$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft File: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json) Hash identifier: 3Dw0RoKosQIB3+xfnznQkz7t5nD8WGiWCo6Vyyx1HLc= Subject key identifier: F2:F5:95:F3:23:78:BB:C8:EB:E2:F9:D3:9F:0E:39:A4:99:A1:BF:5C Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Certificate serial: 14048519217545436EBCE7BA1CBBDA1B002151D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft Manifest number: 15 Signing time: Sun 02 Feb 2025 00:15:58 +0000 Manifest this update: Sun 02 Feb 2025 00:10:58 +0000 Manifest next update: Mon 03 Feb 2025 00:46:58 +0000 Files and hashes: 1: 3137382e3133322e3139392e302f32342d3234203d3e20323135323837.roa (hash: Nn4hlenMCeN8J+tRLEn3aIgafIwnXZia7FBwDbkQIW0=) 2: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 5LOGXsAFfY8MpN+3dgrjf5uTyIh00nk/J0/MSXxVmy4=) 3: 3130392e3233342e3231332e302f32342d3234203d3e20383334.roa (hash: 6G42EwHdEoAwbnJ3IZ/cPbKfDhqaAeHYm8qiXEKXkEE=) 4: 3130392e3233342e3231342e302f32342d3234203d3e20383334.roa (hash: Igc6pc60rg+cSwIL3TySAIbVS8Y/bv2rNh8BvOcnEBk=) 5: 3137382e3133322e3139362e302f32342d3234203d3e20383334.roa (hash: ulOfXv/1IXNnrqDJaOwNm/K5UeJW+/fpJ2MwQsnJkv0=) 6: 352e3232362e3139312e302f32342d3234203d3e20323135323837.roa (hash: RkV+HIT5VsE9pjn8210EZGVuenhPjG9cevpcRBJ9k2w=) 7: 352e3232362e3138372e302f32342d3234203d3e20383334.roa (hash: ba9NIwQrx2mkmwqgkiA1GZhbB5JUUiDfDg8aVpODn68=) 8: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: fQsEWjsrThcFlJLP0H4ir/IvOeNDAQWZ1RZpyw7wV08=) 9: 352e3232362e3138342e302f32342d3234203d3e20313337383937.roa (hash: 8ofjdTvME8Ke87X/25f1Lfod2tGk31aa8QOq3yqQqBQ=) 10: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: uhM+/0v8HioS/qE+KkDqR673YS11oQr5aznZkyp/yx4=) 11: 352e3232362e3138362e302f32342d3234203d3e2035303635.roa (hash: oF2kHy0s+EeqI6lqLIx6U+pqHDpvQPMe+7smngOEl4M=) 12: 352e3232362e3139302e302f32342d3234203d3e203235313938.roa (hash: JZMn9YaEF5iym3uIllwY3Nycz6z4GiTDDJ22S9W+2G0=) 13: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: 8062JFmeMm0W8/p8ulSvDrkWkdcc7pI6xWCjzLC2dkQ=) 14: 3137382e3133322e3139372e302f32342d3234203d3e20383334.roa (hash: onX4ws13sBkirwG2vIv3sgX7udonp/zr/LII0u1aMVE=) 15: 3130392e3233342e3231312e302f32342d3234203d3e20383334.roa (hash: 3KCbpaBWNwWMkAiSDAGW4kWBNjWa3LpPuvXnHkvUSEc=) 16: 3130392e3233342e3231352e302f32342d3234203d3e20323135323837.roa (hash: 4bOlWuE5C3bj5h/eyw66znCAAqRjkPH8b2NNlo/N1lk=) 17: 352e3232362e3138342e302f32342d3234203d3e2039333034.roa (hash: cMIx5Bn7EdafBHie57MB7JmAd+LEFjGGuP+u3+0HsOw=) 18: 3137382e3133322e3139352e302f32342d3234203d3e20383334.roa (hash: MlQVyl04pJXbtqaLCRqAkCt/ITDAWOrTHIp9nC9bIng=) 19: 3137382e3133322e3139332e302f32342d3234203d3e2034353135.roa (hash: KXxhbnwquL+aHdUDuLgZN8MKkKra6rINzz82OM/ox3U=) 20: 3130392e3233342e3230382e302f32342d3234203d3e20383334.roa (hash: gMXfZGDDjoWo9CPnYudzMqciOf7/oRzExfJywSipqfU=) 21: 352e3232362e3138382e302f32342d3234203d3e203236303432.roa (hash: uRkqeorrbsNjgFEcWLCjOwjAqUjIe+aXx6dkkyCeRRk=) 22: 3137382e3133322e3139332e302f32342d3234203d3e2039333034.roa (hash: cD4QR5rz9Bun5T9ETNZNZ1LDrPz0pvy5466LVp0WqDQ=) 23: 3130392e3233342e3231302e302f32342d3234203d3e20383334.roa (hash: jMvQmG7BQ8oo1hkSlVA1e1FmsME1lTc/UB9+bTO1ulA=) 24: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: 6TrR9eiRNzBfJRrubefTFudn86wqW7t6u+0cIxHNR5g=) 25: 3137382e3133322e3139322e302f32342d3234203d3e20383334.roa (hash: dAo1ugO/TW0tBQvuHuFnYbNjJOCx9YoNzhDE8Fv+cvU=) 26: 3137382e3133322e3139332e302f32342d3234203d3e20313337383937.roa (hash: s4Y/izMDulZ/3Kz0krN/1L/BeycxY8YfdP25Q2Ar+GA=) 27: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: xGDSj9rMMdhGkci1rj9QS/c2p6IRznTgPF56svMZjZY=) 28: 352e3232362e3138392e302f32342d3234203d3e20383334.roa (hash: qS9GJUdXG30/eC0XbotWo9y8DUNQIACv2JJet4PnzBk=) 29: 352e3232362e3138342e302f32342d3234203d3e2034353135.roa (hash: WMb2FgLcI0RiBTnKE4amM6xgFASLgNyNaAyyFZRV1sw=) 30: 3130392e3233342e3230392e302f32342d3234203d3e20383334.roa (hash: JtP0ZFSCbnd1Bvwg9UOYnCnEfGX82ZynD4BTFhag/fw=) 31: 3130392e3233342e3231322e302f32342d3234203d3e20383334.roa (hash: /eA5/EVYK6UcgXdtRJaZwm8+sbcAovxbIfsI+ECPPhk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 03 Feb 2025 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:04:85:19:21:75:45:43:6e:bc:e7:ba:1c:bb:da:1b:00:21:51:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Validity Not Before: Feb 2 00:10:58 2025 GMT Not After : Feb 3 00:46:58 2025 GMT Subject: CN=F2F595F32378BBC8EBE2F9D39F0E39A499A1BF5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1c:1b:60:42:f1:b5:f7:a9:45:40:d0:c8:28: 36:ab:18:44:0f:62:a7:ae:bd:7b:f8:00:f4:ca:59: 4d:e9:58:03:39:81:59:f3:3e:8a:2d:3b:0b:fb:2d: b2:27:92:28:7f:ad:74:2b:74:4b:8e:f5:8f:36:ae: 6b:ee:60:f5:ac:7a:3a:bf:56:d6:8e:f4:6e:16:14: 30:9a:53:4d:b8:30:d8:7f:74:d5:9e:48:67:95:00: ab:ec:09:38:cd:70:e8:ae:21:ce:3e:f0:eb:d7:c7: cb:14:90:dc:f3:31:34:08:b7:37:7a:81:fc:04:13: 91:1c:e2:95:fa:19:52:56:a2:37:24:64:74:b6:4a: 88:49:80:e1:64:9d:d3:7e:2f:8d:4d:f7:34:14:bf: 0e:68:a5:a0:cb:96:cd:25:42:0b:0c:c5:e0:46:1a: 0a:ed:3d:ed:10:e0:ec:a5:b2:36:d7:43:ab:0d:91: 41:c9:b6:77:ef:54:c0:d4:a0:b5:d3:ca:b5:23:28: 38:96:cc:26:39:60:f8:26:c7:f0:5b:c0:57:9b:71: c8:b1:31:36:da:88:18:af:c6:2c:f0:25:11:96:53: 70:5e:62:7c:45:31:0e:04:36:01:50:30:09:a8:4e: 8a:54:ef:64:ee:a4:5d:ac:78:43:ae:03:66:48:d4: 35:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F5:95:F3:23:78:BB:C8:EB:E2:F9:D3:9F:0E:39:A4:99:A1:BF:5C X509v3 Authority Key Identifier: keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:76:dd:3d:b7:31:cb:5a:ee:e1:88:85:9e:b2:4a:26:e3:90: 36:c2:c1:a2:7a:69:f2:d6:88:2a:9c:4c:5c:f9:d9:2e:b2:6e: 09:f7:67:9d:17:e5:6d:2c:07:64:5c:f4:20:de:2f:b6:4d:3a: bd:1e:f8:69:35:5d:d7:ad:15:68:61:12:77:e6:1f:ef:b1:90: c1:5b:aa:ce:63:85:ee:b3:65:bb:a6:37:21:89:55:d4:94:d3: b8:5e:49:bd:65:8c:f9:f6:71:64:b5:9c:a2:8e:f0:bb:1b:3b: ae:45:ba:52:7e:c5:fe:21:08:9d:c5:3b:d7:81:80:c5:ac:b6: 28:f3:6b:d0:fb:27:7d:66:c3:53:e0:57:fc:53:e0:9c:22:b5: 5f:31:12:31:88:d6:e6:82:38:52:e6:5c:c0:7c:d9:93:8e:bc: 22:27:f5:38:de:ee:ab:cc:ac:30:dc:8c:ee:85:d3:44:5a:6e: b7:ce:0a:ab:6d:84:66:b7:b7:d1:f2:b6:fc:65:b0:6a:85:39: 03:06:71:7e:66:b8:ba:02:08:16:39:04:23:f2:99:64:9c:76: 3e:a5:9f:48:85:7d:d3:0e:9b:f9:2e:a7:9f:88:dc:f8:fc:2c: 8a:56:fb:1e:bc:7f:bd:af:56:2f:6a:8a:ed:81:6b:a8:6a:e4: 0c:51:be:66 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFASFGSF1RUNuvOe6HLvaGwAhUdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk MTZjZWVkMzAeFw0yNTAyMDIwMDEwNThaFw0yNTAyMDMwMDQ2NThaMDMxMTAvBgNV BAMTKEYyRjU5NUYzMjM3OEJCQzhFQkUyRjlEMzlGMEUzOUE0OTlBMUJGNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaHBtgQvG196lFQNDIKDarGEQP YqeuvXv4APTKWU3pWAM5gVnzPootOwv7LbInkih/rXQrdEuO9Y82rmvuYPWsejq/ VtaO9G4WFDCaU024MNh/dNWeSGeVAKvsCTjNcOiuIc4+8OvXx8sUkNzzMTQItzd6 gfwEE5Ec4pX6GVJWojckZHS2SohJgOFkndN+L41N9zQUvw5opaDLls0lQgsMxeBG GgrtPe0Q4OylsjbXQ6sNkUHJtnfvVMDUoLXTyrUjKDiWzCY5YPgmx/BbwFebccix MTbaiBivxizwJRGWU3BeYnxFMQ4ENgFQMAmoTopU72TupF2seEOuA2ZI1DWVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU8vWV8yN4u8jr4vnTnw45pJmhv1wwHwYDVR0j BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0 NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G czd0TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wY2MwODczNy05 MjY3LTQwMmEtOTlkNC03YWFhZmVhNDQ0ZWQvMC9GNzY4RkY2RTY4MTg1OEMwRUMx OUYzQTkzRkExNzkyQ0QxNkNFRUQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3bdPbcxy1ru4YiFnrJK JuOQNsLBonpp8taIKpxMXPnZLrJuCfdnnRflbSwHZFz0IN4vtk06vR74aTVd160V aGESd+Yf77GQwVuqzmOF7rNlu6Y3IYlV1JTTuF5JvWWM+fZxZLWcoo7wuxs7rkW6 Un7F/iEIncU714GAxay2KPNr0PsnfWbDU+BX/FPgnCK1XzESMYjW5oI4UuZcwHzZ k468Iif1ON7uq8ysMNyM7oXTRFput84Kq22EZre30fK2/GWwaoU5AwZxfma4ugII FjkEI/KZZJx2PqWfSIV90w6b+S6nn4jc+Pwsilb7Hrx/va9WL2qK7YFrqGrkDFG+ Zg== -----END CERTIFICATE-----Generated at Sun Feb 2 06:48:35 2025 by rpki-client