$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft File: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json) Hash identifier: nLA3p/NugwAn1hcUlqoBlcMLWP+D62+b0pI8LBoiJhY= Subject key identifier: 29:8B:38:FD:D4:C8:AD:BC:DF:9A:B6:78:88:DC:B7:27:86:70:2E:C4 Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Certificate serial: 4AC7FE79FCFF9362D836266513E032E3B7E86618 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft Manifest number: 011C Signing time: Fri 25 Jul 2025 00:00:03 +0000 Manifest this update: Thu 24 Jul 2025 23:55:03 +0000 Manifest next update: Sat 26 Jul 2025 01:11:03 +0000 Files and hashes: 1: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: Ej1HuQzuhYe60A2HNErPZLUdfpH5EaYPpZ+PpBEwVxY=) 2: 3130392e3233342e3230382e302f32342d3234203d3e2039323332.roa (hash: 5NSQUssnpHxq31TditVRCOjbCirLEcMHfF76GuFM7co=) 3: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: 6TrR9eiRNzBfJRrubefTFudn86wqW7t6u+0cIxHNR5g=) 4: 352e3232362e3138362e302f32342d3234203d3e203633303233.roa (hash: kysMqqfL+cxQFiZ9hx+MYhVVLOWVsGxNP3RzuLn0/y4=) 5: 3137382e3133322e3139362e302f32342d3234203d3e203432383331.roa (hash: rMB7/8cyQIx/9c3HD2ZadKHLx3HKQvyXwwaVPb+xesA=) 6: 3137382e3133322e3139352e302f32342d3234203d3e20313335333931.roa (hash: RVvsf+GbQ+gvRF/WRSFeBmTdyh0atmXnd8DAVmdlYaw=) 7: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: g03b1IthT7R6emRcKoovUUAfL6xJm+JexZ6oxCLs8E4=) 8: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: nP11m2D/zuxQGU9mMFEkv28oFMcCungg83CCu/a4KbE=) 9: 3130392e3233342e3231322e302f32342d3234203d3e2039333034.roa (hash: E1rTwoIvXUNDaM0STfVaIqf1sVvsAgpb9o5+zj/sF4M=) 10: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: 7XlPdZ+5k5dznfPMoT3Ni5uRfyL41Likgo5fplEaDTA=) 11: 352e3232362e3139302e302f32342d3234203d3e203239383032.roa (hash: IcG7713dyebDFbZHRU+x1BJJOLqYlSEgaSMS202odCw=) 12: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: xGDSj9rMMdhGkci1rj9QS/c2p6IRznTgPF56svMZjZY=) 13: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: 4qmNKGx6VCIK53hbSqHwJPgKKMACqFJu608tkfoDU90=) 14: 3130392e3233342e3231342e302f32342d3234203d3e203632323430.roa (hash: yJVBSNvtQsHe0PNYzL5JRIv242s6ICu9PWhfIuLAOZQ=) 15: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: fQsEWjsrThcFlJLP0H4ir/IvOeNDAQWZ1RZpyw7wV08=) 16: 3137382e3133322e3139332e302f32342d3234203d3e2033333230.roa (hash: oI+z5B0JaicbPoA0ktNCShJBGRgRTGuhGcC7A8+Ru9U=) 17: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: UAeHXbW3QhFNKys+iIRYQQp2rK+CbLJVmAbT44zmQ1k=) 18: 352e3232362e3138372e302f32342d3234203d3e2039323332.roa (hash: L10rHUQX4TGH4LKEy8+xW98uNY8br3AyCv26QQGltu4=) 19: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: UgtgsSF4DmUx+FqAs5WV6TWI9fyKhqfkEeJgaHpzYEc=) 20: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: XdAkV6zbkuI1AZDLksTC73fyYmD1RaBTy+I3AGFuaxA=) 21: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: uhM+/0v8HioS/qE+KkDqR673YS11oQr5aznZkyp/yx4=) 22: 352e3232362e3138392e302f32342d3234203d3e2039333034.roa (hash: KMYDoKnPWH3TUSOlAA/wzDsC66Y3O5PlUt+i9WMB8YA=) 23: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: 0XlqzvD5WZeVhzrMIb+ArV6j60KVoqxW88qIB/mg2yk=) 24: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 5LOGXsAFfY8MpN+3dgrjf5uTyIh00nk/J0/MSXxVmy4=) 25: 3137382e3133322e3139372e302f32342d3234203d3e2033333230.roa (hash: MuzLKtyseOT68ju0FOjjeN3pxilqG43fi3IvFyF1hyA=) 26: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: pWCIuSrDYwp+tan25QY6TeO9jMNRWP/W0zj94P0620Y=) 27: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: nFzeEleWTSIYtIbjgNdPg9c+CwbgHF8u+W2VGtxEBpQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 22:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c7:fe:79:fc:ff:93:62:d8:36:26:65:13:e0:32:e3:b7:e8:66:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Validity Not Before: Jul 24 23:55:03 2025 GMT Not After : Jul 26 01:11:03 2025 GMT Subject: CN=298B38FDD4C8ADBCDF9AB67888DCB72786702EC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8c:64:0b:e7:0e:2a:31:ca:2b:db:43:0e:ce: 95:bc:f1:3f:4f:f7:87:9e:91:65:d5:06:7f:bf:36: 17:eb:a0:9b:5a:f7:37:e7:b3:23:38:8f:6c:d9:8a: dc:49:c0:82:08:9b:07:00:31:f9:74:a1:74:0d:ae: f3:b7:7f:1d:77:7a:58:67:97:8f:c5:7f:be:ba:90: 26:6e:17:53:4b:d1:35:ad:ae:78:1d:e2:ed:bb:a2: 86:40:ca:21:78:af:07:9a:5f:4c:c6:b5:46:fb:39: b3:bc:90:8a:36:d4:30:ce:fb:54:ca:70:a4:98:40: f8:55:3b:02:ef:52:04:04:82:22:af:61:d4:ca:9c: fb:23:84:fe:57:fd:af:1f:0a:8b:c6:3b:86:41:71: 4f:32:d9:01:e7:22:37:9f:fc:19:10:55:62:17:c0: 0c:09:4e:9d:16:c5:e1:c8:21:2d:e9:a9:6a:95:ba: 57:e7:10:ba:77:6a:91:29:26:6e:af:ae:28:dd:ff: d9:10:e8:67:de:1d:6f:e3:f4:a0:3b:f7:7e:7a:a7: 89:05:3e:13:21:ff:ce:d4:70:c7:37:09:aa:fb:c5: 81:e5:fc:ea:71:24:5e:29:f2:3a:35:35:a8:67:96: 46:73:b9:6b:74:fa:21:c8:6f:b6:f9:c0:07:50:58: aa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8B:38:FD:D4:C8:AD:BC:DF:9A:B6:78:88:DC:B7:27:86:70:2E:C4 X509v3 Authority Key Identifier: keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:53:63:d0:a2:69:7d:5b:de:cd:7d:df:ec:2b:ac:9a:96:40: 16:2a:82:a2:ae:d7:3f:eb:e2:ab:fc:e4:e0:83:55:4d:e9:6a: 10:79:cf:ad:27:d4:f7:fe:a3:d7:28:19:af:6f:d7:ca:ce:85: b6:27:24:a1:0b:20:00:9d:cd:16:4d:bf:30:32:08:b6:f7:eb: 09:36:b8:35:f2:b1:c0:20:01:a8:d4:40:2c:d2:f0:77:86:49: 85:1c:51:3a:a0:c8:61:a6:14:55:52:e9:ee:ad:00:cf:f4:bb: 0f:cf:6c:a0:9d:6d:ae:85:68:b5:95:ab:37:a1:5b:b1:65:b0: 5f:7b:8b:f3:fe:7c:65:e7:6e:d7:6e:dc:a9:49:10:a9:c3:f2: 42:94:69:1c:ff:af:49:09:b8:dd:64:f8:fa:a9:38:6b:2f:81: 33:6a:31:f3:86:20:94:24:d5:36:e6:6b:80:b0:42:5a:db:a0: fa:1d:03:36:db:00:51:25:78:c9:8c:6c:9e:45:16:3a:dd:cb: ca:fe:92:f4:27:5e:eb:b8:98:22:92:85:dd:89:c6:c5:8d:61: d3:6a:fb:11:53:a9:cf:95:9f:60:99:e9:fd:e6:af:06:d4:18: 57:92:c2:e2:af:41:71:65:cc:53:51:00:af:e2:37:8b:06:21: 22:e6:a9:12 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSsf+efz/k2LYNiZlE+Ay47foZhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk MTZjZWVkMzAeFw0yNTA3MjQyMzU1MDNaFw0yNTA3MjYwMTExMDNaMDMxMTAvBgNV BAMTKDI5OEIzOEZERDRDOEFEQkNERjlBQjY3ODg4RENCNzI3ODY3MDJFQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUjGQL5w4qMcor20MOzpW88T9P 94eekWXVBn+/NhfroJta9zfnsyM4j2zZitxJwIIImwcAMfl0oXQNrvO3fx13elhn l4/Ff766kCZuF1NL0TWtrngd4u27ooZAyiF4rweaX0zGtUb7ObO8kIo21DDO+1TK cKSYQPhVOwLvUgQEgiKvYdTKnPsjhP5X/a8fCovGO4ZBcU8y2QHnIjef/BkQVWIX wAwJTp0WxeHIIS3pqWqVulfnELp3apEpJm6vrijd/9kQ6GfeHW/j9KA79356p4kF PhMh/87UcMc3Car7xYHl/OpxJF4p8jo1NahnlkZzuWt0+iHIb7b5wAdQWKq/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUKYs4/dTIrbzfmrZ4iNy3J4ZwLsQwHwYDVR0j BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0 NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G czd0TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wY2MwODczNy05 MjY3LTQwMmEtOTlkNC03YWFhZmVhNDQ0ZWQvMC9GNzY4RkY2RTY4MTg1OEMwRUMx OUYzQTkzRkExNzkyQ0QxNkNFRUQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlNj0KJpfVvezX3f7Cus mpZAFiqCoq7XP+viq/zk4INVTelqEHnPrSfU9/6j1ygZr2/Xys6FtickoQsgAJ3N Fk2/MDIItvfrCTa4NfKxwCABqNRALNLwd4ZJhRxROqDIYaYUVVLp7q0Az/S7D89s oJ1troVotZWrN6FbsWWwX3uL8/58Zedu127cqUkQqcPyQpRpHP+vSQm43WT4+qk4 ay+BM2ox84YglCTVNuZrgLBCWtug+h0DNtsAUSV4yYxsnkUWOt3Lyv6S9Cde67iY IpKF3YnGxY1h02r7EVOpz5WfYJnp/eavBtQYV5LC4q9BcWXMU1EAr+I3iwYhIuap Eg== -----END CERTIFICATE-----Generated at Fri Jul 25 04:37:33 2025 by rpki-client