$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: kzX7FDy/Kzehe04VcuEMzTfv4MMg7Q1+fAX6e+zzjpY= Subject key identifier: 3C:C3:12:CC:88:CE:02:BC:E4:9B:19:7B:A1:23:CB:A3:6D:C1:B3:85 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 1DD71CC868FAC38144CCBBD9DBF75CECF87300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 053E Signing time: Tue 22 Jul 2025 22:01:56 +0000 Manifest this update: Tue 22 Jul 2025 21:56:56 +0000 Manifest next update: Thu 24 Jul 2025 00:55:56 +0000 Files and hashes: 1: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: fyEm36B55a1pd4HLESzxtTjALoxzu4leetK2j/pzqHY=) 2: 33362e3235352e39322e302f32332d3234203d3e203139333138.roa (hash: FthEwpOIKT5rKWCqEXY9gMB5simU3azPQORqXvTeqVo=) 3: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=) 4: 33362e3235352e39342e302f32332d3233203d3e203632323430.roa (hash: cEllpKs9D7QXOnlcaRDylPTaKGxvLoUwJx/hEnrKHPU=) 5: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: W9NdT6aoX4s9PghUA97T0GAxnEF0Q0u3VMj+QX70R5Y=) 6: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: +zgqg7oCfaFMqowtNn81ipaj3irDs5wSCtc6B41Oes8=) 7: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: ezbmX/yRe+yRvkLs/8FFZoupwCiBI67aZ+0JqkrMl4Q=) 8: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: RdOuxQjMUqkQryMcrXonWYYeJva5RY8rohAdG2ITJdw=) 9: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: pRlGSmEJ40IwDMD2uxXSuUeJVfCTqo1ZFsNBIV/+3zQ=) 10: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=) 11: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: NTiGjgrJWtlD9Roa9FRQtbjOAAcPR35U4Ayfj8SpKuI=) 12: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: 7MRl2ndToXr+/Nwpi0fWFQSP/EKXsP73R/4IMWd5dgM=) 13: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: /OGL5Xocpa/mA4GEutGuQoiWc4p3DBj9VM0kpmdQZxo=) 14: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: L+rO+MXrQK3tGBKkhTiQd3Pp/oT0n0nJ8NfAxPcZ/Ik=) 15: 3138352e3234342e39352e302f32342d3234203d3e203230343733.roa (hash: wcPx+O7KmTHA1Z17UF9VIIdo6IS06Ij+d7NLeipHdoU=) 16: 3138352e3232392e3230332e302f32342d3234203d3e20323036373335.roa (hash: +12elja/TRgK8YWG00PTJRaGaFKqfWK9R0yIngktuC8=) 17: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: KhYwWjM/5tZMAc1Ys2Qi/Z3IxKzkYaHG79mNsaA679A=) 18: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: aTFuiZRKSKlOcP1bFw/QEJGr9kwsAqFvqfR62oNQfMc=) 19: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: 2mJFb3j98iS3WwOyYDzT/44zu56P1Mt1+w22nAIK9Eo=) 20: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=) 21: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: mH/CiZmwU0yIfVsdjhTMAG/KAtonINfckXbmsVpawiw=) 22: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=) 23: 3138352e3232392e3230302e302f32342d3234203d3e203139343337.roa (hash: EP6RD+ZuD8/aeGRdu5DeM51xsrxE2M7oAfAneTY5Btg=) 24: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: O475B5YNr+mk4vbByMFVmoqbRTenx4kmx66C3HIfdsg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 00:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d7:1c:c8:68:fa:c3:81:44:cc:bb:d9:db:f7:5c:ec:f8:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Jul 22 21:56:56 2025 GMT Not After : Jul 24 00:55:56 2025 GMT Subject: CN=3CC312CC88CE02BCE49B197BA123CBA36DC1B385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d3:3b:3f:9c:cb:63:19:99:b5:51:54:fb:65: 4e:0a:7d:d0:1f:3b:86:2f:2f:7d:61:d0:5d:2a:56: c7:2e:1a:9a:73:a8:44:cc:e4:b9:da:f2:f1:57:08: f3:a1:28:48:d3:d8:74:e7:98:ab:82:52:ba:59:6c: 37:60:d9:a8:23:25:1f:c9:69:d7:63:0e:f8:09:b5: e4:df:ba:e0:4e:3c:ef:c4:51:a2:dd:c4:e2:e9:89: 10:60:af:a5:dd:87:35:5d:82:79:22:46:b9:43:53: 87:1d:9e:59:72:e8:e6:81:29:40:3e:5d:f9:da:ec: 76:51:ce:1d:e0:92:b6:5a:9c:dc:83:ab:36:13:f0: d0:06:46:09:c0:84:fa:a7:e6:9c:c6:f8:26:0b:da: 69:61:fa:15:9a:43:3c:80:19:b8:16:e2:82:d7:8f: e6:72:3a:e8:88:23:c5:0d:95:34:8f:ea:6d:85:21: 34:64:bc:12:46:45:4b:1d:0e:ed:56:1e:4b:19:25: a5:ae:32:05:b5:a6:9f:9f:ad:e2:d2:e8:6a:b9:2f: 06:32:63:49:d1:aa:6e:a8:e1:0a:83:13:41:60:91: c6:3d:39:92:0c:a0:29:f9:8e:5c:1f:21:7e:14:d5: a7:5f:3d:be:e4:4e:bf:b3:fb:67:63:19:b7:c1:5a: af:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C3:12:CC:88:CE:02:BC:E4:9B:19:7B:A1:23:CB:A3:6D:C1:B3:85 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:e9:bf:02:d4:cf:ca:72:bb:07:33:55:fe:d1:0b:00:2f:a6: cc:a8:bb:81:fc:3a:d5:24:94:ae:72:52:17:a2:6a:6b:44:3a: 41:a9:f3:b3:80:47:af:99:d7:e5:b9:92:96:29:5e:d8:94:7f: 37:31:3b:c0:42:8d:3c:13:15:06:3a:8b:6a:1a:42:42:73:3c: af:8d:b7:e3:72:19:df:e0:d9:13:6d:20:68:81:f0:5b:90:d7: 1b:b4:6c:0f:fc:3a:29:82:37:89:9c:63:05:f6:ee:5a:85:d5: 47:12:ec:e9:fa:e2:99:62:28:bd:12:e7:2f:df:e1:b4:7b:df: 96:53:e1:0f:f8:cd:01:90:11:1b:e1:74:66:5e:74:00:3a:22: 40:c4:79:96:fd:1e:22:d1:09:80:0c:9f:39:e1:0f:d8:96:54: a4:99:12:3c:96:5b:84:a6:77:6b:bd:cd:ba:61:51:6e:32:b4: b2:6e:93:f2:95:07:f2:6e:4b:81:e4:e3:50:32:06:2d:7e:e3: ba:3e:a5:e5:90:3f:48:19:d2:7a:1b:60:3a:49:95:30:aa:62: ad:06:97:30:10:c5:2b:d8:5a:17:61:06:b4:02:47:74:f9:81: cd:04:11:6d:ce:c1:40:bd:84:bf:ca:3a:41:3f:72:c8:14:de: 7d:fd:d2:48 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgITHdccyGj6w4FEzLvZ2/dc7PhzADANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygzZTg3MGI5YTcwMDNjNGZkOWM1MWJkMzU0YTlkZWZhM2Zi NzdiNGE5MB4XDTI1MDcyMjIxNTY1NloXDTI1MDcyNDAwNTU1NlowMzExMC8GA1UE AxMoM0NDMzEyQ0M4OENFMDJCQ0U0OUIxOTdCQTEyM0NCQTM2REMxQjM4NTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANDTOz+cy2MZmbVRVPtlTgp90B87 hi8vfWHQXSpWxy4amnOoRMzkudry8VcI86EoSNPYdOeYq4JSullsN2DZqCMlH8lp 12MO+Am15N+64E4878RRot3E4umJEGCvpd2HNV2CeSJGuUNThx2eWXLo5oEpQD5d +drsdlHOHeCStlqc3IOrNhPw0AZGCcCE+qfmnMb4JgvaaWH6FZpDPIAZuBbigteP 5nI66IgjxQ2VNI/qbYUhNGS8EkZFSx0O7VYeSxklpa4yBbWmn5+t4tLoarkvBjJj SdGqbqjhCoMTQWCRxj05kgygKfmOXB8hfhTVp189vuROv7P7Z2MZt8Far1cCAwEA AaOCAkcwggJDMB0GA1UdDgQWBBQ8wxLMiM4CvOSbGXuhI8ujbcGzhTAfBgNVHSME GDAWgBQ+hwuacAPE/ZxRvTVKne+j+3e0qTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIy NzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1MUJEMzU0QTlERUZBM0ZCNzdCNEE5LmNy bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvUG9jTG1uQUR4UDJjVWIwMVNwM3ZvX3Qz dEtrLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M1ZDE4ZTgyLTRk NjgtNDVhNi1hNWRmLWNhYzExNWFkMjI3OS8wLzNFODcwQjlBNzAwM0M0RkQ5QzUx QkQzNTRBOURFRkEzRkI3N0I0QTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJ6b8C1M/KcrsHM1X+0QsA L6bMqLuB/DrVJJSuclIXomprRDpBqfOzgEevmdfluZKWKV7YlH83MTvAQo08ExUG OotqGkJCczyvjbfjchnf4NkTbSBogfBbkNcbtGwP/DopgjeJnGMF9u5ahdVHEuzp +uKZYii9Eucv3+G0e9+WU+EP+M0BkBEb4XRmXnQAOiJAxHmW/R4i0QmADJ854Q/Y llSkmRI8lluEpndrvc26YVFuMrSybpPylQfybkuB5ONQMgYtfuO6PqXlkD9IGdJ6 G2A6SZUwqmKtBpcwEMUr2FoXYQa0Akd0+YHNBBFtzsFAvYS/yjpBP3LIFN59/dJI -----END CERTIFICATE-----Generated at Wed Jul 23 17:58:12 2025 by rpki-client