$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json) Hash identifier: oYvnGIFdD4PyOcDcf0zQ1NkKWx1xfgdbxR8OKms/4Do= Subject key identifier: B0:B8:96:69:C4:14:73:A4:FF:C9:C0:66:00:08:78:AF:1B:1E:3F:51 Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Certificate serial: 4B58CE7A72AFD1DFB3DFBB6F291C9BEA833E5E5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft Manifest number: 04CC Signing time: Mon 21 Jul 2025 19:51:54 +0000 Manifest this update: Mon 21 Jul 2025 19:46:54 +0000 Manifest next update: Tue 22 Jul 2025 21:07:54 +0000 Files and hashes: 1: 3134362e3234372e35312e302f32342d3234203d3e203234383531.roa (hash: zRn95fZoa98Dxgk18rTQZPg3Vz861tTnSVUdcy0yTb0=) 2: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: y4OGbSGooI8V9euRtHx6jpjRwWGZstdSARXhTQ70Yxg=) 3: 3134362e3234372e34382e302f32332d3234203d3e203234383531.roa (hash: CYrx2Q8+pBHAyk1lGd5Mg9MkvR7v5zfpX8Vn/ABu+6Q=) 4: 3134362e3234372e35392e302f32342d3234203d3e203234383531.roa (hash: cISB3c/lX6ECxkwGaCM313qUlrkmfGXNHg9Sn5Duu/E=) 5: 3134362e3234372e36322e302f32342d3234203d3e203234383531.roa (hash: 3irJhAGcE48vEZNOxKTwKsy4d69RVyIL6ZEClAmlLA0=) 6: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: u2d8suvN2Fqva5Wa65KvUkBqwwdtX5ol8XqDkjM3k6M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 21:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:58:ce:7a:72:af:d1:df:b3:df:bb:6f:29:1c:9b:ea:83:3e:5e:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Validity Not Before: Jul 21 19:46:54 2025 GMT Not After : Jul 22 21:07:54 2025 GMT Subject: CN=B0B89669C41473A4FFC9C066000878AF1B1E3F51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0c:76:34:ea:69:5a:cd:9a:ab:49:bb:05:da: 51:2f:ff:24:cc:19:e6:21:1d:67:72:c9:46:05:5c: f5:41:28:ad:58:1a:c0:db:ec:1f:72:c5:db:44:69: 45:02:b9:4a:94:25:0c:df:1e:f0:f3:b8:62:47:55: 6c:5f:28:f6:b4:7f:32:40:00:3a:39:9d:11:90:82: 70:bf:54:d2:03:ee:d2:d8:50:fc:4f:42:75:01:13: 99:54:c0:20:02:65:fd:02:18:91:fb:c4:b3:b4:ac: 8f:f5:ae:ec:64:2b:d1:34:4e:29:e7:ab:61:9a:d0: da:c9:c0:95:a8:4a:fc:77:1e:1a:33:0c:03:c7:58: 8c:4a:53:15:5b:1b:da:71:33:e7:56:18:77:88:16: b7:93:e3:9b:7b:6f:84:91:bd:65:17:e2:2d:9f:fa: de:c9:d7:47:cf:6a:51:5a:98:57:ab:d6:8d:c0:e3: 07:0f:f9:02:ac:98:11:97:19:0b:63:99:4b:17:9b: 9e:d5:51:f1:62:4a:03:4a:bb:28:b1:eb:94:7b:dc: 04:80:22:0e:bd:8a:4c:4f:f6:d7:2b:d0:c1:ce:68: 48:72:cb:39:cf:46:9b:f0:2c:d0:f3:98:d1:c7:8f: 8d:30:71:c9:7e:36:72:05:d7:4a:a7:a7:d9:3c:9e: 70:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B8:96:69:C4:14:73:A4:FF:C9:C0:66:00:08:78:AF:1B:1E:3F:51 X509v3 Authority Key Identifier: keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d1:ed:19:de:ee:28:7a:cd:69:89:2b:3c:bf:e4:b8:3d:14: 3c:d3:4f:94:64:5d:49:46:74:2f:39:84:4c:d2:06:fd:b8:bd: f4:9d:4c:12:2c:78:25:81:85:ec:1f:3b:29:21:74:c4:91:cc: 5f:b9:5e:4c:13:31:80:ce:8e:68:37:8f:fd:f8:ae:c6:30:68: 41:26:3e:18:80:79:93:69:84:74:12:20:60:d8:bb:1d:c8:07: b4:e1:42:e4:85:3b:8d:b3:77:c6:5e:c5:29:db:07:46:86:3f: 62:1e:c6:6f:0f:3b:26:d2:49:06:30:b2:a5:57:67:f2:a5:6e: 74:f5:cc:89:b0:ac:d8:8e:e2:94:aa:07:cf:ff:c3:e9:1d:ab: e0:bf:58:57:2a:b0:f2:f8:66:ca:f4:55:f1:d0:5f:f2:18:13: b7:34:9d:62:98:65:fe:96:ef:4a:d3:f5:14:39:42:1d:b8:df: 6c:c2:7f:a2:2f:9d:0a:3e:5e:6d:61:6c:d1:c1:0e:61:af:10: 12:05:7a:33:73:87:d4:b0:43:32:1f:49:ab:56:43:b4:87:a5: 48:08:da:20:5d:6b:72:b6:c0:d4:e0:a6:34:a0:b5:f4:28:5e: 85:8d:90:2f:f0:b0:05:80:ca:78:26:a4:c7:e1:99:78:b6:09: f1:ab:cd:71 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUS1jOenKv0d+z37tvKRyb6oM+XlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTZjNTA5YmE0OGU1YjUwNDk0NTcyZTA1YzQ1YzU4ZTdl MTZkODdmYjAeFw0yNTA3MjExOTQ2NTRaFw0yNTA3MjIyMTA3NTRaMDMxMTAvBgNV BAMTKEIwQjg5NjY5QzQxNDczQTRGRkM5QzA2NjAwMDg3OEFGMUIxRTNGNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDHY06mlazZqrSbsF2lEv/yTM GeYhHWdyyUYFXPVBKK1YGsDb7B9yxdtEaUUCuUqUJQzfHvDzuGJHVWxfKPa0fzJA ADo5nRGQgnC/VNID7tLYUPxPQnUBE5lUwCACZf0CGJH7xLO0rI/1ruxkK9E0Tinn q2Ga0NrJwJWoSvx3HhozDAPHWIxKUxVbG9pxM+dWGHeIFreT45t7b4SRvWUX4i2f +t7J10fPalFamFer1o3A4wcP+QKsmBGXGQtjmUsXm57VUfFiSgNKuyix65R73ASA Ig69ikxP9tcr0MHOaEhyyznPRpvwLNDzmNHHj40wccl+NnIF10qnp9k8nnAtAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUsLiWacQUc6T/ycBmAAh4rxseP1EwHwYDVR0j BBgwFoAUpsUJukjltQSUVy4FxFxY5+Fth/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYtOTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1 NWM1LzEvQTZDNTA5QkE0OEU1QjUwNDk0NTcyRTA1QzQ1QzU4RTdFMTZEODdGQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BzVUp1a2psdFFTVVZ5NEZ4RnhZNS1G dGhfcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzhiYjQ0Ni05 MWMwLTQxMzgtYTMzYS1iNDc4NjVkZTU1YzUvMS9BNkM1MDlCQTQ4RTVCNTA0OTQ1 NzJFMDVDNDVDNThFN0UxNkQ4N0ZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtHtGd7uKHrNaYkrPL/k uD0UPNNPlGRdSUZ0LzmETNIG/bi99J1MEix4JYGF7B87KSF0xJHMX7leTBMxgM6O aDeP/fiuxjBoQSY+GIB5k2mEdBIgYNi7HcgHtOFC5IU7jbN3xl7FKdsHRoY/Yh7G bw87JtJJBjCypVdn8qVudPXMibCs2I7ilKoHz//D6R2r4L9YVyqw8vhmyvRV8dBf 8hgTtzSdYphl/pbvStP1FDlCHbjfbMJ/oi+dCj5ebWFs0cEOYa8QEgV6M3OH1LBD Mh9Jq1ZDtIelSAjaIF1rcrbA1OCmNKC19ChehY2QL/CwBYDKeCakx+GZeLYJ8avN cQ== -----END CERTIFICATE-----Generated at Tue Jul 22 11:48:52 2025 by rpki-client