$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft File: E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft (raw, json) Hash identifier: AleqKDcMvSvi1qIyJiskBIB+xX8sBALcHQL0+P+dF5o= Subject key identifier: C4:2E:E8:ED:F4:C2:C9:FB:48:11:E3:47:FE:11:05:2B:06:F7:2E:95 Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Certificate serial: 012E86E3910B39996DF3AFE1DB505DF2B752633B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft Manifest number: 42 Signing time: Sat 28 Jun 2025 09:34:09 +0000 Manifest this update: Sat 28 Jun 2025 09:29:09 +0000 Manifest next update: Sun 29 Jun 2025 12:43:09 +0000 Files and hashes: 1: 3139332e31372e39352e302f32342d3234203d3e2039333034.roa (hash: 9Guine2JQ0PR4yaj3jvnIIIaTUv4lkdQwALSGSbr1I8=) 2: 3138352e3136322e3137382e302f32342d3234203d3e2032393134.roa (hash: s1bbd6LyvYQrZ11FtU3Xa/oNq7QSAV2j6DcxJrrwcV0=) 3: 3138352e3132332e3135392e302f32342d3234203d3e20333936333536.roa (hash: 8ymSE6/IZ4mS3/jdg4jdCuqPIOO7MFcCnM1/lcLJutM=) 4: 3138352e3132332e3135382e302f32342d3234203d3e203239383032.roa (hash: TLiGnJOFD2b+z4uS2pKNa+Gc2aYGJ4ZFIaexiybn7wo=) 5: 34352e3134392e3135332e302f32342d3234203d3e203133333335.roa (hash: oW4WynaArlYMwXoVGq9L68dOfSrJj8wnnWqrszCEjBM=) 6: 34352e3134392e3135322e302f32342d3234203d3e203235313630.roa (hash: F5qAcWfgptgKaaDsmY0iSSOR+nBZv9RYAI/0kq8SYl8=) 7: 3139342e39392e3135362e302f32342d3234203d3e203232343237.roa (hash: rIB6LZlyDY4ccd8aiBOUspQRAkgz2Qkx5QliZapGW3w=) 8: 34352e3134392e3135342e302f32342d3234203d3e203138383131.roa (hash: 4uff0q80448WswwoPJbFY3idRfw+pxcMp30vGLvVGdk=) 9: 39312e3233312e3132362e302f32342d3234203d3e2035363530.roa (hash: it6kdqtvQIR1fmnyxGg95/2ozlg9ybLYZncNwT8sS4M=) 10: 39312e3233322e39392e302f32342d3234203d3e20313937353337.roa (hash: G+mgzv7tRhUfmSaRumVwyhbJ8nNvEA0s859L61Ejv18=) 11: 38392e3135302e34392e302f32342d3234203d3e2039333034.roa (hash: q57iXdWw+7j5OH0xE9rwzduA1TqFwwM2jVhXvaojFW4=) 12: 3138382e39342e3139312e302f32342d3234203d3e2039333034.roa (hash: kHLj0CCSRey0XdhxSgcTxmLdHvnBUVZqQawwENhkgrs=) 13: 3138352e3132332e3135362e302f32342d3234203d3e203236303432.roa (hash: ynUXE+LDYJH/GYuDiJI+HLAJ3jTXbGgrvxOxfk3f5R0=) 14: 3138352e3136322e3137392e302f32342d3234203d3e203132383734.roa (hash: Oev3T5PHjGnxWqjgwbUH88tHYEWPx4hW7vlkYnxUh4c=) 15: 34352e3134392e3135332e302f32342d3234203d3e20323635393139.roa (hash: kgIiY2hKU4E4tRDz3OnYpx84hUJKrY7sZF8oMbsebok=) 16: 3138352e3136322e3137362e302f32342d3234203d3e20323132323338.roa (hash: KKgUX7UrPK07V45d9yIwm+AF5zJ77+qIYcXvaThx0hI=) 17: 3138352e3233342e3130302e302f32342d3234203d3e203335363631.roa (hash: 7IoW8V7sYCxYnK3GpV+L+iywqaWF/MSER2M0Aaj+ktk=) 18: 3138352e33332e32362e302f32342d3234203d3e20323132363039.roa (hash: +Uou40uKN3P8LL5yuWZGR768rlaEfbKR2VYxApN71AA=) 19: 34352e3134392e3135342e302f32342d3234203d3e2039333034.roa (hash: 4wkeXpaub5nHarEFj5V5yRbPz3/jSF6R+paLLX1QL+0=) 20: 3138352e3136322e3137372e302f32342d3234203d3e203634323637.roa (hash: /1m1oguvqlFAZeE/pimTTtaJVN2H8its6YXMEA9yyH0=) 21: E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl (hash: kLLLsg0avKMQM8p8j0mMAejYaT20/J66uJEaJjQ+lAk=) 22: 3138352e3132332e3135372e302f32342d3234203d3e203539343332.roa (hash: gIsOY/Rt5itSjR6UBfQr0akoBho0OQVg1aF/BeCGDiQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 12:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:2e:86:e3:91:0b:39:99:6d:f3:af:e1:db:50:5d:f2:b7:52:63:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Validity Not Before: Jun 28 09:29:09 2025 GMT Not After : Jun 29 12:43:09 2025 GMT Subject: CN=C42EE8EDF4C2C9FB4811E347FE11052B06F72E95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:00:e1:56:bb:2c:1d:07:0f:85:2c:f6:cc: 85:78:ae:34:f5:bd:95:a0:58:d2:b5:2b:66:1f:ce: a1:7d:c8:e9:13:80:3c:1d:71:75:8b:7c:c5:40:91: b6:4a:88:31:4b:b0:c3:ad:0e:76:51:e5:ac:3e:04: 7f:09:9d:17:c0:ed:63:cf:3b:3f:0a:c6:4c:90:cb: 95:43:e2:01:17:7a:45:67:de:3a:73:9a:0d:ad:d3: 5f:4a:73:8d:5d:ef:8d:c9:c8:99:38:49:63:e4:1a: 51:43:36:34:bc:84:14:65:af:1b:03:0d:2c:44:34: ef:ba:5c:e7:4c:52:c7:d0:36:5a:bf:db:19:66:13: 19:82:df:de:b5:a8:ad:e4:25:3d:7c:2f:77:0f:3e: fa:1b:75:f5:33:3a:a1:c3:97:ad:91:38:af:67:61: 28:08:a2:64:56:cc:1d:65:41:6f:2d:46:12:4c:54: 6e:d0:93:6e:3d:ab:ee:7e:29:3f:b6:b4:e3:cd:6f: 18:ac:9e:78:aa:00:00:27:64:30:35:40:79:8b:f3: e5:fd:04:c1:b1:73:a8:2c:cb:5f:c6:04:25:c6:3c: cb:68:f4:48:f1:74:14:25:e6:32:7e:3e:8a:63:7b: a7:0d:14:19:1a:9d:60:8b:ff:e2:15:5b:6f:bc:3d: 0f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2E:E8:ED:F4:C2:C9:FB:48:11:E3:47:FE:11:05:2B:06:F7:2E:95 X509v3 Authority Key Identifier: keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:24:63:9d:9f:3a:88:98:8f:a4:02:d3:ce:8a:57:40:8b:d6: 39:22:7a:6f:c2:d2:4a:a2:fe:64:3c:64:1f:f2:ae:aa:1c:7d: 87:f4:62:38:99:fe:f4:d4:47:b3:bb:c9:8f:da:90:58:98:26: b2:b6:a6:22:3d:ef:1e:62:ed:09:b9:ae:48:71:fa:41:db:e8: 9b:5a:f9:00:90:6b:4b:56:1a:9b:bc:92:e8:56:40:03:a2:d2: 6a:b7:58:a8:58:02:42:33:1a:f2:cb:1f:e2:e2:0d:63:f1:b3: b0:b9:5e:0b:ec:45:11:b7:22:0b:aa:1b:32:5d:7f:c5:c8:80: c5:ec:5a:87:35:cc:91:87:ce:09:6f:ca:a2:60:fc:13:08:f7: 87:8c:0d:95:a8:05:27:80:19:e2:a2:b1:08:18:34:fd:d7:1b: 47:35:16:2b:53:09:f9:97:3a:07:86:cb:4c:a5:b6:00:bb:c8: c1:67:f8:d6:60:6e:c7:73:69:0d:20:4d:13:4c:50:68:31:a5: 25:7b:88:0d:fb:5a:d0:35:9b:ad:68:d3:aa:68:b0:fc:bb:b6: dc:bc:a6:81:b7:c4:36:c6:86:1a:ff:ab:40:6d:f9:73:c8:9f: 76:f7:cf:23:b1:2c:fe:fb:c4:a7:cd:65:fb:e1:3a:33:35:f6: f6:c3:97:ba -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAS6G45ELOZlt86/h21Bd8rdSYzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTFmMzUxMmY1MWRjNDJiYjllYjEyYWJjMGJiNTI5NjY4 YjJlZGVlNDAeFw0yNTA2MjgwOTI5MDlaFw0yNTA2MjkxMjQzMDlaMDMxMTAvBgNV BAMTKEM0MkVFOEVERjRDMkM5RkI0ODExRTM0N0ZFMTEwNTJCMDZGNzJFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB6wDhVrssHQcPhSz2zIV4rjT1 vZWgWNK1K2YfzqF9yOkTgDwdcXWLfMVAkbZKiDFLsMOtDnZR5aw+BH8JnRfA7WPP Oz8KxkyQy5VD4gEXekVn3jpzmg2t019Kc41d743JyJk4SWPkGlFDNjS8hBRlrxsD DSxENO+6XOdMUsfQNlq/2xlmExmC3961qK3kJT18L3cPPvobdfUzOqHDl62ROK9n YSgIomRWzB1lQW8tRhJMVG7Qk249q+5+KT+2tOPNbxisnniqAAAnZDA1QHmL8+X9 BMGxc6gsy1/GBCXGPMto9EjxdBQl5jJ+Popje6cNFBkanWCL/+IVW2+8PQ95AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUxC7o7fTCyftIEeNH/hEFKwb3LpUwHwYDVR0j BBgwFoAU4fNRL1HcQruesSq8C7UpZosu3uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgtZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3 OWE3LzAvRTFGMzUxMkY1MURDNDJCQjlFQjEyQUJDMEJCNTI5NjY4QjJFREVFNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmTlJMMUhjUXJ1ZXNTcThDN1VwWm9z dTN1US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lM2NkYzY0OC1k MjAzLTQ2MmEtYmQwZi1lYzFiNjBkODc5YTcvMC9FMUYzNTEyRjUxREM0MkJCOUVC MTJBQkMwQkI1Mjk2NjhCMkVERUU0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyRjnZ86iJiPpALTzopX QIvWOSJ6b8LSSqL+ZDxkH/Kuqhx9h/RiOJn+9NRHs7vJj9qQWJgmsramIj3vHmLt CbmuSHH6Qdvom1r5AJBrS1Yam7yS6FZAA6LSardYqFgCQjMa8ssf4uINY/GzsLle C+xFEbciC6obMl1/xciAxexahzXMkYfOCW/KomD8Ewj3h4wNlagFJ4AZ4qKxCBg0 /dcbRzUWK1MJ+Zc6B4bLTKW2ALvIwWf41mBux3NpDSBNE0xQaDGlJXuIDfta0DWb rWjTqmiw/Lu23LymgbfENsaGGv+rQG35c8ifdvfPI7Es/vvEp81l++E6MzX29sOX ug== -----END CERTIFICATE-----Generated at Sat Jun 28 20:28:37 2025 by rpki-client