c2: 34:4d:77:9b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOnUiv4vdBWLECCwUHOvM0bsSLQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNTA2MjgxODQ5MTFaFw0yNTA2MjkyMjEyMTFaMDMxMTAvBgNV BAMTKDhCNjM5NEEzMTA4OTQ1MDNDN0NBNzY4MjQ3QjQzNjhDNUY5OUUwRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFMMOG+ZNPiC68ogx1komX7zMG XqYb+QSNI6z1o/akRgCNs2LkeoZKzRkOlGMmM98KtzjB0JkxLuialXgfOwvSWbgW BDDFYP8LUn549mRFJggBvlObm3Fbjtt+WRefR8OF5aMBkDxXI2+Ao2ydV640Px73 FX1P6ADQ6hKRm7sucAZOOpJ3rSZSOwxKlU/mIMhDUfdszaH/9TBb7K29uIGRTQGL 608IA9av+XAQrEys5s6dpf5j0fdIncdB9Wg4GUF7BESndtBE/qIlz+7aXuk8gcyw OnL+5B87XcPwDdga0F7HqXoeL9Zssvz3d8iVm5UeD2bSu4RWKH2EXdcj7l1vAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUi2OUoxCJRQPHynaCR7Q2jF+Z4O8wHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTEzZGRhNi03 YWRlLTQ0NWQtOGM2ZS00NDhhNzhlNDhjYTEvMS8wRDdGRkFFMzAwREVGMDg3NkJG ODQ4OTBGQjZFQTE3QkU4NDFBNEQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDBqN+mj75Ss/+RvR92/ keKZSWvVT/qEjNlF4ZMYCk1tUQpjjEkUk1h9pQUn9+a3HQAEETksHZikG/bTkOeb BUonye6j5c3ze5/un8dD4YYHRdrUT/i5ZUcJEUEjjX6JoRwXZO2MCDIrcdOLSsvS PQnudj0GQgQ0rwTDlAJA3djditk/yONwsHHlJCoH7tBc4TSI718TxVdza4pvr10p b1w8rq1g5yW/+nbWvi//oxLMVT4RfBNwY0vTKbLOy13b6wQ1QpLHMI1g2Er+YUgg 79Zp2djOkQ+rB2qXK04ULi5phN2SJ2azC7hCFxcyZ0cvnpDcpQYIQZB0mRXCNE13 mw== -----END CERTIFICATE-----Generated at Sun Jun 29 06:12:50 2025 by rpki-client