$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: 1rOM5qXiGcT8V3wCUfvQHG+5S5wIyzKjh/yj9dPphXs= Subject key identifier: E4:5E:E6:13:5E:04:3C:7B:F4:96:EC:EC:73:D6:AF:40:EB:97:E0:AB Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 207C018426940C874244AC2274AED4FDBA28656E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 051A Signing time: Sat 28 Jun 2025 07:34:09 +0000 Manifest this update: Sat 28 Jun 2025 07:29:09 +0000 Manifest next update: Sun 29 Jun 2025 09:55:09 +0000 Files and hashes: 1: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=) 2: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: L+rO+MXrQK3tGBKkhTiQd3Pp/oT0n0nJ8NfAxPcZ/Ik=) 3: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: /OGL5Xocpa/mA4GEutGuQoiWc4p3DBj9VM0kpmdQZxo=) 4: 3138352e3232392e3230332e302f32342d3234203d3e20323036373335.roa (hash: +12elja/TRgK8YWG00PTJRaGaFKqfWK9R0yIngktuC8=) 5: 33362e3235352e39322e302f32332d3234203d3e203230343733.roa (hash: n+NW7CIboSad7G7qrJiCYcaG5y4V5KnwqXZRxtAjPBQ=) 6: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: aTFuiZRKSKlOcP1bFw/QEJGr9kwsAqFvqfR62oNQfMc=) 7: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: W9NdT6aoX4s9PghUA97T0GAxnEF0Q0u3VMj+QX70R5Y=) 8: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: +zgqg7oCfaFMqowtNn81ipaj3irDs5wSCtc6B41Oes8=) 9: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: fyEm36B55a1pd4HLESzxtTjALoxzu4leetK2j/pzqHY=) 10: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: ezbmX/yRe+yRvkLs/8FFZoupwCiBI67aZ+0JqkrMl4Q=) 11: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: NTiGjgrJWtlD9Roa9FRQtbjOAAcPR35U4Ayfj8SpKuI=) 12: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: mH/CiZmwU0yIfVsdjhTMAG/KAtonINfckXbmsVpawiw=) 13: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=) 14: 3138352e3232392e3230302e302f32342d3234203d3e203139343337.roa (hash: EP6RD+ZuD8/aeGRdu5DeM51xsrxE2M7oAfAneTY5Btg=) 15: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: RdOuxQjMUqkQryMcrXonWYYeJva5RY8rohAdG2ITJdw=) 16: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: KhYwWjM/5tZMAc1Ys2Qi/Z3IxKzkYaHG79mNsaA679A=) 17: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: O475B5YNr+mk4vbByMFVmoqbRTenx4kmx66C3HIfdsg=) 18: 33362e3235352e39342e302f32332d3233203d3e203632323430.roa (hash: cEllpKs9D7QXOnlcaRDylPTaKGxvLoUwJx/hEnrKHPU=) 19: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: 4ULnOlcNCEOqHO3XRVrvOWouUEU2jbWrA0PnBan2Op8=) 20: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: GFt7MPBQXAoRbBAZf/a6ypM3reYPwEU6C1kyEqDInRE=) 21: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: 7MRl2ndToXr+/Nwpi0fWFQSP/EKXsP73R/4IMWd5dgM=) 22: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: 2mJFb3j98iS3WwOyYDzT/44zu56P1Mt1+w22nAIK9Eo=) 23: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 09:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:7c:01:84:26:94:0c:87:42:44:ac:22:74:ae:d4:fd:ba:28:65:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Jun 28 07:29:09 2025 GMT Not After : Jun 29 09:55:09 2025 GMT Subject: CN=E45EE6135E043C7BF496ECEC73D6AF40EB97E0AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:78:46:46:f1:06:7c:21:da:f2:0c:c4:c6:fe: a0:d4:bf:3d:06:40:00:94:70:39:91:fb:da:bd:99: 49:25:85:e4:72:c0:f2:b9:ab:60:eb:56:bb:03:d3: e2:1f:3b:5d:60:a0:f9:65:f6:a6:5d:57:cf:e8:74: 68:f5:97:f5:72:d3:47:48:0b:9f:c6:ad:6a:08:43: 3e:e7:e4:dd:9e:f1:a2:0e:ab:2f:cc:c9:42:3d:8a: 54:d5:26:94:55:5e:eb:80:66:cd:52:2f:2f:2e:8e: 2f:5c:7e:ca:4f:24:27:29:7e:90:e9:45:fd:49:c0: 44:ed:7b:38:ae:ec:20:ab:31:22:8e:66:91:33:83: d0:91:c7:08:92:c8:ee:bc:0b:74:16:e7:db:2c:96: d4:ae:c8:19:50:75:d4:13:cf:44:fb:a8:06:37:ff: 9f:c5:77:7b:c2:75:dc:9b:79:5a:50:0c:c3:c2:e6: 33:35:4e:02:c3:2c:8d:3b:d8:64:55:01:7c:37:5e: 70:16:2b:f5:31:34:46:49:f8:c3:1f:2c:f1:ad:2c: e4:7a:d4:0f:d5:a8:41:e0:e8:c5:f2:5a:c7:c0:3d: 62:54:48:79:6b:b8:87:93:04:05:46:c3:79:7b:3b: 25:c9:49:73:fb:9d:3a:1c:27:68:fb:1c:8c:b4:23: d5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5E:E6:13:5E:04:3C:7B:F4:96:EC:EC:73:D6:AF:40:EB:97:E0:AB X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:4c:ef:26:d7:54:5b:1a:87:e3:14:64:37:84:5b:9f:fc:01: 16:0c:5f:1c:19:a3:ac:69:ed:df:85:f5:01:9f:13:76:60:f6: e3:e8:b9:ef:86:44:49:33:1d:3f:c9:2d:4f:54:0b:f8:df:f5: e4:e5:0e:7a:41:e2:0e:62:f1:32:a0:4a:e5:8d:1c:81:81:8e: 07:50:0a:38:8a:01:b0:f4:5d:9a:db:c4:41:67:61:1a:4c:4b: 60:1b:69:df:39:16:8a:0a:7b:b5:30:6d:9b:c6:a0:f8:84:9d: 53:d1:01:7d:4c:78:c7:22:6f:40:57:f3:57:86:28:06:5d:fe: ac:49:08:c6:85:0c:34:3b:d6:e8:54:0b:95:41:37:78:ad:c7: 37:f3:39:15:a6:cd:8a:c2:61:b8:6a:2c:da:d0:bb:63:d8:c7: 74:59:ee:56:7f:41:56:d9:5d:9c:57:eb:0e:91:41:9c:61:8b: 51:59:8e:d6:fd:7d:96:24:86:32:9c:09:46:54:ea:63:8a:4c: 3d:3a:36:13:a9:3c:06:28:ac:c5:ed:2f:af:ab:6e:db:c7:e4: e9:85:78:ef:bc:74:f3:33:36:ff:dc:4c:fa:a2:76:33:b6:a7: 02:af:04:cf:e6:fe:21:e0:31:d4:74:cb:4e:58:8f:09:4b:e6: 45:6b:98:88 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIHwBhCaUDIdCRKwidK7U/booZW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNTA2MjgwNzI5MDlaFw0yNTA2MjkwOTU1MDlaMDMxMTAvBgNV BAMTKEU0NUVFNjEzNUUwNDNDN0JGNDk2RUNFQzczRDZBRjQwRUI5N0UwQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSeEZG8QZ8IdryDMTG/qDUvz0G QACUcDmR+9q9mUklheRywPK5q2DrVrsD0+IfO11goPll9qZdV8/odGj1l/Vy00dI C5/GrWoIQz7n5N2e8aIOqy/MyUI9ilTVJpRVXuuAZs1SLy8uji9cfspPJCcpfpDp Rf1JwETteziu7CCrMSKOZpEzg9CRxwiSyO68C3QW59ssltSuyBlQddQTz0T7qAY3 /5/Fd3vCddybeVpQDMPC5jM1TgLDLI072GRVAXw3XnAWK/UxNEZJ+MMfLPGtLOR6 1A/VqEHg6MXyWsfAPWJUSHlruIeTBAVGw3l7OyXJSXP7nTocJ2j7HIy0I9VnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU5F7mE14EPHv0luzsc9avQOuX4KswHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEzvJtdUWxqH4xRkN4Rb n/wBFgxfHBmjrGnt34X1AZ8TdmD24+i574ZESTMdP8ktT1QL+N/15OUOekHiDmLx MqBK5Y0cgYGOB1AKOIoBsPRdmtvEQWdhGkxLYBtp3zkWigp7tTBtm8ag+ISdU9EB fUx4xyJvQFfzV4YoBl3+rEkIxoUMNDvW6FQLlUE3eK3HN/M5FabNisJhuGos2tC7 Y9jHdFnuVn9BVtldnFfrDpFBnGGLUVmO1v19liSGMpwJRlTqY4pMPTo2E6k8Biis xe0vr6tu28fk6YV477x08zM2/9xM+qJ2M7anAq8Ez+b+IeAx1HTLTliPCUvmRWuY iA== -----END CERTIFICATE-----Generated at Sat Jun 28 19:37:15 2025 by rpki-client