$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: tUPhxarHiGQfOXr1DBvUAaLyQzdg4VW1HHLM2KtmnUg= Subject key identifier: 0C:86:05:79:0C:89:45:A7:B6:E9:82:01:0A:7F:6E:9A:4B:33:AD:11 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 1DD8AD6067E85FDB011555619901B57FFE4E136B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 056A Signing time: Sat 23 Aug 2025 02:22:33 +0000 Manifest this update: Sat 23 Aug 2025 02:17:33 +0000 Manifest next update: Sun 24 Aug 2025 04:24:33 +0000 Files and hashes: 1: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: 7MRl2ndToXr+/Nwpi0fWFQSP/EKXsP73R/4IMWd5dgM=) 2: 3138352e3234342e39352e302f32342d3234203d3e203230343733.roa (hash: wcPx+O7KmTHA1Z17UF9VIIdo6IS06Ij+d7NLeipHdoU=) 3: 3138352e3232392e3230302e302f32342d3234203d3e2039333034.roa (hash: 9BQlkuwOuPyXvuvnOIpRrrItcJ412PckV00AOrBJhqk=) 4: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: aTFuiZRKSKlOcP1bFw/QEJGr9kwsAqFvqfR62oNQfMc=) 5: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: mH/CiZmwU0yIfVsdjhTMAG/KAtonINfckXbmsVpawiw=) 6: 33362e3235352e39322e302f32332d3234203d3e203230333236.roa (hash: uAr910mpCFzZrOxxImyBVxZ5bzjvqrL8T8981qvKdos=) 7: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: fyEm36B55a1pd4HLESzxtTjALoxzu4leetK2j/pzqHY=) 8: 3138352e3232392e3230332e302f32342d3234203d3e20323036373335.roa (hash: +12elja/TRgK8YWG00PTJRaGaFKqfWK9R0yIngktuC8=) 9: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: +zgqg7oCfaFMqowtNn81ipaj3irDs5wSCtc6B41Oes8=) 10: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: KhYwWjM/5tZMAc1Ys2Qi/Z3IxKzkYaHG79mNsaA679A=) 11: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: 2mJFb3j98iS3WwOyYDzT/44zu56P1Mt1+w22nAIK9Eo=) 12: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: W9NdT6aoX4s9PghUA97T0GAxnEF0Q0u3VMj+QX70R5Y=) 13: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=) 14: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: RdOuxQjMUqkQryMcrXonWYYeJva5RY8rohAdG2ITJdw=) 15: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=) 16: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: O475B5YNr+mk4vbByMFVmoqbRTenx4kmx66C3HIfdsg=) 17: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=) 18: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: Thm2HRxVPKMQMBzjJ/cae5ynvM5C/lzOY57kG8E3zlo=) 19: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: L+rO+MXrQK3tGBKkhTiQd3Pp/oT0n0nJ8NfAxPcZ/Ik=) 20: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=) 21: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: ezbmX/yRe+yRvkLs/8FFZoupwCiBI67aZ+0JqkrMl4Q=) 22: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: /OGL5Xocpa/mA4GEutGuQoiWc4p3DBj9VM0kpmdQZxo=) 23: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: NTiGjgrJWtlD9Roa9FRQtbjOAAcPR35U4Ayfj8SpKuI=) 24: 33362e3235352e39322e302f32332d3234203d3e203139333138.roa (hash: FthEwpOIKT5rKWCqEXY9gMB5simU3azPQORqXvTeqVo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d8:ad:60:67:e8:5f:db:01:15:55:61:99:01:b5:7f:fe:4e:13:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Aug 23 02:17:33 2025 GMT Not After : Aug 24 04:24:33 2025 GMT Subject: CN=0C8605790C8945A7B6E982010A7F6E9A4B33AD11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:05:0b:93:02:b6:43:ef:80:5c:66:4b:32:e3: 5b:1c:8c:68:72:e6:6d:12:25:de:dd:b4:17:78:78: 56:7b:73:cc:67:5d:fa:eb:03:b6:bd:9e:d8:92:a3: 00:70:3e:79:1f:76:22:44:64:6e:62:1a:97:38:c2: 96:74:2c:00:b0:87:ed:9d:ff:96:67:60:45:ef:d6: 6d:01:b8:ef:92:d1:d2:7d:0d:44:b6:62:db:b4:a2: b3:8b:1e:7b:cd:43:b3:d9:88:9b:dc:fc:5d:a0:d3: f2:9e:ba:d0:db:b7:11:0f:b4:ee:6f:71:21:1d:b9: df:02:0c:0b:c5:a8:36:d5:11:c0:dc:f6:3d:12:26: f6:2d:8f:0d:0a:7c:8e:66:f5:01:b3:a4:65:0c:8d: 8a:ac:03:e8:f3:e7:5d:dd:74:13:0d:0f:d9:59:39: 0c:7d:ed:77:f0:34:aa:97:ff:1f:ad:62:aa:dc:25: 29:2a:e7:04:23:38:f9:11:36:81:7f:b3:e9:29:c0: 7b:cd:f6:8f:49:0c:08:12:21:51:53:c7:d4:cc:57: e2:c3:e8:be:30:13:5a:65:30:b6:a3:da:16:a6:9f: 8a:9b:09:1a:42:3d:01:5b:5d:b5:6d:b9:4c:fe:d6: 39:78:dd:bb:7f:62:4b:62:70:97:c6:eb:b4:02:54: 3e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:86:05:79:0C:89:45:A7:B6:E9:82:01:0A:7F:6E:9A:4B:33:AD:11 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:12:88:cb:e5:0d:e9:16:fd:ac:c7:9a:fb:7a:15:72:57:28: 69:7b:1b:f7:f4:aa:b4:58:a9:bd:60:61:f7:1c:e5:f2:6c:f7: 32:44:30:59:37:f9:39:0a:98:71:f7:e6:13:e0:90:05:23:b3: de:de:0b:18:8d:41:fd:d8:28:da:52:d2:fe:a6:87:56:92:bc: 69:a0:90:da:ef:f6:47:f9:a5:8b:f2:25:51:f6:f6:39:55:e9: 3c:16:09:34:5b:e2:9f:66:e8:c7:60:6b:7d:17:33:e1:ba:ee: a9:e6:59:9c:4e:8d:d5:61:7d:8d:d8:c3:66:90:30:1b:32:bf: a1:00:fd:11:29:2e:32:0f:44:c0:bf:5b:60:0a:d7:34:2c:9a: 26:a3:25:81:a3:2a:dd:54:2b:88:36:19:58:c0:00:ba:c9:9d: 89:bb:ea:48:62:17:f4:98:32:7c:c2:05:30:ea:a7:d1:42:f0: 67:c5:16:df:10:e6:43:7f:d8:c5:83:69:54:71:a0:73:ea:e1: 1c:7a:c9:e2:9e:03:23:96:8f:b0:cb:00:36:61:c2:1a:e6:b7: dc:b5:a0:a0:fc:19:23:6e:fc:37:8a:00:f4:8d:df:f3:6a:52: 24:eb:da:e1:a5:a1:4c:52:e1:63:c2:48:1b:6b:0b:e7:85:02: c8:de:2d:d3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHditYGfoX9sBFVVhmQG1f/5OE2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNTA4MjMwMjE3MzNaFw0yNTA4MjQwNDI0MzNaMDMxMTAvBgNV BAMTKDBDODYwNTc5MEM4OTQ1QTdCNkU5ODIwMTBBN0Y2RTlBNEIzM0FEMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFBQuTArZD74BcZksy41scjGhy 5m0SJd7dtBd4eFZ7c8xnXfrrA7a9ntiSowBwPnkfdiJEZG5iGpc4wpZ0LACwh+2d /5ZnYEXv1m0BuO+S0dJ9DUS2Ytu0orOLHnvNQ7PZiJvc/F2g0/KeutDbtxEPtO5v cSEdud8CDAvFqDbVEcDc9j0SJvYtjw0KfI5m9QGzpGUMjYqsA+jz513ddBMND9lZ OQx97XfwNKqX/x+tYqrcJSkq5wQjOPkRNoF/s+kpwHvN9o9JDAgSIVFTx9TMV+LD 6L4wE1plMLaj2hamn4qbCRpCPQFbXbVtuUz+1jl43bt/YkticJfG67QCVD5pAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDIYFeQyJRae26YIBCn9umkszrREwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRKIy+UN6Rb9rMea+3oV clcoaXsb9/SqtFipvWBh9xzl8mz3MkQwWTf5OQqYcffmE+CQBSOz3t4LGI1B/dgo 2lLS/qaHVpK8aaCQ2u/2R/mli/IlUfb2OVXpPBYJNFvin2box2BrfRcz4bruqeZZ nE6N1WF9jdjDZpAwGzK/oQD9ESkuMg9EwL9bYArXNCyaJqMlgaMq3VQriDYZWMAA usmdibvqSGIX9JgyfMIFMOqn0ULwZ8UW3xDmQ3/YxYNpVHGgc+rhHHrJ4p4DI5aP sMsANmHCGua33LWgoPwZI278N4oA9I3f82pSJOva4aWhTFLhY8JIG2sL54UCyN4t 0w== -----END CERTIFICATE-----Generated at Sat Aug 23 09:46:52 2025 by rpki-client