$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft File: 8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json) Hash identifier: I8P7O6iwHXMqzSINPXaHbTXsjLCy0v4m1IPSyzNrPc8= Subject key identifier: 3E:D9:F5:D6:8F:1F:01:B0:D4:C6:23:08:07:0B:EE:16:A7:7E:AA:AE Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Certificate serial: 46BE3B331150200278BD35E5A42E5BD6F5341486 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft Manifest number: 04AE Signing time: Sat 07 Jun 2025 21:32:34 +0000 Manifest this update: Sat 07 Jun 2025 21:27:34 +0000 Manifest next update: Mon 09 Jun 2025 00:17:34 +0000 Files and hashes: 1: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: 1mKwdC2ZIiOIr7Rnoef/+fSq7c6umW7Rd7kmaMzPSt8=) 2: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: Jlofucguv+Def3PUKBrJxZOJZBY4eY6+vW3Y4ZeprSk=) 3: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: jKhLBm90tx+Wj64bfhAOaNtyd2IRsOIjohul50fMfmI=) 4: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: AO/2wQxFVW1dCHNtgSdMO8qdA9TP6KJffP27Y2ywVzk=) 5: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: CAxVMMWN+S6NlP/AsgS1tyjuFvGWAaxzAHmHeH0vGZY=) 6: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: kVRW91gUQQJKDevSNusyEaCMFEQt6idZ9U9pUTvlEwg=) 7: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: yu4VS8d4SOotNR90wp+Yzh042rOQsTRk/ltNPBkKiBs=) 8: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: pLWChihbDvjfrasKe+t2DYZzXoPPv1CnrKCMYicuojE=) 9: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: p6Bk0gZf8IBhPL6y8ZeFGMDiI7CTICtCBqH+ui8UNPk=) 10: 37372e38332e3235342e302f32342d3234203d3e20333936303733.roa (hash: 1MWe05/lbd5r4txcdetULyW0MdduqlknrcyQ1+uUsgs=) 11: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: k4QPq18KIVcE3YfXs1geEObswKolsmORhNCPU0jWep8=) 12: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: 7LxiUpW29bCJDw6ndbnVxwTHPen7XCpx03brWPSWNVo=) 13: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: J4P/0pJKXXswWDL/U/aSyTpYbnb7RCTWwOsChVTVKX0=) 14: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: K41YwmuS4ZQTtdpcwbbZDu1wfvEN/clHXwy6+cvMRTQ=) 15: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: oAOTNgxw6bYQVCzHD93BNrqwf7e2+dYeRkUxzvhfYNE=) 16: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: ngHdoUxJymyOOTpWXLZA6HfqcGQkxKDww9uhl5L3bs4=) 17: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: sfBR34BQfUnBG/Dfs9RgO4NWV6dIYQiGWUQLFQnMRUU=) 18: 36322e3139322e3137352e302f32342d3234203d3e203332313637.roa (hash: /WAm5dy4jlcwivOnkIFnMuEvBCc6QOLwRlkX4YTGCBc=) 19: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: j6aiC8hmqjNX8bvUvtzfL/WZD+CbfD2TNLTq4Vkaxb8=) 20: 36322e3139322e3137322e302f32342d3234203d3e20323733333438.roa (hash: qejB/WT5wFvC1QZ5g0XqTUenJgPd04W9SCAjldb8mgM=) 21: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: eWXMMSA0Rq5koOaRaaHhcbU4ocE3NTgDUdKA5XEeLVo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 00:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:be:3b:33:11:50:20:02:78:bd:35:e5:a4:2e:5b:d6:f5:34:14:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Validity Not Before: Jun 7 21:27:34 2025 GMT Not After : Jun 9 00:17:34 2025 GMT Subject: CN=3ED9F5D68F1F01B0D4C62308070BEE16A77EAAAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c6:d8:b9:2a:11:52:a0:50:ad:92:e1:d8:02: c7:72:74:f1:c2:9e:d2:27:8a:43:1c:78:5e:de:5a: 1b:4b:62:60:51:51:b4:8c:1d:22:18:19:b0:8f:fc: bb:5d:42:ed:21:d0:4e:42:77:44:01:1c:ea:78:3b: 5a:bc:7a:ec:79:24:00:2b:08:92:4a:db:db:4f:b1: ea:dc:41:6d:84:a5:f6:b2:54:42:0f:35:9a:ee:ba: 5b:7b:ee:40:3c:3c:3a:70:32:c4:20:c8:04:fc:3b: 80:31:1a:85:81:59:f8:fe:dd:db:cc:c3:a5:56:69: 0e:13:4a:73:d6:2f:ad:55:ae:41:92:86:fa:cc:5e: ab:60:a1:be:82:fd:23:14:af:d0:bd:29:91:43:b9: 0f:b6:ec:5a:a9:b6:a3:9f:86:21:93:7f:eb:05:27: 37:bb:69:3f:ba:6b:73:b8:67:d1:8b:23:ff:8e:0b: cb:28:4c:a3:58:89:37:60:5a:2d:93:1f:f3:02:11: ed:00:77:0c:ee:ae:fd:dd:d3:37:d7:7f:a4:bd:c2: 17:63:51:1b:70:c9:e2:59:d7:09:e5:e1:98:ee:06: 8c:38:a5:a7:c8:05:72:fb:b0:78:52:fe:c4:2c:04: ef:c5:de:3e:8e:80:28:b9:74:2e:5c:7f:05:45:4e: c3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D9:F5:D6:8F:1F:01:B0:D4:C6:23:08:07:0B:EE:16:A7:7E:AA:AE X509v3 Authority Key Identifier: keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:1a:e6:61:f2:0b:b3:74:3e:e9:00:4c:a1:0e:70:f7:d6:3d: 70:b2:88:8f:20:2b:cd:dd:d3:61:fa:4e:91:a7:3f:70:31:c7: c9:4c:2e:87:aa:d4:47:eb:a0:10:a1:c9:59:f6:a6:74:f3:00: 41:c9:bf:ab:c1:0d:e4:3e:fe:ef:b1:a8:05:31:3c:35:3a:36: ba:07:3d:af:e2:86:60:36:38:b0:25:a0:47:36:dc:40:80:75: f3:aa:3d:f4:cf:97:f8:14:3f:fd:c5:06:c2:ab:24:8e:1f:9b: 94:1c:fe:26:1a:17:c3:d5:9f:e6:c5:6e:e3:a9:2b:34:e7:a3: 76:b0:e7:f0:0c:91:14:07:88:0d:f6:46:e8:cc:ec:a6:3f:3a: ed:07:75:36:a3:d5:03:db:31:8a:5e:0f:e9:6b:54:b2:96:21: 29:db:95:af:f2:54:74:b0:0a:d0:23:fd:90:52:78:16:03:c4: eb:74:cb:95:d1:b2:d9:20:f8:24:80:ad:cd:f3:44:c7:da:3e: 8a:93:bb:ed:30:42:51:5e:e2:67:5c:0c:b8:28:be:c7:fb:99: 26:69:81:f4:72:fe:2e:09:78:6a:43:a8:6a:0e:e9:00:5e:ce: a1:94:cb:3a:5d:37:52:f1:6f:9e:ea:84:15:a1:f4:b0:b4:27: 34:51:52:9e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURr47MxFQIAJ4vTXlpC5b1vU0FIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy NjllYjNkNjAeFw0yNTA2MDcyMTI3MzRaFw0yNTA2MDkwMDE3MzRaMDMxMTAvBgNV BAMTKDNFRDlGNUQ2OEYxRjAxQjBENEM2MjMwODA3MEJFRTE2QTc3RUFBQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPxti5KhFSoFCtkuHYAsdydPHC ntInikMceF7eWhtLYmBRUbSMHSIYGbCP/LtdQu0h0E5Cd0QBHOp4O1q8eux5JAAr CJJK29tPsercQW2EpfayVEIPNZruult77kA8PDpwMsQgyAT8O4AxGoWBWfj+3dvM w6VWaQ4TSnPWL61VrkGShvrMXqtgob6C/SMUr9C9KZFDuQ+27FqptqOfhiGTf+sF Jze7aT+6a3O4Z9GLI/+OC8soTKNYiTdgWi2TH/MCEe0Adwzurv3d0zfXf6S9whdj URtwyeJZ1wnl4ZjuBow4pafIBXL7sHhS/sQsBO/F3j6OgCi5dC5cfwVFTsNpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUPtn11o8fAbDUxiMIBwvuFqd+qq4wHwYDVR0j BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0 MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh ZXM5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTk3NzExNS01 MTEwLTQyNTctOTRlZi00ZDJiNDM4ODQwNDAvMC84RjRDRTc3MjJGOTkwNzVEOTQ3 MzhCN0U2MTA3MDQwMTI2OUVCM0Q2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsBrmYfILs3Q+6QBMoQ5w 99Y9cLKIjyArzd3TYfpOkac/cDHHyUwuh6rUR+ugEKHJWfamdPMAQcm/q8EN5D7+ 77GoBTE8NTo2ugc9r+KGYDY4sCWgRzbcQIB186o99M+X+BQ//cUGwqskjh+blBz+ JhoXw9Wf5sVu46krNOejdrDn8AyRFAeIDfZG6Mzspj867Qd1NqPVA9sxil4P6WtU spYhKduVr/JUdLAK0CP9kFJ4FgPE63TLldGy2SD4JICtzfNEx9o+ipO77TBCUV7i Z1wMuCi+x/uZJmmB9HL+Lgl4akOoag7pAF7OoZTLOl03UvFvnuqEFaH0sLQnNFFS ng== -----END CERTIFICATE-----Generated at Sun Jun 8 07:31:33 2025 by rpki-client