$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: iLU0CoAgtNPd+nZ7gvKvHmRETJBWBV1cqjDnBymcQbI= Subject key identifier: 81:9D:E9:E1:A9:21:8B:42:33:9E:99:49:C3:40:87:79:99:FA:0C:C5 Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 230D0C1D72A4AA176DD4FA841D31CCD6E488FDB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: 010C Signing time: Sat 28 Jun 2025 17:09:10 +0000 Manifest this update: Sat 28 Jun 2025 17:04:10 +0000 Manifest next update: Sun 29 Jun 2025 17:23:10 +0000 Files and hashes: 1: 34362e3138322e31382e302f32332d3233203d3e203433383437.roa (hash: 4Ns+nZIS59tdPTXyzEk/8ZsDfijKL83vY7HPlP7mVB0=) 2: 33312e3138352e3130352e302f32342d3234203d3e20313335333931.roa (hash: UHjaYZdaJB6lUIpYnqhxUJeEQvDh7dO7siLVcmgE1HM=) 3: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=) 4: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=) 5: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=) 6: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: bxI8j0Q43fNYwFfEpnx3zZA+WfxxHOFpyLP15cwiRJc=) 7: 33312e3138352e3130372e302f32342d3234203d3e203231383539.roa (hash: qnu9sW/eXhzgLqcliqR873WFuo1En8erdPs6TqliSEg=) 8: 3138352e35382e3135372e302f32342d3234203d3e2032393134.roa (hash: lpWXt6uFvU2PZ1sNhgr10rMfQuglN6ZjbNveDXRK2tg=) 9: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=) 10: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=) 11: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: 01LOWf7MxhRX+2Op4rDN5W7ucn6FteIUTuCGEpIiXqg=) 12: 3138352e35382e3135382e302f32342d3234203d3e203432383331.roa (hash: H0/UOIDOPTZQG2jWBZUuvlV7qmEWppBmDmL+nyn9Jr4=) 13: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=) 14: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=) 15: 326130323a323937303a3a2f32392d3239203d3e203433383437.roa (hash: s2Lo9o3m7PNA+VTM8h6HfGJuLE7e0u+GGo764aM9FW4=) 16: 3138352e35382e3135372e302f32342d3234203d3e2039333034.roa (hash: ecPrVI69N/vnSd3FE9LMlI9j3yoUAyDEH+/p4MpTJaY=) 17: 34362e3138322e31362e302f32332d3233203d3e203433383437.roa (hash: 4YLzigbbgGBlj3P8KPCDpw+y1a9c2DAZLVBVu5lNf4E=) 18: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=) 19: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: LYeLRSyR2/FM8uZ2/tBIS6miZQIE2zl08o8wZaxLsv4=) 20: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:0d:0c:1d:72:a4:aa:17:6d:d4:fa:84:1d:31:cc:d6:e4:88:fd:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Jun 28 17:04:10 2025 GMT Not After : Jun 29 17:23:10 2025 GMT Subject: CN=819DE9E1A9218B42339E9949C340877999FA0CC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:77:af:f8:dc:c8:10:ce:d2:72:e3:91:b9:43: 0a:1c:1f:fb:b9:45:ed:92:9b:ae:84:57:5f:56:a4: 18:ae:74:e5:45:fe:45:3c:05:3d:7d:cf:7e:a1:60: 65:6d:19:51:75:96:9e:1c:7f:22:25:17:45:0e:59: 81:6b:7b:7a:5a:e6:ea:13:8a:50:0e:14:62:61:bf: 4a:f2:be:d4:21:50:31:51:53:20:b2:68:81:2f:3f: 37:d9:4b:c1:5c:e4:62:49:7d:a1:e6:10:3e:af:e3: d3:f2:44:80:eb:91:2a:0b:6e:92:50:ac:f5:43:2f: 68:1a:c4:24:4c:89:4b:7b:12:3f:80:1c:11:5b:f4: 77:42:b0:21:30:22:2d:c3:fd:fc:33:4f:15:d3:96: 78:5a:73:f5:7d:7b:f0:84:40:58:fe:57:cd:bc:e1: b9:e3:7d:c5:9c:e7:14:52:a8:cc:52:80:46:f0:89: e9:e6:af:f4:f1:29:1e:52:19:e7:14:8e:fc:a5:8a: 3c:63:93:82:fc:36:e4:66:8c:48:ab:e9:b7:e5:9c: c1:61:f5:c6:b9:b5:19:7d:37:ea:e3:71:56:80:43: 8b:15:89:68:74:6c:77:a1:a2:1f:5a:23:e8:83:8d: 7a:b0:90:09:e8:e1:49:66:12:0a:c5:ed:39:50:f9: 6f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9D:E9:E1:A9:21:8B:42:33:9E:99:49:C3:40:87:79:99:FA:0C:C5 X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:40:9a:16:db:d1:30:82:8a:78:5b:bf:cb:75:4f:9c:09:55: a5:e4:7a:b9:ed:b3:08:b1:03:c8:34:65:48:ce:2d:e6:e5:92: 1c:77:52:7c:5f:12:a9:c6:ee:22:a2:0c:61:ef:9d:ac:b2:06: 58:ab:4f:af:90:e3:26:34:31:d0:e3:be:c7:aa:8a:d4:23:2d: 77:03:97:15:f5:ec:4a:1a:75:25:28:c7:a6:e1:03:f3:fc:80: 2e:06:fc:2c:f1:43:47:a6:60:00:42:a4:06:64:7b:6c:fe:80: fa:67:89:bf:e6:cc:91:9e:e7:7e:f5:d9:07:0f:c2:0b:04:c5: ed:11:1b:3a:e4:72:05:86:8b:e7:5e:52:10:0d:5f:18:53:56: 1e:49:0f:45:f6:bd:57:a6:71:a9:0d:0d:48:4a:10:66:4e:e6: 79:8a:b4:0d:c1:32:b8:92:fb:1e:4c:8e:6a:bc:a8:8d:06:cf: d9:03:1a:c3:a6:21:5c:de:ef:e8:ce:07:3f:c1:a1:17:46:69: 27:18:76:cb:28:b7:f8:ba:47:51:1f:17:73:eb:5a:9c:f0:39: e7:d5:f1:e6:bc:59:d4:fc:55:b8:2b:53:29:99:85:87:61:9a: 95:6e:1e:f8:03:98:b2:e6:4b:ee:18:0e:3f:75:1f:f5:97:9e: 06:7d:41:37 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIw0MHXKkqhdt1PqEHTHM1uSI/bYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNTA2MjgxNzA0MTBaFw0yNTA2MjkxNzIzMTBaMDMxMTAvBgNV BAMTKDgxOURFOUUxQTkyMThCNDIzMzlFOTk0OUMzNDA4Nzc5OTlGQTBDQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvd6/43MgQztJy45G5QwocH/u5 Re2Sm66EV19WpBiudOVF/kU8BT19z36hYGVtGVF1lp4cfyIlF0UOWYFre3pa5uoT ilAOFGJhv0ryvtQhUDFRUyCyaIEvPzfZS8Fc5GJJfaHmED6v49PyRIDrkSoLbpJQ rPVDL2gaxCRMiUt7Ej+AHBFb9HdCsCEwIi3D/fwzTxXTlnhac/V9e/CEQFj+V828 4bnjfcWc5xRSqMxSgEbwienmr/TxKR5SGecUjvylijxjk4L8NuRmjEir6bflnMFh 9ca5tRl9N+rjcVaAQ4sViWh0bHehoh9aI+iDjXqwkAno4UlmEgrF7TlQ+W/DAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUgZ3p4akhi0IznplJw0CHeZn6DMUwHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekCaFtvRMIKKeFu/y3VP nAlVpeR6ue2zCLEDyDRlSM4t5uWSHHdSfF8SqcbuIqIMYe+drLIGWKtPr5DjJjQx 0OO+x6qK1CMtdwOXFfXsShp1JSjHpuED8/yALgb8LPFDR6ZgAEKkBmR7bP6A+meJ v+bMkZ7nfvXZBw/CCwTF7REbOuRyBYaL515SEA1fGFNWHkkPRfa9V6ZxqQ0NSEoQ Zk7meYq0DcEyuJL7HkyOaryojQbP2QMaw6YhXN7v6M4HP8GhF0ZpJxh2yyi3+LpH UR8Xc+tanPA559Xx5rxZ1PxVuCtTKZmFh2GalW4e+AOYsuZL7hgOP3Uf9ZeeBn1B Nw== -----END CERTIFICATE-----Generated at Sat Jun 28 23:17:37 2025 by rpki-client