$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json) Hash identifier: KrRUI/knAYpCItNL34N/X3u26fXgEyKfn5OPWaBl+14= Subject key identifier: 1B:76:39:CC:C2:8A:63:7D:41:FF:ED:65:89:EC:6D:08:7D:0C:2E:47 Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 51AD031538B86D4FA0515E92B00FF32456620784 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft Manifest number: 019C Signing time: Fri 05 Sep 2025 12:17:51 +0000 Manifest this update: Fri 05 Sep 2025 12:12:51 +0000 Manifest next update: Sat 06 Sep 2025 15:44:51 +0000 Files and hashes: 1: 3130332e34392e3133302e302f32342d3234203d3e20323036303333.roa (hash: v7D054EN2gERBe7aLvFn0V17UtLvh1fmGSVfmRoK+KQ=) 2: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: y9uevaBeLo1M0NZi4w3HJOyvLkMWIaZEJFCi8snsYYY=) 3: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: iK+yx/VtDctRGDFOE/NGNWTyR4u7o2tFGRI6U0bUYZU=) 4: 34332e3233302e38342e302f32342d3234203d3e20323035383936.roa (hash: frMOpiWFQijgfK3Vh/YGrziyxx0AVwDnOznjYIy+mD0=) 5: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: jNzQvK975k0nFSky/OYcsFfueNL1XvYeIp3mtR/7WPY=) 6: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: hoZQSGqkvoyh+Fwe28UicpO6RAJD80P7rklT/Di/mQU=) 7: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: yHVodRBAsBlx/8p8lQvX33hmgwPZB9Uj6k/5yqbIyfs=) 8: 3130332e34392e3132382e302f32342d3234203d3e20313534303439.roa (hash: RP7fF4ljaFnG1QBw6wHJTYmQiSzsC+UtOPXQULgrH/c=) 9: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (hash: 4XlIN+3Y2uvivj3jKKbdxnHiR3dRqeJ7/xmTE8uipj8=) 10: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: zBuu9RXC79dJGtZ6+na9EVp6YWCdCvpG/0WcLfwY4xM=) 11: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: BqbUmbythNNYP4WqssroNY2sOPvoyuRgXIRAVuIytpA=) 12: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: brok2XUOzC0OAQs7efh1lP/TIOrHW70pJohRfs3tgEM=) 13: 3130332e34392e3132392e302f32342d3234203d3e20313530363534.roa (hash: ZmNqb6SQ04nrnt7KP4kUO8EO/zoOBhgAf3oJbSFf7Ys=) 14: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: gI3QMk1nxnVJ3ar9nDADeDjafrF5rxSYgoW75rlLkBk=) 15: 33312e32322e3131302e302f32342d3234203d3e2039333034.roa (hash: 4/DyfQef3JM+QDXadF+flhTmwriSDAeEuVFVt/FGtTg=) 16: 33312e32322e3130372e302f32342d3234203d3e20313337353137.roa (hash: zucU5bamNfYRw/esvivyzaXHMAl8N0xQ+Q3coI+3JvA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 10:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ad:03:15:38:b8:6d:4f:a0:51:5e:92:b0:0f:f3:24:56:62:07:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Sep 5 12:12:51 2025 GMT Not After : Sep 6 15:44:51 2025 GMT Subject: CN=1B7639CCC28A637D41FFED6589EC6D087D0C2E47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:61:ab:2e:8c:61:76:6c:e4:dd:33:31:0f:21: fe:fd:7b:a5:65:18:84:b2:ec:c9:29:db:15:f5:41: cc:9e:24:f0:85:26:8f:04:3e:f6:5b:dd:99:bc:c8: 18:03:99:5d:87:1d:dc:b5:64:ff:87:24:ed:cc:b9: 60:25:1f:1a:63:b4:fb:ac:a7:f6:7e:c9:61:51:67: 84:78:4e:97:90:24:eb:7f:40:2d:38:58:68:07:b9: 2e:e5:46:2f:75:d2:97:e9:60:f9:80:15:51:44:d7: 58:d0:f6:b7:70:77:f6:7d:1e:3c:20:67:0f:15:a7: 33:d5:de:15:f0:67:71:d9:2d:b6:36:d9:91:1e:37: 32:fc:2b:f1:dd:d1:aa:e1:2a:9c:b3:39:0c:ea:db: 4a:48:e6:02:53:3e:51:a6:39:f0:be:ce:5f:0d:4a: 53:55:af:80:7c:2d:58:a2:7f:76:02:cf:73:5f:8d: b9:9a:b3:f3:ac:51:53:ac:d0:1a:82:3d:28:eb:02: cb:f7:aa:20:32:91:fe:d1:95:08:be:fd:d5:f0:5a: 15:2b:a4:62:2b:73:e2:e3:e4:8c:e8:17:04:eb:83: 7e:ee:d9:f2:41:89:93:17:98:e8:68:ed:36:63:31: 53:5d:d9:33:b8:15:e9:46:4d:93:b3:f4:9a:39:27: 5d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:76:39:CC:C2:8A:63:7D:41:FF:ED:65:89:EC:6D:08:7D:0C:2E:47 X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:0d:5e:da:ac:06:13:86:63:a6:19:e0:58:b0:80:00:21:3b: ea:d0:91:d0:7b:be:5b:6d:25:c8:11:3f:8d:ce:8b:d0:08:c9: d3:34:17:14:45:9c:b1:e6:af:35:a4:25:40:68:2c:07:56:e1: 1b:37:f3:f9:b8:a3:bc:19:c5:a5:28:cc:30:56:20:3d:0e:67: 3d:18:86:69:38:db:f1:b2:3f:7c:4f:8e:e3:2e:50:a6:33:80: b3:6e:31:8a:df:f0:0f:50:6e:d2:ea:a1:8f:6d:34:0f:05:af: 8a:e8:7c:e8:be:3c:86:f5:a3:d7:8c:71:ee:4f:0f:44:c2:a3: bf:3b:af:69:e1:8d:bf:91:31:47:7e:f7:49:45:a9:72:3c:a9: d5:e0:c8:1d:07:3c:b2:45:40:de:8e:f3:d6:2f:57:e6:5a:dd: 05:4a:9b:57:73:8f:f6:64:06:83:89:ea:36:6a:b8:0d:de:bf: c8:aa:51:d0:76:9d:da:a3:39:15:79:d7:bf:d0:ef:f2:26:3d: ef:1d:fe:90:97:08:1f:2c:6b:86:00:89:05:9e:1f:15:51:9c: f9:8f:f8:c0:83:39:1c:64:80:8c:da:3c:2a:16:f2:d3:2c:ce: ea:23:79:5e:56:45:d4:d1:a2:61:a1:f8:d0:31:63:84:a9:a1: ff:0d:23:9a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUa0DFTi4bU+gUV6SsA/zJFZiB4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNTA5MDUxMjEyNTFaFw0yNTA5MDYxNTQ0NTFaMDMxMTAvBgNV BAMTKDFCNzYzOUNDQzI4QTYzN0Q0MUZGRUQ2NTg5RUM2RDA4N0QwQzJFNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtYasujGF2bOTdMzEPIf79e6Vl GISy7Mkp2xX1QcyeJPCFJo8EPvZb3Zm8yBgDmV2HHdy1ZP+HJO3MuWAlHxpjtPus p/Z+yWFRZ4R4TpeQJOt/QC04WGgHuS7lRi910pfpYPmAFVFE11jQ9rdwd/Z9Hjwg Zw8VpzPV3hXwZ3HZLbY22ZEeNzL8K/Hd0arhKpyzOQzq20pI5gJTPlGmOfC+zl8N SlNVr4B8LViif3YCz3Nfjbmas/OsUVOs0BqCPSjrAsv3qiAykf7RlQi+/dXwWhUr pGIrc+Lj5IzoFwTrg37u2fJBiZMXmOho7TZjMVNd2TO4FelGTZOz9Jo5J10nAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUG3Y5zMKKY31B/+1liextCH0MLkcwHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02 ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5 QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAag1e2qwGE4ZjphngWLCA ACE76tCR0Hu+W20lyBE/jc6L0AjJ0zQXFEWcseavNaQlQGgsB1bhGzfz+bijvBnF pSjMMFYgPQ5nPRiGaTjb8bI/fE+O4y5QpjOAs24xit/wD1Bu0uqhj200DwWviuh8 6L48hvWj14xx7k8PRMKjvzuvaeGNv5ExR373SUWpcjyp1eDIHQc8skVA3o7z1i9X 5lrdBUqbV3OP9mQGg4nqNmq4Dd6/yKpR0Had2qM5FXnXv9Dv8iY97x3+kJcIHyxr hgCJBZ4fFVGc+Y/4wIM5HGSAjNo8Khby0yzO6iN5XlZF1NGiYaH40DFjhKmh/w0j mg== -----END CERTIFICATE-----Generated at Fri Sep 5 20:21:51 2025 by rpki-client