$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft File: 3134EE987E08D8B5583FEEF621A03150C4F35434.mft (raw, json) Hash identifier: xppDRZreum/b3dkLIlqknDWAcEqniRAhffe2B9PhFGc= Subject key identifier: 84:72:A3:D4:F3:41:9B:DD:4E:57:FE:9F:3D:52:36:57:D6:99:4F:F7 Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434 Certificate serial: 59F88123A795CF7A7499E2326E4D9EBF93736DCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft Manifest number: 02FE Signing time: Sat 06 Sep 2025 05:16:19 +0000 Manifest this update: Sat 06 Sep 2025 05:11:19 +0000 Manifest next update: Sun 07 Sep 2025 06:11:19 +0000 Files and hashes: 1: 326131343a316563373a666666663a3a2f34382d3438203d3e20323030313739.roa (hash: jxX5jejatt6POI8r69/OIdC4tpqjlqDh7/l5cMHt1Lc=) 2: 326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa (hash: tXMEYMrTa38uR0L+SQ9LimzmDrpxo8zhMIaTp0PKkR0=) 3: 326131343a316563343a3a2f33322d3430203d3e203535323031.roa (hash: J7TluaWBMRkzmoR+yQUgqy6TY9pp5e+qFllmxawGaBk=) 4: 3134EE987E08D8B5583FEEF621A03150C4F35434.crl (hash: WexNLmht7uW5BINciPePwQasbFAyuosQBbKkx2ImQxs=) 5: 326131343a316563373a666130303a3a2f34302d3438203d3e20323134333635.roa (hash: D7vq42LlJ1JkjKrlS8EXaLer6htaFFui19vj1Iz46+0=) 6: 326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa (hash: svJE9s6z+thIvIbk0ivLw3r/3W8HiAYka1FWVnsnFgw=) 7: 326131343a316563373a666230303a3a2f34302d3438203d3e20323134373435.roa (hash: 6hKao63oIzBdls8N02e3UeaWWtVa56Xgit+XQJDfjec=) 8: 326131343a316563373a666530303a3a2f34302d3438203d3e20323135343637.roa (hash: 8asU86WRYRMPRuHXiCGWb31YsN6wlyGCHOUyjPq08QE=) 9: 326131343a316563373a666330303a3a2f34302d3438203d3e20323130363435.roa (hash: D0UhxJixjH/6ED4b7asHdvZhN16xQRz9JstOKq1KOMc=) 10: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer (hash: TzD6pGlBEMmZI/OlLFvK4Q5nKNXovDA7wOkDjfwohQo=) 11: 326131343a316563373a313030303a3a2f33362d3438203d3e20323134343831.roa (hash: mAC3tE41nQDojIaT/TKY9BuNdhC77RQ6VPm5O+XWCIE=) 12: 326131343a316563373a666661303a3a2f34382d3438203d3e20323133353135.roa (hash: uw8e5+V55rs+wlENeJdGRICWtffz7xQmePuL+3U/nIU=) 13: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer (hash: BF/TWOjb2Ii4r0osOdYS/rUG+zOQPpS2tAXbzEo5Wzo=) 14: 326131343a316563373a666666633a3a2f34382d3438203d3e20323136333339.roa (hash: Xpu7YHsE9Uu/Z34+AM32q6wFmIndeEkcOzm4kV29gZU=) 15: 326131343a316563373a663130303a3a2f34302d3438203d3e20323134313838.roa (hash: l6K8Ipuv+LpAjKBvLV7xS+N25xPDi1Q5md9XNlMDt3o=) 16: 326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa (hash: cQGzH58GG/5AlClFkvMjXXZFAsalmfdZS0xTjTmJx5Q=) 17: 326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa (hash: Kuq/T5/58120SUpTorsr1ML70JXySqoRjipE0Min4z0=) 18: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer (hash: jLV89odZdgTYzYRcumFoTReP+gmmk+raXpcoYf0+wxA=) 19: 326131343a316563373a313130303a3a2f34302d3438203d3e20323135343337.roa (hash: LSZWA34YwCO9D6JtWEG8LpUQ1o3Anb+MGXWPU43gT4A=) 20: 326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa (hash: ei7uKbr21cStunIFD4/+QnxpXX+lUv4yRtUBnFqqQIw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 02:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f8:81:23:a7:95:cf:7a:74:99:e2:32:6e:4d:9e:bf:93:73:6d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434 Validity Not Before: Sep 6 05:11:19 2025 GMT Not After : Sep 7 06:11:19 2025 GMT Subject: CN=8472A3D4F3419BDD4E57FE9F3D523657D6994FF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:8d:02:75:78:61:44:ca:01:0b:95:5f:98: 6f:ad:2d:59:14:cc:96:9d:0b:15:bb:ed:4c:14:72: 0b:3c:e2:dd:c7:51:72:a1:2a:f0:4a:19:c6:42:86: 56:a5:5f:54:27:1b:3f:d3:b8:ea:34:29:77:bc:cd: a6:d1:83:08:21:8f:64:4e:03:8e:79:be:39:07:20: 5b:b5:00:1e:0e:d8:49:29:5b:ec:6d:b8:ac:b3:02: 66:0f:bc:d9:86:30:49:44:3f:b9:59:58:ca:77:e5: f4:48:6f:fa:ea:b9:9f:24:b3:81:36:48:ce:4a:16: a6:7c:3e:6e:e8:f7:93:79:84:9d:05:92:f6:da:53: 03:4f:5d:0f:cc:c8:7d:8e:7a:ed:f2:bd:5f:0e:c2: 20:33:45:84:b0:7f:a5:f5:fc:4a:f9:78:d7:93:d7: d6:d8:c3:a9:f7:b3:9d:a5:26:39:f8:42:54:f6:c5: 12:c4:84:06:59:2b:cf:fe:74:1f:c1:2f:b9:ea:de: 1f:31:8e:25:80:62:66:00:95:de:1f:e0:4a:3f:4b: d6:3d:c6:6a:90:91:c5:d2:36:f1:7d:a5:1b:9f:ae: fa:0a:e8:8f:b3:dc:66:23:ca:20:7b:f1:95:df:5e: f9:b2:ed:a9:d2:71:fa:f7:aa:87:d2:d7:82:a4:04: 43:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:72:A3:D4:F3:41:9B:DD:4E:57:FE:9F:3D:52:36:57:D6:99:4F:F7 X509v3 Authority Key Identifier: keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c8:a8:6f:fb:7c:f8:63:60:b8:12:a1:04:59:98:5b:b2:ec: 72:ff:45:55:2d:dd:f0:e2:f1:33:44:e6:f5:23:0d:16:1f:e8: 45:d5:f1:b4:23:19:30:67:c2:35:77:01:c6:02:3b:c9:90:3c: e3:1b:fe:68:30:8a:63:54:8f:9e:32:2e:4c:e8:74:b2:f7:23: b3:55:51:46:b0:11:d2:1c:06:df:32:7d:99:8c:71:1d:32:9d: ef:5e:05:9b:80:ce:bf:ae:03:b8:10:a4:bd:98:44:c4:07:17: dd:b0:9d:48:76:79:2e:69:1e:ff:80:71:1f:23:e3:55:a9:fc: 86:d0:23:b6:22:2f:d9:cc:62:18:ad:a4:39:64:89:5f:d4:3e: ec:d6:ba:4f:36:e4:fb:09:32:09:e2:d3:2b:39:9a:94:05:29: c8:9b:b4:04:ce:c7:92:47:f0:5f:d1:9b:4f:04:1a:a5:a9:26: 57:6b:5d:5f:8c:c6:b1:7d:5b:f3:d0:97:7a:91:d9:51:b4:10: e9:81:3d:82:f0:de:18:4e:f3:bf:17:61:93:94:74:eb:c7:ba: 2f:64:fb:70:c9:cb:f9:a0:e2:e6:2a:9c:f7:f9:3c:4e:2d:77: 3d:1b:2b:d2:21:bc:82:cb:6d:ee:d1:bb:e7:31:3f:38:80:60: cf:84:5d:31 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWfiBI6eVz3p0meIybk2ev5NzbcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj NGYzNTQzNDAeFw0yNTA5MDYwNTExMTlaFw0yNTA5MDcwNjExMTlaMDMxMTAvBgNV BAMTKDg0NzJBM0Q0RjM0MTlCREQ0RTU3RkU5RjNENTIzNjU3RDY5OTRGRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoPo0CdXhhRMoBC5VfmG+tLVkU zJadCxW77UwUcgs84t3HUXKhKvBKGcZChlalX1QnGz/TuOo0KXe8zabRgwghj2RO A455vjkHIFu1AB4O2EkpW+xtuKyzAmYPvNmGMElEP7lZWMp35fRIb/rquZ8ks4E2 SM5KFqZ8Pm7o95N5hJ0FkvbaUwNPXQ/MyH2Oeu3yvV8OwiAzRYSwf6X1/Er5eNeT 19bYw6n3s52lJjn4QlT2xRLEhAZZK8/+dB/BL7nq3h8xjiWAYmYAld4f4Eo/S9Y9 xmqQkcXSNvF9pRufrvoK6I+z3GYjyiB78ZXfXvmy7anScfr3qofS14KkBEOBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUhHKj1PNBm91OV/6fPVI2V9aZT/cwHwYDVR0j BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4 NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U elZEUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05 OGE0LTRjN2UtYTBlMS04MDU3YTRmMDg2YzkvMC8zMTM0RUU5ODdFMDhEOEI1NTgz RkVFRjYyMUEwMzE1MEM0RjM1NDM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPsiob/t8+GNguBKhBFmY W7Lscv9FVS3d8OLxM0Tm9SMNFh/oRdXxtCMZMGfCNXcBxgI7yZA84xv+aDCKY1SP njIuTOh0svcjs1VRRrAR0hwG3zJ9mYxxHTKd714Fm4DOv64DuBCkvZhExAcX3bCd SHZ5Lmke/4BxHyPjVan8htAjtiIv2cxiGK2kOWSJX9Q+7Na6Tzbk+wkyCeLTKzma lAUpyJu0BM7HkkfwX9GbTwQapakmV2tdX4zGsX1b89CXepHZUbQQ6YE9gvDeGE7z vxdhk5R068e6L2T7cMnL+aDi5iqc9/k8Ti13PRsr0iG8gstt7tG75zE/OIBgz4Rd MQ== -----END CERTIFICATE-----Generated at Sat Sep 6 12:30:50 2025 by rpki-client