$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: IJBQGqD9aSV0WFcKX6iXddvVMhrlKg1Jc3GykMe/Dso= Subject key identifier: E1:EA:E4:93:9E:C6:FD:21:1E:37:DE:14:94:5E:46:7C:9F:F9:35:82 Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 0556497482BEFA76B85CCD50172BC57C2F46A629 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 03E3 Signing time: Thu 24 Jul 2025 17:12:06 +0000 Manifest this update: Thu 24 Jul 2025 17:07:06 +0000 Manifest next update: Fri 25 Jul 2025 20:12:06 +0000 Files and hashes: 1: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: YyMBgTPVms4MPnbkUVc7TpGwl6ukB7kzc/uAePl3SRA=) 2: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: nmhaoLhqUBAnDccEuteaqmwjmYCIqjMWJmqWnwMVbc8=) 3: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: T+9QQX64dOYanRzHKI9rhWnUyaZt9GgRQXrvhvIBrgs=) 4: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: NZcAKMAEu2FS5Zqz0hBFL7Zpu38dDC8QIhg4PJE0Lh4=) 5: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=) 6: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: 2/naNLsZWsKbctisH+91/rgvttkXh//515D4Dxt3bfg=) 7: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: OZBNVOvtp3V7O1L8kF6JcTp/niAHFDMwWI3RV/AoyZY=) 8: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: 67hzJ7+qEviKc+JKiq3KV4OqZ4fSU1BU+NXzASboCBg=) 9: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: yDRyc1h8O+mXAEgAFoITsNpFI2VU0vygznR0PJDNh0M=) 10: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=) 11: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: g8GfxZyUsq5sAHB2Ct+7Z9GS7IIVHVNG2gaO8plmjSA=) 12: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: b1XfOKzUOIAIbez9mbxZEMI+xNod6vAmemUxVtmZlqI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 20:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:56:49:74:82:be:fa:76:b8:5c:cd:50:17:2b:c5:7c:2f:46:a6:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Jul 24 17:07:06 2025 GMT Not After : Jul 25 20:12:06 2025 GMT Subject: CN=E1EAE4939EC6FD211E37DE14945E467C9FF93582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e3:1c:17:f3:9e:2e:4d:bd:ab:ad:8a:e6:78: 38:1c:ed:c7:d7:ad:3a:7f:de:9c:b8:ad:61:e1:3b: cb:a6:f0:0f:9c:b6:6a:6f:80:43:4b:15:17:3c:ee: a6:0e:81:47:ba:82:8d:ee:d7:77:6c:56:dc:60:5d: 13:ff:d1:de:a3:14:c6:d7:fd:c9:aa:57:12:3f:50: b7:89:b7:38:95:ec:7a:db:d9:9e:a8:c8:1d:43:ea: c4:7e:f5:62:b5:25:ff:13:1e:86:39:9a:9f:b6:c0: 1f:0b:c4:3b:d2:27:86:74:88:07:7b:ea:70:73:38: 5d:9c:dd:40:1e:34:1a:73:12:5b:0f:42:f0:2b:01: 58:15:66:3a:19:d3:9b:8c:84:db:df:ee:77:5c:81: 5b:51:7a:3c:f5:eb:a4:26:23:9c:9c:3c:c3:f8:16: 4d:15:d6:eb:7a:b4:a8:e1:f2:44:d7:55:8b:22:7f: ce:81:b9:18:cf:d5:f5:b5:1e:b0:8b:32:d1:63:27: 54:d3:59:3a:37:b0:bb:2e:0b:08:73:1c:d8:aa:2d: fd:26:57:a2:84:45:3b:dd:bc:f9:05:38:33:3c:15: c4:59:0f:1d:71:a6:9d:7a:96:c4:e0:04:91:72:c6: a8:92:2c:1e:7d:cd:92:16:65:a8:ad:d9:b7:f0:f2: 8b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:EA:E4:93:9E:C6:FD:21:1E:37:DE:14:94:5E:46:7C:9F:F9:35:82 X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:df:a9:6f:79:f7:71:56:4c:84:27:ec:53:4b:c5:b3:bd:19: 70:a5:9c:d8:56:71:ca:6c:98:fc:1e:57:96:c7:8d:ed:9a:11: a5:09:9b:17:59:01:13:aa:79:61:88:29:29:83:a8:32:8c:0a: 9d:5d:c5:dd:81:51:17:18:90:f0:71:5c:02:44:38:5f:54:d1: 79:f6:01:43:f7:91:5e:8a:28:83:18:8a:86:44:85:eb:81:b0: f6:f0:5b:0d:71:02:c7:84:cd:31:d7:2c:03:a1:72:26:2d:19: 87:6b:63:9c:a8:e5:97:65:6b:97:a5:f7:48:13:40:48:0f:26: 3e:67:c8:e1:70:12:ad:a8:98:18:b8:db:6a:77:67:24:b6:32: f6:d8:ec:1a:79:40:08:06:23:55:be:8c:2f:ac:48:04:35:ff: 57:59:bd:59:b2:c9:2c:19:12:bb:76:64:08:2e:05:98:2f:fa: fd:22:f9:ff:9a:ee:89:6b:d9:67:95:43:9e:9e:cf:cf:16:65: 56:f1:89:08:a7:31:22:31:26:e5:eb:cf:d7:40:d2:64:26:c9: a2:21:e6:bd:0e:17:08:ab:c5:ae:25:be:05:67:4b:2e:2f:7a: 25:3a:5c:3a:be:ad:a0:fb:b5:c8:13:de:72:96:06:eb:66:4e: 31:4e:bc:da -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBVZJdIK++na4XM1QFyvFfC9GpikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNTA3MjQxNzA3MDZaFw0yNTA3MjUyMDEyMDZaMDMxMTAvBgNV BAMTKEUxRUFFNDkzOUVDNkZEMjExRTM3REUxNDk0NUU0NjdDOUZGOTM1ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh4xwX854uTb2rrYrmeDgc7cfX rTp/3py4rWHhO8um8A+ctmpvgENLFRc87qYOgUe6go3u13dsVtxgXRP/0d6jFMbX /cmqVxI/ULeJtziV7Hrb2Z6oyB1D6sR+9WK1Jf8THoY5mp+2wB8LxDvSJ4Z0iAd7 6nBzOF2c3UAeNBpzElsPQvArAVgVZjoZ05uMhNvf7ndcgVtRejz166QmI5ycPMP4 Fk0V1ut6tKjh8kTXVYsif86BuRjP1fW1HrCLMtFjJ1TTWTo3sLsuCwhzHNiqLf0m V6KERTvdvPkFODM8FcRZDx1xpp16lsTgBJFyxqiSLB59zZIWZait2bfw8ovxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4erkk57G/SEeN94UlF5GfJ/5NYIwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMd+pb3n3cVZMhCfsU0vF s70ZcKWc2FZxymyY/B5XlseN7ZoRpQmbF1kBE6p5YYgpKYOoMowKnV3F3YFRFxiQ 8HFcAkQ4X1TRefYBQ/eRXooogxiKhkSF64Gw9vBbDXECx4TNMdcsA6FyJi0Zh2tj nKjll2Vrl6X3SBNASA8mPmfI4XASraiYGLjbandnJLYy9tjsGnlACAYjVb6ML6xI BDX/V1m9WbLJLBkSu3ZkCC4FmC/6/SL5/5ruiWvZZ5VDnp7PzxZlVvGJCKcxIjEm 5evP10DSZCbJoiHmvQ4XCKvFriW+BWdLLi96JTpcOr6toPu1yBPecpYG62ZOMU68 2g== -----END CERTIFICATE-----Generated at Fri Jul 25 00:57:10 2025 by rpki-client