$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: Tmf8PE/6fWnKdWVsZLu3dRT37Tn9PpfrebYn4gwxSI4= Subject key identifier: E0:AA:59:63:B5:55:7B:26:F2:42:B7:73:74:99:33:CD:27:FB:FC:16 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 6A4937A52CD8486F0942297B448EEC2CAFD7863F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: D2 Signing time: Fri 22 Aug 2025 16:27:32 +0000 Manifest this update: Fri 22 Aug 2025 16:22:32 +0000 Manifest next update: Sat 23 Aug 2025 20:12:32 +0000 Files and hashes: 1: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: lmVh0tkdqz2ZaktlfIJzzJLuyL6wItEcUEPI+PVNqdo=) 2: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: MbX2Jo3+qNy9yJ51qumhhpSA5fjjpKXnL9+Ixdd7q/M=) 3: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: ad3eCylfdMfYW/Id31ooquQQLvZwumdWGj+lszfaEsA=) 4: 3139342e3132342e3233342e302f32342d3234203d3e20393936.roa (hash: ZoxbCHQMtNZPfbUxrxLpOcXkuKUfw+Blft69mSm2oZk=) 5: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: bLMKUTu2LDh7TH4JEFo2TwGKCx3JiqqNy6hRd14etMM=) 6: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: OxMKDK2JP12P34S0TYTV18fJiE8IkhpeRuFRDxwNQQM=) 7: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: yq+hWHhfyocRCOJbnYGyzdHlkfHxXD4gPxuVgEPCc0g=) 8: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: Bvg0bczZRvr0hNeXj13n0Q8N1O34FXLeiihKmXvd96c=) 9: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: 0XA7loK9zcLZ4LH8gJRLIhKhFochpbrC40dXD0XEE/8=) 10: 3139342e3132342e3233342e302f32342d3234203d3e203534333339.roa (hash: wdUsagydvVBIUao6PJHWRop4oPMEKXc9pJyNsG4SW9o=) 11: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: E+WPtm+HS9AVsakqcLrBjACoAm/NbChhrd4PG4s+X5o=) 12: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: Wt7cVymDfWBwMzR8hqsJLmmyo1G55vHli1MG8ova8P4=) 13: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: hZUNrJfyUHgUntGAqdSVlBaE4wglKTi9y0zmmly1bMY=) 14: 3139342e3132342e3233342e302f32342d3234203d3e20343031383338.roa (hash: dg4srvpWF3uIRgfQMdk/wAV5BokR1veRJ6lDUvN1tY0=) 15: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: qgpa17rXBGEZyX0zTURKp2TS7HA9WA0LAdj3r9yq+jg=) 16: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: sUFXVk5mJuzGXi+txvF0jHfWX/7COhdmW+wdhnGLLbA=) 17: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: 4eRihxuyWrFmyrmWNHP+q80BiQuGj/+XTMKJH0kDcVI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 20:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:49:37:a5:2c:d8:48:6f:09:42:29:7b:44:8e:ec:2c:af:d7:86:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Aug 22 16:22:32 2025 GMT Not After : Aug 23 20:12:32 2025 GMT Subject: CN=E0AA5963B5557B26F242B773749933CD27FBFC16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7b:30:b3:d1:d5:20:96:19:37:db:e5:8c:36: 81:e8:c5:ba:81:62:ba:18:34:52:ed:6f:83:12:70: 1d:70:6b:6b:2f:c5:78:70:ef:18:15:6a:15:17:54: 5c:64:61:ec:d2:9d:ba:b8:e3:49:01:f0:df:9b:1c: c5:68:12:94:28:27:ee:32:45:d3:6f:d4:c5:87:c6: 5f:dd:0c:f7:46:8a:2f:54:75:78:e4:af:70:3a:17: 69:90:e0:8f:7e:1c:00:dd:30:9b:b3:f0:25:26:a7: ce:1e:93:cc:a1:ae:7d:58:1a:58:ae:a1:ce:21:27: 6d:6d:80:d6:cf:5c:a4:c6:63:1f:17:78:ad:7a:07: 10:6f:52:5f:c8:7e:04:f2:c1:f4:d0:9a:e1:68:94: 72:50:b1:41:22:56:dd:69:e2:db:25:bf:0e:04:10: 40:12:5f:91:f0:61:7b:d9:a1:45:22:ee:4c:75:33: 88:58:64:e6:86:c5:51:94:39:0a:d2:41:00:65:e0: 5c:f9:e3:91:b9:cc:32:52:1a:91:15:30:57:6b:72: 90:67:2a:96:63:dc:22:43:01:1f:58:bd:ce:f2:20: 34:99:6b:20:e4:e3:c7:c7:a5:22:54:5b:84:0d:1d: 1c:3c:83:88:ee:c9:a5:04:5f:89:80:92:96:c4:01: 2b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AA:59:63:B5:55:7B:26:F2:42:B7:73:74:99:33:CD:27:FB:FC:16 X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:32:b9:2b:08:f2:13:3d:b3:95:05:06:ac:a0:68:9a:a6:d8: 37:38:b9:53:c6:fc:98:47:41:31:8d:7e:02:b3:72:ef:3f:09: db:26:c3:42:af:f9:83:4a:31:f2:be:60:25:72:3c:ff:d2:24: ad:44:43:eb:18:af:c5:95:59:41:0c:2c:ae:0c:eb:13:d8:91: df:05:9b:c9:83:30:51:a6:55:7e:ed:f2:81:1e:88:c8:d2:f2: 71:3a:03:ea:d7:18:81:b8:06:d7:87:59:65:79:8a:dd:0b:b4: 2b:a4:34:de:db:4f:46:0e:b3:a1:b0:33:77:a4:ef:45:b3:33: 6c:3c:cb:89:82:b3:2c:d8:33:7c:1f:f9:3a:b9:be:89:e0:f6: ad:8f:d2:ae:12:25:6d:ad:9c:94:3c:6c:fb:bb:1b:2e:1c:16: f3:cc:e3:7a:94:2a:22:56:88:d8:c0:da:c2:47:14:02:0f:9a: dd:a5:d5:0e:d7:ae:8c:a1:47:29:fa:92:11:7d:aa:6d:43:1d: a2:69:e0:10:1c:e8:e8:52:99:8b:9b:fb:55:0f:84:eb:2c:d7: 9f:51:e0:e6:87:7c:b4:b6:c2:3c:50:11:3d:d4:80:e7:17:53: f3:b0:64:4e:76:b1:d0:32:09:f7:e4:d5:d7:f5:71:99:48:b2: ef:2a:94:82 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUakk3pSzYSG8JQil7RI7sLK/Xhj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNTA4MjIxNjIyMzJaFw0yNTA4MjMyMDEyMzJaMDMxMTAvBgNV BAMTKEUwQUE1OTYzQjU1NTdCMjZGMjQyQjc3Mzc0OTkzM0NEMjdGQkZDMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMezCz0dUglhk32+WMNoHoxbqB YroYNFLtb4MScB1wa2svxXhw7xgVahUXVFxkYezSnbq440kB8N+bHMVoEpQoJ+4y RdNv1MWHxl/dDPdGii9UdXjkr3A6F2mQ4I9+HADdMJuz8CUmp84ek8yhrn1YGliu oc4hJ21tgNbPXKTGYx8XeK16BxBvUl/IfgTywfTQmuFolHJQsUEiVt1p4tslvw4E EEASX5HwYXvZoUUi7kx1M4hYZOaGxVGUOQrSQQBl4Fz545G5zDJSGpEVMFdrcpBn KpZj3CJDAR9Yvc7yIDSZayDk48fHpSJUW4QNHRw8g4juyaUEX4mAkpbEASutAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4KpZY7VVeybyQrdzdJkzzSf7/BYwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjK5KwjyEz2zlQUGrKBo mqbYNzi5U8b8mEdBMY1+ArNy7z8J2ybDQq/5g0ox8r5gJXI8/9IkrURD6xivxZVZ QQwsrgzrE9iR3wWbyYMwUaZVfu3ygR6IyNLycToD6tcYgbgG14dZZXmK3Qu0K6Q0 3ttPRg6zobAzd6TvRbMzbDzLiYKzLNgzfB/5Orm+ieD2rY/SrhIlba2clDxs+7sb LhwW88zjepQqIlaI2MDawkcUAg+a3aXVDteujKFHKfqSEX2qbUMdomngEBzo6FKZ i5v7VQ+E6yzXn1Hg5od8tLbCPFARPdSA5xdT87BkTnax0DIJ9+TV1/VxmUiy7yqU gg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:18:27 2025 by rpki-client