$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json) Hash identifier: MPKaX4c1dnFLA+m7FffkqNCWmL5pDK14OKZPBeqent8= Subject key identifier: 52:F8:5B:12:47:A8:64:A7:5A:98:E1:A8:C8:3E:EF:A3:05:3E:01:2A Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 2C10B34BF5C8D3A35BB3902BA36A292DB3A57DAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft Manifest number: 0131 Signing time: Sat 28 Jun 2025 12:24:10 +0000 Manifest this update: Sat 28 Jun 2025 12:19:10 +0000 Manifest next update: Sun 29 Jun 2025 15:10:10 +0000 Files and hashes: 1: 3130332e34392e3133302e302f32342d3234203d3e20383334.roa (hash: 2kviFL54lDpfPzXEFZx4nMFKp96iC4oZ7nWuGME1pqQ=) 2: 3130332e34392e3132382e302f32332d3234203d3e20383334.roa (hash: cwv6U5HtTbEKzJMeb3nfWtIwqYRG9Jzq6qWtzvszezA=) 3: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: jNzQvK975k0nFSky/OYcsFfueNL1XvYeIp3mtR/7WPY=) 4: 34332e3233302e38342e302f32342d3234203d3e203231383430.roa (hash: 0jlXbJYw2GWQ/DylqYAmM4dC2o3pqpBbNQAmAAMOqvc=) 5: 3130332e34392e3133312e302f32342d3234203d3e20313531313036.roa (hash: /tFw1lzpQWvvpuYCQnIjFSZLwGcls1xoTiwGuGyPuCE=) 6: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: hoZQSGqkvoyh+Fwe28UicpO6RAJD80P7rklT/Di/mQU=) 7: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: 0xztmVkbTUMGsLqMPLhvKR+CZ0FzYBVqxD1VN46FqSM=) 8: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: BqbUmbythNNYP4WqssroNY2sOPvoyuRgXIRAVuIytpA=) 9: 33312e32322e3131302e302f32342d3234203d3e2039333034.roa (hash: 4/DyfQef3JM+QDXadF+flhTmwriSDAeEuVFVt/FGtTg=) 10: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: iK+yx/VtDctRGDFOE/NGNWTyR4u7o2tFGRI6U0bUYZU=) 11: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: yHVodRBAsBlx/8p8lQvX33hmgwPZB9Uj6k/5yqbIyfs=) 12: 33312e32322e3130372e302f32342d3234203d3e20313337353137.roa (hash: zucU5bamNfYRw/esvivyzaXHMAl8N0xQ+Q3coI+3JvA=) 13: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (hash: 4XlIN+3Y2uvivj3jKKbdxnHiR3dRqeJ7/xmTE8uipj8=) 14: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: y9uevaBeLo1M0NZi4w3HJOyvLkMWIaZEJFCi8snsYYY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:10:b3:4b:f5:c8:d3:a3:5b:b3:90:2b:a3:6a:29:2d:b3:a5:7d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Jun 28 12:19:10 2025 GMT Not After : Jun 29 15:10:10 2025 GMT Subject: CN=52F85B1247A864A75A98E1A8C83EEFA3053E012A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9c:31:45:2b:5b:01:ab:fa:9b:ef:ba:e4:84: e4:a6:63:1c:2b:6f:8b:ac:d4:77:91:02:36:40:0e: a0:e6:ef:3a:ea:66:04:1c:93:3c:4b:51:47:7f:7f: 41:10:df:1e:e3:f1:7f:a9:1f:44:c8:17:3b:61:95: 26:70:db:ed:f6:0a:76:76:8b:04:35:4d:e7:ad:f8: 5b:d1:b9:f4:50:c7:e4:60:10:68:da:58:4e:2e:ae: 46:7c:3d:2e:70:2c:bd:f7:44:1f:a3:15:3b:eb:a7: 9a:58:f7:a1:95:10:2e:f7:93:62:ce:24:8d:3c:f5: 77:f1:a4:e3:3a:c8:90:ca:d6:9b:36:19:87:90:37: 13:f5:7c:04:f1:57:7c:18:4b:dd:c4:dc:f3:1c:0e: 30:9a:b7:32:b5:91:1c:fa:f1:a0:ba:f5:9e:21:d7: a1:67:7a:61:63:88:1b:41:45:80:00:57:24:77:8a: f9:59:e6:b6:ac:08:e7:bc:fb:9d:b5:1b:4f:7a:66: 15:bc:9b:1e:0a:d6:39:36:c2:8b:94:dc:cf:fd:98: 7b:17:5b:a6:3d:cd:7a:97:b4:84:73:43:61:a0:52: 86:67:80:85:15:4a:5b:a8:d3:48:5d:59:48:fc:81: e7:57:ab:3e:99:77:84:10:b0:1b:43:22:ea:97:27: c5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F8:5B:12:47:A8:64:A7:5A:98:E1:A8:C8:3E:EF:A3:05:3E:01:2A X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:d6:72:20:0a:a6:99:60:1c:d1:7b:8b:03:70:0e:54:98:2e: 29:1c:50:16:e4:6a:cc:0b:c9:f9:a6:6b:ac:0a:95:94:08:e2: 8e:29:e9:fa:30:5d:6f:ae:b9:4d:ba:be:42:5e:54:55:6d:8f: ee:12:17:0a:eb:69:e8:e1:30:12:1c:34:32:78:b2:22:7f:7d: 85:f0:96:84:b9:f1:bb:1d:3e:40:f2:fe:fe:e9:c6:0b:51:17: d8:22:e8:76:e2:25:6a:d6:52:62:78:b4:d9:65:57:de:37:b6: ed:88:07:3a:42:2a:96:0b:63:5a:dd:b8:91:ad:b1:db:b7:a4: 37:0c:64:83:2f:36:60:e0:62:46:ff:df:97:5c:fe:28:48:53: 42:3d:ce:6f:e9:34:e9:b6:7d:34:e1:65:66:1d:78:3e:b2:08: 2c:00:df:00:7f:5b:c2:38:82:18:99:90:3c:3c:a7:ca:d6:8c: d0:d4:84:22:d2:a4:a8:62:c7:3c:76:50:17:89:43:3d:d0:a4: 5c:db:b5:72:46:1e:70:43:52:2f:3c:95:d9:d1:56:78:f3:46: 0b:ec:18:b0:c5:eb:ef:91:1a:5b:6c:df:f6:de:84:3f:8b:86: ce:bd:92:54:94:d3:22:17:91:44:ca:69:2a:bc:a0:bc:f2:33: 0b:4b:37:59 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULBCzS/XI06Nbs5Aro2opLbOlfaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNTA2MjgxMjE5MTBaFw0yNTA2MjkxNTEwMTBaMDMxMTAvBgNV BAMTKDUyRjg1QjEyNDdBODY0QTc1QTk4RTFBOEM4M0VFRkEzMDUzRTAxMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChnDFFK1sBq/qb77rkhOSmYxwr b4us1HeRAjZADqDm7zrqZgQckzxLUUd/f0EQ3x7j8X+pH0TIFzthlSZw2+32CnZ2 iwQ1Teet+FvRufRQx+RgEGjaWE4urkZ8PS5wLL33RB+jFTvrp5pY96GVEC73k2LO JI089XfxpOM6yJDK1ps2GYeQNxP1fATxV3wYS93E3PMcDjCatzK1kRz68aC69Z4h 16FnemFjiBtBRYAAVyR3ivlZ5rasCOe8+521G096ZhW8mx4K1jk2wouU3M/9mHsX W6Y9zXqXtIRzQ2GgUoZngIUVSluo00hdWUj8gedXqz6Zd4QQsBtDIuqXJ8VVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUvhbEkeoZKdamOGoyD7vowU+ASowHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02 ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5 QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNZyIAqmmWAc0XuLA3AO VJguKRxQFuRqzAvJ+aZrrAqVlAjijinp+jBdb665Tbq+Ql5UVW2P7hIXCutp6OEw Ehw0MniyIn99hfCWhLnxux0+QPL+/unGC1EX2CLoduIlatZSYni02WVX3je27YgH OkIqlgtjWt24ka2x27ekNwxkgy82YOBiRv/fl1z+KEhTQj3Ob+k06bZ9NOFlZh14 PrIILADfAH9bwjiCGJmQPDynytaM0NSEItKkqGLHPHZQF4lDPdCkXNu1ckYecENS LzyV2dFWePNGC+wYsMXr75EaW2zf9t6EP4uGzr2SVJTTIheRRMppKrygvPIzC0s3 WQ== -----END CERTIFICATE-----Generated at Sun Jun 29 00:41:32 2025 by rpki-client