$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: 9aSH17iTj5VPikfVMym1+qjtag/KIY3JP3AEzqgWoa4= Subject key identifier: F8:60:55:07:8F:FE:EC:1F:77:7C:A6:C5:06:51:3F:93:46:B4:2C:C0 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 2111628BC7240481CC7AF36FAB794725F3357429 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: E8 Signing time: Mon 08 Sep 2025 12:39:08 +0000 Manifest this update: Mon 08 Sep 2025 12:34:08 +0000 Manifest next update: Tue 09 Sep 2025 15:08:08 +0000 Files and hashes: 1: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: qgpa17rXBGEZyX0zTURKp2TS7HA9WA0LAdj3r9yq+jg=) 2: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: 4eRihxuyWrFmyrmWNHP+q80BiQuGj/+XTMKJH0kDcVI=) 3: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: lmVh0tkdqz2ZaktlfIJzzJLuyL6wItEcUEPI+PVNqdo=) 4: 3139342e3132342e3233342e302f32342d3234203d3e20343031383338.roa (hash: dg4srvpWF3uIRgfQMdk/wAV5BokR1veRJ6lDUvN1tY0=) 5: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: ad3eCylfdMfYW/Id31ooquQQLvZwumdWGj+lszfaEsA=) 6: 3139342e3132342e3233342e302f32342d3234203d3e203534333339.roa (hash: wdUsagydvVBIUao6PJHWRop4oPMEKXc9pJyNsG4SW9o=) 7: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: hZUNrJfyUHgUntGAqdSVlBaE4wglKTi9y0zmmly1bMY=) 8: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: E+WPtm+HS9AVsakqcLrBjACoAm/NbChhrd4PG4s+X5o=) 9: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: MbX2Jo3+qNy9yJ51qumhhpSA5fjjpKXnL9+Ixdd7q/M=) 10: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: yq+hWHhfyocRCOJbnYGyzdHlkfHxXD4gPxuVgEPCc0g=) 11: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: bLMKUTu2LDh7TH4JEFo2TwGKCx3JiqqNy6hRd14etMM=) 12: 3139342e3132342e3233342e302f32342d3234203d3e20393936.roa (hash: ZoxbCHQMtNZPfbUxrxLpOcXkuKUfw+Blft69mSm2oZk=) 13: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: 0XA7loK9zcLZ4LH8gJRLIhKhFochpbrC40dXD0XEE/8=) 14: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: Bvg0bczZRvr0hNeXj13n0Q8N1O34FXLeiihKmXvd96c=) 15: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: Wt7cVymDfWBwMzR8hqsJLmmyo1G55vHli1MG8ova8P4=) 16: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: d5m2VkgORPw0K/9RfkuX36SNeRRP26AsA8a03WOe71Y=) 17: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: sUFXVk5mJuzGXi+txvF0jHfWX/7COhdmW+wdhnGLLbA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 14:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:11:62:8b:c7:24:04:81:cc:7a:f3:6f:ab:79:47:25:f3:35:74:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Sep 8 12:34:08 2025 GMT Not After : Sep 9 15:08:08 2025 GMT Subject: CN=F86055078FFEEC1F777CA6C506513F9346B42CC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:1d:35:10:6f:01:bd:75:c9:2a:88:f9:1f: 1d:62:c0:d9:cc:7d:d8:15:a6:6a:0b:dd:91:78:d0: 93:0e:c8:c4:57:5d:27:90:24:a0:5d:33:ac:e1:41: e5:a1:c0:3d:ad:2b:8b:c0:c2:37:30:19:d7:9f:5d: 53:64:86:50:2a:5a:3e:58:76:f0:5f:c0:38:b6:ca: 59:ec:18:e3:b4:3f:1d:ff:c7:59:d4:ee:5b:6d:c7: 9e:6f:46:2e:fe:aa:eb:85:6b:28:5f:0e:8c:d9:b4: 8e:67:7c:aa:26:45:ca:8f:a6:e1:78:e6:73:4b:c3: a5:e7:61:2a:e0:98:6a:2e:47:50:cc:63:a6:b7:72: 9f:6b:24:10:ba:49:ea:3e:08:43:f6:39:0f:70:f1: 57:eb:4f:4b:7e:43:f8:8d:72:cc:38:0e:98:15:4d: 12:77:cc:9b:11:c2:e9:d8:2c:1a:dd:ab:ac:a4:f4: bc:49:93:b8:56:19:50:8f:37:08:6f:78:eb:0b:ea: be:8e:51:6a:97:e7:6a:06:4f:04:45:c1:5c:c6:22: fd:f0:01:06:ad:28:0d:c4:23:6d:14:09:97:66:89: 35:87:01:53:da:37:1e:08:2a:9e:1b:c8:34:8f:00: 72:7a:b5:da:d7:47:16:a5:32:ac:b5:32:14:18:87: d3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:60:55:07:8F:FE:EC:1F:77:7C:A6:C5:06:51:3F:93:46:B4:2C:C0 X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:0a:bd:40:20:36:d1:e5:99:6b:c0:44:d0:a6:f5:45:60:80: 80:82:f8:5e:9c:85:90:62:f4:fc:c1:28:ce:9e:27:57:e1:0b: 37:80:0b:94:9a:21:b2:69:63:f4:e5:a9:ab:cc:03:bb:4f:1f: ef:55:89:64:75:74:c7:81:40:4b:07:01:e5:8e:6b:4b:29:52: 0b:a9:81:0c:49:06:f3:18:ed:8f:58:aa:a2:20:0f:6c:59:f9: 95:a7:27:7a:a1:ed:5d:06:8c:e5:94:37:02:be:1e:3d:3e:df: 49:6f:06:64:5d:00:db:02:50:64:86:db:55:e5:ed:1f:b5:93: 1a:f5:6b:99:56:55:10:9b:4f:36:de:b9:9a:eb:b3:cf:d0:95: af:30:f8:84:64:1e:94:0a:4c:9b:f1:04:05:a3:6f:6e:08:bf: f0:e1:14:73:bc:b5:bd:d6:ad:f7:29:6b:47:78:5f:b9:c3:bf: 2f:7a:7d:f2:85:4d:9f:d5:7c:6b:8c:fc:43:0b:cd:89:ce:58: 91:66:3a:df:da:2e:8f:47:5c:e8:0d:b9:72:6c:09:05:2d:28: 7d:f7:aa:58:e6:a3:88:8c:e8:f2:8e:2a:9d:50:50:6c:83:28: dc:99:43:d2:9c:aa:b9:26:70:60:d4:f0:9a:ad:d2:1b:c7:4d: 4a:0d:0a:45 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIRFii8ckBIHMevNvq3lHJfM1dCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNTA5MDgxMjM0MDhaFw0yNTA5MDkxNTA4MDhaMDMxMTAvBgNV BAMTKEY4NjA1NTA3OEZGRUVDMUY3NzdDQTZDNTA2NTEzRjkzNDZCNDJDQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ux01EG8BvXXJKoj5Hx1iwNnM fdgVpmoL3ZF40JMOyMRXXSeQJKBdM6zhQeWhwD2tK4vAwjcwGdefXVNkhlAqWj5Y dvBfwDi2ylnsGOO0Px3/x1nU7lttx55vRi7+quuFayhfDozZtI5nfKomRcqPpuF4 5nNLw6XnYSrgmGouR1DMY6a3cp9rJBC6Seo+CEP2OQ9w8VfrT0t+Q/iNcsw4DpgV TRJ3zJsRwunYLBrdq6yk9LxJk7hWGVCPNwhveOsL6r6OUWqX52oGTwRFwVzGIv3w AQatKA3EI20UCZdmiTWHAVPaNx4IKp4byDSPAHJ6tdrXRxalMqy1MhQYh9NrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+GBVB4/+7B93fKbFBlE/k0a0LMAwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQq9QCA20eWZa8BE0Kb1 RWCAgIL4XpyFkGL0/MEozp4nV+ELN4ALlJohsmlj9OWpq8wDu08f71WJZHV0x4FA SwcB5Y5rSylSC6mBDEkG8xjtj1iqoiAPbFn5lacneqHtXQaM5ZQ3Ar4ePT7fSW8G ZF0A2wJQZIbbVeXtH7WTGvVrmVZVEJtPNt65muuzz9CVrzD4hGQelApMm/EEBaNv bgi/8OEUc7y1vdat9ylrR3hfucO/L3p98oVNn9V8a4z8QwvNic5YkWY639ouj0dc 6A25cmwJBS0offeqWOajiIzo8o4qnVBQbIMo3JlD0pyquSZwYNTwmq3SG8dNSg0K RQ== -----END CERTIFICATE-----Generated at Mon Sep 8 17:41:42 2025 by rpki-client