$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: XzTuQWKUgZxsZdX7ldtmW5w4O+S5Ku+/C1zEpe/ovVQ= Subject key identifier: 81:F3:F6:E2:9C:45:78:B6:6C:EE:F5:D6:F3:46:9A:45:AD:65:B7:86 Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 445DBB831D47857725439857FFFFC1C4B50015A9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 01CE Signing time: Wed 23 Jul 2025 19:47:59 +0000 Manifest this update: Wed 23 Jul 2025 19:42:59 +0000 Manifest next update: Thu 24 Jul 2025 21:44:59 +0000 Files and hashes: 1: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: TNC4zrNVSYq6rg1HfzOLsFNL5cW5pcjjIopBseDA51Y=) 2: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: DO5U+zbxAW9dCHHkG8v0O5pLZTi9rHV+80EYsqI00GY=) 3: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=) 4: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: OQ7t66qqSQJePEMuqhE9NaZdRZDZ+/nL8NC0nJy2djA=) 5: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: SsdW0YpcJfef7CtWvRhhfCUEgjAhSHqFG1h0ACBR214=) 6: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: LZc2AksEahD5rzoxMFxve6nJwmwqwYYZ+BLhaadaDDA=) 7: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=) 8: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: xL09RaMvNnk3zcTxJYCpyR11r2WfajekNMt0OPCzbqM=) 9: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: NfdCiPZo2V7z2IR8DOEcP9s1WlT0wPdEK10WCc6hh18=) 10: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: R+o6n+RjWkxiRu/ckQJHanWEp0DumqtvHG3oGP82QQ8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 20:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:5d:bb:83:1d:47:85:77:25:43:98:57:ff:ff:c1:c4:b5:00:15:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Jul 23 19:42:59 2025 GMT Not After : Jul 24 21:44:59 2025 GMT Subject: CN=81F3F6E29C4578B66CEEF5D6F3469A45AD65B786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fa:78:f8:22:25:8a:d6:c3:b2:f6:29:3f:f4: 64:9c:5b:3a:0f:19:47:53:98:f2:d9:20:f2:e2:3a: 6f:0e:a6:4a:01:0f:46:bc:2d:20:3f:c6:3a:bb:77: 2d:04:68:31:89:b9:2e:7f:68:83:c6:34:fe:81:b2: 7b:06:08:dc:25:ec:a0:bb:47:2f:f1:51:a3:5e:35: 44:fd:9c:cc:75:af:4d:de:5e:aa:e1:54:23:d3:e1: 15:a8:7a:c3:9c:95:6e:d3:9a:0c:a0:7e:59:1e:27: 9a:0e:14:99:bd:9a:37:7e:ed:ff:39:da:5f:39:2e: 54:de:86:c2:c8:2b:dc:77:be:df:8c:e4:f3:94:3d: 8d:a6:49:94:e5:dc:9b:da:6d:ba:b7:62:d4:d8:1e: ba:97:f2:57:24:2a:8d:dd:01:14:79:00:dc:7c:06: b8:71:b0:aa:0b:92:82:ba:68:36:c0:c5:c6:0c:12: b8:66:26:f0:ff:18:50:f5:77:0e:07:a2:05:06:a4: 59:ec:70:65:e0:da:5d:c5:e4:b9:aa:dd:b0:81:09: 91:f4:71:0e:df:4d:96:60:b7:76:03:b7:3b:99:61: 2d:ac:0a:91:84:72:c1:58:fc:6d:45:73:2c:5c:06: 98:0c:fe:08:22:b7:b9:ca:11:e8:f9:61:c6:19:e5: 69:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F3:F6:E2:9C:45:78:B6:6C:EE:F5:D6:F3:46:9A:45:AD:65:B7:86 X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:43:fd:e9:0d:5d:cc:8d:8f:cf:c5:65:d1:df:8b:c0:fa:b8: 41:49:d9:2d:af:f7:63:21:77:6a:5f:ca:d7:0f:cf:39:8b:ab: de:63:26:e7:97:ee:d2:5f:ca:92:b7:f1:4d:c4:ba:e6:ea:39: 90:19:3a:59:91:47:88:1c:f5:6f:cd:d1:bc:22:98:12:9f:2b: 92:ef:37:c0:fe:d4:22:61:87:51:13:8a:67:e2:fd:e9:bc:a6: c2:a2:cf:b1:69:33:90:a3:6d:ba:47:30:08:c9:55:b8:bf:31: 44:03:35:7a:51:fc:f2:f8:8f:c8:6b:6a:d3:12:40:8e:bf:e5: 02:ed:4e:bf:95:7a:08:50:0c:86:83:40:4a:30:05:d4:1b:c6: b7:49:61:67:be:06:9d:6a:7c:6b:78:d7:e0:7e:80:e3:54:d5: f4:a0:b8:19:14:2c:a4:9f:14:94:e1:b1:1f:f7:df:cf:75:33: da:08:e6:fd:ac:b4:d2:59:97:4d:53:0e:92:3f:c7:d6:6c:f4: 1d:bb:f4:26:9c:c6:ef:cb:5d:6a:89:a9:0a:57:7f:f7:8d:15: 70:60:af:a0:c9:87:a1:5c:bb:26:40:c6:12:6e:c5:3e:68:31: 58:81:c6:bf:0c:0d:9d:6d:a7:19:17:85:3b:fc:6f:99:6a:9f: df:bd:e4:3d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURF27gx1HhXclQ5hX///BxLUAFakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNTA3MjMxOTQyNTlaFw0yNTA3MjQyMTQ0NTlaMDMxMTAvBgNV BAMTKDgxRjNGNkUyOUM0NTc4QjY2Q0VFRjVENkYzNDY5QTQ1QUQ2NUI3ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2+nj4IiWK1sOy9ik/9GScWzoP GUdTmPLZIPLiOm8OpkoBD0a8LSA/xjq7dy0EaDGJuS5/aIPGNP6BsnsGCNwl7KC7 Ry/xUaNeNUT9nMx1r03eXqrhVCPT4RWoesOclW7TmgygflkeJ5oOFJm9mjd+7f85 2l85LlTehsLIK9x3vt+M5POUPY2mSZTl3Jvabbq3YtTYHrqX8lckKo3dARR5ANx8 BrhxsKoLkoK6aDbAxcYMErhmJvD/GFD1dw4HogUGpFnscGXg2l3F5Lmq3bCBCZH0 cQ7fTZZgt3YDtzuZYS2sCpGEcsFY/G1FcyxcBpgM/ggit7nKEej5YcYZ5WkxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUgfP24pxFeLZs7vXW80aaRa1lt4YwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQByQ/3p DV3MjY/PxWXR34vA+rhBSdktr/djIXdqX8rXD885i6veYybnl+7SX8qSt/FNxLrm 6jmQGTpZkUeIHPVvzdG8IpgSnyuS7zfA/tQiYYdRE4pn4v3pvKbCos+xaTOQo226 RzAIyVW4vzFEAzV6Ufzy+I/Ia2rTEkCOv+UC7U6/lXoIUAyGg0BKMAXUG8a3SWFn vgadanxreNfgfoDjVNX0oLgZFCyknxSU4bEf99/PdTPaCOb9rLTSWZdNUw6SP8fW bPQdu/QmnMbvy11qiakKV3/3jRVwYK+gyYehXLsmQMYSbsU+aDFYgca/DA2dbacZ F4U7/G+Zap/fveQ9 -----END CERTIFICATE-----Generated at Thu Jul 24 03:52:55 2025 by rpki-client