$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft File: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json) Hash identifier: zlRAhS1C1HLAX1/kxftrNqAb9wtdN6Dz6BJN1IxgKzI= Subject key identifier: 06:C9:87:E1:35:11:B6:CA:84:D9:B9:CB:C0:FC:AC:FF:BA:F4:89:23 Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94 Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94 Certificate serial: 399D9C917864B3E86F917B6190B83E2D7C336E8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft Manifest number: 3C Signing time: Wed 04 Jun 2025 17:57:22 +0000 Manifest this update: Wed 04 Jun 2025 17:52:22 +0000 Manifest next update: Thu 05 Jun 2025 21:10:22 +0000 Files and hashes: 1: 39352e3231342e3137352e302f32342d3234203d3e20313335333931.roa (hash: dZLABnxKpTxFiKmt1/yK20i3zGqpWgZ6NnQoPD/883U=) 2: 39352e3231342e3138332e302f32342d3234203d3e20323039313831.roa (hash: lTsB3YA1lHFbSl1Cmaufvak87ZyxIaRmoFdP+J/wwxc=) 3: 39352e3231342e3138312e302f32342d3234203d3e20323134303235.roa (hash: 1UxYccK9JJCwmCQOcrxMzUmtYqXMEA+sXJKMK+TMi4g=) 4: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: yeHT2siMw+46e40lrxlb+yyyQe2+Rk/4CH0GwC6laEg=) 5: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: PxR9Gj8WOc/7LwGO5t67j8SuO3iXayzi64SIiemjFkw=) 6: 3138352e3131352e3230372e302f32342d3234203d3e20313939373037.roa (hash: 5Sl2Z3ptNbtvr3FBhOdZcqrM9plEnj22ST5HcnfsBGc=) 7: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: EnyfxlxrEZoOAQu439Mhaj0MSgN4o3Cr584mhVLUCgw=) 8: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: JaeJstE2poR1Rlm8a7RHcBFfHeeu7vNkxKzYr0p4Jc8=) 9: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: JrxyoGIfTmQKpmZC8vWNz/Zx2qdgp4/nh5bRp1endXo=) 10: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 9KX5zC7UuI47N7heL//vNyLO3x7YEi1CucEhFX8SUR0=) 11: 39352e3231342e3137332e302f32342d3234203d3e203433363431.roa (hash: lEcRDdf6cIhY1Oa3628nbp4zU28+wjCf+aFM7KnL8Ho=) 12: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: eK18gsMy8+wzgYZmaz7TkcO08JcfPTkHAWlv0aJXuz0=) 13: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: 7RDjli52ea3Y5rIxOBi7CoAOYzObgN76cF1oNhGaH/0=) 14: 39352e3231342e3138322e302f32342d3234203d3e20323132333834.roa (hash: ahvCpQCYKDC5UmCWINUE1+9+R3CEuxDs9xpt+/mHGMc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:9d:9c:91:78:64:b3:e8:6f:91:7b:61:90:b8:3e:2d:7c:33:6e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94 Validity Not Before: Jun 4 17:52:22 2025 GMT Not After : Jun 5 21:10:22 2025 GMT Subject: CN=06C987E13511B6CA84D9B9CBC0FCACFFBAF48923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fb:93:09:e4:03:21:71:eb:0e:9d:2a:63:13: fe:ba:0a:a3:12:c4:5c:45:23:c7:93:5f:14:24:bd: 6d:68:b6:79:8e:19:a2:1c:8d:9c:f5:87:4b:b8:a8: f1:b5:75:95:df:23:39:16:2c:8e:77:4f:22:89:c1: 6b:54:6d:57:66:0b:7f:aa:12:44:68:24:0c:28:59: 1f:b5:b8:3e:2f:a4:9f:49:29:3f:20:ec:e6:2c:ef: 6b:d9:f6:c5:64:ad:7b:18:d2:40:d1:5a:42:7d:57: 60:97:d8:57:4a:e4:57:0f:34:f3:26:d2:dd:57:16: a3:cc:a8:4d:9a:96:18:df:c2:38:7c:7a:66:66:ce: 93:dd:0b:80:5d:26:a5:98:76:73:96:70:6c:66:8c: 45:5a:ad:94:84:5a:0d:01:9e:0a:d1:30:8a:bd:b3: 36:ad:83:1b:2d:33:4c:d0:db:de:92:28:f0:d7:e9: 21:e4:ab:d9:cb:4e:be:61:7c:33:d6:c5:e5:de:0c: ca:79:b9:92:9d:ec:ac:73:ef:ab:9e:75:8a:c6:11: 4a:86:2f:85:03:fe:f0:a4:e0:47:ad:3d:e2:f5:1c: 91:e2:8c:ae:2b:42:99:e7:f6:a7:53:62:d8:d5:c8: 00:bc:15:25:95:cf:83:8f:df:ed:32:e2:e5:d7:75: 77:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C9:87:E1:35:11:B6:CA:84:D9:B9:CB:C0:FC:AC:FF:BA:F4:89:23 X509v3 Authority Key Identifier: keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:51:d3:5b:37:e9:aa:e8:01:a5:0a:b4:ba:8e:3b:3d:35:d8: 2a:ea:d9:6c:30:c7:5a:00:28:4d:05:53:05:4c:d8:d7:26:7a: 09:16:4d:e8:41:92:c8:66:dc:da:21:57:92:db:b3:f0:c7:c5: 0e:97:53:d9:89:b1:78:5e:f7:f6:9d:ab:a8:64:25:43:b1:a7: 0b:a6:f6:8f:2c:e2:ba:c7:e3:fe:c1:a8:a5:60:10:18:17:98: b9:8d:92:46:96:e1:56:bf:dc:93:88:22:ca:3b:a8:d2:ec:c0: 95:0e:2e:df:57:2a:6a:49:fd:61:85:bb:d3:d8:16:c7:b8:48: 88:6a:5c:5b:a8:87:60:b2:ab:e0:b5:f7:d6:4f:f6:be:ad:a8: f6:68:7b:0c:38:7a:1d:c3:69:6f:de:d0:98:15:4b:4e:ab:a1: 55:fb:09:0b:4a:ad:af:91:e2:43:6c:05:13:68:07:41:3f:57: 20:1f:30:21:d4:23:05:85:6f:f9:ce:b4:ae:d2:10:55:23:c2: 43:36:98:64:3a:f8:c2:b2:23:d7:5b:c6:c2:b8:8c:88:ef:e4: 4f:d4:c5:33:c1:26:34:4b:ed:78:d3:72:55:1b:7e:52:70:bd: dc:a1:d4:10:17:5c:97:b7:bf:91:31:2d:69:c6:1b:47:af:88: 1e:b5:d2:93 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOZ2ckXhks+hvkXthkLg+LXwzboowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJmNDlkZTg2ODRmMTI4N2Y0ZjZjYjE4NWQ1Y2Y3ZGU4 MGM5MGI5NDAeFw0yNTA2MDQxNzUyMjJaFw0yNTA2MDUyMTEwMjJaMDMxMTAvBgNV BAMTKDA2Qzk4N0UxMzUxMUI2Q0E4NEQ5QjlDQkMwRkNBQ0ZGQkFGNDg5MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+5MJ5AMhcesOnSpjE/66CqMS xFxFI8eTXxQkvW1otnmOGaIcjZz1h0u4qPG1dZXfIzkWLI53TyKJwWtUbVdmC3+q EkRoJAwoWR+1uD4vpJ9JKT8g7OYs72vZ9sVkrXsY0kDRWkJ9V2CX2FdK5FcPNPMm 0t1XFqPMqE2alhjfwjh8emZmzpPdC4BdJqWYdnOWcGxmjEVarZSEWg0BngrRMIq9 szatgxstM0zQ296SKPDX6SHkq9nLTr5hfDPWxeXeDMp5uZKd7Kxz76uedYrGEUqG L4UD/vCk4EetPeL1HJHijK4rQpnn9qdTYtjVyAC8FSWVz4OP3+0y4uXXdXfvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBsmH4TURtsqE2bnLwPys/7r0iSMwHwYDVR0j BBgwFoAUkvSd6GhPEof09ssYXVz33oDJC5QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjA5MjMzODktMmJkZS00M2UwLWIwZDUtZmMyNDRhNjMw M2QwLzAvOTJGNDlERTg2ODRGMTI4N0Y0RjZDQjE4NUQ1Q0Y3REU4MEM5MEI5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2t2U2Q2R2hQRW9mMDlzc1lYVnozM29E SkM1US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MDkyMzM4OS0y YmRlLTQzZTAtYjBkNS1mYzI0NGE2MzAzZDAvMC85MkY0OURFODY4NEYxMjg3RjRG NkNCMTg1RDVDRjdERTgwQzkwQjk0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1HTWzfpqugBpQq0uo47 PTXYKurZbDDHWgAoTQVTBUzY1yZ6CRZN6EGSyGbc2iFXktuz8MfFDpdT2YmxeF73 9p2rqGQlQ7GnC6b2jyziusfj/sGopWAQGBeYuY2SRpbhVr/ck4giyjuo0uzAlQ4u 31cqakn9YYW709gWx7hIiGpcW6iHYLKr4LX31k/2vq2o9mh7DDh6HcNpb97QmBVL TquhVfsJC0qtr5HiQ2wFE2gHQT9XIB8wIdQjBYVv+c60rtIQVSPCQzaYZDr4wrIj 11vGwriMiO/kT9TFM8EmNEvteNNyVRt+UnC93KHUEBdcl7e/kTEtacYbR6+IHrXS kw== -----END CERTIFICATE-----Generated at Thu Jun 5 02:42:21 2025 by rpki-client