$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json) Hash identifier: DrgH/QvbNdY41B6bAmcyQRtAebmhxfXg2cWmXqtmvNA= Subject key identifier: 2B:DD:3B:4D:95:00:B0:C1:8D:9B:44:44:A0:54:49:78:7E:64:DA:BC Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 188BA9FADB2088919C6E31CF7B539FF430D25267 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft Manifest number: 0153 Signing time: Tue 22 Jul 2025 00:01:54 +0000 Manifest this update: Mon 21 Jul 2025 23:56:54 +0000 Manifest next update: Wed 23 Jul 2025 03:11:54 +0000 Files and hashes: 1: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: hoZQSGqkvoyh+Fwe28UicpO6RAJD80P7rklT/Di/mQU=) 2: 3130332e34392e3132382e302f32342d3234203d3e20383334.roa (hash: f69Ng9E7cmqBwiI0B0WK6huEhniZtrLM96PEK5iUE1I=) 3: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: iK+yx/VtDctRGDFOE/NGNWTyR4u7o2tFGRI6U0bUYZU=) 4: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: BqbUmbythNNYP4WqssroNY2sOPvoyuRgXIRAVuIytpA=) 5: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (hash: 4XlIN+3Y2uvivj3jKKbdxnHiR3dRqeJ7/xmTE8uipj8=) 6: 3130332e34392e3133302e302f32332d3234203d3e20383334.roa (hash: OUDRn3ApAjwFGTMXd9nkwMnp9rXV7YJ1c5+bK4pElRs=) 7: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: pgGzIHS9+a9w6W2p4HKdoF0jGs7UvFtGRAg/oTGcmQk=) 8: 33312e32322e3130372e302f32342d3234203d3e20313337353137.roa (hash: zucU5bamNfYRw/esvivyzaXHMAl8N0xQ+Q3coI+3JvA=) 9: 33312e32322e3131302e302f32342d3234203d3e2039333034.roa (hash: 4/DyfQef3JM+QDXadF+flhTmwriSDAeEuVFVt/FGtTg=) 10: 3130332e34392e3132392e302f32342d3234203d3e20313531373334.roa (hash: 28TId/fsDF05nZ10xdOe7gDgnSUwJs5SpkbS0V0fefA=) 11: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: yHVodRBAsBlx/8p8lQvX33hmgwPZB9Uj6k/5yqbIyfs=) 12: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: jNzQvK975k0nFSky/OYcsFfueNL1XvYeIp3mtR/7WPY=) 13: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: y9uevaBeLo1M0NZi4w3HJOyvLkMWIaZEJFCi8snsYYY=) 14: 34332e3233302e38342e302f32342d3234203d3e203231383430.roa (hash: 0jlXbJYw2GWQ/DylqYAmM4dC2o3pqpBbNQAmAAMOqvc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 20:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:8b:a9:fa:db:20:88:91:9c:6e:31:cf:7b:53:9f:f4:30:d2:52:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Jul 21 23:56:54 2025 GMT Not After : Jul 23 03:11:54 2025 GMT Subject: CN=2BDD3B4D9500B0C18D9B4444A05449787E64DABC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2f:da:7e:b1:76:50:95:f6:16:6d:dc:37:da: ad:35:e4:d8:78:43:93:e8:b9:ff:27:b0:8e:12:8e: 1b:f0:22:43:23:16:6c:54:b7:cb:c9:3f:0f:ce:47: 93:c4:d4:17:a7:b7:db:46:48:63:07:f2:63:df:88: e6:b1:74:13:87:f7:6a:a0:c7:5a:b5:91:ae:a1:c6: 58:c9:44:da:89:c9:2c:1f:41:49:11:c2:0a:09:4b: 9d:81:a3:14:53:e2:27:76:d8:17:1a:f9:bd:d0:7c: 10:16:86:1e:5a:14:b4:f4:55:3c:87:bf:f3:b4:29: b4:41:ac:c2:2f:f6:2a:f3:4f:c1:8b:ab:ac:a0:b2: 04:99:e6:4a:b8:d7:e1:7d:48:e4:77:eb:8d:29:a1: e2:a6:83:15:a3:9b:52:13:f6:22:4f:7e:79:49:11: 1f:4d:79:7c:91:36:17:3b:33:ec:e9:02:e2:67:1f: 19:e5:30:e9:1d:d3:a8:20:56:e8:96:45:45:32:c2: ae:c8:9c:8f:ad:4f:24:4a:dc:84:8c:5a:f4:62:aa: f6:c1:f0:28:c5:55:fc:95:e2:56:82:e4:2d:65:90: f2:59:97:48:8d:b7:25:05:bd:e0:fd:b6:6c:a4:60: 26:45:b3:78:3d:40:68:6e:d2:3e:4e:41:c8:25:ab: fd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DD:3B:4D:95:00:B0:C1:8D:9B:44:44:A0:54:49:78:7E:64:DA:BC X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:bd:10:9e:6f:e8:39:ec:71:6b:dd:40:f7:00:3b:50:51:3a: 66:f8:c5:c5:13:20:a2:46:d9:1d:0f:4d:b3:5d:82:fa:a3:39: c4:54:96:44:6f:e2:aa:07:01:ce:7a:9d:6a:81:7b:22:79:0f: 9f:05:39:70:bf:4e:d6:41:fe:49:07:d0:11:c0:44:50:4b:a5: f9:d3:a6:ea:78:29:25:de:85:f4:08:88:aa:e5:0e:c6:5b:e9: 62:24:92:08:06:ee:32:79:29:ef:62:03:86:14:4c:db:90:ef: 15:1c:99:b6:0d:36:9f:58:94:87:7c:55:cc:b7:16:bc:70:c1: c2:75:93:af:d7:5f:18:cd:42:bb:67:0c:f5:00:35:0f:b8:b5: 3e:21:94:0d:79:75:e0:e8:63:18:75:99:32:c9:77:17:62:23: f3:d7:9d:b9:59:f6:a8:94:c3:76:ca:fc:9f:4a:87:16:de:dc: fe:e6:3d:28:07:0c:8b:bd:52:78:84:c6:b4:ca:30:a5:bb:30: 03:ad:d9:bd:11:77:60:c0:45:d7:12:a9:37:60:ba:95:6a:40: 5b:b5:07:c3:91:69:25:15:47:48:92:ca:6c:90:81:89:f0:94: a5:27:89:8c:57:ec:30:6d:de:ba:3f:71:0f:20:1a:3c:2a:bb: 90:b7:8e:28 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGIup+tsgiJGcbjHPe1Of9DDSUmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNTA3MjEyMzU2NTRaFw0yNTA3MjMwMzExNTRaMDMxMTAvBgNV BAMTKDJCREQzQjREOTUwMEIwQzE4RDlCNDQ0NEEwNTQ0OTc4N0U2NERBQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiL9p+sXZQlfYWbdw32q015Nh4 Q5Pouf8nsI4SjhvwIkMjFmxUt8vJPw/OR5PE1Bent9tGSGMH8mPfiOaxdBOH92qg x1q1ka6hxljJRNqJySwfQUkRwgoJS52BoxRT4id22Bca+b3QfBAWhh5aFLT0VTyH v/O0KbRBrMIv9irzT8GLq6ygsgSZ5kq41+F9SOR3640poeKmgxWjm1IT9iJPfnlJ ER9NeXyRNhc7M+zpAuJnHxnlMOkd06ggVuiWRUUywq7InI+tTyRK3ISMWvRiqvbB 8CjFVfyV4laC5C1lkPJZl0iNtyUFveD9tmykYCZFs3g9QGhu0j5OQcglq/0nAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUK907TZUAsMGNm0REoFRJeH5k2rwwHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02 ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5 QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEb0Qnm/oOexxa91A9wA7 UFE6ZvjFxRMgokbZHQ9Ns12C+qM5xFSWRG/iqgcBznqdaoF7InkPnwU5cL9O1kH+ SQfQEcBEUEul+dOm6ngpJd6F9AiIquUOxlvpYiSSCAbuMnkp72IDhhRM25DvFRyZ tg02n1iUh3xVzLcWvHDBwnWTr9dfGM1Cu2cM9QA1D7i1PiGUDXl14OhjGHWZMsl3 F2Ij89eduVn2qJTDdsr8n0qHFt7c/uY9KAcMi71SeITGtMowpbswA63ZvRF3YMBF 1xKpN2C6lWpAW7UHw5FpJRVHSJLKbJCBifCUpSeJjFfsMG3euj9xDyAaPCq7kLeO KA== -----END CERTIFICATE-----Generated at Tue Jul 22 04:14:45 2025 by rpki-client