$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft File: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json) Hash identifier: 52qcjDfiBD2MMW5vuBo3OZv/qdJtEIaQtK+RA2rNfbU= Subject key identifier: 79:A4:15:BE:26:CA:DD:EF:5D:8D:6B:E5:EA:E3:B6:CA:9F:8D:2B:AC Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Certificate serial: 2021A851D263E73C6E1041BC50A8EC6328F4EB0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft Manifest number: 011A Signing time: Thu 24 Jul 2025 02:27:05 +0000 Manifest this update: Thu 24 Jul 2025 02:22:05 +0000 Manifest next update: Fri 25 Jul 2025 06:24:05 +0000 Files and hashes: 1: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: Ej1HuQzuhYe60A2HNErPZLUdfpH5EaYPpZ+PpBEwVxY=) 2: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: 4qmNKGx6VCIK53hbSqHwJPgKKMACqFJu608tkfoDU90=) 3: 3137382e3133322e3139362e302f32342d3234203d3e203432383331.roa (hash: rMB7/8cyQIx/9c3HD2ZadKHLx3HKQvyXwwaVPb+xesA=) 4: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: 7XlPdZ+5k5dznfPMoT3Ni5uRfyL41Likgo5fplEaDTA=) 5: 3130392e3233342e3230382e302f32342d3234203d3e2039323332.roa (hash: 5NSQUssnpHxq31TditVRCOjbCirLEcMHfF76GuFM7co=) 6: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: UAeHXbW3QhFNKys+iIRYQQp2rK+CbLJVmAbT44zmQ1k=) 7: 352e3232362e3138342e302f32342d3234203d3e203235313938.roa (hash: g/SuuyMEvFJIWbz5EwrvLhOxD8VKMLPH98EweA0bDg4=) 8: 3137382e3133322e3139332e302f32342d3234203d3e2033333230.roa (hash: oI+z5B0JaicbPoA0ktNCShJBGRgRTGuhGcC7A8+Ru9U=) 9: 352e3232362e3138392e302f32342d3234203d3e2039333034.roa (hash: KMYDoKnPWH3TUSOlAA/wzDsC66Y3O5PlUt+i9WMB8YA=) 10: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: xGDSj9rMMdhGkci1rj9QS/c2p6IRznTgPF56svMZjZY=) 11: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 5LOGXsAFfY8MpN+3dgrjf5uTyIh00nk/J0/MSXxVmy4=) 12: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: 6TrR9eiRNzBfJRrubefTFudn86wqW7t6u+0cIxHNR5g=) 13: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: pWCIuSrDYwp+tan25QY6TeO9jMNRWP/W0zj94P0620Y=) 14: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: 0XlqzvD5WZeVhzrMIb+ArV6j60KVoqxW88qIB/mg2yk=) 15: 352e3232362e3138362e302f32342d3234203d3e203633303233.roa (hash: kysMqqfL+cxQFiZ9hx+MYhVVLOWVsGxNP3RzuLn0/y4=) 16: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: BJwbErsOT3zk/J2IaS0AdmsHhgCioC/gkIy4OoMemck=) 17: 352e3232362e3138372e302f32342d3234203d3e2039323332.roa (hash: L10rHUQX4TGH4LKEy8+xW98uNY8br3AyCv26QQGltu4=) 18: 3137382e3133322e3139372e302f32342d3234203d3e2033333230.roa (hash: MuzLKtyseOT68ju0FOjjeN3pxilqG43fi3IvFyF1hyA=) 19: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: fQsEWjsrThcFlJLP0H4ir/IvOeNDAQWZ1RZpyw7wV08=) 20: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: nFzeEleWTSIYtIbjgNdPg9c+CwbgHF8u+W2VGtxEBpQ=) 21: 3137382e3133322e3139352e302f32342d3234203d3e20313335333931.roa (hash: RVvsf+GbQ+gvRF/WRSFeBmTdyh0atmXnd8DAVmdlYaw=) 22: 3130392e3233342e3231342e302f32342d3234203d3e203632323430.roa (hash: yJVBSNvtQsHe0PNYzL5JRIv242s6ICu9PWhfIuLAOZQ=) 23: 3130392e3233342e3231322e302f32342d3234203d3e2039333034.roa (hash: E1rTwoIvXUNDaM0STfVaIqf1sVvsAgpb9o5+zj/sF4M=) 24: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: g03b1IthT7R6emRcKoovUUAfL6xJm+JexZ6oxCLs8E4=) 25: 352e3232362e3138342e302f32342d3234203d3e20323133383936.roa (hash: U3Zw6x4PkdzeEgLvqIYw4y+/XBwfGSTzEu9F3fSuE+4=) 26: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: XdAkV6zbkuI1AZDLksTC73fyYmD1RaBTy+I3AGFuaxA=) 27: 352e3232362e3139302e302f32342d3234203d3e203239383032.roa (hash: IcG7713dyebDFbZHRU+x1BJJOLqYlSEgaSMS202odCw=) 28: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: uhM+/0v8HioS/qE+KkDqR673YS11oQr5aznZkyp/yx4=) 29: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: UgtgsSF4DmUx+FqAs5WV6TWI9fyKhqfkEeJgaHpzYEc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 23:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:21:a8:51:d2:63:e7:3c:6e:10:41:bc:50:a8:ec:63:28:f4:eb:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Validity Not Before: Jul 24 02:22:05 2025 GMT Not After : Jul 25 06:24:05 2025 GMT Subject: CN=79A415BE26CADDEF5D8D6BE5EAE3B6CA9F8D2BAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:52:02:06:42:45:05:68:05:67:28:12:5f: 0f:d1:4b:11:ea:95:f5:d2:13:55:5a:43:7f:45:2d: 7b:d0:17:34:d4:89:29:13:e5:43:88:67:5d:47:39: 01:20:74:43:54:11:6c:df:80:7b:95:87:43:39:75: 25:b7:45:ed:53:6c:97:f6:b1:e1:d7:22:78:32:e4: 3d:3f:2e:86:3e:61:50:89:8a:47:d5:03:0f:f3:3b: 62:bc:21:3e:b9:88:01:5b:f7:12:74:d9:8f:28:55: 7b:41:12:b0:c9:a5:44:4e:e4:ed:a9:fd:7a:f7:48: 3f:7e:c6:61:90:a4:4a:b8:b4:78:d9:08:d5:fd:a7: 8d:62:b9:37:7a:8b:60:72:ed:66:e7:35:48:21:b5: a5:81:48:0a:61:82:97:47:e1:7b:cc:dc:ad:4d:78: ed:d7:4e:0d:7b:a6:52:28:92:59:b1:b9:c7:b1:f8: 92:11:8b:f6:6a:4a:5e:da:b0:81:0e:29:96:8a:de: 8d:63:e5:26:0e:cf:9b:f8:6d:35:04:f8:da:46:da: 98:97:3c:e9:ab:18:f0:fa:a4:51:7b:38:7b:da:a7: 63:e5:74:39:3b:85:3b:f3:4f:dc:c7:88:13:d4:11: 40:b9:f1:b7:36:90:e3:e8:25:7f:7f:c7:81:8e:41: 75:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A4:15:BE:26:CA:DD:EF:5D:8D:6B:E5:EA:E3:B6:CA:9F:8D:2B:AC X509v3 Authority Key Identifier: keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:a4:22:12:c7:d0:6f:27:eb:5f:07:d1:42:40:16:4d:4b:da: 82:c8:06:11:a9:83:0c:bc:5d:ae:8c:c3:7c:74:ff:bf:0e:09: 06:87:c5:9f:88:75:75:61:97:4a:c4:9f:2b:a0:f3:d5:5a:8a: ba:5c:b5:fd:51:40:14:c5:e1:56:dc:ec:96:8a:73:83:a1:cb: 12:e1:a0:ad:8d:df:27:8c:99:40:23:41:39:c2:fe:ec:dd:db: 88:2c:d3:25:52:f0:fb:cf:10:17:7c:e2:03:9b:51:d0:90:71: d6:58:6a:e6:58:5c:0b:ae:43:d0:c2:d4:67:9d:bb:02:55:80: 80:47:61:fe:a7:c7:1c:1e:a9:53:6c:80:33:2a:28:c3:87:b6: f8:c8:5e:53:93:74:2d:e0:25:c8:85:3e:7f:51:6b:d9:ed:36: 0f:e3:bd:c8:86:85:d3:b3:04:3e:25:70:a1:02:6f:c2:ff:1b: ea:49:2a:48:30:72:b3:e3:4e:18:9f:2f:36:bf:c3:53:c6:80: 7c:84:40:ba:b7:5b:01:9c:a6:9a:03:5a:67:dd:59:d4:41:22: 6e:9c:eb:a5:e1:12:4f:9f:f5:4d:e2:d3:21:a8:8b:6c:66:b7: c6:89:65:71:ba:0b:0a:4d:24:b0:07:e8:25:c4:80:c0:50:47: 67:d4:58:64 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUICGoUdJj5zxuEEG8UKjsYyj06w4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk MTZjZWVkMzAeFw0yNTA3MjQwMjIyMDVaFw0yNTA3MjUwNjI0MDVaMDMxMTAvBgNV BAMTKDc5QTQxNUJFMjZDQURERUY1RDhENkJFNUVBRTNCNkNBOUY4RDJCQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3rVICBkJFBWgFZygSXw/RSxHq lfXSE1VaQ39FLXvQFzTUiSkT5UOIZ11HOQEgdENUEWzfgHuVh0M5dSW3Re1TbJf2 seHXIngy5D0/LoY+YVCJikfVAw/zO2K8IT65iAFb9xJ02Y8oVXtBErDJpURO5O2p /Xr3SD9+xmGQpEq4tHjZCNX9p41iuTd6i2By7WbnNUghtaWBSAphgpdH4XvM3K1N eO3XTg17plIoklmxucex+JIRi/ZqSl7asIEOKZaK3o1j5SYOz5v4bTUE+NpG2piX POmrGPD6pFF7OHvap2PldDk7hTvzT9zHiBPUEUC58bc2kOPoJX9/x4GOQXXrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUeaQVvibK3e9djWvl6uO2yp+NK6wwHwYDVR0j BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0 NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G czd0TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wY2MwODczNy05 MjY3LTQwMmEtOTlkNC03YWFhZmVhNDQ0ZWQvMC9GNzY4RkY2RTY4MTg1OEMwRUMx OUYzQTkzRkExNzkyQ0QxNkNFRUQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANaQiEsfQbyfrXwfRQkAW TUvagsgGEamDDLxdrozDfHT/vw4JBofFn4h1dWGXSsSfK6Dz1VqKuly1/VFAFMXh Vtzslopzg6HLEuGgrY3fJ4yZQCNBOcL+7N3biCzTJVLw+88QF3ziA5tR0JBx1lhq 5lhcC65D0MLUZ527AlWAgEdh/qfHHB6pU2yAMyoow4e2+MheU5N0LeAlyIU+f1Fr 2e02D+O9yIaF07MEPiVwoQJvwv8b6kkqSDBys+NOGJ8vNr/DU8aAfIRAurdbAZym mgNaZ91Z1EEibpzrpeEST5/1TeLTIaiLbGa3xollcboLCk0ksAfoJcSAwFBHZ9RY ZA== -----END CERTIFICATE-----Generated at Thu Jul 24 04:53:27 2025 by rpki-client