$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: HUKE+/iAyV8Weqx+QwsZaTaCM+z2ZrEvoeWjbozJQQg= Subject key identifier: 67:00:6C:D8:D3:33:EE:44:3C:A3:30:A8:E8:7E:2C:97:B4:C7:AF:44 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 47BEB14AC1384B126C2883B30CD091CFFE2A072B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 88 Signing time: Sat 28 Jun 2025 14:59:10 +0000 Manifest this update: Sat 28 Jun 2025 14:54:10 +0000 Manifest next update: Sun 29 Jun 2025 17:09:10 +0000 Files and hashes: 1: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: MbX2Jo3+qNy9yJ51qumhhpSA5fjjpKXnL9+Ixdd7q/M=) 2: 3139342e3132342e3233342e302f32342d3234203d3e20393936.roa (hash: ZoxbCHQMtNZPfbUxrxLpOcXkuKUfw+Blft69mSm2oZk=) 3: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: hZUNrJfyUHgUntGAqdSVlBaE4wglKTi9y0zmmly1bMY=) 4: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: E+WPtm+HS9AVsakqcLrBjACoAm/NbChhrd4PG4s+X5o=) 5: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: 0XA7loK9zcLZ4LH8gJRLIhKhFochpbrC40dXD0XEE/8=) 6: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: Bvg0bczZRvr0hNeXj13n0Q8N1O34FXLeiihKmXvd96c=) 7: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: qgpa17rXBGEZyX0zTURKp2TS7HA9WA0LAdj3r9yq+jg=) 8: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: sUFXVk5mJuzGXi+txvF0jHfWX/7COhdmW+wdhnGLLbA=) 9: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: 5oruaH9nFfU4wtjgOpPgFv2si1VAJhwvCTtGNhwYKxk=) 10: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: Wt7cVymDfWBwMzR8hqsJLmmyo1G55vHli1MG8ova8P4=) 11: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: yq+hWHhfyocRCOJbnYGyzdHlkfHxXD4gPxuVgEPCc0g=) 12: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: bLMKUTu2LDh7TH4JEFo2TwGKCx3JiqqNy6hRd14etMM=) 13: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: lmVh0tkdqz2ZaktlfIJzzJLuyL6wItEcUEPI+PVNqdo=) 14: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: ad3eCylfdMfYW/Id31ooquQQLvZwumdWGj+lszfaEsA=) 15: 3139342e3132342e3233342e302f32342d3234203d3e203534333339.roa (hash: wdUsagydvVBIUao6PJHWRop4oPMEKXc9pJyNsG4SW9o=) 16: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: 4eRihxuyWrFmyrmWNHP+q80BiQuGj/+XTMKJH0kDcVI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 17:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:be:b1:4a:c1:38:4b:12:6c:28:83:b3:0c:d0:91:cf:fe:2a:07:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Jun 28 14:54:10 2025 GMT Not After : Jun 29 17:09:10 2025 GMT Subject: CN=67006CD8D333EE443CA330A8E87E2C97B4C7AF44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:28:a0:b7:ed:4c:48:3c:96:1e:0d:09:cf:35: 45:32:4e:c9:cc:ff:25:bd:df:41:2a:9d:19:82:2e: 6a:63:92:5e:2a:ca:d9:84:2b:92:79:79:b6:f4:3e: dc:e7:0f:51:eb:98:e7:47:fb:61:59:54:55:9a:14: e1:f1:2c:ea:3e:4d:19:d9:63:38:87:ba:ce:e8:83: ed:9a:19:d7:07:88:32:72:ee:57:53:ac:34:23:9e: 7e:11:8a:b2:dc:6d:b3:de:a2:ff:e0:e4:64:e9:43: a9:73:68:99:71:88:0b:d4:f5:38:96:b2:58:25:5c: d1:88:64:c6:5a:76:fa:35:b1:9a:7a:b2:c3:bc:a1: 9b:29:ad:9c:44:a1:91:82:4d:64:f0:91:b7:54:b8: dd:3c:b0:1b:a1:cd:dd:5c:98:25:4c:32:87:df:bb: d3:b2:21:5f:c7:ca:70:79:27:c4:4b:75:49:da:f3: 94:69:bf:b9:31:0a:9f:10:ed:f6:54:bc:c1:10:0a: 7c:8b:26:27:f0:3e:d6:bc:09:7e:b1:69:83:2c:78: 04:71:ed:79:e4:09:e6:02:d8:b4:2b:e8:bb:a6:d9: 85:22:74:71:a4:41:80:25:9d:31:f4:89:85:8c:c4: 3e:a5:00:bd:17:8c:0b:d1:48:e4:ed:b0:b3:80:37: 37:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:00:6C:D8:D3:33:EE:44:3C:A3:30:A8:E8:7E:2C:97:B4:C7:AF:44 X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:0a:cb:cd:e4:e9:e7:19:28:97:10:20:06:a6:4c:ea:dd:6d: 10:a6:1e:c8:16:7f:a3:1d:08:d8:0c:c6:36:29:94:44:ac:75: 2d:2b:fe:87:65:9b:c9:20:65:2f:b6:3d:47:9d:6a:c5:92:92: 4d:3e:bb:90:d9:b1:aa:72:98:b1:ea:df:aa:7b:3d:48:87:1f: 06:1f:c5:b8:83:1f:a6:10:e3:a3:de:d8:ef:65:ac:93:1c:85: 52:48:28:0c:26:57:a9:9c:07:40:be:e4:41:bb:95:35:ae:46: e7:0d:3e:4e:15:ba:73:b5:60:37:06:3b:f5:0e:5c:33:34:fc: c9:38:ba:2d:b2:6d:34:52:55:85:44:ff:98:59:a2:7b:fc:ee: a9:25:74:9c:b8:4c:b8:f8:e2:02:7c:5f:b4:f6:19:dd:db:f3: 98:b6:0c:c7:b7:c0:2e:b0:df:c7:a6:d0:23:b2:90:cb:fd:be: ec:99:fb:27:16:aa:99:e8:b9:39:da:d8:2d:43:02:c3:0f:77: cf:43:3a:5b:ac:19:89:fa:fb:f9:c0:61:65:8b:87:46:4b:31: 1b:de:27:06:0d:e6:36:e5:dc:9f:2a:b6:d1:62:71:91:c8:f3: 37:16:24:a7:c5:24:b1:47:db:72:92:c2:cb:92:cb:75:fe:47: 2c:7b:2d:39 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUR76xSsE4SxJsKIOzDNCRz/4qByswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNTA2MjgxNDU0MTBaFw0yNTA2MjkxNzA5MTBaMDMxMTAvBgNV BAMTKDY3MDA2Q0Q4RDMzM0VFNDQzQ0EzMzBBOEU4N0UyQzk3QjRDN0FGNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPKKC37UxIPJYeDQnPNUUyTsnM /yW930EqnRmCLmpjkl4qytmEK5J5ebb0PtznD1HrmOdH+2FZVFWaFOHxLOo+TRnZ YziHus7og+2aGdcHiDJy7ldTrDQjnn4RirLcbbPeov/g5GTpQ6lzaJlxiAvU9TiW slglXNGIZMZadvo1sZp6ssO8oZsprZxEoZGCTWTwkbdUuN08sBuhzd1cmCVMMoff u9OyIV/HynB5J8RLdUna85Rpv7kxCp8Q7fZUvMEQCnyLJifwPta8CX6xaYMseARx 7XnkCeYC2LQr6Lum2YUidHGkQYAlnTH0iYWMxD6lAL0XjAvRSOTtsLOANzcBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUZwBs2NMz7kQ8ozCo6H4sl7THr0QwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQrLzeTp5xkolxAgBqZM 6t1tEKYeyBZ/ox0I2AzGNimURKx1LSv+h2WbySBlL7Y9R51qxZKSTT67kNmxqnKY serfqns9SIcfBh/FuIMfphDjo97Y72WskxyFUkgoDCZXqZwHQL7kQbuVNa5G5w0+ ThW6c7VgNwY79Q5cMzT8yTi6LbJtNFJVhUT/mFmie/zuqSV0nLhMuPjiAnxftPYZ 3dvzmLYMx7fALrDfx6bQI7KQy/2+7Jn7Jxaqmei5OdrYLUMCww93z0M6W6wZifr7 +cBhZYuHRksxG94nBg3mNuXcnyq20WJxkcjzNxYkp8UksUfbcpLCy5LLdf5HLHst OQ== -----END CERTIFICATE-----Generated at Sun Jun 29 06:47:21 2025 by rpki-client