$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: U9AM2kaxwb092Dk1Q9EvASi7Q41xdLb+BZpQIPQOfS4= Subject key identifier: 53:53:04:2E:DF:B7:24:D7:AA:6C:03:70:8B:A7:7F:AA:17:CD:EA:E2 Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 14AE30EEF09ADD7A6A3E9B0D0463BC74539D652E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: C9 Signing time: Sun 11 May 2025 07:35:34 +0000 Manifest this update: Sun 11 May 2025 07:30:34 +0000 Manifest next update: Mon 12 May 2025 09:49:34 +0000 Files and hashes: 1: 3138352e35382e3135372e302f32342d3234203d3e20323132333438.roa (hash: DGO61w7PmIJ89HGZYCpzYFdXQiPEr9dqR3BmIwUwJEM=) 2: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=) 3: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=) 4: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=) 5: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=) 6: 326130323a323937303a3a2f32392d3239203d3e203433383437.roa (hash: s2Lo9o3m7PNA+VTM8h6HfGJuLE7e0u+GGo764aM9FW4=) 7: 33312e3138352e3130352e302f32342d3234203d3e203539343332.roa (hash: 2mW6+LY9N9n7Wo6R3JiZl5gpMQP421EpKKaQNdMN8SQ=) 8: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: bxI8j0Q43fNYwFfEpnx3zZA+WfxxHOFpyLP15cwiRJc=) 9: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: 01LOWf7MxhRX+2Op4rDN5W7ucn6FteIUTuCGEpIiXqg=) 10: 3138352e35382e3135382e302f32342d3234203d3e203432383331.roa (hash: H0/UOIDOPTZQG2jWBZUuvlV7qmEWppBmDmL+nyn9Jr4=) 11: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=) 12: 34362e3138322e31362e302f32332d3233203d3e203433383437.roa (hash: 4YLzigbbgGBlj3P8KPCDpw+y1a9c2DAZLVBVu5lNf4E=) 13: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=) 14: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=) 15: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=) 16: 34362e3138322e31382e302f32332d3233203d3e203433383437.roa (hash: 4Ns+nZIS59tdPTXyzEk/8ZsDfijKL83vY7HPlP7mVB0=) 17: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: pR2mGzBmpg87h/DVL2DAHTfd4AriLLDtjAOrTFe5+2E=) 18: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=) 19: 33312e3138352e3130372e302f32342d3234203d3e203231383539.roa (hash: X23TgVm2+OwqELUYhUauYCGCU9YC3xkuQ9JiAV3abPE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ae:30:ee:f0:9a:dd:7a:6a:3e:9b:0d:04:63:bc:74:53:9d:65:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: May 11 07:30:34 2025 GMT Not After : May 12 09:49:34 2025 GMT Subject: CN=5353042EDFB724D7AA6C03708BA77FAA17CDEAE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8e:db:ff:d8:f9:c2:cb:69:52:fc:8f:4b:c8: 4b:3d:e9:5e:3e:15:61:1a:20:45:ef:2f:a0:80:ac: 07:ae:f0:20:f6:f6:91:46:86:82:00:02:11:3f:f0: 20:4b:7e:3c:8a:ae:e5:89:1e:0f:ff:6c:b3:63:3a: 30:2b:27:f9:24:d6:e1:e5:df:9e:2f:62:68:64:12: 06:ad:73:79:97:cb:43:3c:93:5b:47:19:2e:4c:ae: b5:7f:64:2e:97:cb:37:0e:44:78:66:aa:03:60:7e: 3b:ca:26:a3:b0:ab:de:b6:1c:ed:85:e4:e9:96:e6: 85:1f:6d:41:19:c7:a3:eb:ab:9d:7d:55:d2:da:e8: f7:e8:51:63:5a:44:7b:81:2e:0f:be:88:d7:7b:1d: 66:bf:31:25:cc:17:a1:a1:61:1f:c9:30:49:a9:45: 9a:d2:c8:1c:6c:4a:ad:e8:b9:bd:d1:df:40:30:ad: 74:36:f2:6c:d9:0a:2e:dd:8d:80:b4:ac:e0:2c:d0: 67:bc:60:f3:c6:96:72:c7:23:97:3e:1c:22:14:d5: 13:d5:25:e6:71:2c:e0:7e:ef:ca:ef:95:4c:78:02: 86:15:36:d0:9b:85:35:80:98:5d:05:95:67:a1:08: bc:72:f1:ec:57:9f:d1:69:ac:a8:97:ec:49:b9:fe: ee:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:53:04:2E:DF:B7:24:D7:AA:6C:03:70:8B:A7:7F:AA:17:CD:EA:E2 X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:85:b4:a1:e4:01:58:cc:a3:e9:3b:96:d1:82:7f:42:ed:5b: f8:52:95:a0:ba:c4:47:45:56:4c:4d:3d:15:69:b4:56:66:26: 5f:f4:5c:ad:e8:88:b3:9c:b0:0f:b6:1f:4b:16:d3:1a:71:a0: 6d:3b:b7:99:ef:8b:ee:7a:e4:17:89:27:f1:b3:1f:fa:ed:bf: 30:5b:f2:c8:4a:d1:7e:33:b8:84:ce:32:62:03:04:80:af:db: bc:9d:fe:54:69:ae:4c:70:38:7f:84:f6:ea:e1:62:3b:9a:68: e8:c1:f6:fb:c3:a4:5b:c5:a1:33:4c:76:0d:35:ed:09:bc:f6: 27:15:87:06:fe:ac:8f:6c:eb:8a:42:52:a3:9f:96:04:08:7a: d4:07:be:77:91:71:da:db:e9:69:92:25:5a:20:eb:87:1b:88: af:44:c7:5c:54:45:f4:48:26:07:c7:7e:18:85:9e:c6:67:83: 74:e6:fd:ae:01:bb:db:65:0c:55:e3:be:b2:ba:31:d6:10:30: 24:52:60:a1:9f:b9:ab:3f:ec:ea:f8:e1:50:df:75:d5:0b:3b: 10:95:e3:8c:d9:08:0b:3a:48:a0:84:ba:9f:1f:2c:45:6e:f4: 92:9b:ef:b3:71:91:37:ce:9b:0a:a3:35:ea:d5:7e:56:da:96: f9:95:d2:2f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFK4w7vCa3XpqPpsNBGO8dFOdZS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNTA1MTEwNzMwMzRaFw0yNTA1MTIwOTQ5MzRaMDMxMTAvBgNV BAMTKDUzNTMwNDJFREZCNzI0RDdBQTZDMDM3MDhCQTc3RkFBMTdDREVBRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxjtv/2PnCy2lS/I9LyEs96V4+ FWEaIEXvL6CArAeu8CD29pFGhoIAAhE/8CBLfjyKruWJHg//bLNjOjArJ/kk1uHl 354vYmhkEgatc3mXy0M8k1tHGS5MrrV/ZC6XyzcORHhmqgNgfjvKJqOwq962HO2F 5OmW5oUfbUEZx6Prq519VdLa6PfoUWNaRHuBLg++iNd7HWa/MSXMF6GhYR/JMEmp RZrSyBxsSq3oub3R30AwrXQ28mzZCi7djYC0rOAs0Ge8YPPGlnLHI5c+HCIU1RPV JeZxLOB+78rvlUx4AoYVNtCbhTWAmF0FlWehCLxy8exXn9FprKiX7Em5/u6tAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUU1MELt+3JNeqbANwi6d/qhfN6uIwHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuYW0oeQBWMyj6TuW0YJ/ Qu1b+FKVoLrER0VWTE09FWm0VmYmX/RcreiIs5ywD7YfSxbTGnGgbTu3me+L7nrk F4kn8bMf+u2/MFvyyErRfjO4hM4yYgMEgK/bvJ3+VGmuTHA4f4T26uFiO5po6MH2 +8OkW8WhM0x2DTXtCbz2JxWHBv6sj2zrikJSo5+WBAh61Ae+d5Fx2tvpaZIlWiDr hxuIr0THXFRF9EgmB8d+GIWexmeDdOb9rgG722UMVeO+srox1hAwJFJgoZ+5qz/s 6vjhUN911Qs7EJXjjNkICzpIoIS6nx8sRW70kpvvs3GRN86bCqM16tV+VtqW+ZXS Lw== -----END CERTIFICATE-----Generated at Sun May 11 10:44:13 2025 by rpki-client