$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: pQ0F6pIHXWhyb2hF2vyi1tDhLLFVmZ1jrE4VakygQos= Subject key identifier: A7:42:29:2C:24:87:34:78:25:E8:45:39:8B:F1:7B:36:F8:29:E9:42 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 535B87A463BE283631DF9034B7B454E7E7AF8E2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: AA Signing time: Thu 24 Jul 2025 10:57:05 +0000 Manifest this update: Thu 24 Jul 2025 10:52:05 +0000 Manifest next update: Fri 25 Jul 2025 12:43:05 +0000 Files and hashes: 1: 3139342e3132342e3233342e302f32342d3234203d3e203534333339.roa (hash: wdUsagydvVBIUao6PJHWRop4oPMEKXc9pJyNsG4SW9o=) 2: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: lmVh0tkdqz2ZaktlfIJzzJLuyL6wItEcUEPI+PVNqdo=) 3: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: Wt7cVymDfWBwMzR8hqsJLmmyo1G55vHli1MG8ova8P4=) 4: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: E+WPtm+HS9AVsakqcLrBjACoAm/NbChhrd4PG4s+X5o=) 5: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: ZRC2mXIzKI/nfE6a/vPp5O6Luu/iGvnONXPkh9NgU3c=) 6: 3139342e3132342e3233342e302f32342d3234203d3e20393936.roa (hash: ZoxbCHQMtNZPfbUxrxLpOcXkuKUfw+Blft69mSm2oZk=) 7: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: hZUNrJfyUHgUntGAqdSVlBaE4wglKTi9y0zmmly1bMY=) 8: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: bLMKUTu2LDh7TH4JEFo2TwGKCx3JiqqNy6hRd14etMM=) 9: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: sUFXVk5mJuzGXi+txvF0jHfWX/7COhdmW+wdhnGLLbA=) 10: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: yq+hWHhfyocRCOJbnYGyzdHlkfHxXD4gPxuVgEPCc0g=) 11: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: Bvg0bczZRvr0hNeXj13n0Q8N1O34FXLeiihKmXvd96c=) 12: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: 0XA7loK9zcLZ4LH8gJRLIhKhFochpbrC40dXD0XEE/8=) 13: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: 4eRihxuyWrFmyrmWNHP+q80BiQuGj/+XTMKJH0kDcVI=) 14: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: MbX2Jo3+qNy9yJ51qumhhpSA5fjjpKXnL9+Ixdd7q/M=) 15: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: ad3eCylfdMfYW/Id31ooquQQLvZwumdWGj+lszfaEsA=) 16: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: qgpa17rXBGEZyX0zTURKp2TS7HA9WA0LAdj3r9yq+jg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 12:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:5b:87:a4:63:be:28:36:31:df:90:34:b7:b4:54:e7:e7:af:8e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Jul 24 10:52:05 2025 GMT Not After : Jul 25 12:43:05 2025 GMT Subject: CN=A742292C2487347825E845398BF17B36F829E942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:09:49:9f:31:71:77:36:32:3b:44:45:35:bc: 08:8f:b9:e0:31:f5:d5:76:eb:65:c7:91:d7:ca:b8: da:4c:61:c1:d3:89:5a:67:63:31:06:41:c3:0b:71: 81:62:02:74:c3:b5:07:86:04:2c:b0:3e:d4:16:ec: 88:ab:1b:a7:a7:b0:70:65:61:84:5f:00:53:4c:16: e4:cf:37:11:6b:67:0e:3e:58:82:93:84:0c:1a:5a: 12:b0:7b:65:91:8f:bb:8f:5f:fb:23:51:c2:3f:07: 54:e0:6c:4d:3e:49:ab:b4:ab:ca:c3:a2:ca:dd:7a: 44:86:b4:41:dc:94:0d:ce:88:84:e7:b0:a0:a7:ac: 9a:78:6f:8d:74:13:be:7b:c3:4e:9d:fb:ca:78:ae: ac:4e:7d:b2:b1:fd:c7:86:cf:d6:06:a3:36:7d:ba: 79:cf:05:da:ac:5a:0a:18:04:99:e9:15:fc:69:ef: ff:9c:f8:35:02:66:e4:ec:91:33:bd:57:21:63:6d: 0a:e3:02:01:9c:ea:dc:f8:19:92:90:0b:7a:36:d4: 25:2d:5a:a3:28:dc:5b:2b:5f:52:b7:2c:ad:6f:6f: ec:ed:39:5e:e1:90:01:f3:65:d9:42:56:5a:49:dd: 0a:97:7f:dc:59:b8:d5:e9:0f:54:a4:4a:0b:f4:16: c3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:42:29:2C:24:87:34:78:25:E8:45:39:8B:F1:7B:36:F8:29:E9:42 X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:7f:5b:0a:c3:99:13:a3:14:6c:4f:cb:0e:6c:de:01:62:1c: ee:8a:c3:c6:ff:b9:8e:b5:bc:d8:91:fe:a9:3c:a5:f3:ac:57: 8d:76:01:96:8a:70:f0:59:86:2d:75:f1:74:2c:ee:a0:09:93: e9:96:36:b2:f1:a2:ce:f4:a6:0a:fe:79:fa:5b:1e:7a:65:b8: 79:d8:d2:55:f8:30:50:f9:29:56:04:c8:b7:76:ac:d1:b3:af: ee:31:33:b6:5c:41:9f:7a:c9:8a:0a:2f:24:17:55:a7:c3:fa: 0b:fc:98:0d:56:77:71:75:8d:35:e8:d2:cc:1e:bd:3d:6c:09: 47:63:96:35:96:d0:bc:c2:ee:86:0f:cd:6f:2a:68:2b:95:f6: 6f:72:70:14:a6:f7:6f:85:80:49:2b:e8:4c:51:7d:22:f4:f3: ad:1a:a4:63:65:bc:f7:20:ec:d6:81:7d:dd:70:04:bb:0d:9d: 8f:f2:20:07:6f:df:d6:b3:a1:0c:aa:cf:84:1b:a6:4e:e4:74: dc:86:01:3c:59:3a:a1:4d:9e:5f:1c:07:1e:15:a9:86:39:6b: 7d:96:ae:ac:11:ba:68:d5:86:f3:91:aa:4e:04:9b:c1:ff:2d: 5d:af:0d:67:cd:90:89:a9:ec:8e:77:87:09:a6:2d:c9:34:c0: 1f:90:70:cb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUU1uHpGO+KDYx35A0t7RU5+evjiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNTA3MjQxMDUyMDVaFw0yNTA3MjUxMjQzMDVaMDMxMTAvBgNV BAMTKEE3NDIyOTJDMjQ4NzM0NzgyNUU4NDUzOThCRjE3QjM2RjgyOUU5NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvCUmfMXF3NjI7REU1vAiPueAx 9dV262XHkdfKuNpMYcHTiVpnYzEGQcMLcYFiAnTDtQeGBCywPtQW7IirG6ensHBl YYRfAFNMFuTPNxFrZw4+WIKThAwaWhKwe2WRj7uPX/sjUcI/B1TgbE0+Sau0q8rD osrdekSGtEHclA3OiITnsKCnrJp4b410E757w06d+8p4rqxOfbKx/ceGz9YGozZ9 unnPBdqsWgoYBJnpFfxp7/+c+DUCZuTskTO9VyFjbQrjAgGc6tz4GZKQC3o21CUt WqMo3FsrX1K3LK1vb+ztOV7hkAHzZdlCVlpJ3QqXf9xZuNXpD1SkSgv0FsMbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUp0IpLCSHNHgl6EU5i/F7Nvgp6UIwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcH9bCsOZE6MUbE/LDmze AWIc7orDxv+5jrW82JH+qTyl86xXjXYBlopw8FmGLXXxdCzuoAmT6ZY2svGizvSm Cv55+lseemW4edjSVfgwUPkpVgTIt3as0bOv7jEztlxBn3rJigovJBdVp8P6C/yY DVZ3cXWNNejSzB69PWwJR2OWNZbQvMLuhg/NbypoK5X2b3JwFKb3b4WASSvoTFF9 IvTzrRqkY2W89yDs1oF93XAEuw2dj/IgB2/f1rOhDKrPhBumTuR03IYBPFk6oU2e XxwHHhWphjlrfZaurBG6aNWG85GqTgSbwf8tXa8NZ82QiansjneHCaYtyTTAH5Bw yw== -----END CERTIFICATE-----Generated at Fri Jul 25 04:35:35 2025 by rpki-client