$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft File: B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json) Hash identifier: i8AIYSzbcvG2d9c0KxgZVZyax2wWJbMPSH+Q4XVi3lo= Subject key identifier: F0:A2:AB:F5:AC:F2:89:16:9F:5B:92:B5:F5:26:A6:DF:3B:1A:2A:9A Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac Certificate serial: 652500F9DABAEE31765EF5227C01FEDB2D9C4F40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft Manifest number: 0227 Signing time: Sat 28 Jun 2025 07:44:09 +0000 Manifest this update: Sat 28 Jun 2025 07:39:09 +0000 Manifest next update: Sun 29 Jun 2025 11:32:09 +0000 Files and hashes: 1: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: i09u/Yl0xZ4SMCTefE8IHdofDXESyEQavFfkSLxrluw=) 2: 326130623a366338303a3a2f33322d3332203d3e20323135383338.roa (hash: kEt2cGR+/Q700kchrRZoRuY0FKyYF1rSAaCa413pKew=) 3: 3138352e3138362e32342e302f32342d3234203d3e20323135383338.roa (hash: nTMWfEhxo36lxHJvP1+YWdrKCSryelFli2OhT4xBMNI=) 4: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: zbKaWYwmjPPC167P5YL6I94JcPZEWN0HKnmqpfcR9u4=) 5: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: FBdBmLEGxXhvarnPJcmElFlCgeLSIQ6GXw75K+usirs=) 6: 3138352e3138362e32372e302f32342d3234203d3e203631333137.roa (hash: jD3TEx8Q8JwdsmzwyDZ9zaukL1sMlGUp0uzFac23xJs=) 7: 326130623a366338313a3a2f33322d3332203d3e20323135383338.roa (hash: 5mcUsW8Gu/iSzerp0Wwk+smZAmRaAGiznqu01bMcUDg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 11:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:25:00:f9:da:ba:ee:31:76:5e:f5:22:7c:01:fe:db:2d:9c:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac Validity Not Before: Jun 28 07:39:09 2025 GMT Not After : Jun 29 11:32:09 2025 GMT Subject: CN=F0A2ABF5ACF289169F5B92B5F526A6DF3B1A2A9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f2:68:ce:85:a0:eb:d3:09:e6:b5:4f:1a:e5: f7:bf:a0:38:b8:68:b3:2b:20:59:9d:4d:82:83:ed: 7a:cc:6e:85:2e:15:35:24:8a:4b:2b:3e:1d:99:ba: 58:8d:95:d5:75:2d:1d:a7:f8:83:87:c8:f9:c4:c6: 3e:79:50:c1:83:0d:a4:0b:f6:ea:93:34:88:45:4f: 2f:3c:6a:5e:2e:8a:ef:d1:68:59:a3:bc:f4:1d:16: fc:28:e0:ef:c4:11:2a:3b:be:35:cc:6f:36:ce:4e: 88:51:0c:c6:fc:af:e1:c2:5e:31:7b:0f:d3:ee:0a: 51:cf:2b:04:53:01:f5:1f:5b:d5:e2:0c:44:29:14: 6d:e1:ac:7a:c6:07:29:41:f6:99:81:51:36:d9:2c: 94:80:85:b3:7d:01:d2:4a:2b:4e:dc:74:a6:f4:96: d0:e5:15:05:70:aa:d4:91:35:d6:c0:bf:89:4f:c2: 0a:74:be:d8:06:91:66:f6:40:3e:1f:d8:71:5b:55: 70:de:46:d0:1e:8b:b1:99:46:83:95:f9:c6:b1:31: b7:65:82:88:6c:44:0e:19:37:a5:a1:90:e6:0a:20: 41:2b:c7:2d:8a:bb:79:c9:85:9f:08:22:a5:43:4e: 51:4a:d8:21:3f:28:e1:44:c4:2c:e4:6e:34:9b:1a: 56:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A2:AB:F5:AC:F2:89:16:9F:5B:92:B5:F5:26:A6:DF:3B:1A:2A:9A X509v3 Authority Key Identifier: keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4e:83:d2:c0:f0:45:1d:95:e2:4d:0c:53:45:f7:88:b8:5e: ee:22:0b:a4:f0:c0:0d:a2:7f:cb:8d:10:0b:00:6b:a0:49:14: 5f:d2:07:8f:5b:55:d1:cb:dc:a2:0a:8b:6f:81:38:07:eb:97: 80:e9:0f:0a:88:4d:ca:c9:a7:2d:2b:bd:63:bb:8d:90:2d:42: be:00:1a:f8:c0:dd:b5:43:c0:6f:59:0b:49:76:c6:cb:74:77: d3:44:0a:78:69:f0:4b:da:c9:54:ef:2f:66:35:dc:77:3a:20: dc:4f:e0:41:a1:cf:ac:fa:43:14:22:27:d1:92:50:e7:a6:55: 1d:d3:6d:c5:67:47:58:89:35:c7:de:57:7b:a9:e5:66:bc:fc: 23:1a:8e:64:bb:6d:59:08:6b:95:0c:b7:01:fe:f3:31:6e:41: 3b:60:69:4a:b6:d4:51:f5:76:cb:cc:c2:2f:09:f4:e2:b9:fa: 92:57:6e:02:d0:33:4a:96:c1:73:e2:49:6a:c8:a5:d6:55:04: 05:b4:04:8a:05:49:5b:02:0e:26:2b:90:d9:a3:1e:c8:36:b7: 2f:07:df:46:78:20:2d:58:e8:aa:9e:2e:a0:9a:0b:a5:23:4a: 6a:a0:2e:18:4f:0e:70:24:46:77:24:25:f8:cf:9e:e8:c9:f6: cb:7c:61:74 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZSUA+dq67jF2XvUifAH+2y2cT0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjNkMDI4MGY1MDA2OTVhNDMyMDQyNTFjOTgzMDQ1NGNh OGEyZTdhYzAeFw0yNTA2MjgwNzM5MDlaFw0yNTA2MjkxMTMyMDlaMDMxMTAvBgNV BAMTKEYwQTJBQkY1QUNGMjg5MTY5RjVCOTJCNUY1MjZBNkRGM0IxQTJBOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm8mjOhaDr0wnmtU8a5fe/oDi4 aLMrIFmdTYKD7XrMboUuFTUkiksrPh2ZuliNldV1LR2n+IOHyPnExj55UMGDDaQL 9uqTNIhFTy88al4uiu/RaFmjvPQdFvwo4O/EESo7vjXMbzbOTohRDMb8r+HCXjF7 D9PuClHPKwRTAfUfW9XiDEQpFG3hrHrGBylB9pmBUTbZLJSAhbN9AdJKK07cdKb0 ltDlFQVwqtSRNdbAv4lPwgp0vtgGkWb2QD4f2HFbVXDeRtAei7GZRoOV+caxMbdl gohsRA4ZN6WhkOYKIEErxy2Ku3nJhZ8IIqVDTlFK2CE/KOFExCzkbjSbGlZ3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU8KKr9azyiRafW5K19Sam3zsaKpowHwYDVR0j BBgwFoAUs9AoD1AGlaQyBCUcmDBFTKii56wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdhZTI1ZjMtNzA2Yi00N2VkLWJiNzQtNDY2ODRhZTBl ZjJiLzAvQjNEMDI4MEY1MDA2OTVBNDMyMDQyNTFDOTgzMDQ1NENBOEEyRTdBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M5QW9EMUFHbGFReUJDVWNtREJGVEtp aTU2dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2FlMjVmMy03 MDZiLTQ3ZWQtYmI3NC00NjY4NGFlMGVmMmIvMC9CM0QwMjgwRjUwMDY5NUE0MzIw NDI1MUM5ODMwNDU0Q0E4QTJFN0FDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnE6D0sDwRR2V4k0MU0X3 iLhe7iILpPDADaJ/y40QCwBroEkUX9IHj1tV0cvcogqLb4E4B+uXgOkPCohNysmn LSu9Y7uNkC1CvgAa+MDdtUPAb1kLSXbGy3R300QKeGnwS9rJVO8vZjXcdzog3E/g QaHPrPpDFCIn0ZJQ56ZVHdNtxWdHWIk1x95Xe6nlZrz8IxqOZLttWQhrlQy3Af7z MW5BO2BpSrbUUfV2y8zCLwn04rn6klduAtAzSpbBc+JJasil1lUEBbQEigVJWwIO JiuQ2aMeyDa3LwffRnggLVjoqp4uoJoLpSNKaqAuGE8OcCRGdyQl+M+e6Mn2y3xh dA== -----END CERTIFICATE-----Generated at Sat Jun 28 23:25:36 2025 by rpki-client