$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json) Hash identifier: U6g2Le+gdw3W2U6qZ9gmsWiSuRcJNHcRxkJ/6YMeHLk= Subject key identifier: 38:89:52:19:8B:2C:1A:48:16:2D:2B:95:63:78:F4:5C:11:06:C7:CE Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 0DF4F1C426992AFC4311CA573414F50FB9B47C6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft Manifest number: 0185 Signing time: Sat 23 Aug 2025 07:17:33 +0000 Manifest this update: Sat 23 Aug 2025 07:12:33 +0000 Manifest next update: Sun 24 Aug 2025 09:38:33 +0000 Files and hashes: 1: 33312e32322e3131302e302f32342d3234203d3e2039333034.roa (hash: 4/DyfQef3JM+QDXadF+flhTmwriSDAeEuVFVt/FGtTg=) 2: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: y9uevaBeLo1M0NZi4w3HJOyvLkMWIaZEJFCi8snsYYY=) 3: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: yKZlfj+dim9IpeOPok1lfUiZi1MHzmaDZPGLMC3tfYU=) 4: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: jNzQvK975k0nFSky/OYcsFfueNL1XvYeIp3mtR/7WPY=) 5: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: T+dHi9HuYZ941C+fl4Z1wCrL0FKUs05DbT3pKC30PUs=) 6: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: iK+yx/VtDctRGDFOE/NGNWTyR4u7o2tFGRI6U0bUYZU=) 7: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: hoZQSGqkvoyh+Fwe28UicpO6RAJD80P7rklT/Di/mQU=) 8: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: BqbUmbythNNYP4WqssroNY2sOPvoyuRgXIRAVuIytpA=) 9: 33312e32322e3130372e302f32342d3234203d3e20313337353137.roa (hash: zucU5bamNfYRw/esvivyzaXHMAl8N0xQ+Q3coI+3JvA=) 10: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: yHVodRBAsBlx/8p8lQvX33hmgwPZB9Uj6k/5yqbIyfs=) 11: 3130332e34392e3133302e302f32342d3234203d3e20323036303333.roa (hash: v7D054EN2gERBe7aLvFn0V17UtLvh1fmGSVfmRoK+KQ=) 12: 3130332e34392e3132382e302f32342d3234203d3e20313534303439.roa (hash: RP7fF4ljaFnG1QBw6wHJTYmQiSzsC+UtOPXQULgrH/c=) 13: 3130332e34392e3132392e302f32342d3234203d3e20313530363534.roa (hash: ZmNqb6SQ04nrnt7KP4kUO8EO/zoOBhgAf3oJbSFf7Ys=) 14: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (hash: 4XlIN+3Y2uvivj3jKKbdxnHiR3dRqeJ7/xmTE8uipj8=) 15: 34332e3233302e38342e302f32342d3234203d3e203231383539.roa (hash: SVFfgjYJoyDeeqzPyXuYrjyRbvwTEkox9PAuxc1c2+U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f4:f1:c4:26:99:2a:fc:43:11:ca:57:34:14:f5:0f:b9:b4:7c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Aug 23 07:12:33 2025 GMT Not After : Aug 24 09:38:33 2025 GMT Subject: CN=388952198B2C1A48162D2B956378F45C1106C7CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b0:31:5f:1a:ce:39:e2:52:f5:16:7d:06:dc: 29:34:70:b0:43:c1:da:1e:b8:38:35:41:54:5f:01: 6c:96:97:fc:5d:6b:0e:59:bd:f8:07:3f:d0:5d:38: 47:70:e0:ff:64:65:50:50:08:31:fd:64:e1:a3:69: 5f:18:c7:3d:c2:f2:4f:5b:27:fb:d8:24:f9:f9:f0: b6:21:7c:db:76:17:a4:49:5c:53:2a:fc:f6:16:82: 83:88:f1:d4:82:36:ce:8d:b5:18:5b:26:ca:ee:b8: 9a:ad:49:98:55:82:1a:7e:ed:b1:4e:1d:8c:e5:5e: ca:2b:90:60:2f:5f:0b:5a:bf:2c:bf:b9:bd:bc:b2: e5:a7:57:83:c0:22:81:a1:b5:8e:ee:8a:9f:f7:8e: 24:5a:c8:85:0a:da:ff:89:fd:8c:fd:72:c6:2f:35: ae:ef:15:89:fe:38:42:3b:4a:d6:4d:c1:b0:c4:30: 33:7b:93:94:12:6d:48:36:84:d0:18:90:4b:d9:98: a5:7e:8c:9e:74:3b:56:fc:84:e7:dc:8f:37:62:cb: 28:84:39:ea:b9:6d:21:af:af:11:0b:12:03:b1:43: c9:52:21:4f:f3:ca:00:5e:d6:40:93:3b:c3:20:d3: 51:b3:48:00:81:43:2f:fc:57:0e:8e:1b:87:61:b1: f9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:89:52:19:8B:2C:1A:48:16:2D:2B:95:63:78:F4:5C:11:06:C7:CE X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:15:88:6f:b6:0c:a5:c3:6a:2e:57:80:c2:01:ea:74:a6:fe: 21:58:90:dd:22:65:df:97:93:f9:e7:29:98:37:e6:53:93:70: f1:df:ae:16:a7:3b:77:2e:52:54:e8:20:c7:e8:6c:05:1c:af: 09:bc:a8:6e:50:b7:97:31:a1:c7:da:75:ce:a0:6a:ff:a4:21: 0b:7f:59:07:0e:39:1c:fb:cf:36:ee:eb:98:c8:8b:cd:fe:3c: 94:77:55:de:b5:b5:a7:5a:b6:f2:24:64:b6:1d:1d:ee:7e:53: e0:c9:29:15:3e:13:58:a3:87:65:b3:dd:7a:a2:10:aa:3c:07: 31:b8:d2:87:b9:a4:c5:54:e8:a8:b1:ab:34:da:97:c5:dd:2a: 48:07:d4:44:eb:b5:db:10:81:0c:10:ff:44:42:4e:f7:2a:70: f8:21:ed:67:d5:4d:31:41:34:7a:21:7b:fa:bb:de:5d:91:4d: 3b:11:2b:bb:93:83:d2:d8:c2:b2:39:3c:ba:ff:00:19:81:c6: af:c2:b1:22:10:e1:d9:3b:d3:26:c2:0b:77:87:c8:5d:f8:9d: b9:26:77:28:ee:0b:c7:21:6d:54:b9:4b:db:c6:80:5e:b1:4e: 4d:5d:25:8e:0c:56:40:35:e2:de:1b:23:3e:d9:74:fa:29:b8: 5a:56:6c:58 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDfTxxCaZKvxDEcpXNBT1D7m0fGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNTA4MjMwNzEyMzNaFw0yNTA4MjQwOTM4MzNaMDMxMTAvBgNV BAMTKDM4ODk1MjE5OEIyQzFBNDgxNjJEMkI5NTYzNzhGNDVDMTEwNkM3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPsDFfGs454lL1Fn0G3Ck0cLBD wdoeuDg1QVRfAWyWl/xdaw5ZvfgHP9BdOEdw4P9kZVBQCDH9ZOGjaV8Yxz3C8k9b J/vYJPn58LYhfNt2F6RJXFMq/PYWgoOI8dSCNs6NtRhbJsruuJqtSZhVghp+7bFO HYzlXsorkGAvXwtavyy/ub28suWnV4PAIoGhtY7uip/3jiRayIUK2v+J/Yz9csYv Na7vFYn+OEI7StZNwbDEMDN7k5QSbUg2hNAYkEvZmKV+jJ50O1b8hOfcjzdiyyiE Oeq5bSGvrxELEgOxQ8lSIU/zygBe1kCTO8Mg01GzSACBQy/8Vw6OG4dhsflBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUOIlSGYssGkgWLSuVY3j0XBEGx84wHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02 ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5 QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBWIb7YMpcNqLleAwgHq dKb+IViQ3SJl35eT+ecpmDfmU5Nw8d+uFqc7dy5SVOggx+hsBRyvCbyoblC3lzGh x9p1zqBq/6QhC39ZBw45HPvPNu7rmMiLzf48lHdV3rW1p1q28iRkth0d7n5T4Mkp FT4TWKOHZbPdeqIQqjwHMbjSh7mkxVToqLGrNNqXxd0qSAfUROu12xCBDBD/REJO 9ypw+CHtZ9VNMUE0eiF7+rveXZFNOxEru5OD0tjCsjk8uv8AGYHGr8KxIhDh2TvT JsILd4fIXfiduSZ3KO4LxyFtVLlL28aAXrFOTV0ljgxWQDXi3hsjPtl0+im4WlZs WA== -----END CERTIFICATE-----Generated at Sat Aug 23 10:09:40 2025 by rpki-client