$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: dFSQ7nLYpzcOsekO9wcanlt6LSRiqkCNdHlBWZitJBk= Subject key identifier: 3B:AB:49:62:7F:0A:67:15:E7:56:AE:82:20:B0:CF:3C:51:77:07:DC Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 36765D20ECD6DFAE132DACB32EF95591745E5A30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: A4 Signing time: Tue 15 Apr 2025 00:42:56 +0000 Manifest this update: Tue 15 Apr 2025 00:37:56 +0000 Manifest next update: Wed 16 Apr 2025 02:49:56 +0000 Files and hashes: 1: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=) 2: 326130323a323937303a3a2f32392d3239203d3e203433383437.roa (hash: s2Lo9o3m7PNA+VTM8h6HfGJuLE7e0u+GGo764aM9FW4=) 3: 3138352e35382e3135372e302f32342d3234203d3e20323132333438.roa (hash: PJqchqcDu0h0EcPi1D5ya//wXOUcg51LCHqSFB3Qerk=) 4: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=) 5: 33312e3138352e3130372e302f32342d3234203d3e203231383539.roa (hash: X23TgVm2+OwqELUYhUauYCGCU9YC3xkuQ9JiAV3abPE=) 6: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=) 7: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=) 8: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=) 9: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=) 10: 34362e3138322e31362e302f32332d3233203d3e203433383437.roa (hash: 4YLzigbbgGBlj3P8KPCDpw+y1a9c2DAZLVBVu5lNf4E=) 11: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: 01LOWf7MxhRX+2Op4rDN5W7ucn6FteIUTuCGEpIiXqg=) 12: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=) 13: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: At6usN420qUAJ6d5T3w7Bj+QDX3yCTm624z6m0RBbpU=) 14: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=) 15: 34362e3138322e31382e302f32332d3233203d3e203433383437.roa (hash: 4Ns+nZIS59tdPTXyzEk/8ZsDfijKL83vY7HPlP7mVB0=) 16: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=) 17: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: bxI8j0Q43fNYwFfEpnx3zZA+WfxxHOFpyLP15cwiRJc=) 18: 3138352e35382e3135382e302f32342d3234203d3e203432383331.roa (hash: H0/UOIDOPTZQG2jWBZUuvlV7qmEWppBmDmL+nyn9Jr4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 15 Apr 2025 23:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:76:5d:20:ec:d6:df:ae:13:2d:ac:b3:2e:f9:55:91:74:5e:5a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Apr 15 00:37:56 2025 GMT Not After : Apr 16 02:49:56 2025 GMT Subject: CN=3BAB49627F0A6715E756AE8220B0CF3C517707DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ea:d3:54:98:db:15:02:5b:0e:94:f3:df:36: c1:58:c3:cd:41:61:a2:7d:00:47:66:be:4b:f9:cd: 86:5e:69:ca:c7:71:dd:98:dd:21:90:34:31:36:e9: f2:d0:bc:fb:31:16:4e:f9:6c:aa:77:81:0e:5e:8f: 62:03:c4:98:46:49:46:4f:91:3e:a9:67:07:f9:d7: 9c:94:01:20:1e:d6:6d:1f:19:6c:de:89:a5:0e:3f: 81:2c:e7:98:80:25:b8:c6:7b:ce:98:31:d2:2f:98: 55:d3:de:52:d8:81:2d:96:9e:50:46:2d:22:fd:b6: 0e:ae:91:a4:1c:42:b7:d6:94:3f:74:3f:88:91:37: 1e:fd:05:cd:0b:1f:96:52:2b:a3:8f:98:00:9a:5d: 7a:c4:ac:f8:de:82:77:c9:c7:6d:64:e9:d6:d0:9d: 9e:64:f9:de:e3:4b:c0:ad:2d:0e:d3:f5:05:78:58: 92:55:49:87:6d:e8:75:5d:91:95:10:1c:d1:ee:b0: 9f:ef:86:e1:02:f6:77:bf:47:0c:8c:26:33:65:af: 4e:8c:8f:88:be:d3:da:15:61:ac:82:00:b3:1a:ed: a4:fc:4c:92:80:85:2f:f0:9c:49:11:dc:68:ba:07: 8f:87:23:ef:73:d6:a1:1f:ea:e2:22:c8:6c:2a:06: 90:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AB:49:62:7F:0A:67:15:E7:56:AE:82:20:B0:CF:3C:51:77:07:DC X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:04:08:ea:ad:7d:bf:6a:f1:de:6d:26:12:0e:83:c2:ba:83: 5e:36:c0:aa:da:d0:d8:0b:f5:e4:d8:8b:66:44:5e:8b:3c:f0: 87:83:96:fb:6c:57:32:14:91:ad:37:ca:9b:75:29:97:65:1f: 63:61:c0:e6:5d:ca:38:4e:55:f0:e2:3d:59:99:7f:ef:ca:b6: 22:4a:e0:24:5f:dd:8e:5d:4d:7d:0b:a1:80:41:40:9d:ba:17: 8c:e6:db:39:de:76:a9:be:38:20:42:14:5f:41:f0:73:84:46: 03:77:f2:40:20:c6:79:87:99:f9:60:16:06:fc:6f:ec:89:f6: 23:56:61:31:bc:aa:de:eb:34:bc:ef:b3:a2:e5:47:39:f5:a9: fc:4b:b9:ee:56:e8:ae:8f:0e:a4:5e:87:73:13:d9:20:65:11: 20:dc:63:01:4b:6e:e0:15:12:8f:e6:cc:65:99:60:da:ab:d1: 13:a3:af:d1:aa:bd:16:1c:34:85:ee:d1:1d:63:ac:7b:33:db: 55:8f:4e:27:3d:0b:3e:6c:99:c2:22:36:7b:56:b7:be:07:6b: b1:27:7c:5b:bb:ad:33:3d:de:62:de:98:38:ab:cb:00:04:51: 5d:c8:d2:1e:07:d7:53:89:c5:b1:d8:16:41:6a:13:3a:96:be: 9f:d0:68:47 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNnZdIOzW364TLayzLvlVkXReWjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNTA0MTUwMDM3NTZaFw0yNTA0MTYwMjQ5NTZaMDMxMTAvBgNV BAMTKDNCQUI0OTYyN0YwQTY3MTVFNzU2QUU4MjIwQjBDRjNDNTE3NzA3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06tNUmNsVAlsOlPPfNsFYw81B YaJ9AEdmvkv5zYZeacrHcd2Y3SGQNDE26fLQvPsxFk75bKp3gQ5ej2IDxJhGSUZP kT6pZwf515yUASAe1m0fGWzeiaUOP4Es55iAJbjGe86YMdIvmFXT3lLYgS2WnlBG LSL9tg6ukaQcQrfWlD90P4iRNx79Bc0LH5ZSK6OPmACaXXrErPjegnfJx21k6dbQ nZ5k+d7jS8CtLQ7T9QV4WJJVSYdt6HVdkZUQHNHusJ/vhuEC9ne/RwyMJjNlr06M j4i+09oVYayCALMa7aT8TJKAhS/wnEkR3Gi6B4+HI+9z1qEf6uIiyGwqBpDfAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUO6tJYn8KZxXnVq6CILDPPFF3B9wwHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAQI6q19v2rx3m0mEg6D wrqDXjbAqtrQ2Av15NiLZkReizzwh4OW+2xXMhSRrTfKm3Upl2UfY2HA5l3KOE5V 8OI9WZl/78q2IkrgJF/djl1NfQuhgEFAnboXjObbOd52qb44IEIUX0Hwc4RGA3fy QCDGeYeZ+WAWBvxv7In2I1ZhMbyq3us0vO+zouVHOfWp/Eu57lboro8OpF6HcxPZ IGURINxjAUtu4BUSj+bMZZlg2qvRE6Ov0aq9Fhw0he7RHWOsezPbVY9OJz0LPmyZ wiI2e1a3vgdrsSd8W7utMz3eYt6YOKvLAARRXcjSHgfXU4nFsdgWQWoTOpa+n9Bo Rw== -----END CERTIFICATE-----Generated at Tue Apr 15 09:53:28 2025 by rpki-client