$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft File: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json) Hash identifier: klMk0cNTkIQTiXpOYX9QWQ++9GWQvv0Ga8PTJ+XnJl4= Subject key identifier: 47:99:09:05:97:BC:F3:77:3A:C3:DF:05:81:6A:9C:B3:B7:C9:D0:6C Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Certificate serial: 4282D6F6A1B5180DDF1EDA78B3A7FCB3599FC43A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft Manifest number: 89 Signing time: Tue 15 Apr 2025 09:07:57 +0000 Manifest this update: Tue 15 Apr 2025 09:02:57 +0000 Manifest next update: Wed 16 Apr 2025 09:31:57 +0000 Files and hashes: 1: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 5LOGXsAFfY8MpN+3dgrjf5uTyIh00nk/J0/MSXxVmy4=) 2: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: 0XlqzvD5WZeVhzrMIb+ArV6j60KVoqxW88qIB/mg2yk=) 3: 3137382e3133322e3139372e302f32342d3234203d3e2033333230.roa (hash: MuzLKtyseOT68ju0FOjjeN3pxilqG43fi3IvFyF1hyA=) 4: 3137382e3133322e3139362e302f32342d3234203d3e203432383331.roa (hash: rMB7/8cyQIx/9c3HD2ZadKHLx3HKQvyXwwaVPb+xesA=) 5: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: 7XlPdZ+5k5dznfPMoT3Ni5uRfyL41Likgo5fplEaDTA=) 6: 3130392e3233342e3231302e302f32342d3234203d3e20323131303134.roa (hash: 4MSVPqiQDKA8SKRIIRsT8w0YWOClRX08NcPzC8FEPc0=) 7: 352e3232362e3139312e302f32342d3234203d3e203230343733.roa (hash: UPFXIsNngs7ii0fChRVSrq5M20PxfDmf/pm0ZfcYEhU=) 8: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: rPX8A+jSEz1sX0eF/+AZ6aEYFnXwB0Az15s7oWZSUHU=) 9: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: UgtgsSF4DmUx+FqAs5WV6TWI9fyKhqfkEeJgaHpzYEc=) 10: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: Ej1HuQzuhYe60A2HNErPZLUdfpH5EaYPpZ+PpBEwVxY=) 11: 352e3232362e3138362e302f32342d3234203d3e2035303635.roa (hash: oF2kHy0s+EeqI6lqLIx6U+pqHDpvQPMe+7smngOEl4M=) 12: 3137382e3133322e3139352e302f32342d3234203d3e20313335333931.roa (hash: RVvsf+GbQ+gvRF/WRSFeBmTdyh0atmXnd8DAVmdlYaw=) 13: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: uhM+/0v8HioS/qE+KkDqR673YS11oQr5aznZkyp/yx4=) 14: 3130392e3233342e3231322e302f32342d3234203d3e203231383539.roa (hash: diQRASQkPTWUXKiBml6BzeJ9LDVpqvRcV2AZKe4Sd4c=) 15: 352e3232362e3138342e302f32342d3234203d3e203235313938.roa (hash: g/SuuyMEvFJIWbz5EwrvLhOxD8VKMLPH98EweA0bDg4=) 16: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: nFzeEleWTSIYtIbjgNdPg9c+CwbgHF8u+W2VGtxEBpQ=) 17: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: 6TrR9eiRNzBfJRrubefTFudn86wqW7t6u+0cIxHNR5g=) 18: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: fQsEWjsrThcFlJLP0H4ir/IvOeNDAQWZ1RZpyw7wV08=) 19: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: xGDSj9rMMdhGkci1rj9QS/c2p6IRznTgPF56svMZjZY=) 20: 352e3232362e3138372e302f32342d3234203d3e2039323332.roa (hash: L10rHUQX4TGH4LKEy8+xW98uNY8br3AyCv26QQGltu4=) 21: 352e3232362e3138392e302f32342d3234203d3e203134363138.roa (hash: W5RSzcuC1NRqUmarwMyiabGjcoNk6+K+D+yepMOENN0=) 22: 3130392e3233342e3231342e302f32342d3234203d3e203632323430.roa (hash: yJVBSNvtQsHe0PNYzL5JRIv242s6ICu9PWhfIuLAOZQ=) 23: 352e3232362e3139302e302f32342d3234203d3e203235313938.roa (hash: JZMn9YaEF5iym3uIllwY3Nycz6z4GiTDDJ22S9W+2G0=) 24: 352e3232362e3138392e302f32342d3234203d3e203136353039.roa (hash: kr8izgLHpyQBspO5iJHck3IkjuDOsdRfI0aINRgfnKo=) 25: 3130392e3233342e3230382e302f32342d3234203d3e2039323332.roa (hash: 5NSQUssnpHxq31TditVRCOjbCirLEcMHfF76GuFM7co=) 26: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: pWCIuSrDYwp+tan25QY6TeO9jMNRWP/W0zj94P0620Y=) 27: 3137382e3133322e3139332e302f32342d3234203d3e2035303635.roa (hash: By8mvurmjlAnp9WfoOey8QgJAgL8b092fmLqJit2ilQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 16 Apr 2025 08:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:82:d6:f6:a1:b5:18:0d:df:1e:da:78:b3:a7:fc:b3:59:9f:c4:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Validity Not Before: Apr 15 09:02:57 2025 GMT Not After : Apr 16 09:31:57 2025 GMT Subject: CN=4799090597BCF3773AC3DF05816A9CB3B7C9D06C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fb:8f:bb:e6:f1:25:34:0a:06:d2:77:d9:65: 79:a8:95:2d:9f:ce:ba:ce:e5:8c:3b:e6:ec:e4:66: 97:87:8b:f5:67:71:c1:ee:e3:10:fb:ff:f7:28:3e: 0c:88:e3:22:3b:7d:88:d0:f5:22:5d:35:7a:1b:be: 75:d8:d8:56:37:1b:73:b7:07:da:85:ff:25:03:f2: 6c:ab:1a:3a:df:16:4a:50:29:45:af:99:10:a4:48: 78:31:d1:0a:99:68:7f:33:a5:bb:89:5d:e6:43:2f: 64:d6:6b:13:67:69:1f:82:08:51:e0:e5:f8:bb:56: 34:1f:df:96:e2:09:e4:1d:66:1b:94:31:58:3a:a4: f2:b4:4b:66:f8:08:da:47:8a:49:8e:33:65:82:e0: 39:7d:01:5a:1c:d2:35:be:06:fa:ae:5b:f8:97:67: c6:7d:e7:e4:08:6b:3d:d6:74:3d:21:90:a7:d8:30: 18:11:7b:be:5e:ba:3b:4a:0f:ca:e8:b5:57:ed:28: 88:49:1a:71:5d:90:40:b7:f4:04:4b:a2:5b:35:a3: ca:d5:87:48:d4:b6:fd:bd:67:57:af:07:10:03:ad: e3:dc:3c:73:04:e5:2a:17:0f:50:8b:ae:3c:7f:5c: 22:81:dc:29:84:99:5d:a0:f8:65:a8:d5:4f:e6:46: e6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:99:09:05:97:BC:F3:77:3A:C3:DF:05:81:6A:9C:B3:B7:C9:D0:6C X509v3 Authority Key Identifier: keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:61:8d:81:bf:ef:84:34:6f:97:16:de:82:4d:2a:43:0e:ed: 4c:57:3a:25:9e:cf:85:ff:f5:5b:d2:cb:21:18:41:8c:10:24: ff:a9:47:4a:e5:ef:45:e5:ec:81:4b:0e:69:74:7e:df:47:6b: dd:5a:4d:ba:e9:33:14:ff:4b:89:4a:0e:a3:fc:c9:74:1b:7f: 61:ba:7c:1c:2a:78:e4:b8:ab:9e:f0:f3:64:c2:65:dc:41:1d: 1a:ce:df:96:9f:70:39:fe:d8:75:2b:bc:54:47:a0:4a:d8:37: 5f:cc:ff:d8:23:af:79:d9:c5:5c:bf:eb:6f:24:56:28:ab:8f: 52:bc:d1:8b:2d:67:b2:87:1a:42:04:3e:0d:f1:25:ae:63:e5: d7:e9:1f:bf:4f:a8:44:8b:b1:b4:e5:cc:57:19:0d:05:0d:5e: c8:36:9d:78:a5:12:86:08:81:9c:9b:ff:a6:94:f1:8f:95:61: f2:1c:a2:03:50:36:80:8c:13:57:b3:47:26:32:a8:5d:07:8b: 34:79:d4:8b:af:a2:90:6e:c6:25:7b:c1:f3:f3:5d:de:8e:e8: 87:7e:28:c9:e9:f7:60:84:28:cb:22:df:c3:3e:05:ab:83:3d: 96:89:4b:72:32:f4:26:72:9d:85:35:bf:49:6f:a5:32:42:47: 5c:49:3d:6a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQoLW9qG1GA3fHtp4s6f8s1mfxDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk MTZjZWVkMzAeFw0yNTA0MTUwOTAyNTdaFw0yNTA0MTYwOTMxNTdaMDMxMTAvBgNV BAMTKDQ3OTkwOTA1OTdCQ0YzNzczQUMzREYwNTgxNkE5Q0IzQjdDOUQwNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc+4+75vElNAoG0nfZZXmolS2f zrrO5Yw75uzkZpeHi/VnccHu4xD7//coPgyI4yI7fYjQ9SJdNXobvnXY2FY3G3O3 B9qF/yUD8myrGjrfFkpQKUWvmRCkSHgx0QqZaH8zpbuJXeZDL2TWaxNnaR+CCFHg 5fi7VjQf35biCeQdZhuUMVg6pPK0S2b4CNpHikmOM2WC4Dl9AVoc0jW+BvquW/iX Z8Z95+QIaz3WdD0hkKfYMBgRe75eujtKD8rotVftKIhJGnFdkEC39ARLols1o8rV h0jUtv29Z1evBxADrePcPHME5SoXD1CLrjx/XCKB3CmEmV2g+GWo1U/mRubFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUR5kJBZe883c6w98FgWqcs7fJ0GwwHwYDVR0j BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0 NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G czd0TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wY2MwODczNy05 MjY3LTQwMmEtOTlkNC03YWFhZmVhNDQ0ZWQvMC9GNzY4RkY2RTY4MTg1OEMwRUMx OUYzQTkzRkExNzkyQ0QxNkNFRUQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGGNgb/vhDRvlxbegk0q Qw7tTFc6JZ7Phf/1W9LLIRhBjBAk/6lHSuXvReXsgUsOaXR+30dr3VpNuukzFP9L iUoOo/zJdBt/Ybp8HCp45LirnvDzZMJl3EEdGs7flp9wOf7YdSu8VEegStg3X8z/ 2COvednFXL/rbyRWKKuPUrzRiy1nsocaQgQ+DfElrmPl1+kfv0+oRIuxtOXMVxkN BQ1eyDadeKUShgiBnJv/ppTxj5Vh8hyiA1A2gIwTV7NHJjKoXQeLNHnUi6+ikG7G JXvB8/Nd3o7oh34oyen3YIQoyyLfwz4Fq4M9lolLcjL0JnKdhTW/SW+lMkJHXEk9 ag== -----END CERTIFICATE-----Generated at Tue Apr 15 13:39:36 2025 by rpki-client