$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: 6LlBBZhXa8DrXlSOV+ZA1LwVZjTRIzuj8Sw0o66dHdY= Subject key identifier: 6D:17:20:BE:91:F3:5D:FE:72:E2:C1:5F:A2:5E:45:91:B7:3B:DA:5E Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 54F980A88909D7A8FD8A59E46CBE85AD9FED38EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 04FC Signing time: Fri 06 Jun 2025 18:47:32 +0000 Manifest this update: Fri 06 Jun 2025 18:42:32 +0000 Manifest next update: Sat 07 Jun 2025 22:00:32 +0000 Files and hashes: 1: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: NTiGjgrJWtlD9Roa9FRQtbjOAAcPR35U4Ayfj8SpKuI=) 2: 33362e3235352e39342e302f32332d3233203d3e203632323430.roa (hash: cEllpKs9D7QXOnlcaRDylPTaKGxvLoUwJx/hEnrKHPU=) 3: 3138352e3232392e3230302e302f32342d3234203d3e203139343337.roa (hash: EP6RD+ZuD8/aeGRdu5DeM51xsrxE2M7oAfAneTY5Btg=) 4: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: Q9sBWpvLi6VvP2JdvZfUkKpbvh3+pPaURPilKQrsxwM=) 5: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=) 6: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: KhYwWjM/5tZMAc1Ys2Qi/Z3IxKzkYaHG79mNsaA679A=) 7: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=) 8: 33362e3235352e39322e302f32332d3234203d3e203230343733.roa (hash: n+NW7CIboSad7G7qrJiCYcaG5y4V5KnwqXZRxtAjPBQ=) 9: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: L+rO+MXrQK3tGBKkhTiQd3Pp/oT0n0nJ8NfAxPcZ/Ik=) 10: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: fyEm36B55a1pd4HLESzxtTjALoxzu4leetK2j/pzqHY=) 11: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: ezbmX/yRe+yRvkLs/8FFZoupwCiBI67aZ+0JqkrMl4Q=) 12: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: 7MRl2ndToXr+/Nwpi0fWFQSP/EKXsP73R/4IMWd5dgM=) 13: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: 2mJFb3j98iS3WwOyYDzT/44zu56P1Mt1+w22nAIK9Eo=) 14: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: O475B5YNr+mk4vbByMFVmoqbRTenx4kmx66C3HIfdsg=) 15: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: +zgqg7oCfaFMqowtNn81ipaj3irDs5wSCtc6B41Oes8=) 16: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: aTFuiZRKSKlOcP1bFw/QEJGr9kwsAqFvqfR62oNQfMc=) 17: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: OQY6w4Q7ZQH092Yj40TGy9LpmPXnSdGe58D7QhrLuAk=) 18: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: /OGL5Xocpa/mA4GEutGuQoiWc4p3DBj9VM0kpmdQZxo=) 19: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: W9NdT6aoX4s9PghUA97T0GAxnEF0Q0u3VMj+QX70R5Y=) 20: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: RdOuxQjMUqkQryMcrXonWYYeJva5RY8rohAdG2ITJdw=) 21: 3138352e3232392e3230332e302f32342d3234203d3e20323036373335.roa (hash: FZGdNF2bcBn3tP8pVRjxMkfCiiAE12vqIDQ0utFcBVs=) 22: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: GFt7MPBQXAoRbBAZf/a6ypM3reYPwEU6C1kyEqDInRE=) 23: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: mH/CiZmwU0yIfVsdjhTMAG/KAtonINfckXbmsVpawiw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 22:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f9:80:a8:89:09:d7:a8:fd:8a:59:e4:6c:be:85:ad:9f:ed:38:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Jun 6 18:42:32 2025 GMT Not After : Jun 7 22:00:32 2025 GMT Subject: CN=6D1720BE91F35DFE72E2C15FA25E4591B73BDA5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a4:5f:a5:d9:1e:57:7f:af:df:6f:7e:9e:b2: da:21:48:be:7f:f0:e9:2e:72:ed:4d:20:55:85:c6: e2:d6:50:51:0d:39:5c:ae:6f:43:61:d0:78:4d:12: d5:cb:fd:4d:f6:71:e7:87:19:dd:1e:67:13:b4:c5: 19:27:21:22:bf:de:08:df:f4:d5:df:2d:cb:a7:66: 5e:66:ef:4a:41:06:58:6c:69:99:f6:1f:c2:7e:cb: 94:20:f3:82:c1:e7:f2:2c:4b:75:43:78:41:4d:b1: 0f:ca:07:44:32:5b:f3:56:f8:47:c4:87:04:f5:07: 4c:b0:6f:30:a2:30:09:12:d4:a9:b2:63:df:dc:1d: 44:cd:ad:cf:37:a3:0a:41:a6:dc:e1:fd:c3:e9:fd: 77:e7:a7:3e:83:48:06:74:74:6a:6d:36:67:8e:ed: 4f:49:0f:6a:1b:38:38:03:38:5d:d0:f5:1f:75:39: 9d:a4:77:6c:f7:f1:fe:e0:c2:67:aa:db:a6:24:5d: ec:cd:6a:7b:27:93:78:d6:cd:4d:b6:44:78:49:58: e3:23:27:8a:76:fe:a0:bf:47:22:ed:01:4f:8c:e3: 71:88:60:6c:0b:55:d0:ce:47:6a:dc:f5:22:03:db: 87:a8:53:47:0d:9b:6a:f6:40:2d:ae:6d:f4:52:57: 25:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:17:20:BE:91:F3:5D:FE:72:E2:C1:5F:A2:5E:45:91:B7:3B:DA:5E X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:09:62:96:60:33:16:ec:8a:74:b6:d5:9e:f4:54:5c:56:29: 97:ad:f2:77:16:40:28:7c:a7:25:3d:c2:7d:3f:29:8b:6f:a7: f0:01:aa:ba:3d:26:c8:1c:a4:9a:63:d8:64:82:63:27:d5:71: 8f:88:13:67:5e:a7:37:91:b4:3b:d0:63:c1:90:8a:34:5d:ca: f3:7d:d2:8b:09:72:01:25:3d:9b:8c:f9:a7:44:03:69:29:17: 30:8f:49:ff:c5:7a:1b:01:d2:b8:79:ab:f4:47:70:bd:f7:de: 59:93:12:d5:ab:59:1f:4b:74:7a:be:89:bd:19:d8:95:83:4c: 88:d2:c6:b7:bd:d2:93:e8:39:8f:f6:73:07:00:ef:81:fb:e8: 76:32:fd:fd:b7:c2:12:79:08:54:de:a7:be:cf:51:13:f0:a8: 5d:5a:47:e9:e6:4d:b5:e2:09:c1:8e:e8:7c:61:42:6e:ea:59: ac:d4:e3:82:7c:db:32:80:f1:1f:32:76:33:db:7d:a3:73:9c: d0:d3:4e:63:53:c7:a4:f4:41:f8:88:2e:88:aa:a1:69:64:66: 11:99:c2:11:be:71:3f:f8:c0:e8:7d:3c:7e:97:53:c3:a8:59: da:ee:11:85:88:73:7e:9d:e8:c0:ba:6a:1a:09:f2:fd:3e:66: ed:ca:5e:20 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVPmAqIkJ16j9ilnkbL6FrZ/tOO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNTA2MDYxODQyMzJaFw0yNTA2MDcyMjAwMzJaMDMxMTAvBgNV BAMTKDZEMTcyMEJFOTFGMzVERkU3MkUyQzE1RkEyNUU0NTkxQjczQkRBNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQpF+l2R5Xf6/fb36estohSL5/ 8Okucu1NIFWFxuLWUFENOVyub0Nh0HhNEtXL/U32ceeHGd0eZxO0xRknISK/3gjf 9NXfLcunZl5m70pBBlhsaZn2H8J+y5Qg84LB5/IsS3VDeEFNsQ/KB0QyW/NW+EfE hwT1B0ywbzCiMAkS1KmyY9/cHUTNrc83owpBptzh/cPp/Xfnpz6DSAZ0dGptNmeO 7U9JD2obODgDOF3Q9R91OZ2kd2z38f7gwmeq26YkXezNansnk3jWzU22RHhJWOMj J4p2/qC/RyLtAU+M43GIYGwLVdDOR2rc9SID24eoU0cNm2r2QC2ubfRSVyX3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUbRcgvpHzXf5y4sFfol5Fkbc72l4wHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABglilmAzFuyKdLbVnvRU XFYpl63ydxZAKHynJT3CfT8pi2+n8AGquj0myBykmmPYZIJjJ9Vxj4gTZ16nN5G0 O9BjwZCKNF3K833SiwlyASU9m4z5p0QDaSkXMI9J/8V6GwHSuHmr9EdwvffeWZMS 1atZH0t0er6JvRnYlYNMiNLGt73Sk+g5j/ZzBwDvgfvodjL9/bfCEnkIVN6nvs9R E/CoXVpH6eZNteIJwY7ofGFCbupZrNTjgnzbMoDxHzJ2M9t9o3Oc0NNOY1PHpPRB +IguiKqhaWRmEZnCEb5xP/jA6H08fpdTw6hZ2u4RhYhzfp3owLpqGgny/T5m7cpe IA== -----END CERTIFICATE-----Generated at Sat Jun 7 04:06:35 2025 by rpki-client