$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft File: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft (raw, json) Hash identifier: iU1/c73h/GaCBmA/5lF/vrlkH0MpC+G5fvUYA3nS65U= Subject key identifier: B9:6E:A9:1F:0D:7A:6B:47:8D:05:86:9A:11:37:23:97:5B:4D:A4:E7 Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 Certificate issuer: /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Certificate serial: 57EA856A6210E27B83CECCADBA64ED9D622F9DA1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft Manifest number: FD Signing time: Tue 22 Jul 2025 08:40:31 +0000 Manifest this update: Tue 22 Jul 2025 08:35:31 +0000 Manifest next update: Wed 23 Jul 2025 10:02:31 +0000 Files and hashes: 1: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl (hash: cV5PzeLOOezEjS6Xhr+wZs6odWPp/1ucVvP8N+I4vYU=) 2: 326131343a373538303a343030303a3a2f33362d3336203d3e20323133343238.roa (hash: f38GGJwA8aLs49rknYyp3/ozCmX5eTGnavOZGUBAqUw=) 3: 326131343a373538303a383030303a3a2f33362d3438203d3e20323135343730.roa (hash: ibb68AQAVWJMES3NYRBIOdUeHnGKp+tFUocAxCKgPEU=) 4: 326131343a373538303a663334303a3a2f34342d3438203d3e20323133343238.roa (hash: Z7InVHvKI4/fqGkdwdL0zl1WS4Iyc09xlEsVxaD8p5A=) 5: 326131343a373538303a663330303a3a2f34302d3430203d3e20323135343730.roa (hash: NYjufeU5nji5tNLR9669xX3/zAC6IxnZWFE8KHjLm6Y=) 6: 326131343a373538303a663331303a3a2f34342d3438203d3e20323134303834.roa (hash: 7Ht9ysaUQlknniITxiGGZVb7FReUYStDZL1yen2prNE=) 7: 326131343a373538303a663330313a3a2f34382d3438203d3e20323135343730.roa (hash: GyqnDZwlRU44RSAJS6AmGof5uxXXmzhkRtpFSrxG7Nw=) 8: 326131343a373538303a663332303a3a2f34342d3434203d3e20323135343730.roa (hash: XgYHMfBb1tBckmqvYy7acYD3hSj36S+vN34vUn5oaD4=) 9: 326131343a373538303a663333303a3a2f34342d3438203d3e20323134303330.roa (hash: E8taggS6sI4q0LKjH6/GmLcIK3Cj0Fw4lwLi8ILdzT4=) 10: 326131343a373538303a363030303a3a2f33362d3438203d3e20323039353534.roa (hash: 7bwiHUB+0vEKFxOfRTRz/zFRAxgK1WxBsECd2SJxocI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 03:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ea:85:6a:62:10:e2:7b:83:ce:cc:ad:ba:64:ed:9d:62:2f:9d:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Validity Not Before: Jul 22 08:35:31 2025 GMT Not After : Jul 23 10:02:31 2025 GMT Subject: CN=B96EA91F0D7A6B478D05869A113723975B4DA4E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:33:b8:9d:3c:d2:86:df:06:f8:57:8b:a7: 82:5b:1b:f0:9f:9c:38:85:fb:0d:e3:0d:69:01:25: d9:2d:de:97:d5:c0:fd:77:0f:43:0a:d1:e7:29:65: c9:c9:94:b5:87:26:37:d8:ae:3e:1d:e7:fc:db:6c: aa:c0:a3:e2:ad:47:48:06:38:79:ca:69:d7:7b:0b: 00:89:4a:14:4a:5c:f0:61:b1:98:84:75:cf:10:e0: b5:78:9a:e7:18:91:fb:9f:41:f5:a3:4e:54:f7:e1: ed:3d:d2:c0:e6:64:e2:88:cf:3d:7d:a3:ea:36:be: aa:63:f7:3e:1b:dd:4d:2e:fc:46:66:ad:3a:f7:dd: ed:ca:9e:89:2c:30:0a:ab:0a:43:be:0a:63:03:8b: 97:ab:81:2c:76:be:85:18:8e:4c:77:a4:a7:8b:07: 21:6d:b0:49:ed:60:d8:cd:4e:94:0d:68:82:bd:5f: ab:15:9e:c2:96:37:f1:66:e5:18:d2:bf:af:fe:00: 86:9a:96:3e:3e:9c:47:f5:95:01:b0:45:f0:9e:c7: 86:a5:e9:f6:9e:ea:f8:c5:bf:ea:18:09:bb:fc:c9: 61:56:63:98:1f:62:c0:e6:fb:ae:14:09:d9:42:65: 2d:d8:13:a4:e7:4d:3b:64:2c:9d:c2:e5:7e:ea:a3: e8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6E:A9:1F:0D:7A:6B:47:8D:05:86:9A:11:37:23:97:5B:4D:A4:E7 X509v3 Authority Key Identifier: keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f1:45:11:fd:87:d2:62:81:58:08:2c:22:68:50:6e:5a:cb: 43:b1:06:71:e4:37:cf:38:d2:86:13:72:fa:3e:43:b6:25:6b: 62:b2:12:21:3e:18:77:fd:51:d1:0e:b2:fa:f8:90:95:5a:eb: ce:e2:9a:29:32:32:c3:68:7e:f1:48:c1:bc:0a:05:c7:73:24: a3:14:58:2a:3f:be:5b:47:91:a1:41:e9:26:bd:27:b0:6b:c3: c4:94:01:d3:8f:47:b2:c1:c4:8a:77:2b:90:9f:c2:54:a9:56: b3:48:0a:7c:cc:43:2d:b5:f9:c9:9c:a2:e8:e1:c9:36:30:9b: 22:a2:b0:04:ab:2e:62:3a:f2:ff:4d:18:ab:7e:bd:66:69:d1: 35:38:8f:70:da:82:16:8d:74:02:ca:96:8f:5b:0c:f7:3b:11: ef:49:78:1c:c7:f8:c6:fe:44:df:cf:c0:f0:62:1f:cd:1d:81: 29:97:1a:a8:ef:4f:da:4f:e7:65:80:cc:23:a2:6c:91:94:70: ba:dd:30:f0:a4:7b:06:37:65:8e:a2:f5:92:cd:27:cd:9c:36: 2e:c9:26:40:5b:f5:a0:fe:c5:52:cd:f3:9b:fe:68:71:07:28: 00:3a:22:79:24:a5:8e:eb:24:ec:c2:cc:57:47:55:4c:06:85: a8:64:b4:16 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUV+qFamIQ4nuDzsytumTtnWIvnaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENG OTM5RjRGNDAeFw0yNTA3MjIwODM1MzFaFw0yNTA3MjMxMDAyMzFaMDMxMTAvBgNV BAMTKEI5NkVBOTFGMEQ3QTZCNDc4RDA1ODY5QTExMzcyMzk3NUI0REE0RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCySjO4nTzSht8G+FeLp4JbG/Cf nDiF+w3jDWkBJdkt3pfVwP13D0MK0ecpZcnJlLWHJjfYrj4d5/zbbKrAo+KtR0gG OHnKadd7CwCJShRKXPBhsZiEdc8Q4LV4mucYkfufQfWjTlT34e090sDmZOKIzz19 o+o2vqpj9z4b3U0u/EZmrTr33e3KnoksMAqrCkO+CmMDi5ergSx2voUYjkx3pKeL ByFtsEntYNjNTpQNaIK9X6sVnsKWN/Fm5RjSv6/+AIaalj4+nEf1lQGwRfCex4al 6fae6vjFv+oYCbv8yWFWY5gfYsDm+64UCdlCZS3YE6TnTTtkLJ3C5X7qo+ivAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUuW6pHw16a0eNBYaaETcjl1tNpOcwHwYDVR0j BBgwFoAU9ABy/9wPGxWmnlvHmi9YjPk59PQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzAvRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENGOTM5RjRGNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNDAwNzJGRkRDMEYxQjE1QTY5RTVCQzc5 QTJGNTg4Q0Y5MzlGNEY0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8wL0Y0MDA3MkZG REMwRjFCMTVBNjlFNUJDNzlBMkY1ODhDRjkzOUY0RjQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA68UUR /YfSYoFYCCwiaFBuWstDsQZx5DfPONKGE3L6PkO2JWtishIhPhh3/VHRDrL6+JCV WuvO4popMjLDaH7xSMG8CgXHcySjFFgqP75bR5GhQekmvSewa8PElAHTj0eywcSK dyuQn8JUqVazSAp8zEMttfnJnKLo4ck2MJsiorAEqy5iOvL/TRirfr1madE1OI9w 2oIWjXQCypaPWwz3OxHvSXgcx/jG/kTfz8DwYh/NHYEplxqo70/aT+dlgMwjomyR lHC63TDwpHsGN2WOovWSzSfNnDYuySZAW/Wg/sVSzfOb/mhxBygAOiJ5JKWO6yTs wsxXR1VMBoWoZLQW -----END CERTIFICATE-----Generated at Tue Jul 22 11:49:41 2025 by rpki-client