$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: VlFYjeRKgGkwywM2jDhOz2Rqxdjaoii9ZiIPTsycfQc= Subject key identifier: 8E:25:89:20:41:E4:3D:26:4B:BB:F4:1B:9A:F6:AF:75:1B:7F:52:94 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 6F2D0F9E1962988D63EC82B963C5261369C74BA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 0540 Signing time: Thu 24 Jul 2025 11:12:05 +0000 Manifest this update: Thu 24 Jul 2025 11:07:05 +0000 Manifest next update: Fri 25 Jul 2025 14:38:05 +0000 Files and hashes: 1: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: O475B5YNr+mk4vbByMFVmoqbRTenx4kmx66C3HIfdsg=) 2: 3138352e3234342e39352e302f32342d3234203d3e203230343733.roa (hash: wcPx+O7KmTHA1Z17UF9VIIdo6IS06Ij+d7NLeipHdoU=) 3: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: +zgqg7oCfaFMqowtNn81ipaj3irDs5wSCtc6B41Oes8=) 4: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: L+rO+MXrQK3tGBKkhTiQd3Pp/oT0n0nJ8NfAxPcZ/Ik=) 5: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=) 6: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: KhYwWjM/5tZMAc1Ys2Qi/Z3IxKzkYaHG79mNsaA679A=) 7: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: RdOuxQjMUqkQryMcrXonWYYeJva5RY8rohAdG2ITJdw=) 8: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: NTiGjgrJWtlD9Roa9FRQtbjOAAcPR35U4Ayfj8SpKuI=) 9: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=) 10: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: W9NdT6aoX4s9PghUA97T0GAxnEF0Q0u3VMj+QX70R5Y=) 11: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: mH/CiZmwU0yIfVsdjhTMAG/KAtonINfckXbmsVpawiw=) 12: 3138352e3232392e3230332e302f32342d3234203d3e20323036373335.roa (hash: +12elja/TRgK8YWG00PTJRaGaFKqfWK9R0yIngktuC8=) 13: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: 2mJFb3j98iS3WwOyYDzT/44zu56P1Mt1+w22nAIK9Eo=) 14: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=) 15: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=) 16: 33362e3235352e39342e302f32332d3233203d3e203632323430.roa (hash: cEllpKs9D7QXOnlcaRDylPTaKGxvLoUwJx/hEnrKHPU=) 17: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: /OGL5Xocpa/mA4GEutGuQoiWc4p3DBj9VM0kpmdQZxo=) 18: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: aTFuiZRKSKlOcP1bFw/QEJGr9kwsAqFvqfR62oNQfMc=) 19: 3138352e3232392e3230302e302f32342d3234203d3e203139343337.roa (hash: EP6RD+ZuD8/aeGRdu5DeM51xsrxE2M7oAfAneTY5Btg=) 20: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: 7MRl2ndToXr+/Nwpi0fWFQSP/EKXsP73R/4IMWd5dgM=) 21: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: fyEm36B55a1pd4HLESzxtTjALoxzu4leetK2j/pzqHY=) 22: 33362e3235352e39322e302f32332d3234203d3e203139333138.roa (hash: FthEwpOIKT5rKWCqEXY9gMB5simU3azPQORqXvTeqVo=) 23: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: pZ5orJfPM2Swty8pViUFi+3AU9F8dWfI/4RA51dT4rY=) 24: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: ezbmX/yRe+yRvkLs/8FFZoupwCiBI67aZ+0JqkrMl4Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 14:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2d:0f:9e:19:62:98:8d:63:ec:82:b9:63:c5:26:13:69:c7:4b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Jul 24 11:07:05 2025 GMT Not After : Jul 25 14:38:05 2025 GMT Subject: CN=8E25892041E43D264BBBF41B9AF6AF751B7F5294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:89:da:1d:75:4d:14:9b:a6:6f:66:8c:f6: 9a:2f:e0:86:7e:dc:49:81:d5:22:3a:51:56:68:b8: 8b:49:fc:99:de:d6:c3:f8:bf:0f:3c:08:09:a2:aa: 74:3c:99:bc:90:f6:e7:b5:1e:e1:9f:37:13:2d:93: ab:2c:9e:65:ec:f5:7a:9c:48:f4:96:f5:63:db:36: 9e:aa:be:75:1c:e5:69:3d:c5:2e:e6:e1:0e:31:62: 66:36:31:5b:05:50:4d:64:e7:70:18:98:ac:69:0e: c9:7f:4f:e5:1f:ac:07:15:ee:c6:3b:80:06:77:3d: 70:f2:98:0f:84:70:a6:04:a7:93:10:b9:0c:2c:5f: 7f:6f:38:32:67:70:30:cd:79:bb:4f:70:e5:5b:18: 80:bd:e3:1b:23:e7:f3:50:92:8f:bc:41:76:17:f6: ec:02:5f:6d:65:cb:77:d2:27:3b:2c:11:cb:fd:8d: ac:74:6d:50:51:b6:16:3f:60:e4:a7:9d:13:70:51: 9a:a4:19:61:3c:8f:df:7a:d6:45:91:26:51:d2:1d: 19:70:75:f6:7d:ad:8b:c2:be:fd:b1:b3:33:a1:64: 80:4b:0e:62:60:3c:7b:90:21:77:dd:ec:6c:bf:13: 20:f2:9f:61:b0:a5:07:93:7c:de:47:d5:25:bb:66: e3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:25:89:20:41:E4:3D:26:4B:BB:F4:1B:9A:F6:AF:75:1B:7F:52:94 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:49:71:d8:eb:cc:1b:f4:3c:25:0a:6e:e6:55:8a:24:81:ce: 56:1f:7a:0a:84:85:5f:0b:b0:c7:74:89:11:d0:72:3b:7d:e6: 4f:7a:fc:20:4e:a6:19:55:10:47:49:3f:58:b0:5c:a9:e0:b8: cb:6f:ea:5f:1c:08:3f:b5:bd:ea:51:fe:80:79:59:ef:4b:71: 69:e9:3a:34:18:72:24:4b:24:b4:24:3b:34:c5:aa:50:11:b7: b7:63:6f:e0:8b:38:38:41:71:47:e5:d4:cd:15:7d:68:8b:7a: 74:fd:8f:2d:e4:a3:6d:64:51:3c:f3:b6:ca:de:a4:3e:45:f0: bb:56:76:95:c0:6a:98:f3:d5:2f:c6:b5:59:79:e0:7d:c9:c4: 38:c3:b8:e1:71:38:d1:f8:26:c1:7f:46:bf:62:73:29:6a:1d: 7b:2b:95:1f:1f:da:d2:dd:f7:71:7f:94:73:28:d7:e7:f4:1b: 5a:96:cb:ac:14:92:cf:c6:0f:4a:7e:2a:44:7c:c2:46:5b:d5: c2:a6:b1:83:63:78:8b:82:62:5a:d9:36:7d:8c:4e:fe:38:97: 68:c4:4a:a4:34:ba:25:e0:f7:13:de:92:a6:19:10:67:c2:7d: ba:31:85:6d:ae:34:df:3f:f1:3c:1b:c2:03:a8:6f:31:10:d7: 63:ab:c4:90 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUby0PnhlimI1j7IK5Y8UmE2nHS6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNTA3MjQxMTA3MDVaFw0yNTA3MjUxNDM4MDVaMDMxMTAvBgNV BAMTKDhFMjU4OTIwNDFFNDNEMjY0QkJCRjQxQjlBRjZBRjc1MUI3RjUyOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyTYnaHXVNFJumb2aM9pov4IZ+ 3EmB1SI6UVZouItJ/Jne1sP4vw88CAmiqnQ8mbyQ9ue1HuGfNxMtk6ssnmXs9Xqc SPSW9WPbNp6qvnUc5Wk9xS7m4Q4xYmY2MVsFUE1k53AYmKxpDsl/T+UfrAcV7sY7 gAZ3PXDymA+EcKYEp5MQuQwsX39vODJncDDNebtPcOVbGIC94xsj5/NQko+8QXYX 9uwCX21ly3fSJzssEcv9jax0bVBRthY/YOSnnRNwUZqkGWE8j9961kWRJlHSHRlw dfZ9rYvCvv2xszOhZIBLDmJgPHuQIXfd7Gy/EyDyn2GwpQeTfN5H1SW7ZuPlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUjiWJIEHkPSZLu/QbmvavdRt/UpQwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0lx2OvMG/Q8JQpu5lWK JIHOVh96CoSFXwuwx3SJEdByO33mT3r8IE6mGVUQR0k/WLBcqeC4y2/qXxwIP7W9 6lH+gHlZ70txaek6NBhyJEsktCQ7NMWqUBG3t2Nv4Is4OEFxR+XUzRV9aIt6dP2P LeSjbWRRPPO2yt6kPkXwu1Z2lcBqmPPVL8a1WXngfcnEOMO44XE40fgmwX9Gv2Jz KWodeyuVHx/a0t33cX+UcyjX5/QbWpbLrBSSz8YPSn4qRHzCRlvVwqaxg2N4i4Ji Wtk2fYxO/jiXaMRKpDS6JeD3E96SphkQZ8J9ujGFba403z/xPBvCA6hvMRDXY6vE kA== -----END CERTIFICATE-----Generated at Thu Jul 24 20:47:02 2025 by rpki-client