$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft File: 830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft (raw, json) Hash identifier: 0maUZuzYobOt49hanDlUl3al0d1fsBabP6iv0e8VVpQ= Subject key identifier: C9:58:C8:C9:ED:04:62:83:4D:36:71:CB:30:55:EE:29:AD:FC:F0:EF Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Certificate serial: 040676E100D00CEA7458292464FB8E95665FAA69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft Manifest number: 038D Signing time: Sun 11 May 2025 18:40:36 +0000 Manifest this update: Sun 11 May 2025 18:35:36 +0000 Manifest next update: Mon 12 May 2025 18:54:36 +0000 Files and hashes: 1: 34352e3132382e31332e302f32342d3234203d3e20313939393235.roa (hash: lbqo8bVd2bNDEcGLFAZKGWs5cX8HuFPs445xJs/ijC4=) 2: 34352e3134302e33392e302f32342d3234203d3e20323132333834.roa (hash: L7EHGwvWSSXWjiN+ge5rSBcePeV6DFnXvflhKIMhGIM=) 3: 34352e3133322e3231382e302f32342d3234203d3e2032393134.roa (hash: XAQUwYZRZsl9fSajT51guouTeRdM0ajH9Rg10zFWPr0=) 4: 34352e3133322e3231392e302f32342d3234203d3e203536393133.roa (hash: AxLNZDyeHINJ0r0eh4VNHb6q4DdnWSgJt/pD0neyKdY=) 5: 34352e3133322e3231372e302f32342d3234203d3e203231383539.roa (hash: dXFRkKkCKVRo3kheY7TxPeD7qb8C1qNLHcvWTQZirTA=) 6: 830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl (hash: Ww2iuUYhar5VIC4OTCtGm9LwaKDobeMS16XOjR56trs=) 7: 34352e38392e3135302e302f32332d3234203d3e20313532313739.roa (hash: bmojzZeepyIZ/0OgLjhR5pc6BgvPZg2mTK4vcnODns8=) 8: 34352e3134302e33372e302f32342d3234203d3e20323638363234.roa (hash: FqBzJG7QyS5rhAL6kP0DnaUbBW+1O9qvi1K+fqN47FU=) 9: 34352e3132382e31322e302f32342d3234203d3e20313336353537.roa (hash: GI/aZsOCGO0eol75QgiKGdLVWPN+m00XjhLbN7VPSj8=) 10: 34352e3134302e33362e302f32342d3234203d3e203136323736.roa (hash: bbdkgz3gQGx4brckdYck4FKHluP707hNf2aov4e5c2A=) 11: 3138352e3235302e34322e302f32332d3233203d3e203338313935.roa (hash: j7KQ1jRl+b2zWBCscj5VAuhfgmA4IoWIw8q8V/vmDKc=) 12: 34352e3134302e33382e302f32342d3234203d3e203330363434.roa (hash: fJwttlRoX6x8pHVPArebGf7Mfzm6Mhd98H+STIQz6RU=) 13: 326130653a666363303a3a2f32392d3239203d3e20323031393633.roa (hash: qdebRShI1BsDkowxWmjmO/ySQ67z1G0tcY+aaojgUVA=) 14: 34352e39332e3138362e302f32332d3234203d3e2033333230.roa (hash: VAeKGs9UHtqpVRcDtQW520o4iavD4BPJNFtFxFrs4yY=) 15: 34352e38392e3135302e302f32332d3234203d3e20313338393937.roa (hash: 5clR9Wtor+IOuKjeunidIbaSD2QfHPe706FuAFkxWsI=) 16: 34352e39332e3138342e302f32332d3234203d3e203436383434.roa (hash: TGlDdvU4w10Euo8HgTetP9ViEjknUhAwENZAinoPE6I=) 17: 3138352e3235302e34312e302f32342d3234203d3e203536393133.roa (hash: roziV6oiwLxYriq3btcjbyRlDtjQhKQCS8sQ1/6hMWI=) 18: 34352e3132382e31322e302f32332d3234203d3e20383334.roa (hash: TV142dkIfjlXVF18mfQXIHSlB6/BpS7NTRR0FAI1u74=) 19: 34352e3134352e3234322e302f32342d3234203d3e203631333137.roa (hash: ikgi1ZDn+JlqvEXD23SCdDljFp0ZwM53qtOl2sujyPg=) 20: 3138352e3235302e34312e302f32342d3234203d3e203439363038.roa (hash: LBV8F/iD30s0hCk74chhKHNekeGmi8j1ngokGHn2u2A=) 21: 34352e3132382e31342e302f32332d3233203d3e20323734373836.roa (hash: V6mtJWR732G/FJGWxHZiLboD66+fB4OqjGMzuHg8F6s=) 22: 34352e3134352e3234332e302f32342d3234203d3e203231383539.roa (hash: PJH1dFKAQPoULr+aUgsQadg9xagPIWIzP9msLqf5QP8=) 23: 3138352e3235302e34312e302f32342d3234203d3e2037303138.roa (hash: 472NYYGv0C/3B2qITHOxxHP7TJ1kODHDvPJfJ6twel8=) 24: 34352e38392e3134382e302f32332d3234203d3e203436383434.roa (hash: I4Zwtx9y1lG5Qu9j58BlxoVuwPPlNmIUlv4j5y+vmAA=) 25: 34352e38392e3135302e302f32332d3234203d3e20323130353432.roa (hash: wFozge1poHwEF4lXqXXlfcFZR2pYAANkE7nE8OvV8ZE=) 26: 34352e3134352e3234312e302f32342d3234203d3e20323134353739.roa (hash: ecd3AYkEVnl/nPIUjiZIW5gPIFDZnDrC7h/lE1jMOGA=) 27: 3138352e3235302e34302e302f32342d3234203d3e2035303635.roa (hash: vADHpi7lqq2FTz+I44BCLsWOTCezg1eq9mEd669wIuU=) 28: 34352e3134352e3234302e302f32342d3234203d3e20323639303730.roa (hash: ZZTeFnnkmIFoyKByZKAoXkqiW3x9U8bfEnkF0EICwb0=) 29: 34352e3133322e3231362e302f32342d3234203d3e203437353835.roa (hash: zXX5KIzUPLMpoL5WZ5dxh/5Elb9YEKqPzGlTC3maexc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 18:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:06:76:e1:00:d0:0c:ea:74:58:29:24:64:fb:8e:95:66:5f:aa:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Validity Not Before: May 11 18:35:36 2025 GMT Not After : May 12 18:54:36 2025 GMT Subject: CN=C958C8C9ED0462834D3671CB3055EE29ADFCF0EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cf:88:66:a4:c1:b9:e1:0b:f4:a9:fc:5d:71: 14:09:3e:ff:34:33:b2:d1:c6:1c:fd:23:56:b5:d4: ee:67:0b:b4:5a:ef:9e:93:01:74:01:23:cb:42:d6: 3b:a5:5d:e0:33:7e:e8:56:c9:a2:69:1b:dd:57:6e: 41:83:62:1b:7e:0e:70:2d:c5:54:ca:a5:3f:36:89: 9b:43:18:08:93:b5:af:7d:be:a2:bc:64:da:fa:d0: 10:b1:9c:79:d4:a5:f2:50:37:0c:f8:01:66:bd:32: eb:7f:2a:20:07:22:5a:6a:90:3c:ef:c7:e2:d3:8a: ca:96:c7:7d:83:89:3e:df:77:8a:c7:4e:65:99:54: 41:90:3c:2f:95:3d:f1:b6:87:d1:5e:f4:0d:b9:8d: 55:c7:5e:50:c3:d8:63:97:b3:54:fd:16:d4:3d:9f: 74:2a:c5:74:ae:2a:67:80:b6:9f:74:8d:a1:fb:20: a5:25:a3:eb:91:04:fe:13:7b:f4:56:57:fa:f0:35: ef:ab:88:80:b7:ec:ae:e5:37:f8:0e:2c:d8:78:2a: 9d:b1:4b:29:7b:39:21:c1:2e:26:66:ae:f9:3a:5f: d7:37:5a:71:61:0f:24:77:8c:e2:56:83:52:66:d2: 48:9b:66:c5:b9:d0:04:2a:48:d4:13:1a:cb:f1:0b: 10:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:58:C8:C9:ED:04:62:83:4D:36:71:CB:30:55:EE:29:AD:FC:F0:EF X509v3 Authority Key Identifier: keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:fd:e0:76:c6:95:3d:61:ab:8f:90:f8:7a:c8:a8:ed:e9:29: cf:76:c2:d2:c8:20:f2:f1:c6:39:2d:1a:fe:d3:d3:4d:7e:cc: af:00:f7:9a:4b:a3:0b:4c:5c:ff:68:97:6b:ee:74:a0:8f:b0: ab:10:06:77:e6:05:5c:da:57:2f:96:2f:f1:82:ef:ab:9b:83: 82:88:91:e2:f0:ce:9a:cc:75:70:db:95:f2:a5:00:4b:de:d9: ab:91:87:08:00:c9:51:a5:46:d2:b7:1a:32:b8:f0:6a:7d:2e: fd:af:5d:dc:c8:c3:30:d1:86:da:67:2f:f8:7a:2b:74:34:ca: 9a:0a:9e:af:2f:0a:78:f1:76:5d:cf:78:49:e0:a6:e9:65:37: f5:4a:ec:41:e8:3e:91:78:7d:3f:32:e6:37:23:f7:5b:e0:6f: a5:ce:9c:86:c5:f0:79:68:ba:44:7d:9c:9c:28:cc:f7:8c:8b: 27:0b:bf:55:76:fb:67:22:08:77:0e:2d:19:c0:40:7b:20:fb: 41:4a:eb:fc:54:09:8f:25:ed:f2:b3:0a:73:90:58:b3:8a:84: 15:bd:b2:49:ae:e8:af:93:ed:54:07:20:ec:37:a4:dd:03:b3: 45:71:f0:b3:a2:fc:b5:6e:02:87:2c:29:33:b4:36:88:83:d0: 9e:57:bf:7a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBAZ24QDQDOp0WCkkZPuOlWZfqmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi YWFmNjRjZTAeFw0yNTA1MTExODM1MzZaFw0yNTA1MTIxODU0MzZaMDMxMTAvBgNV BAMTKEM5NThDOEM5RUQwNDYyODM0RDM2NzFDQjMwNTVFRTI5QURGQ0YwRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAz4hmpMG54Qv0qfxdcRQJPv80 M7LRxhz9I1a11O5nC7Ra756TAXQBI8tC1julXeAzfuhWyaJpG91XbkGDYht+DnAt xVTKpT82iZtDGAiTta99vqK8ZNr60BCxnHnUpfJQNwz4AWa9Mut/KiAHIlpqkDzv x+LTisqWx32DiT7fd4rHTmWZVEGQPC+VPfG2h9Fe9A25jVXHXlDD2GOXs1T9FtQ9 n3QqxXSuKmeAtp90jaH7IKUlo+uRBP4Te/RWV/rwNe+riIC37K7lN/gOLNh4Kp2x Syl7OSHBLiZmrvk6X9c3WnFhDyR3jOJWg1Jm0kibZsW50AQqSNQTGsvxCxAzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUyVjIye0EYoNNNnHLMFXuKa388O8wHwYDVR0j BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx dlpNNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZTBkNmE0ZC1i YTY3LTQ5NzktOGQxMi0wZWQ0NzQ4ZmM4NmUvMC84MzBFMDY0MTlGQzQ2QTI4MDJG NkYwM0I3MTM2OEFDN0JBQUY2NENFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPv3gdsaVPWGrj5D4esio 7ekpz3bC0sgg8vHGOS0a/tPTTX7MrwD3mkujC0xc/2iXa+50oI+wqxAGd+YFXNpX L5Yv8YLvq5uDgoiR4vDOmsx1cNuV8qUAS97Zq5GHCADJUaVG0rcaMrjwan0u/a9d 3MjDMNGG2mcv+HordDTKmgqery8KePF2Xc94SeCm6WU39UrsQeg+kXh9PzLmNyP3 W+Bvpc6chsXweWi6RH2cnCjM94yLJwu/VXb7ZyIIdw4tGcBAeyD7QUrr/FQJjyXt 8rMKc5BYs4qEFb2ySa7or5PtVAcg7Dek3QOzRXHws6L8tW4ChywpM7Q2iIPQnle/ eg== -----END CERTIFICATE-----Generated at Mon May 12 04:17:32 2025 by rpki-client