$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: 9lD7Q9BwN+qLU3cV/6f60YxgpXpQFqWuBpqVyq9T/cc= Subject key identifier: 25:9C:CB:DB:75:79:77:DD:36:5C:F8:3B:C3:16:B8:34:42:B6:69:21 Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 09C3F38AC46F4CB345EE4E09D44C521D3EE56520 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 01CC Signing time: Tue 22 Jul 2025 04:42:57 +0000 Manifest this update: Tue 22 Jul 2025 04:37:57 +0000 Manifest next update: Wed 23 Jul 2025 07:58:57 +0000 Files and hashes: 1: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: Mt6SLcuCLozr5KAoxUySd8TTGWSW/ZQIIH+jhZWFm4A=) 2: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: NfdCiPZo2V7z2IR8DOEcP9s1WlT0wPdEK10WCc6hh18=) 3: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: LZc2AksEahD5rzoxMFxve6nJwmwqwYYZ+BLhaadaDDA=) 4: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: TNC4zrNVSYq6rg1HfzOLsFNL5cW5pcjjIopBseDA51Y=) 5: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: DO5U+zbxAW9dCHHkG8v0O5pLZTi9rHV+80EYsqI00GY=) 6: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: xL09RaMvNnk3zcTxJYCpyR11r2WfajekNMt0OPCzbqM=) 7: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: R+o6n+RjWkxiRu/ckQJHanWEp0DumqtvHG3oGP82QQ8=) 8: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=) 9: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=) 10: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: SsdW0YpcJfef7CtWvRhhfCUEgjAhSHqFG1h0ACBR214=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 07:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c3:f3:8a:c4:6f:4c:b3:45:ee:4e:09:d4:4c:52:1d:3e:e5:65:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Jul 22 04:37:57 2025 GMT Not After : Jul 23 07:58:57 2025 GMT Subject: CN=259CCBDB757977DD365CF83BC316B83442B66921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:03:a3:ec:a3:01:5a:ce:fc:03:6b:a7:14:95: 82:4f:b7:e2:a1:4b:6b:9a:c6:2f:54:85:47:75:d0: 3a:f5:5a:d8:ae:f5:90:d4:bf:1b:71:d0:a2:e3:27: 95:3e:a6:78:a9:3f:e1:db:c4:f8:17:82:38:cf:ed: 17:93:64:36:66:e3:aa:9a:d4:ad:84:a9:66:35:4f: c9:7c:1a:9b:71:8f:d3:d0:99:48:7a:ce:d5:2d:40: 32:5c:21:9a:62:28:ef:85:83:da:3f:b9:2a:12:bf: cf:1e:34:4e:9d:86:2a:87:8b:34:94:70:be:f6:3c: 45:f3:89:33:03:d8:c6:eb:e2:bd:07:32:4c:08:e5: 51:81:cf:bc:25:3c:d6:d1:e8:08:34:2a:46:13:12: df:f2:5f:1a:58:df:6d:b9:e3:d9:b1:69:dd:7a:1a: aa:19:2c:2c:65:4e:07:76:70:af:ae:89:71:19:a2: 2f:2d:68:af:63:61:cf:cf:08:bc:57:c0:cc:44:0a: b5:0c:5b:5a:bc:9e:67:32:b1:59:91:45:06:48:80: e1:f9:a5:2c:c5:34:e4:cb:8a:4d:d4:0d:5c:d6:62: 32:ce:bf:85:6c:72:fb:c3:17:79:7d:f2:f1:33:b6: cb:4f:d0:14:70:0a:9b:4a:76:aa:21:ed:b7:14:a3: 83:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9C:CB:DB:75:79:77:DD:36:5C:F8:3B:C3:16:B8:34:42:B6:69:21 X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:f9:eb:ab:f3:31:66:82:5b:56:42:b4:f0:e5:77:28:c2:43: f7:bc:3f:b2:e9:11:fc:5a:12:d2:d2:b5:0f:a5:26:cd:37:b6: a4:55:55:23:d4:27:fe:51:f8:f6:8f:f8:12:e7:97:2b:61:85: 3b:eb:fc:77:08:f6:c1:33:49:b4:0d:79:62:ac:6c:1c:bc:ab: 28:76:62:42:5c:19:19:19:b9:62:85:df:04:54:26:f7:ab:5c: d7:cc:1f:ea:80:9c:01:26:6c:12:ce:c1:ce:aa:00:b5:db:a9: fc:90:c7:ed:96:a2:f1:48:81:91:4e:39:0c:db:77:e9:df:1c: b7:cd:6c:e7:fb:91:39:d5:a6:ed:8e:1d:47:4d:18:a9:8f:34: fa:b6:1c:5a:fd:de:db:41:de:d0:d1:c6:8b:4b:ff:c2:71:d8: be:49:34:8d:c4:96:16:d7:3a:eb:5d:bf:bc:d8:33:04:37:97: 5b:70:f3:03:d8:d4:89:93:4f:ed:09:ae:b8:97:90:9a:48:c9: 50:dd:1c:1e:2e:97:ac:65:06:22:6d:08:34:10:14:5f:0e:42: aa:30:22:40:6d:46:86:76:3c:9c:aa:6c:47:58:4a:f4:28:54: ce:e6:ce:29:40:7d:bb:de:92:fd:f4:a9:12:c5:8f:75:62:13: 50:8d:2b:e4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCcPzisRvTLNF7k4J1ExSHT7lZSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNTA3MjIwNDM3NTdaFw0yNTA3MjMwNzU4NTdaMDMxMTAvBgNV BAMTKDI1OUNDQkRCNzU3OTc3REQzNjVDRjgzQkMzMTZCODM0NDJCNjY5MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeA6PsowFazvwDa6cUlYJPt+Kh S2uaxi9UhUd10Dr1Wtiu9ZDUvxtx0KLjJ5U+pnipP+HbxPgXgjjP7ReTZDZm46qa 1K2EqWY1T8l8Gptxj9PQmUh6ztUtQDJcIZpiKO+Fg9o/uSoSv88eNE6dhiqHizSU cL72PEXziTMD2Mbr4r0HMkwI5VGBz7wlPNbR6Ag0KkYTEt/yXxpY322549mxad16 GqoZLCxlTgd2cK+uiXEZoi8taK9jYc/PCLxXwMxECrUMW1q8nmcysVmRRQZIgOH5 pSzFNOTLik3UDVzWYjLOv4VscvvDF3l98vEztstP0BRwCptKdqoh7bcUo4MBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJZzL23V5d902XPg7wxa4NEK2aSEwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZ+eur 8zFmgltWQrTw5XcowkP3vD+y6RH8WhLS0rUPpSbNN7akVVUj1Cf+Ufj2j/gS55cr YYU76/x3CPbBM0m0DXlirGwcvKsodmJCXBkZGblihd8EVCb3q1zXzB/qgJwBJmwS zsHOqgC126n8kMftlqLxSIGRTjkM23fp3xy3zWzn+5E51abtjh1HTRipjzT6thxa /d7bQd7Q0caLS//Ccdi+STSNxJYW1zrrXb+82DMEN5dbcPMD2NSJk0/tCa64l5Ca SMlQ3RweLpesZQYibQg0EBRfDkKqMCJAbUaGdjycqmxHWEr0KFTO5s4pQH273pL9 9KkSxY91YhNQjSvk -----END CERTIFICATE-----Generated at Tue Jul 22 11:52:51 2025 by rpki-client