$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft File: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft (raw, json) Hash identifier: ljCAnnryKJLwWKge4aW59FHK2WO9vyKxejN3unSG5ek= Subject key identifier: 99:5A:BE:BC:8B:A9:A3:B2:87:F8:1D:E4:AC:19:9B:98:C2:DB:88:FE Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27 Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27 Certificate serial: 47D76546B9F4009A9C0602D9BCD05F429182C7B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft Manifest number: 70 Signing time: Fri 09 May 2025 04:10:25 +0000 Manifest this update: Fri 09 May 2025 04:05:25 +0000 Manifest next update: Sat 10 May 2025 08:09:25 +0000 Files and hashes: 1: 326131333a653430343a3a2f33322d3332203d3e20323135333130.roa (hash: uyzQxNfCQuPRUilhbFb9igirZqWyG0ghryABccswsyE=) 2: 326131333a653430323a3a2f33322d3332203d3e20323135343230.roa (hash: 4kV2/I3YxBchjG3IOXi1hr0lRxiFuT7fxsWyAbTDWfo=) 3: 326131333a653430353a3a2f33322d3332203d3e20323134393430.roa (hash: HZ1FcP6uKIG0ErisyoB210/El4Tl/fdKRO4f//GIOhY=) 4: 326131333a646130333a3a2f33322d3332203d3e20323135343632.roa (hash: +zJlwocjllLnsQbU3Pz9rSlrsgFZqIsBvJ2vFa1jc64=) 5: 36322e3230342e33372e302f32342d3234203d3e20313938323331.roa (hash: I6eMklUSFiAulRI2b++yFtpDHfGf+yyRunITvHHP3rY=) 6: 37372e3234362e3234302e302f32342d3234203d3e2035363530.roa (hash: yxk4TFt/ObXReJM9hZWCrSiaxkBBnmZ/PajmEhPrCIU=) 7: 39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa (hash: DmLW24LZ1vnZeM7Yk9oInpGtra92p8B8+f/VK3l3ndo=) 8: 326131333a623930323a3a2f33322d3332203d3e2035363530.roa (hash: fgX7JOs0CLQUJu45+RMzl8sB0KWTVxumN6S/L327z0k=) 9: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl (hash: Bk/WE3zjYiDyZ4N5XukuZaf4eZ6LkvAXyVQJ2kSDRdk=) 10: 326131333a646130303a3a2f33322d3332203d3e203530353830.roa (hash: OHKDfo5l5/jEy46ijNWjc2QXFRSDD6WocUfsgvZEdnk=) 11: 326131333a653430313a3a2f33322d3332203d3e20323134393637.roa (hash: H3nzZLDuD+hMyo0VXetwr0aEFusgjbaL4Ptg0xbrpOA=) 12: 3231332e3233322e3235322e302f32342d3234203d3e2033333230.roa (hash: /Kq4VkHWPBjYK33PPSBMXdIWaIDemEZf9s/0PNOi978=) 13: 33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa (hash: GO8jazaT07yHqE0/NadQwAelqQjPVTo+2xINwt+os7M=) 14: 326131333a646130353a3a2f33322d3332203d3e20323134393430.roa (hash: 4U+lv5fdVNtShdj/snUUKz+UGwwRicG7k/GaBlfpAoA=) 15: 3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa (hash: yzlstLnidlbzwukvV9D/QvVE7rWc67Q28lja1LYs6xM=) 16: 3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa (hash: gBowB4M9spFJyhtGeGBV6pXmZemrPQZEhgmMEW2ghgQ=) 17: 36322e3132322e3138382e302f32342d3234203d3e2035363530.roa (hash: 6OwCLICEQXAEg/tDtW6A/oDneiVaxu+1cpVQR9TCH00=) 18: 326131333a646130343a3a2f33322d3332203d3e20323135333130.roa (hash: +nnxoDraZp1GnJqnPBkJVf2tvjIfmjIdjzZ1kJJ3DOg=) 19: 3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa (hash: x+RYo6wjWwk6+BVxPpNh5bRjqAt+Gok7rpn9qho5bkg=) 20: 36322e3132322e3138382e302f32342d3234203d3e203133333437.roa (hash: r1huf6kbJmsHFssAQxCRNN3d80N61L6+aVoF7yxiSko=) 21: 39342e3132342e37322e302f32342d3234203d3e20343030303339.roa (hash: uDISVLlw/nJy4wy96JtWj7K3NXKh8ecGghWlBzzixw0=) 22: 326131333a623930343a3a2f33322d3332203d3e2035363530.roa (hash: NxII85muRlkPy6Ue9rBPty6Qe2NOTHZ5aybygZpMWdo=) 23: 326131333a646130313a3a2f33322d3332203d3e20323134393637.roa (hash: zj1ARbGG0KKWVGhyBIQnR9Ua0u7oCe2HCtyMecubnF8=) 24: 3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa (hash: wE97ifCwuCsHZoyv+UtvDLCrOhOpwPEVh3JX3wVqIpE=) 25: 326131333a653430303a3a2f33322d3332203d3e203530353830.roa (hash: rFtvfsVQHKCdQAqKZM/z0xrzFdBj+H8lvhfwWrdW4dw=) 26: 326131333a623930303a3a2f33322d3332203d3e2035363530.roa (hash: O/uOtyjfl4MlQDYp72kf544XXXljSkWM6HF13huBkEM=) 27: 326131333a646130323a3a2f33322d3332203d3e20323135343230.roa (hash: /XIIDyQLovgvuWo+FMAvONj9QZYopmDAHKNtoUoPi4w=) 28: 3137382e32332e3138382e302f32342d3234203d3e2033333230.roa (hash: GKO1xHzUJGinckXhhCthyQ7yu4eOcaWTxHAnYAzelTo=) 29: 3231332e352e3132392e302f32342d3234203d3e20323132323338.roa (hash: y+MccKPhc/2KhhvHGoqYvoNRkkUTzEwbJt4GOMeUfuU=) 30: 38342e3234362e3131312e302f32342d3234203d3e2033333230.roa (hash: C4YEp8j4LdYsTYvi6G+irz5U3tTH6rayAYxhSvLGLbo=) 31: 326131333a653430333a3a2f33322d3332203d3e20323135343632.roa (hash: 0f4WAabP3xZvH36q2OTX1i3if9moXyHYYV6+CfUNtlk=) 32: 37372e3234362e3234302e302f32342d3234203d3e203133333437.roa (hash: 8dmyIVl1xfWSQlImAzdtHKnEErtwf9VZhG0c0l+lwWM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 08:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d7:65:46:b9:f4:00:9a:9c:06:02:d9:bc:d0:5f:42:91:82:c7:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27 Validity Not Before: May 9 04:05:25 2025 GMT Not After : May 10 08:09:25 2025 GMT Subject: CN=995ABEBC8BA9A3B287F81DE4AC199B98C2DB88FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:eb:c3:07:fa:b3:38:36:d2:87:7f:60:a9:a0: 76:cd:7c:65:87:e5:1e:27:30:ba:d8:a6:25:55:d2: 19:c6:58:a0:ca:55:a8:06:a9:31:cb:9f:23:a9:f3: fc:4c:89:a1:f7:ed:d0:c7:43:c1:98:2b:ac:e5:64: be:69:26:a4:52:dc:de:3d:8a:35:00:c0:88:23:50: 6c:5e:de:5f:d3:68:28:8e:5f:81:db:fb:4f:dc:a4: b9:69:d2:7f:ab:9f:67:8f:7f:4b:76:d0:12:19:ee: 58:7c:ee:d1:f5:3a:00:62:b0:e1:0a:23:d9:5e:a1: b1:05:59:a0:57:a1:f6:d6:28:2c:2d:76:1b:a9:2a: 78:7d:71:df:3d:60:91:4d:7a:fe:2d:9e:60:01:a2: 4b:1d:37:ea:f4:00:65:aa:93:22:60:21:43:47:ac: e9:e0:92:dd:ab:53:16:72:31:05:bb:cf:da:4f:6f: 1d:2e:8a:93:26:3a:ca:8e:6f:bb:13:c0:a7:74:e5: 18:f8:26:ae:6e:04:ab:c9:4b:f0:63:39:d8:b5:16: a8:b5:ed:a1:85:b2:73:c5:a4:03:4b:7d:18:78:df: b3:9f:cf:02:65:83:42:2a:23:d7:97:90:b6:09:96: c5:3c:73:8b:9a:3c:a3:21:31:89:1e:a7:3b:4a:99: 85:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5A:BE:BC:8B:A9:A3:B2:87:F8:1D:E4:AC:19:9B:98:C2:DB:88:FE X509v3 Authority Key Identifier: keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:67:d0:af:7c:c7:7d:34:10:14:85:07:bc:67:1d:70:ed:b8: 44:30:59:2a:a8:09:0b:20:4c:8f:53:ed:84:94:2b:97:b4:eb: 77:dc:b3:a0:f5:85:38:94:67:1b:b7:ff:86:0e:9a:7e:96:21: 0f:03:4b:91:c4:df:c5:91:37:5b:b4:02:62:49:91:4f:9e:81: 60:90:aa:57:9f:f7:b9:4c:5a:b3:ad:f3:82:cb:eb:a5:37:52: 32:c9:3b:4a:d9:90:07:f6:17:cb:d3:6a:20:24:9a:d9:16:b9: f8:72:5b:ad:22:55:ba:fb:68:39:d3:5b:60:8e:58:93:f3:99: a1:37:5f:57:d3:a7:70:30:01:93:c2:fc:0d:98:6a:50:75:eb: 5d:df:44:78:fd:54:43:f8:e6:f6:1a:18:9f:83:13:74:03:0e: eb:bf:53:57:41:e8:7b:52:d7:04:da:75:86:44:12:bc:18:97: f6:88:56:69:16:59:7e:45:dc:7e:d4:77:e7:44:a7:c2:bc:b2: fb:06:6c:3e:ef:f2:ec:44:ad:8f:25:96:f3:ec:47:61:38:f3: 8e:c8:b6:b7:a5:9b:8d:96:2e:5e:70:fa:96:69:f8:6f:5d:e4: db:0c:af:63:8f:e1:a3:8a:3d:5a:9a:88:8c:bb:b0:cc:84:49: 67:f3:2c:c2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUR9dlRrn0AJqcBgLZvNBfQpGCx7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmY0MjZmMTliYTY3YmM4OWRlNWFlNmRmNDg3YzFjOGMx ZTc1MmUyNzAeFw0yNTA1MDkwNDA1MjVaFw0yNTA1MTAwODA5MjVaMDMxMTAvBgNV BAMTKDk5NUFCRUJDOEJBOUEzQjI4N0Y4MURFNEFDMTk5Qjk4QzJEQjg4RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo68MH+rM4NtKHf2CpoHbNfGWH 5R4nMLrYpiVV0hnGWKDKVagGqTHLnyOp8/xMiaH37dDHQ8GYK6zlZL5pJqRS3N49 ijUAwIgjUGxe3l/TaCiOX4Hb+0/cpLlp0n+rn2ePf0t20BIZ7lh87tH1OgBisOEK I9leobEFWaBXofbWKCwtdhupKnh9cd89YJFNev4tnmABoksdN+r0AGWqkyJgIUNH rOngkt2rUxZyMQW7z9pPbx0uipMmOsqOb7sTwKd05Rj4Jq5uBKvJS/BjOdi1Fqi1 7aGFsnPFpANLfRh437OfzwJlg0IqI9eXkLYJlsU8c4uaPKMhMYkepztKmYVvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUmVq+vIupo7KH+B3krBmbmMLbiP4wHwYDVR0j BBgwFoAU/0JvGbpnvIneWubfSHwcjB51LicwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDY4YjA4MWUtYmE5My00NjVmLTliNmUtN2ZiZDYzYmRm ZjYzLzAvRkY0MjZGMTlCQTY3QkM4OURFNUFFNkRGNDg3QzFDOEMxRTc1MkUyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL18wSnZHYnBudkluZVd1YmZTSHdjakI1 MUxpYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80NjhiMDgxZS1i YTkzLTQ2NWYtOWI2ZS03ZmJkNjNiZGZmNjMvMC9GRjQyNkYxOUJBNjdCQzg5REU1 QUU2REY0ODdDMUM4QzFFNzUyRTI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmfQr3zHfTQQFIUHvGcd cO24RDBZKqgJCyBMj1PthJQrl7Trd9yzoPWFOJRnG7f/hg6afpYhDwNLkcTfxZE3 W7QCYkmRT56BYJCqV5/3uUxas63zgsvrpTdSMsk7StmQB/YXy9NqICSa2Ra5+HJb rSJVuvtoOdNbYI5Yk/OZoTdfV9OncDABk8L8DZhqUHXrXd9EeP1UQ/jm9hoYn4MT dAMO679TV0Hoe1LXBNp1hkQSvBiX9ohWaRZZfkXcftR350Snwryy+wZsPu/y7ESt jyWW8+xHYTjzjsi2t6WbjZYuXnD6lmn4b13k2wyvY4/ho4o9WpqIjLuwzIRJZ/Ms wg== -----END CERTIFICATE-----Generated at Fri May 9 13:15:33 2025 by rpki-client