$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: 6pw1bom5/MGL47jl0J7Q1SbFVw7f+IumuzADcomE5Kk= Subject key identifier: 6F:05:44:CA:6D:0B:2E:B4:12:D2:F3:45:1D:B6:D6:B4:54:E1:F6:0F Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 752E97C099D8C20D2C1062B8BA9FF75E156D38AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: A7 Signing time: Tue 22 Jul 2025 05:41:54 +0000 Manifest this update: Tue 22 Jul 2025 05:36:54 +0000 Manifest next update: Wed 23 Jul 2025 06:24:54 +0000 Files and hashes: 1: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: uS9gEtZh/ZMXQ+qjbrJxjdhnMbgdt1/2M3Fm3ckm0o4=) 2: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: ad3eCylfdMfYW/Id31ooquQQLvZwumdWGj+lszfaEsA=) 3: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: Wt7cVymDfWBwMzR8hqsJLmmyo1G55vHli1MG8ova8P4=) 4: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: bLMKUTu2LDh7TH4JEFo2TwGKCx3JiqqNy6hRd14etMM=) 5: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: sUFXVk5mJuzGXi+txvF0jHfWX/7COhdmW+wdhnGLLbA=) 6: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: 4eRihxuyWrFmyrmWNHP+q80BiQuGj/+XTMKJH0kDcVI=) 7: 3139342e3132342e3233342e302f32342d3234203d3e20393936.roa (hash: ZoxbCHQMtNZPfbUxrxLpOcXkuKUfw+Blft69mSm2oZk=) 8: 3139342e3132342e3233342e302f32342d3234203d3e203534333339.roa (hash: wdUsagydvVBIUao6PJHWRop4oPMEKXc9pJyNsG4SW9o=) 9: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: hZUNrJfyUHgUntGAqdSVlBaE4wglKTi9y0zmmly1bMY=) 10: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: yq+hWHhfyocRCOJbnYGyzdHlkfHxXD4gPxuVgEPCc0g=) 11: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: 0XA7loK9zcLZ4LH8gJRLIhKhFochpbrC40dXD0XEE/8=) 12: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: qgpa17rXBGEZyX0zTURKp2TS7HA9WA0LAdj3r9yq+jg=) 13: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: lmVh0tkdqz2ZaktlfIJzzJLuyL6wItEcUEPI+PVNqdo=) 14: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: E+WPtm+HS9AVsakqcLrBjACoAm/NbChhrd4PG4s+X5o=) 15: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: Bvg0bczZRvr0hNeXj13n0Q8N1O34FXLeiihKmXvd96c=) 16: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: MbX2Jo3+qNy9yJ51qumhhpSA5fjjpKXnL9+Ixdd7q/M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 06:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:2e:97:c0:99:d8:c2:0d:2c:10:62:b8:ba:9f:f7:5e:15:6d:38:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Jul 22 05:36:54 2025 GMT Not After : Jul 23 06:24:54 2025 GMT Subject: CN=6F0544CA6D0B2EB412D2F3451DB6D6B454E1F60F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:48:5c:25:42:ca:83:0b:e1:cb:97:4f:f2:63: 03:72:e8:0f:06:58:7e:9e:40:d2:a0:df:48:c5:e8: ef:98:bc:08:da:a4:6d:11:92:78:ed:e8:89:0b:d8: 9b:d6:b9:61:0f:cd:ea:f1:10:35:43:c1:2c:eb:42: 8f:c7:3d:df:16:21:19:db:9c:cb:2e:48:1a:78:32: ed:fb:44:56:45:f0:32:fe:21:31:cf:23:84:11:c3: d2:27:8c:14:39:a2:b2:84:43:38:97:90:a9:f4:53: 4a:fc:e0:00:4f:f4:c5:5f:c0:20:2a:44:d7:ba:1e: 8b:6e:ea:ff:4f:83:07:9d:5e:49:25:d3:3e:61:2c: 59:f9:a6:19:9c:47:a5:4a:64:30:93:a8:80:ca:4e: 2e:b6:e9:2c:b5:1e:90:c6:a0:4e:9c:dd:ef:d5:58: a8:d4:b4:0e:5c:96:80:7c:57:2b:2e:11:d1:89:9e: 45:74:24:bd:8e:ff:d3:7d:1e:6e:45:35:37:81:42: 07:92:3b:bf:4c:40:45:6b:79:c5:7f:71:3e:af:39: 5b:34:68:05:b1:06:cb:aa:1f:c3:59:81:de:3f:2d: f7:c3:c2:7b:ef:73:0a:85:97:50:34:dd:62:e1:84: 64:95:6f:59:1e:86:b5:a6:70:c8:5b:13:6c:77:3d: 86:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:05:44:CA:6D:0B:2E:B4:12:D2:F3:45:1D:B6:D6:B4:54:E1:F6:0F X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:68:20:7c:e6:2b:5c:3d:51:c7:89:52:15:8c:73:52:02:4c: b0:b3:4d:19:62:cb:91:f4:8d:01:ba:6a:9e:5d:40:ca:7a:96: 21:d5:62:c7:50:41:5d:e6:2f:ca:a6:1a:6d:d6:85:5a:39:00: 29:30:4a:5c:c1:b0:b8:e0:72:4e:6e:f2:51:8c:5f:5a:b7:44: 63:09:4f:a9:86:08:bc:f8:d4:da:dd:2a:ce:a6:f5:cd:c8:89: 6b:52:8b:6b:5f:1a:83:d3:ce:bf:76:b5:a2:d9:a5:6e:8e:df: 73:1d:7a:e2:9a:ca:e3:b8:44:99:0a:43:ef:9c:d4:5e:aa:e6: 7c:3c:1f:eb:cc:22:9b:d8:c1:6d:30:56:c7:90:25:c1:ca:d4: e7:65:1c:52:53:e3:26:51:f3:48:88:1b:00:83:ef:b4:24:ec: c9:40:ae:1c:65:b5:0f:4b:83:70:2b:2f:07:15:46:09:a5:5f: 54:e9:02:0d:c0:23:e9:ad:8a:3f:99:be:58:3c:d0:93:86:5d: b6:76:46:99:1e:64:79:2a:d4:fc:86:82:4a:f0:48:da:8a:4c: 09:56:02:1f:ab:23:2a:f5:cf:5b:6d:13:ed:f2:99:d5:69:38: bb:d8:a1:13:f1:57:db:b5:aa:d4:25:7c:a0:f7:01:0c:cb:fe: 9b:27:c3:19 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdS6XwJnYwg0sEGK4up/3XhVtOKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNTA3MjIwNTM2NTRaFw0yNTA3MjMwNjI0NTRaMDMxMTAvBgNV BAMTKDZGMDU0NENBNkQwQjJFQjQxMkQyRjM0NTFEQjZENkI0NTRFMUY2MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDSFwlQsqDC+HLl0/yYwNy6A8G WH6eQNKg30jF6O+YvAjapG0Rknjt6IkL2JvWuWEPzerxEDVDwSzrQo/HPd8WIRnb nMsuSBp4Mu37RFZF8DL+ITHPI4QRw9InjBQ5orKEQziXkKn0U0r84ABP9MVfwCAq RNe6Hotu6v9PgwedXkkl0z5hLFn5phmcR6VKZDCTqIDKTi626Sy1HpDGoE6c3e/V WKjUtA5cloB8VysuEdGJnkV0JL2O/9N9Hm5FNTeBQgeSO79MQEVrecV/cT6vOVs0 aAWxBsuqH8NZgd4/LffDwnvvcwqFl1A03WLhhGSVb1kehrWmcMhbE2x3PYb7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUbwVEym0LLrQS0vNFHbbWtFTh9g8wHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2ggfOYrXD1Rx4lSFYxz UgJMsLNNGWLLkfSNAbpqnl1AynqWIdVix1BBXeYvyqYabdaFWjkAKTBKXMGwuOBy Tm7yUYxfWrdEYwlPqYYIvPjU2t0qzqb1zciJa1KLa18ag9POv3a1otmlbo7fcx16 4prK47hEmQpD75zUXqrmfDwf68wim9jBbTBWx5AlwcrU52UcUlPjJlHzSIgbAIPv tCTsyUCuHGW1D0uDcCsvBxVGCaVfVOkCDcAj6a2KP5m+WDzQk4ZdtnZGmR5keSrU /IaCSvBI2opMCVYCH6sjKvXPW20T7fKZ1Wk4u9ihE/FX27Wq1CV8oPcBDMv+myfD GQ== -----END CERTIFICATE-----Generated at Tue Jul 22 11:50:19 2025 by rpki-client