$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft File: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft (raw, json) Hash identifier: FYMEeV1XweZw2e4bEPiabdzW0z8qN1xFv1jYOOTPEFg= Subject key identifier: 69:FB:B0:71:91:56:A2:E5:F8:F9:1B:E9:91:28:DA:F0:A1:17:C2:64 Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 772822CD33D2AC0943DECE07FCA54710AEEA0370 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft Manifest number: 1F Signing time: Sun 20 Jul 2025 07:01:09 +0000 Manifest this update: Sun 20 Jul 2025 06:56:09 +0000 Manifest next update: Mon 21 Jul 2025 07:20:09 +0000 Files and hashes: 1: 326131343a373538303a666637373a3a2f34382d3438203d3e20323033393135.roa (hash: F5/aVvIreRBQw19BMcjvtJaH6IAMjMe6w+V1TelngZU=) 2: 326131343a373538303a666637363a3a2f34382d3438203d3e20323033393135.roa (hash: BkHJMnQDPpptXCMBwmodU4zh5ifR8UsDSgAYqmaYZ4U=) 3: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (hash: o5X2AD19YxTsiyZsqxaO6LcogckEDGsmBlZBOovT7M0=) 4: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (hash: tQOuxzjoO2gOr2+IueULnKw1bzMsp7EoDLzHElEe0zw=) 5: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (hash: zyXKXDvOIxNrBW5QrQm19sSxkRDmx9tFlmRCkefYJk4=) 6: 326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa (hash: U6uqpQVMvicANeE1+RdGwfiUHzScjnhV12wDyDdzXu8=) 7: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (hash: AKQUYWOgneoO1qpRyAABoiC4d23AXJsif2Ph8QnUXyw=) 8: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl (hash: imV/gTZ1c+w4FcVAKYIWvITWzBNEJtTQzWj77A0TYN4=) 9: 326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa (hash: +Dm2JEqaSsfzmcw/vRVxZqJazGgE0R+iZSKdYatTFPI=) 10: 326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa (hash: GieRIT3AIgJdp4hafy8WbPzRF4MVeOc7uBzRolQt/Os=) 11: 326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa (hash: wat7PE9fGydcz5ayop5kavvbRXomHufzivqvTvbesao=) 12: 326131343a373538303a666637613a3a2f34382d3438203d3e20313437313831.roa (hash: 5RP7M7zYFqJ8+Jv2ZfpyR8ID3GlBhQWXQs6XRm7WB50=) 13: 326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa (hash: H+78AH4TYlugOgXjwzDN7rCd3EnIWoVZYuyJbZiEnfs=) 14: 326131343a373538303a666637353a3a2f34382d3438203d3e20323033393135.roa (hash: 9QAAhr1wwrheqUnrWa4FkevZ/+WKuCODK+T1ZZmcwl8=) 15: 326131343a373538303a666637383a3a2f34382d3438203d3e20323033393135.roa (hash: HnRWSrEpeOmuzTKhKK+Ly8/65pwZBhG8hC56Nip/vA0=) 16: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (hash: h9EOAcugJrwunceFQsvuVh/viiSOkDi6CuOcdJIPWnA=) 17: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (hash: 4JRXyyfbh5S+gtwReXpBVGHg5Hfkr5m0dh1qPG0/BKw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 07:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:28:22:cd:33:d2:ac:09:43:de:ce:07:fc:a5:47:10:ae:ea:03:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Jul 20 06:56:09 2025 GMT Not After : Jul 21 07:20:09 2025 GMT Subject: CN=69FBB0719156A2E5F8F91BE99128DAF0A117C264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:77:1e:c3:dc:70:3e:fd:23:f9:16:df:cf:62: c3:f8:67:67:c0:56:78:b7:85:ae:c7:86:ae:5f:f6: 22:3b:09:1c:cc:ab:62:a5:76:0a:fd:3a:f2:06:fa: 6b:3e:4f:f0:fb:83:22:f1:5f:56:c4:a5:d6:d2:47: a0:89:eb:19:7f:0a:37:a8:8f:8c:c6:fc:34:15:8d: 6e:fb:b3:67:e5:c1:e0:b8:f4:20:f7:e7:83:24:6a: f3:f7:dc:c8:85:d4:e1:a4:f5:13:4f:bc:73:13:19: 83:8a:da:1d:98:15:70:d5:ab:71:50:90:dd:d8:29: db:35:72:a4:85:28:ea:5a:3d:97:b0:29:d8:82:b1: d6:ea:44:38:ab:98:98:7c:00:e3:74:5e:98:03:3a: e4:53:d3:f8:07:31:b6:b2:a9:98:fe:78:26:65:93: 93:8f:54:8b:58:6d:0b:17:03:e4:65:9e:53:8f:46: 3b:fc:79:c7:a3:b8:a4:6f:d1:49:8f:33:70:82:97: ff:81:cb:3b:1e:de:27:ca:5a:50:aa:cb:9c:71:ce: 06:f2:33:0f:c1:ca:24:27:12:b9:a9:7a:89:b4:52: 77:75:60:6c:53:4c:1c:c9:41:26:a5:c9:65:91:33: 59:53:40:24:22:cd:08:97:c3:02:68:a8:66:82:db: 96:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FB:B0:71:91:56:A2:E5:F8:F9:1B:E9:91:28:DA:F0:A1:17:C2:64 X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:6f:53:1a:af:c0:a8:4a:d7:a1:86:cc:d9:6a:07:95:10:a3: 4a:df:a3:e9:99:fb:f2:4e:2c:b7:01:bb:2a:48:5d:67:55:8f: 28:29:c3:dc:fa:63:9c:02:00:a0:55:8f:02:64:a8:56:82:70: d4:98:40:a7:ad:b9:72:3e:03:cf:1f:31:c6:46:66:df:13:67: 62:2d:76:b4:04:81:d3:6e:5b:24:59:90:ee:ae:59:4d:50:67: c0:0b:cb:e6:c2:f2:77:f4:04:a4:d8:4c:d8:3a:71:96:ca:7d: b0:dd:02:36:2a:c1:45:c8:e0:79:a4:f8:d2:0d:cb:8a:09:cc: 3c:b8:65:24:4e:c3:00:38:6e:21:aa:f2:9f:d2:a9:11:bf:12: 30:b9:29:e6:e2:07:68:90:79:f9:15:2c:d4:54:12:a2:ec:30: d4:e6:cb:90:f2:ff:24:00:f2:3f:e0:32:fa:85:fc:ed:d1:85: 44:0c:5e:61:59:04:56:c6:77:b8:ef:a6:f6:01:1c:b0:4c:8c: 44:e1:66:ae:44:00:8f:61:43:32:10:be:ad:2f:3d:07:e3:a9: a5:4e:0c:44:25:ef:ad:26:4e:79:a6:3d:0f:6c:5c:61:22:05: f5:40:88:7c:1d:e0:50:f1:07:ce:aa:92:c1:0d:21:75:42:25: cc:21:59:d7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdygizTPSrAlD3s4H/KVHEK7qA3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNTA3MjAwNjU2MDlaFw0yNTA3MjEwNzIwMDlaMDMxMTAvBgNV BAMTKDY5RkJCMDcxOTE1NkEyRTVGOEY5MUJFOTkxMjhEQUYwQTExN0MyNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCodx7D3HA+/SP5Ft/PYsP4Z2fA Vni3ha7Hhq5f9iI7CRzMq2Kldgr9OvIG+ms+T/D7gyLxX1bEpdbSR6CJ6xl/Cjeo j4zG/DQVjW77s2flweC49CD354MkavP33MiF1OGk9RNPvHMTGYOK2h2YFXDVq3FQ kN3YKds1cqSFKOpaPZewKdiCsdbqRDirmJh8AON0XpgDOuRT0/gHMbayqZj+eCZl k5OPVItYbQsXA+RlnlOPRjv8ecejuKRv0UmPM3CCl/+Byzse3ifKWlCqy5xxzgby Mw/ByiQnErmpeom0Und1YGxTTBzJQSalyWWRM1lTQCQizQiXwwJoqGaC25bFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUafuwcZFWouX4+RvpkSja8KEXwmQwHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I3YTBhYTU2LTRhMWQtNGJhOC1hYjY2LWM1OWZlZDRjMzdmYy8xL0NDNzkxQTFG NUNCM0JCMkNBRjdDMjgzODIxMTJFMjY5QkYxRDBGMkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwb1Ma r8CoStehhszZageVEKNK36PpmfvyTiy3AbsqSF1nVY8oKcPc+mOcAgCgVY8CZKhW gnDUmECnrblyPgPPHzHGRmbfE2diLXa0BIHTblskWZDurllNUGfAC8vmwvJ39ASk 2EzYOnGWyn2w3QI2KsFFyOB5pPjSDcuKCcw8uGUkTsMAOG4hqvKf0qkRvxIwuSnm 4gdokHn5FSzUVBKi7DDU5suQ8v8kAPI/4DL6hfzt0YVEDF5hWQRWxne476b2ARyw TIxE4WauRACPYUMyEL6tLz0H46mlTgxEJe+tJk55pj0PbFxhIgX1QIh8HeBQ8QfO qpLBDSF1QiXMIVnX -----END CERTIFICATE-----Generated at Sun Jul 20 16:23:32 2025 by rpki-client