$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft File: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft (raw, json) Hash identifier: /XAIOuI6Ca0woTCYM1hnam7YvkmtJvMAQ1bkinN+HdI= Subject key identifier: D1:C8:91:FA:80:24:52:EC:A2:4E:CE:2D:D6:38:76:FB:A3:07:39:28 Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Certificate serial: 16B69C4C901F835D6B12A77D90370814F2F2197F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft Manifest number: 0209 Signing time: Tue 24 Jun 2025 14:03:34 +0000 Manifest this update: Tue 24 Jun 2025 13:58:34 +0000 Manifest next update: Wed 25 Jun 2025 17:50:34 +0000 Files and hashes: 1: 326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa (hash: K1pgngmKcNIjyWdBpbyb8yrU4+AFj1FA0WE8csGiSxU=) 2: 326131343a366634353a633030303a3a2f33362d3438203d3e20313938333432.roa (hash: kj+wMZhCYMt0Z9jhqZmZtaHQjz2obXZ+/J2z1ua51wg=) 3: 326131343a366634343a623030623a3a2f34382d3438203d3e20323135343733.roa (hash: L8GmqvJ1QVmWAKscHOFBmFM5vDJ8hADh4YYnfT4JEAM=) 4: 326131343a366634343a633730313a3a2f34382d3438203d3e203438343336.roa (hash: kN+6glZZqj1lvl+f3cQSjIHuGxniqs1l2hL+N9PCMXg=) 5: 326131343a366634343a636166653a3a2f34382d3438203d3e20323035373839.roa (hash: jDOaIGvPgjhenzPsT0baoWOtCBD2JafI5qghnSCs9Dw=) 6: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl (hash: eccWenHKa1MxdwIK2zpv53m1Ny0c8VGp+UL/Vtx8J/4=) 7: 326131343a366634343a633066663a3a2f34382d3438203d3e203534363831.roa (hash: /yWZfagoJlrySMZHREX961tilL5M+CVEvfwwfIOvULs=) 8: 326131343a366634353a646561643a3a2f34382d3438203d3e203438343336.roa (hash: D8dy67lH7mKpFtKbPMaHWGtbJcZylACehWx+4H0irZc=) 9: 326131343a366634323a3a2f33312d3438203d3e20323030323432.roa (hash: ITJiuOJiPhL9zGFnR/kFwwhgRvQux+ehMzGBms69CVM=) 10: 326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa (hash: MYKoEmllVAyYKTmfRaWUIl1KQBpJiM51RTw82pBlZ/0=) 11: 326131343a366634303a3a2f33322d3438203d3e20323030323432.roa (hash: qhoj8vou0d4ZtC5V1DKyyM7rrTWsmPFrHxQlmlsE9nQ=) 12: 326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa (hash: 4vV1NPLNtJ5Sem5fwMjyfRCUw2Hm0zuf9K0F0M5JmTU=) 13: 326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa (hash: 5aLekRp0Z/nDkL3quTBST646++5Or5kPuLfIwZxGWPU=) 14: 326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa (hash: zQ/yzhK7qvzoSsvDcyClVn7AKwYrbUYHcG3F64niJUE=) 15: 04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer (hash: 2lYT3gtC49tqrkD3HaWeKlDKSbKBNwQiIvyLld9YaQk=) 16: 326131343a366634343a633064653a3a2f34382d3438203d3e20313938333432.roa (hash: JbFcx8NYIQrxy++ssCWok53ycSawtedKXeTKz2IS1/I=) 17: 326131343a366634353a3a2f33362d3438203d3e203530323234.roa (hash: mvEo9ltQv4jrZCOh4EYz0yzaY9D43IlA4B9MK3lgwdw=) 18: 326131343a366634343a633064653a3a2f34382d3438203d3e203438343336.roa (hash: bY9e62A4gu/86iUTHSumKPvi2hGZoe5ZTShnEctU4SM=) 19: 326131343a366634343a623030623a3a2f34382d3438203d3e20313937393139.roa (hash: GcC1OOQic3vs9xDhV0qGl8u3fvABcPb7eRlO7suqV/c=) 20: 326131343a366634303a3a2f32392d3438203d3e20323030323432.roa (hash: c5+sIF6SVWQEOk60+gid/kKFxdzO9Q59QB0rcaeUFAg=) 21: 326131343a366634353a646561643a3a2f34382d3438203d3e20313938333432.roa (hash: /s9FD+BuCvCOu4sZBij0Yh1eY8Nr8NHCtVi0OvPiCyY=) 22: 326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa (hash: OSQQWXQC8Doo46F92DSw83gpWUJg/I3ZjbHjihzygko=) 23: AS200242.asa (hash: 1AlMG2dsNj+2a3kLp0CpSmy1LKhmLk73ZFr/4CSbD+w=) 24: 326131343a366634353a633030303a3a2f33362d3438203d3e203438343336.roa (hash: 84yN8GMB2a5DXwGkFW2zsyLvfW/TnY6P5ZHEy29emgk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 25 Jun 2025 17:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b6:9c:4c:90:1f:83:5d:6b:12:a7:7d:90:37:08:14:f2:f2:19:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Validity Not Before: Jun 24 13:58:34 2025 GMT Not After : Jun 25 17:50:34 2025 GMT Subject: CN=D1C891FA802452ECA24ECE2DD63876FBA3073928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f0:81:4f:cf:a6:63:0e:c8:90:e2:92:99:81: e2:d7:d2:cd:6e:46:d5:7c:c7:b8:f3:be:2c:65:2f: d7:9e:68:70:4e:ee:6b:df:d0:1a:55:71:65:40:f4: 90:44:b3:d0:c1:fb:36:29:07:45:f0:58:9b:4b:76: 27:bc:3a:85:3d:79:20:36:65:8c:5a:6e:a8:36:f1: 0d:44:17:15:02:fb:b3:8d:f8:e1:e2:17:0b:33:82: 15:a1:68:9c:4b:32:e4:be:2f:d5:8c:8b:c3:08:29: 33:f0:62:01:46:2f:e7:c2:b9:17:e1:a8:49:56:d9: 3f:b1:e8:d8:63:1c:4b:6d:d8:1c:67:71:e0:24:91: 5f:c5:93:6b:59:58:45:24:b6:b6:25:fe:17:85:df: 9c:e9:92:7b:96:f9:5b:ba:0e:64:2b:23:61:48:bd: 3a:70:de:e9:33:9b:76:08:85:ad:52:e8:f8:75:3c: d1:ce:aa:a8:fc:4a:dc:3d:0c:ce:99:f7:cf:5e:02: b1:3e:fd:d2:38:eb:ba:29:aa:21:0d:e1:da:d4:78: cc:b7:bb:90:c1:85:f9:c8:70:15:2b:e5:62:e5:ae: 5a:df:b5:92:fe:d9:48:dd:06:f4:d6:16:2d:e2:2f: 70:c8:16:0b:e0:aa:8a:22:56:0a:a8:9c:26:be:3d: 7b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C8:91:FA:80:24:52:EC:A2:4E:CE:2D:D6:38:76:FB:A3:07:39:28 X509v3 Authority Key Identifier: keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:10:d9:da:a6:c3:1d:8a:87:e3:5e:24:72:aa:47:29:2c:7e: 1c:4c:21:7d:97:05:97:4c:9b:0a:be:ea:cf:09:3c:da:98:0d: 58:eb:8e:de:5b:ef:3b:ae:0a:19:1a:91:9b:56:7c:79:da:bf: ff:a9:5f:d8:b5:73:f4:dc:68:3a:70:33:32:c2:0a:b3:bb:a2: f1:12:da:88:b4:f6:04:5b:b2:bb:31:a7:93:98:2a:71:40:df: ef:b7:2a:0f:04:40:7e:28:52:a3:60:f4:7a:7b:0a:1c:c5:29: 6b:44:5b:73:3e:6d:64:1e:e8:3c:56:c0:4e:b9:b5:12:ff:02: 02:da:d8:74:ba:c0:a2:a5:27:85:1b:7d:03:35:d4:c9:54:4d: 1b:9e:61:17:cd:56:a6:56:42:c4:16:51:b3:88:b7:86:48:cb: 54:9b:6c:d8:0e:d1:75:5e:7a:01:9a:95:f7:ec:4c:00:2a:3a: c7:1b:52:34:16:3b:fb:19:af:c9:8a:ba:2b:44:83:00:7c:44: 8a:c1:0a:17:e4:35:81:16:d8:f5:a5:e5:40:75:69:1c:ef:f6: d7:72:cf:ad:69:d4:1b:85:8c:db:ac:d7:b4:2d:9a:1f:8d:31: c5:b9:95:94:8c:c2:6a:fd:49:c6:7d:57:6e:43:e6:75:2e:84: be:80:16:1b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFracTJAfg11rEqd9kDcIFPLyGX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi YjJhYzMyZTAeFw0yNTA2MjQxMzU4MzRaFw0yNTA2MjUxNzUwMzRaMDMxMTAvBgNV BAMTKEQxQzg5MUZBODAyNDUyRUNBMjRFQ0UyREQ2Mzg3NkZCQTMwNzM5MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg8IFPz6ZjDsiQ4pKZgeLX0s1u RtV8x7jzvixlL9eeaHBO7mvf0BpVcWVA9JBEs9DB+zYpB0XwWJtLdie8OoU9eSA2 ZYxabqg28Q1EFxUC+7ON+OHiFwszghWhaJxLMuS+L9WMi8MIKTPwYgFGL+fCuRfh qElW2T+x6NhjHEtt2BxnceAkkV/Fk2tZWEUktrYl/heF35zpknuW+Vu6DmQrI2FI vTpw3ukzm3YIha1S6Ph1PNHOqqj8Stw9DM6Z989eArE+/dI467opqiEN4drUeMy3 u5DBhfnIcBUr5WLlrlrftZL+2UjdBvTWFi3iL3DIFgvgqooiVgqonCa+PXvxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU0ciR+oAkUuyiTs4t1jh2+6MHOSgwHwYDVR0j BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz cXd5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZmY3YTk4OS1l Y2RmLTQzZDYtODZlMS1mNmMzOTM1YjliM2QvNC8zRUVFQkI5NDZBOEQyMUQ0MDgz QzkzREMwOUNFRTU1N0JCMkFDMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBDZ2qbDHYqH414kcqpH KSx+HEwhfZcFl0ybCr7qzwk82pgNWOuO3lvvO64KGRqRm1Z8edq//6lf2LVz9Nxo OnAzMsIKs7ui8RLaiLT2BFuyuzGnk5gqcUDf77cqDwRAfihSo2D0ensKHMUpa0Rb cz5tZB7oPFbATrm1Ev8CAtrYdLrAoqUnhRt9AzXUyVRNG55hF81WplZCxBZRs4i3 hkjLVJts2A7RdV56AZqV9+xMACo6xxtSNBY7+xmvyYq6K0SDAHxEisEKF+Q1gRbY 9aXlQHVpHO/213LPrWnUG4WM26zXtC2aH40xxbmVlIzCav1Jxn1XbkPmdS6EvoAW Gw== -----END CERTIFICATE-----Generated at Wed Jun 25 08:13:39 2025 by rpki-client