$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft File: B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft (raw, json) Hash identifier: DvWXRZwj5ELoqXXXI328+drLyLq2Rl5sBISo5QYs5nk= Subject key identifier: 32:CA:41:0F:BC:12:CC:A7:F5:0D:B8:03:BC:24:B8:28:B5:74:E4:A2 Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0 Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0 Certificate serial: 2D3500FEC293B5101C954A853ED3E89E8D147F93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft Manifest number: 0426 Signing time: Sat 19 Jul 2025 17:46:49 +0000 Manifest this update: Sat 19 Jul 2025 17:41:49 +0000 Manifest next update: Sun 20 Jul 2025 21:12:49 +0000 Files and hashes: 1: 3138352e3132352e37362e302f32342d3234203d3e203630343538.roa (hash: E1EBzi/x9bAqWwU2+c2DtydupdQVlQih+ZQ9KG5XJM8=) 2: 3138352e3232362e3135352e302f32342d3234203d3e203634323637.roa (hash: BphaL/Q+MmU9qXxX06J/d3Yz3MPwKV/7sGiY2uy2MYY=) 3: 36322e3132322e3138392e302f32342d3234203d3e2033313730.roa (hash: mbpZXZK/fM7vaFZ5y82xMnQ6rCPjr7XSXm9Q6bD78C4=) 4: 33312e3231372e3235302e302f32342d3234203d3e2039303039.roa (hash: L+538BnpKcoPw9UMvgnBDsovbAC1nWxPwoO/WNMOxrE=) 5: 3138352e3136322e3136382e302f32332d3233203d3e203630343538.roa (hash: FhpX/C9zk9FVjj10PImD/wKS/RfpAC0kUdP0bDZAwyg=) 6: 3139352e382e3131392e302f32342d3234203d3e203630343538.roa (hash: uYf/vuY3IMzkKnywh+WrIJi9K5kM4HORH0NByn4xLTY=) 7: 39312e3139392e3130382e302f32342d3234203d3e203630343538.roa (hash: Ltqzgt94mzKk47x8Q+jGxz5JrNySG/Y0tzlAfjYhG0M=) 8: 3138352e3136322e3137302e302f32342d3234203d3e203630343538.roa (hash: v9yukWrQuv+5l5wy9/dUA6cYOeUvX0B8QwsY9W2Wlgk=) 9: 3138352e3136372e32372e302f32342d3234203d3e203630343538.roa (hash: qmcJVcdT4rmfgLdWbchNjQUjUr84q4fznJ3O5A3Ac6k=) 10: 34352e3134332e3134382e302f32322d3232203d3e203630343538.roa (hash: Sww7+LIBcy25xOjBNTHS8houn90nQJV29QTFkg33x0A=) 11: 3138352e3136322e3137312e302f32342d3234203d3e203630343538.roa (hash: dIPcyVrIf7ut3mplg6I+FaMP77/taZ1uyGrgWAEtw1I=) 12: 3138352e3231372e3134302e302f32342d3234203d3e20323131333733.roa (hash: hNnRgizTxivmocfPjGcdnyRRZ7RF0OREZEdxCth7bFY=) 13: 3138352e3230322e3134372e302f32342d3234203d3e203630343538.roa (hash: 4WWLNzVcecuIV7DQH3TBRPk5m1a8bolBgWM4/XkK+mA=) 14: 3138352e3232362e3135332e302f32342d3234203d3e20323131343430.roa (hash: rGW7/8GB609/SHNrTEWoAaTI5dQHouhe15jjA9R2QwM=) 15: 3139352e3231312e35312e302f32342d3234203d3e20343030393039.roa (hash: 0gSBq8V9lU7SHxebbh3UieoZZ+QMrAfR0WkkimNMOGY=) 16: 3138352e3136372e32352e302f32342d3234203d3e203630343538.roa (hash: PR56mJAfACxvVOTWCWLvFZ+zDPcod8MGy8q5KeWDe1I=) 17: 3138352e3231352e3131342e302f32342d3234203d3e203631333137.roa (hash: R9WhNu2MdPr1NOFjMmZeGBiIE2nwtlE4Jo64OX4u4HA=) 18: 3138352e3135362e3231382e302f32342d3234203d3e203630343538.roa (hash: IhLfWMdp3wfBoJIgMf1dZQYIiVjH+IC6uyZDFZApUo0=) 19: 3138352e3135362e3231362e302f32342d3234203d3e203630343538.roa (hash: EvCO85+TEFrCa3fyF2Hvn+tlr4Nv9RYk07bI6yFMPvw=) 20: 3138352e3132352e37392e302f32342d3234203d3e203630343538.roa (hash: chFrGzVrsGDgHbR9U302S1vgNYtyu8hjjwKJPtAYWHA=) 21: 3138352e3132352e37382e302f32342d3234203d3e203630343538.roa (hash: p8VAezPiQ82kk+zpMKLkJeAo6bWXq8DJwyiOE3M0QAE=) 22: 3138352e33372e3232382e302f32332d3233203d3e203630343538.roa (hash: vZ0xeNj44WIw/+zpqjsYVz/OQXDqqT3PO1sgTbLjyjI=) 23: 3138352e3136372e32362e302f32342d3234203d3e203630343538.roa (hash: AU1XTzixRsIIk2ZdZN58IrYKd8IFItgt7vU8fJub8+o=) 24: 3138352e3135362e3231372e302f32342d3234203d3e203630343538.roa (hash: rjDp5tr7Ibp1svXb6aTy1VUyxTkkVlR9zj5PgrnqiGs=) 25: B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl (hash: 2Y/6eYBHzyOqypxNgU5aGbCBzcV+mH22LJV5XOgSEpE=) 26: 39312e3139392e39302e302f32342d3234203d3e203630343538.roa (hash: 24Wi6BO1o+rN9DTXADpFgbBkLMPIwcsuYBHhIDkNNJk=) 27: 3138352e3132352e37372e302f32342d3234203d3e203630343538.roa (hash: iBX/+QeuXYuSCTlJT7cmF+tQX/4HCmniMjyG8lOqUWA=) 28: 3138352e3135362e3231392e302f32342d3234203d3e203630343538.roa (hash: 8XkoDAvNeGNoBWLohtYrD/bWj0oa0HEtFyjdhTJh8rk=) 29: 3138352e3230322e3134342e302f32342d3234203d3e203630343538.roa (hash: wz4+Z748yPCelmg+RPJx6JGtTSzenzKPpdD84rUDauM=) 30: 34352e3134362e3138382e302f32322d3232203d3e203630343538.roa (hash: oKJ0nojLfMNgIC0ZVHO9adCFA5GxNLUlSGYZ+ppZl7U=) 31: 3139352e382e34392e302f32342d3234203d3e203630343538.roa (hash: 4nPeE4WDot0aQzE1E2AL4UC2dMhv5fMNvAbvgkN5zUQ=) 32: 3138352e3232362e3135342e302f32342d3234203d3e20323030303139.roa (hash: 96QSwOxwyYqTqJ3XjUWn9gHjbPepDDirLYFilwesJ0U=) 33: 3138352e33372e3233302e302f32342d3234203d3e203630343538.roa (hash: IY6mHaJKET6LoAapCaxdFKM5n9LWTpQVBjwiMh+lOuI=) 34: 3138352e3130302e37322e302f32322d3232203d3e203630343538.roa (hash: tt+7v33pgcfL/OR4IEoj2XRjnG0uMYFwUsQyGd/wSJQ=) 35: 3138352e33372e3232382e302f32342d3234203d3e203630343538.roa (hash: mw435AXz9xHWhN238pBrnHfvo9tx+w0yMNZcNgIAnFw=) 36: 3138352e33372e3232392e302f32342d3234203d3e203630343538.roa (hash: HYaWDlREHWbcyxGyqKTrHitDp9vR4XbaPjWC/NS6hv0=) 37: 3138352e3230322e3134362e302f32342d3234203d3e203630343538.roa (hash: RGdxLEzytt0V9LWy9RSfzKHfvGrjEh/8BhnnQWUWyk0=) 38: 34352e3133312e38302e302f32322d3232203d3e203630343538.roa (hash: oqXmbxyjeaOX95W9eJVEUG/807pdk0CrvL0gbJu3djk=) 39: 39312e3139392e3132332e302f32342d3234203d3e203630343538.roa (hash: BatNReK7gXNaqXPa5VRtj5h++zM7ew2F8IoAg/I/2U8=) 40: 39312e3139392e3130322e302f32342d3234203d3e203630343538.roa (hash: RopopLlJOVRjGz4avSxfYPvo0OC9G/eDY75KWGAV/aw=) 41: 3139352e382e34382e302f32342d3234203d3e203630343538.roa (hash: 0QQ/atSVhgxbxnMmZi2CZaSsjgioOzPYv64es6L7MGQ=) 42: 34352e3135312e3139322e302f32322d3232203d3e203630343538.roa (hash: MsQjsESlTuEcbjS9mONurH+MDUvuc4E1Aq8WiShITro=) 43: 3138352e3232362e3135322e302f32342d3234203d3e203432383331.roa (hash: 2iZuFtoo8q53yETNgCmRHTR4lUa6RiA7X1J8o6k1GHg=) 44: 3138352e33372e3233312e302f32342d3234203d3e203630343538.roa (hash: fMMz/NMrWe4m6FBXtQw+qCDaXqsRssd0JOLvgwTj808=) 45: 3138352e3230322e3134352e302f32342d3234203d3e203630343538.roa (hash: W83bzJQhGHobYnfM1tmulNDtSSyNf73jimSZ1AGOpI0=) 46: 3138352e3136372e32342e302f32342d3234203d3e203630343538.roa (hash: bOe+V/bSkHZWJOaV1Qj2XTs/2xeIT/LkKzSKku71Icc=) 47: 3139342e35392e3232332e302f32342d3234203d3e20313939363134.roa (hash: Q+aTRZ6Bj34jlOI880qva89jcDljlnRfljW0rbqvKUM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Jul 2025 21:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:35:00:fe:c2:93:b5:10:1c:95:4a:85:3e:d3:e8:9e:8d:14:7f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0 Validity Not Before: Jul 19 17:41:49 2025 GMT Not After : Jul 20 21:12:49 2025 GMT Subject: CN=32CA410FBC12CCA7F50DB803BC24B828B574E4A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f5:bd:8b:89:8c:f6:7f:d9:84:67:f0:8e:2c: 85:56:a9:c9:9a:cc:6f:e2:21:fe:27:f6:9c:71:dc: d7:d2:a5:79:df:11:a8:06:2e:0b:e2:96:5d:f6:27: 69:89:ae:40:5e:fd:98:76:ca:f5:11:cc:7e:11:5f: 09:dd:46:99:11:f6:ba:0e:f2:1c:32:c9:f4:12:51: 68:95:bb:bc:49:59:bf:cb:18:f6:9c:a7:10:2a:51: cf:35:22:12:ae:77:b5:0f:45:c1:5e:bb:43:e6:95: 67:8e:fa:f1:64:74:91:2f:7c:58:3a:a3:30:c4:35: 38:fe:32:6d:af:89:c0:dd:b8:7b:85:bd:b8:6a:c8: b8:64:f6:e9:52:7f:9d:53:f4:89:ac:63:12:ca:66: c8:d1:1f:e0:c9:29:8d:a7:79:8c:3f:87:08:db:5f: 95:84:0c:83:92:85:51:c6:a3:8f:55:e5:92:b2:4c: b5:3c:f0:8f:80:87:13:39:33:80:76:8d:7f:f8:d9: 30:1a:1c:a9:5a:5d:7f:cb:00:84:aa:60:7c:6f:9d: e5:65:cc:79:80:40:a5:01:7a:db:3c:32:81:0b:92: 5d:d4:86:cc:95:07:b1:60:e4:de:1c:1f:5b:be:8d: ac:ae:01:ce:22:ec:db:a9:dd:8b:07:81:87:7d:16: 9e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CA:41:0F:BC:12:CC:A7:F5:0D:B8:03:BC:24:B8:28:B5:74:E4:A2 X509v3 Authority Key Identifier: keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:6c:95:aa:bf:79:22:54:25:18:94:08:45:16:95:cf:b3:6a: b8:aa:5b:ed:9f:80:f1:3e:a1:2c:0b:d5:88:f1:f3:34:e8:54: 42:98:96:32:f6:3d:02:f4:b4:2e:76:e6:45:58:dd:61:5f:da: 06:65:c5:22:cf:01:b9:5a:79:c2:ba:27:79:46:ec:0b:98:5d: 97:8b:5b:0a:2d:58:26:e3:47:37:b7:1a:eb:25:f1:f2:55:fc: ac:c3:b1:48:9b:37:9f:60:0e:67:a7:cc:58:ee:50:0f:ef:7e: a5:c1:c0:87:32:52:ac:13:b3:77:5f:7c:db:e5:61:4c:ea:a8: 6c:ad:0b:5b:fc:00:64:cb:cf:55:a0:6e:77:e9:55:89:70:81: 53:2e:8d:65:7d:18:a2:6a:7d:7d:72:9b:3f:54:59:fe:88:17: fb:c2:fb:a8:e8:b9:46:48:97:2c:fc:35:92:5e:eb:9b:64:6d: 5d:d1:d5:36:27:65:20:16:6d:8b:94:f5:fa:f9:3d:02:f2:f0: d4:59:52:85:a9:15:bb:95:06:d3:d1:f2:55:12:45:a4:e1:f5: 79:0f:5b:d1:a9:76:cc:b3:49:ec:d1:f1:75:68:65:3c:ed:4f: 24:4a:17:85:fd:48:af:d6:8a:0a:b1:ef:c7:57:12:55:ca:28: 68:b9:04:3b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULTUA/sKTtRAclUqFPtPono0Uf5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm N2M5YWNhMDAeFw0yNTA3MTkxNzQxNDlaFw0yNTA3MjAyMTEyNDlaMDMxMTAvBgNV BAMTKDMyQ0E0MTBGQkMxMkNDQTdGNTBEQjgwM0JDMjRCODI4QjU3NEU0QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh9b2LiYz2f9mEZ/COLIVWqcma zG/iIf4n9pxx3NfSpXnfEagGLgvill32J2mJrkBe/Zh2yvURzH4RXwndRpkR9roO 8hwyyfQSUWiVu7xJWb/LGPacpxAqUc81IhKud7UPRcFeu0PmlWeO+vFkdJEvfFg6 ozDENTj+Mm2vicDduHuFvbhqyLhk9ulSf51T9ImsYxLKZsjRH+DJKY2neYw/hwjb X5WEDIOShVHGo49V5ZKyTLU88I+AhxM5M4B2jX/42TAaHKlaXX/LAISqYHxvneVl zHmAQKUBets8MoELkl3UhsyVB7Fg5N4cH1u+jayuAc4i7Nup3YsHgYd9Fp63AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUMspBD7wSzKf1DbgDvCS4KLV05KIwHwYDVR0j BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm SnJLQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83YTc4OWU4Ny1m NDg0LTQyM2QtYTFkNy0yYzJkNTg2MGQyZWMvMC9CMDE3MEFCREM5NTVBQTE3NkJF MkFGMjYyOTk2NzhGMkY3QzlBQ0EwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2WyVqr95IlQlGJQIRRaV z7NquKpb7Z+A8T6hLAvViPHzNOhUQpiWMvY9AvS0LnbmRVjdYV/aBmXFIs8BuVp5 wroneUbsC5hdl4tbCi1YJuNHN7ca6yXx8lX8rMOxSJs3n2AOZ6fMWO5QD+9+pcHA hzJSrBOzd1982+VhTOqobK0LW/wAZMvPVaBud+lViXCBUy6NZX0Yomp9fXKbP1RZ /ogX+8L7qOi5RkiXLPw1kl7rm2RtXdHVNidlIBZti5T1+vk9AvLw1FlShakVu5UG 09HyVRJFpOH1eQ9b0al2zLNJ7NHxdWhlPO1PJEoXhf1Ir9aKCrHvx1cSVcooaLkE Ow== -----END CERTIFICATE-----Generated at Sun Jul 20 14:10:00 2025 by rpki-client