$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: WV0Bs1gZ31uoflBSS2oO7x1EeCyG7s33bJ5CmIeO6HY= Subject key identifier: D3:5F:9B:43:24:5B:84:5F:1A:06:3B:EF:31:0B:D4:92:16:6F:A4:DE Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 015D86F6C9EBDD7F110D176D7D156121A3F5ADEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 6A Signing time: Fri 06 Jun 2025 04:12:29 +0000 Manifest this update: Fri 06 Jun 2025 04:07:29 +0000 Manifest next update: Sat 07 Jun 2025 07:08:29 +0000 Files and hashes: 1: 3139342e3132342e3233342e302f32342d3234203d3e20393936.roa (hash: ZoxbCHQMtNZPfbUxrxLpOcXkuKUfw+Blft69mSm2oZk=) 2: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: SVwqhz+9Z5Z1a7Aa/aAfZ/Lypr7/rrulzSnJ7+MbasE=) 3: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: yq+hWHhfyocRCOJbnYGyzdHlkfHxXD4gPxuVgEPCc0g=) 4: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: ad3eCylfdMfYW/Id31ooquQQLvZwumdWGj+lszfaEsA=) 5: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: Wt7cVymDfWBwMzR8hqsJLmmyo1G55vHli1MG8ova8P4=) 6: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: Bvg0bczZRvr0hNeXj13n0Q8N1O34FXLeiihKmXvd96c=) 7: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: 0XA7loK9zcLZ4LH8gJRLIhKhFochpbrC40dXD0XEE/8=) 8: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: lmVh0tkdqz2ZaktlfIJzzJLuyL6wItEcUEPI+PVNqdo=) 9: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: bLMKUTu2LDh7TH4JEFo2TwGKCx3JiqqNy6hRd14etMM=) 10: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: 4eRihxuyWrFmyrmWNHP+q80BiQuGj/+XTMKJH0kDcVI=) 11: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: MbX2Jo3+qNy9yJ51qumhhpSA5fjjpKXnL9+Ixdd7q/M=) 12: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: E+WPtm+HS9AVsakqcLrBjACoAm/NbChhrd4PG4s+X5o=) 13: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: hZUNrJfyUHgUntGAqdSVlBaE4wglKTi9y0zmmly1bMY=) 14: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: sUFXVk5mJuzGXi+txvF0jHfWX/7COhdmW+wdhnGLLbA=) 15: 3139342e3132342e3233342e302f32342d3234203d3e203534333339.roa (hash: wdUsagydvVBIUao6PJHWRop4oPMEKXc9pJyNsG4SW9o=) 16: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: qgpa17rXBGEZyX0zTURKp2TS7HA9WA0LAdj3r9yq+jg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 07:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:5d:86:f6:c9:eb:dd:7f:11:0d:17:6d:7d:15:61:21:a3:f5:ad:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Jun 6 04:07:29 2025 GMT Not After : Jun 7 07:08:29 2025 GMT Subject: CN=D35F9B43245B845F1A063BEF310BD492166FA4DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:45:19:8d:6a:3e:2b:1d:b0:67:57:e9:9d:aa: 54:d2:7d:03:0e:a4:da:2b:63:3a:1c:e2:9d:44:90: 65:a5:ba:a3:ff:0a:2b:9c:4d:25:a3:63:9d:33:27: f6:15:b2:0d:ef:fa:8d:6d:3a:cc:25:71:42:da:cf: 45:44:e7:99:1f:ea:d3:3f:5f:ff:a9:e5:63:b3:87: c2:ca:ef:ca:e5:98:14:8e:bc:c8:40:ee:ba:90:24: 42:64:34:51:34:ce:3f:cb:6d:bd:98:45:0d:6d:b3: a8:43:3e:6a:4c:83:bb:48:84:b0:36:83:98:d9:1d: b2:3f:a8:e8:94:bf:e4:68:93:4a:a3:5c:85:de:bc: 15:63:22:2b:a1:e3:8c:85:2f:8a:5f:af:9f:fe:86: 08:60:4e:c4:8e:5d:ed:e4:c5:bf:c6:a7:b4:e6:a1: 85:ba:77:ff:bb:fe:4c:e5:97:40:2e:3d:3e:9d:9d: 64:83:79:60:c9:0c:13:7d:c8:a5:93:c8:a6:6b:92: d3:5b:13:df:4d:93:44:8a:60:9e:58:1c:19:5f:28: 5e:ab:c7:98:37:f7:3b:4d:32:13:e8:8f:fd:1c:ab: 14:67:8f:41:25:8b:d0:d4:e6:d3:55:2d:eb:e6:3e: a9:d6:27:7e:47:82:49:94:20:be:f5:ea:49:58:d6: c5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5F:9B:43:24:5B:84:5F:1A:06:3B:EF:31:0B:D4:92:16:6F:A4:DE X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:63:2f:25:03:23:8d:a2:06:ff:d4:66:ea:5f:69:74:67:dd: 49:50:fe:29:8f:9a:bd:53:4f:f1:f5:f7:55:2e:d4:9d:76:c8: 5c:71:d2:b8:21:03:78:10:22:d8:f5:9b:6c:77:d3:fc:94:79: 8b:f2:83:41:e8:3f:5c:34:54:32:37:56:da:f0:74:a1:2f:11: 5a:69:d1:e7:c0:cc:8d:59:95:40:08:3b:32:b7:41:e5:4d:ce: c6:ec:e6:97:bf:f4:d7:94:06:75:91:ca:b5:37:7c:56:55:40: 13:58:b3:84:ad:9a:d7:c7:6e:48:a4:c9:60:99:02:99:12:dc: e9:9e:c3:b2:0c:64:90:bd:7d:b6:93:49:11:c6:62:f5:14:31: fb:cb:46:01:55:6a:86:41:f2:9e:4c:8b:cc:15:e0:5f:82:8f: 92:8b:ef:35:8e:22:bf:8a:4b:ed:74:e8:8b:8e:2c:30:6c:0f: 5c:e4:f9:46:90:6f:2e:de:1e:74:ff:dd:d4:c3:db:f2:0a:d3: ab:13:7d:96:f3:b0:70:6a:68:2c:62:a0:f7:b8:36:a3:73:b8: 39:a1:70:12:71:5d:ae:1b:88:00:7a:8f:7f:eb:71:3e:2f:a5: ab:8b:5f:31:fb:db:c6:e1:aa:7d:ad:c0:ae:81:96:93:fd:e4: da:5c:7c:a8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAV2G9snr3X8RDRdtfRVhIaP1rewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNTA2MDYwNDA3MjlaFw0yNTA2MDcwNzA4MjlaMDMxMTAvBgNV BAMTKEQzNUY5QjQzMjQ1Qjg0NUYxQTA2M0JFRjMxMEJENDkyMTY2RkE0REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7RRmNaj4rHbBnV+mdqlTSfQMO pNorYzoc4p1EkGWluqP/CiucTSWjY50zJ/YVsg3v+o1tOswlcULaz0VE55kf6tM/ X/+p5WOzh8LK78rlmBSOvMhA7rqQJEJkNFE0zj/Lbb2YRQ1ts6hDPmpMg7tIhLA2 g5jZHbI/qOiUv+Rok0qjXIXevBVjIiuh44yFL4pfr5/+hghgTsSOXe3kxb/Gp7Tm oYW6d/+7/kzll0AuPT6dnWSDeWDJDBN9yKWTyKZrktNbE99Nk0SKYJ5YHBlfKF6r x5g39ztNMhPoj/0cqxRnj0Eli9DU5tNVLevmPqnWJ35HgkmUIL716klY1sVFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU01+bQyRbhF8aBjvvMQvUkhZvpN4wHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWMvJQMjjaIG/9Rm6l9p dGfdSVD+KY+avVNP8fX3VS7UnXbIXHHSuCEDeBAi2PWbbHfT/JR5i/KDQeg/XDRU MjdW2vB0oS8RWmnR58DMjVmVQAg7MrdB5U3Oxuzml7/015QGdZHKtTd8VlVAE1iz hK2a18duSKTJYJkCmRLc6Z7DsgxkkL19tpNJEcZi9RQx+8tGAVVqhkHynkyLzBXg X4KPkovvNY4iv4pL7XToi44sMGwPXOT5RpBvLt4edP/d1MPb8grTqxN9lvOwcGpo LGKg97g2o3O4OaFwEnFdrhuIAHqPf+txPi+lq4tfMfvbxuGqfa3AroGWk/3k2lx8 qA== -----END CERTIFICATE-----Generated at Fri Jun 6 23:53:45 2025 by rpki-client