$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft File: 3134EE987E08D8B5583FEEF621A03150C4F35434.mft (raw, json) Hash identifier: O/IrK8CUolmIfKZgus5XVIS1zjRrFpP3cMqVtFAmwSw= Subject key identifier: 52:9D:96:6D:95:ED:9C:CD:05:16:5C:0F:17:6E:3E:D5:29:DB:7C:3D Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434 Certificate serial: 1D727DA38DD4013A9AD6F46856A2F64453026A77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft Manifest number: 02BE Signing time: Mon 21 Jul 2025 10:31:07 +0000 Manifest this update: Mon 21 Jul 2025 10:26:07 +0000 Manifest next update: Tue 22 Jul 2025 13:29:07 +0000 Files and hashes: 1: 326131343a316563373a313130303a3a2f34302d3438203d3e20323135343337.roa (hash: LSZWA34YwCO9D6JtWEG8LpUQ1o3Anb+MGXWPU43gT4A=) 2: 326131343a316563373a666666633a3a2f34382d3438203d3e20323136333339.roa (hash: Xpu7YHsE9Uu/Z34+AM32q6wFmIndeEkcOzm4kV29gZU=) 3: 326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa (hash: ei7uKbr21cStunIFD4/+QnxpXX+lUv4yRtUBnFqqQIw=) 4: 326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa (hash: tXMEYMrTa38uR0L+SQ9LimzmDrpxo8zhMIaTp0PKkR0=) 5: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer (hash: TzD6pGlBEMmZI/OlLFvK4Q5nKNXovDA7wOkDjfwohQo=) 6: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer (hash: BF/TWOjb2Ii4r0osOdYS/rUG+zOQPpS2tAXbzEo5Wzo=) 7: 326131343a316563373a666661303a3a2f34382d3438203d3e20323133353135.roa (hash: uw8e5+V55rs+wlENeJdGRICWtffz7xQmePuL+3U/nIU=) 8: 326131343a316563373a313030303a3a2f33362d3438203d3e20323134343831.roa (hash: mAC3tE41nQDojIaT/TKY9BuNdhC77RQ6VPm5O+XWCIE=) 9: 326131343a316563373a663130303a3a2f34302d3438203d3e20323134313838.roa (hash: gXY2AMFw8/+rSlIvUcyO+0lq7UArJ6lUsKRFR48Pbdc=) 10: 3134EE987E08D8B5583FEEF621A03150C4F35434.crl (hash: mEZVu5+avQnaQ7rtxJ/7DM/dhK+7dDUM+mvGu/E9Tj8=) 11: 326131343a316563373a666666663a3a2f34382d3438203d3e20323030313739.roa (hash: jxX5jejatt6POI8r69/OIdC4tpqjlqDh7/l5cMHt1Lc=) 12: 326131343a316563373a666130303a3a2f34302d3438203d3e20323134333635.roa (hash: mfRAEfAM/Ik+prWgDH92jLkjVIcmPRfzo1kMxVmUq4c=) 13: 326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa (hash: cQGzH58GG/5AlClFkvMjXXZFAsalmfdZS0xTjTmJx5Q=) 14: 326131343a316563373a666230303a3a2f34302d3438203d3e20323134373435.roa (hash: nezQHcq4MVb+lW9u+9DC3TKuGQsy0c5l+5+DxrvsPzo=) 15: 326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa (hash: svJE9s6z+thIvIbk0ivLw3r/3W8HiAYka1FWVnsnFgw=) 16: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer (hash: jLV89odZdgTYzYRcumFoTReP+gmmk+raXpcoYf0+wxA=) 17: 326131343a316563373a666530303a3a2f34302d3438203d3e20323135343637.roa (hash: 8asU86WRYRMPRuHXiCGWb31YsN6wlyGCHOUyjPq08QE=) 18: 326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa (hash: Kuq/T5/58120SUpTorsr1ML70JXySqoRjipE0Min4z0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 13:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:72:7d:a3:8d:d4:01:3a:9a:d6:f4:68:56:a2:f6:44:53:02:6a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434 Validity Not Before: Jul 21 10:26:07 2025 GMT Not After : Jul 22 13:29:07 2025 GMT Subject: CN=529D966D95ED9CCD05165C0F176E3ED529DB7C3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:86:4b:9d:53:ad:db:f4:70:13:a0:9b:7e:60: 3c:a7:3e:b3:a7:40:a1:cf:92:6d:83:c5:0c:0e:90: 85:c8:69:2e:68:70:d4:50:67:ae:c3:75:b3:04:8f: fa:16:88:42:8f:7f:bf:75:7f:83:95:29:48:80:40: ff:44:ed:a9:8e:7d:31:7d:ec:af:aa:ac:26:cd:b6: 4d:67:a1:a4:ed:d4:61:bc:37:a6:de:d8:cc:1a:85: f5:8c:c3:57:d3:35:2a:04:b5:dd:ab:2d:6c:b7:12: b1:28:72:fe:6c:2e:74:3b:19:84:8e:4d:ec:bf:62: 8c:80:70:8b:eb:11:ef:48:87:af:19:d6:1a:81:51: 85:d5:83:43:60:a8:dc:d3:8b:55:cc:b4:ff:30:56: 9b:a7:ff:ce:74:6e:63:b2:b5:75:8a:d4:cb:d2:cb: d5:13:57:09:dc:d9:4a:4c:75:c0:ba:86:67:d3:f1: 3c:ed:36:24:6c:f3:12:34:82:b3:01:c1:5a:55:e8: 18:05:b0:d3:9d:91:c2:d6:2d:cd:49:b3:66:6b:60: 8a:0b:29:8a:69:08:59:bc:71:34:bb:38:ed:b9:5f: d8:40:91:ba:60:d4:59:63:7c:4a:85:1c:93:a7:1b: d0:d9:e4:30:fa:a7:f4:72:d0:82:4c:a2:e1:4a:cd: 96:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9D:96:6D:95:ED:9C:CD:05:16:5C:0F:17:6E:3E:D5:29:DB:7C:3D X509v3 Authority Key Identifier: keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:7b:90:99:64:d9:64:5e:f8:47:96:49:97:2a:55:a9:15:1b: c9:a4:c6:d6:ad:02:03:ad:90:02:55:d0:ab:f3:69:1e:b4:a0: ae:52:9b:04:44:05:30:cb:b9:6f:bb:19:85:b0:1f:1f:7b:83: 1c:b5:ff:b9:27:55:05:01:8c:a9:65:82:84:92:f7:c0:26:f6: cd:d1:9f:6d:bf:af:0e:f5:a2:a5:2f:e3:d0:52:0c:6a:98:f4: ed:8f:2f:3e:5a:44:0b:d9:c5:4b:46:04:5b:67:cf:07:d5:04: 84:03:1b:6d:2d:12:81:3b:59:1c:58:31:68:42:fc:91:c3:99: 7f:66:e7:d6:20:f0:e5:8d:aa:29:c2:49:9f:67:67:76:d5:26: 6f:ba:4b:86:27:ef:68:60:25:10:f8:02:e2:4e:3a:50:b7:de: 1b:3f:f0:65:63:46:b6:25:15:a9:33:ee:73:7c:ac:f6:7d:af: ef:91:0d:a1:c0:eb:9a:2c:de:c4:d3:c4:56:38:27:e5:ef:08: ba:82:13:ab:bf:f5:43:1c:03:8f:aa:e4:57:91:58:f7:30:15: 9b:14:dd:dd:e3:07:be:d4:1b:49:18:60:c2:92:1c:38:22:37: 8e:7e:1d:d8:23:0e:e5:dc:75:cf:d9:f8:c4:17:41:79:5b:a8: 81:8d:6e:ac -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHXJ9o43UATqa1vRoVqL2RFMCancwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj NGYzNTQzNDAeFw0yNTA3MjExMDI2MDdaFw0yNTA3MjIxMzI5MDdaMDMxMTAvBgNV BAMTKDUyOUQ5NjZEOTVFRDlDQ0QwNTE2NUMwRjE3NkUzRUQ1MjlEQjdDM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhkudU63b9HAToJt+YDynPrOn QKHPkm2DxQwOkIXIaS5ocNRQZ67DdbMEj/oWiEKPf791f4OVKUiAQP9E7amOfTF9 7K+qrCbNtk1noaTt1GG8N6be2MwahfWMw1fTNSoEtd2rLWy3ErEocv5sLnQ7GYSO Tey/YoyAcIvrEe9Ih68Z1hqBUYXVg0NgqNzTi1XMtP8wVpun/850bmOytXWK1MvS y9UTVwnc2UpMdcC6hmfT8TztNiRs8xI0grMBwVpV6BgFsNOdkcLWLc1Js2ZrYIoL KYppCFm8cTS7OO25X9hAkbpg1FljfEqFHJOnG9DZ5DD6p/Ry0IJMouFKzZa7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUp2WbZXtnM0FFlwPF24+1SnbfD0wHwYDVR0j BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4 NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U elZEUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05 OGE0LTRjN2UtYTBlMS04MDU3YTRmMDg2YzkvMC8zMTM0RUU5ODdFMDhEOEI1NTgz RkVFRjYyMUEwMzE1MEM0RjM1NDM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXuQmWTZZF74R5ZJlypV qRUbyaTG1q0CA62QAlXQq/NpHrSgrlKbBEQFMMu5b7sZhbAfH3uDHLX/uSdVBQGM qWWChJL3wCb2zdGfbb+vDvWipS/j0FIMapj07Y8vPlpEC9nFS0YEW2fPB9UEhAMb bS0SgTtZHFgxaEL8kcOZf2bn1iDw5Y2qKcJJn2dndtUmb7pLhifvaGAlEPgC4k46 ULfeGz/wZWNGtiUVqTPuc3ys9n2v75ENocDrmizexNPEVjgn5e8IuoITq7/1QxwD j6rkV5FY9zAVmxTd3eMHvtQbSRhgwpIcOCI3jn4d2CMO5dx1z9n4xBdBeVuogY1u rA== -----END CERTIFICATE-----Generated at Mon Jul 21 23:20:42 2025 by rpki-client