$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: lo5SGyl4NjqnsuM0nayBIwJSJhkuRs/qg/z9Bbo6VSs= Subject key identifier: D0:EC:70:D1:FE:F5:B0:99:84:C4:09:E8:17:30:70:46:BF:D0:4E:9C Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 02964309D6728ADA53AD4EE8D382C87335E01BD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 057F Signing time: Mon 08 Sep 2025 05:03:59 +0000 Manifest this update: Mon 08 Sep 2025 04:58:59 +0000 Manifest next update: Tue 09 Sep 2025 06:56:59 +0000 Files and hashes: 1: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: KhYwWjM/5tZMAc1Ys2Qi/Z3IxKzkYaHG79mNsaA679A=) 2: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: DciCLs6iZadq+HI8UUDBaC2SRVWwHHBtAN72ywTOEBY=) 3: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: +zgqg7oCfaFMqowtNn81ipaj3irDs5wSCtc6B41Oes8=) 4: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: mH/CiZmwU0yIfVsdjhTMAG/KAtonINfckXbmsVpawiw=) 5: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: W9NdT6aoX4s9PghUA97T0GAxnEF0Q0u3VMj+QX70R5Y=) 6: 3138352e3232392e3230332e302f32342d3234203d3e20323036373335.roa (hash: +12elja/TRgK8YWG00PTJRaGaFKqfWK9R0yIngktuC8=) 7: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=) 8: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=) 9: 33362e3235352e39322e302f32332d3234203d3e203139333138.roa (hash: FthEwpOIKT5rKWCqEXY9gMB5simU3azPQORqXvTeqVo=) 10: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: NTiGjgrJWtlD9Roa9FRQtbjOAAcPR35U4Ayfj8SpKuI=) 11: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: /OGL5Xocpa/mA4GEutGuQoiWc4p3DBj9VM0kpmdQZxo=) 12: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: fyEm36B55a1pd4HLESzxtTjALoxzu4leetK2j/pzqHY=) 13: 3138352e3234342e39352e302f32342d3234203d3e203230343733.roa (hash: wcPx+O7KmTHA1Z17UF9VIIdo6IS06Ij+d7NLeipHdoU=) 14: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: aTFuiZRKSKlOcP1bFw/QEJGr9kwsAqFvqfR62oNQfMc=) 15: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: ezbmX/yRe+yRvkLs/8FFZoupwCiBI67aZ+0JqkrMl4Q=) 16: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: L+rO+MXrQK3tGBKkhTiQd3Pp/oT0n0nJ8NfAxPcZ/Ik=) 17: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: 7MRl2ndToXr+/Nwpi0fWFQSP/EKXsP73R/4IMWd5dgM=) 18: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: O475B5YNr+mk4vbByMFVmoqbRTenx4kmx66C3HIfdsg=) 19: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=) 20: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=) 21: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: 2mJFb3j98iS3WwOyYDzT/44zu56P1Mt1+w22nAIK9Eo=) 22: 33362e3235352e39322e302f32332d3234203d3e203230333236.roa (hash: uAr910mpCFzZrOxxImyBVxZ5bzjvqrL8T8981qvKdos=) 23: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: RdOuxQjMUqkQryMcrXonWYYeJva5RY8rohAdG2ITJdw=) 24: 3138352e3232392e3230302e302f32342d3234203d3e2039333034.roa (hash: 9BQlkuwOuPyXvuvnOIpRrrItcJ412PckV00AOrBJhqk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:96:43:09:d6:72:8a:da:53:ad:4e:e8:d3:82:c8:73:35:e0:1b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Sep 8 04:58:59 2025 GMT Not After : Sep 9 06:56:59 2025 GMT Subject: CN=D0EC70D1FEF5B09984C409E817307046BFD04E9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:0f:84:4b:b0:9b:24:32:95:ab:39:75:44: ff:47:60:15:fb:32:40:bf:46:96:bc:98:f5:9c:8f: 6c:f3:e4:91:9b:d3:79:11:88:9c:02:26:61:a2:80: 9d:cd:ab:10:60:98:ed:42:b9:6f:ed:a5:35:3d:ac: 4d:4e:ff:60:7f:6d:76:54:14:c0:c4:d8:85:fb:43: 0c:75:82:e1:17:14:da:97:b7:e8:3e:fc:31:85:dd: b2:52:1d:17:49:c5:3a:b5:f7:64:3d:58:93:c4:78: 05:56:bd:16:ca:8c:b3:b0:cb:b3:38:27:09:46:30: b1:75:43:f0:3b:b1:19:b7:49:7c:2e:39:d4:81:09: ef:d0:ef:3d:f2:2d:05:8b:66:a7:59:5e:b6:79:fb: c1:54:2a:c8:6b:3a:94:1d:6d:a9:19:d3:28:af:6c: fe:9f:b0:e0:bd:1b:6f:d7:99:94:30:37:0f:c9:d6: 4a:90:20:c5:c8:6f:1f:08:19:32:d3:3b:01:28:1d: 21:a3:86:b8:c2:c7:be:c3:ce:cb:ce:9c:8c:51:49: 18:7c:25:4f:85:d7:54:d6:39:2d:cb:8d:80:80:8c: 7e:f8:17:f5:14:7e:e8:50:4d:20:8b:65:50:79:26: 88:ca:54:db:07:fd:50:93:2b:9f:ef:54:09:29:a8: 4d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EC:70:D1:FE:F5:B0:99:84:C4:09:E8:17:30:70:46:BF:D0:4E:9C X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:c3:8f:e7:ec:d9:ba:a2:b9:bc:db:fa:30:a0:07:db:ee:31: f2:57:65:12:2e:3c:df:02:2c:c1:be:dc:d3:47:22:d6:67:f1: ca:6d:72:d7:91:ab:b9:bf:ce:86:ce:ba:d6:93:ab:e6:27:05: eb:4c:42:90:87:9b:0c:41:29:d5:f1:7c:44:fb:15:6b:bd:a9: 93:8f:23:61:1a:9a:ad:d2:4b:ab:05:c3:cb:5c:2c:18:e7:eb: 3f:ba:f6:d3:49:36:c9:74:d8:f0:2e:31:3f:b1:a4:93:fd:b4: d6:3e:80:62:90:1e:30:22:33:39:b1:e0:d3:b2:49:47:ec:38: b5:8b:e0:bf:f3:9e:17:d4:f5:4c:5b:bb:db:a3:f2:66:26:22: 43:8c:35:75:a4:b8:ae:ea:27:15:d2:ef:da:8d:de:a0:bb:ac: e8:1f:05:32:aa:ee:21:64:19:e6:2d:b3:42:08:67:d4:59:b6: d7:63:17:4b:6d:38:df:41:e4:d0:e7:fa:59:b3:f7:26:6c:26: 6d:a3:5b:95:91:18:0a:17:91:c8:fe:83:76:9f:8e:df:f4:d1: e7:43:c4:49:22:79:ff:9f:00:91:dd:37:7f:d6:c2:21:45:ba: 9c:9c:01:ee:d5:da:c2:09:b1:81:ba:36:ad:a6:b2:c7:2a:81: 78:fd:3a:e6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUApZDCdZyitpTrU7o04LIczXgG9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNTA5MDgwNDU4NTlaFw0yNTA5MDkwNjU2NTlaMDMxMTAvBgNV BAMTKEQwRUM3MEQxRkVGNUIwOTk4NEM0MDlFODE3MzA3MDQ2QkZEMDRFOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Yg+ES7CbJDKVqzl1RP9HYBX7 MkC/Rpa8mPWcj2zz5JGb03kRiJwCJmGigJ3NqxBgmO1CuW/tpTU9rE1O/2B/bXZU FMDE2IX7Qwx1guEXFNqXt+g+/DGF3bJSHRdJxTq192Q9WJPEeAVWvRbKjLOwy7M4 JwlGMLF1Q/A7sRm3SXwuOdSBCe/Q7z3yLQWLZqdZXrZ5+8FUKshrOpQdbakZ0yiv bP6fsOC9G2/XmZQwNw/J1kqQIMXIbx8IGTLTOwEoHSGjhrjCx77DzsvOnIxRSRh8 JU+F11TWOS3LjYCAjH74F/UUfuhQTSCLZVB5JojKVNsH/VCTK5/vVAkpqE0ZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU0Oxw0f71sJmExAnoFzBwRr/QTpwwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMOP5+zZuqK5vNv6MKAH 2+4x8ldlEi483wIswb7c00ci1mfxym1y15Grub/Ohs661pOr5icF60xCkIebDEEp 1fF8RPsVa72pk48jYRqardJLqwXDy1wsGOfrP7r200k2yXTY8C4xP7Gkk/201j6A YpAeMCIzObHg07JJR+w4tYvgv/OeF9T1TFu726PyZiYiQ4w1daS4ruonFdLv2o3e oLus6B8FMqruIWQZ5i2zQghn1Fm212MXS20430Hk0Of6WbP3JmwmbaNblZEYCheR yP6Ddp+O3/TR50PESSJ5/58Akd03f9bCIUW6nJwB7tXawgmxgbo2raayxyqBeP06 5g== -----END CERTIFICATE-----Generated at Mon Sep 8 08:35:12 2025 by rpki-client