$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: D69nUMJiNAy9AY7iJENuSidwbqg2X8WAxFblf4WYZ3Q= Subject key identifier: 9F:BD:94:9F:16:D0:D2:03:23:36:81:11:88:11:FF:72:67:79:0E:CD Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 31587C321168A19DA34243AA3C5187BEFBC8AF41 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 01D4 Signing time: Sun 20 Jul 2025 11:43:02 +0000 Manifest this update: Sun 20 Jul 2025 11:38:02 +0000 Manifest next update: Mon 21 Jul 2025 15:36:02 +0000 Files and hashes: 1: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: OYFGGb9dMqAtV18cBeD3NbZ0TuwCvJXmn37LZwaW7zg=) 2: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: jAqeRW+G0tj75/HjlTu9upVrXQ/2AvwaP0ubMorKA1Q=) 3: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: DuhHexjpZyZ88si1sPp5PDIsqrb17mALg8O04auFuEg=) 4: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: bjWKUcdJK3JxiL+GqIgQQNiLJnq1CfKPBgs/UuOHrJA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 15:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:58:7c:32:11:68:a1:9d:a3:42:43:aa:3c:51:87:be:fb:c8:af:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Jul 20 11:38:02 2025 GMT Not After : Jul 21 15:36:02 2025 GMT Subject: CN=9FBD949F16D0D203233681118811FF7267790ECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:44:44:35:45:d0:f6:f2:6c:32:55:36:d3:12: 22:4d:3d:c7:20:85:3f:57:e5:2e:af:ca:31:dd:7b: 8f:ad:f1:36:c2:bb:74:1c:94:6d:b9:66:ba:75:1d: 65:ef:87:80:6f:63:93:04:4d:ad:1f:05:82:e1:8d: b6:5b:a7:ec:2b:bd:72:99:5c:9e:11:89:0c:a6:b6: 35:5f:6e:86:9b:0b:fc:90:f0:45:4b:6b:e4:db:da: a9:98:58:0f:19:59:c3:3c:80:41:40:66:78:d0:2f: 1f:82:75:42:0e:16:96:85:ca:f7:cc:72:dc:1c:c3: e4:83:41:dc:d6:0f:24:d5:aa:a2:3a:0b:2a:b0:9f: f3:0d:1c:2b:f6:19:65:be:2f:d3:24:52:b7:06:1f: 09:15:3d:71:75:26:8c:c7:3e:7e:de:38:1f:ac:ad: c1:68:41:e6:86:fb:1f:16:48:48:0d:f1:0d:c4:32: 6c:3e:52:14:3b:b7:ff:23:80:bb:ef:5c:fa:78:8c: 1d:af:a6:07:52:71:cb:b6:7d:47:86:09:83:b1:80: fd:7f:db:b1:e9:9d:78:85:17:4c:c7:3e:8b:3d:56: 2c:af:33:bf:13:74:fa:00:3a:e6:1f:9e:6a:ed:47: ad:9d:2c:1e:82:a2:e1:b3:e4:2d:2d:b9:15:f7:28: e9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BD:94:9F:16:D0:D2:03:23:36:81:11:88:11:FF:72:67:79:0E:CD X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ec:1b:27:6b:80:a9:51:7e:48:33:6c:db:bc:f3:26:9f:da: aa:77:25:8b:4b:f6:57:6e:dd:82:34:56:15:fd:d3:ec:77:f1: a7:b4:ab:69:7f:bf:00:1e:75:87:04:61:ca:a8:6a:5d:c0:de: c4:83:a1:ba:41:7d:5d:50:48:00:c0:b8:49:31:de:fd:5a:cc: ea:c9:4a:80:c9:56:6d:36:a5:d1:3c:02:81:26:e2:16:b8:b9: 48:bc:e8:e9:ee:54:43:80:0d:9d:ad:d4:69:60:3a:ae:bf:9e: 5e:f1:c7:1e:47:65:dc:98:e3:28:09:c1:b5:96:e8:b2:8a:78: b2:40:f3:fa:3f:98:13:48:95:81:90:e2:63:6d:00:be:ad:32: af:2d:a3:ad:89:d2:cd:8c:f5:d9:a4:48:6a:31:25:49:36:a0: 6e:24:63:a7:77:de:29:79:f8:cd:b4:63:1c:be:e5:23:95:12: 58:c6:97:2a:b9:ea:fe:f0:00:4b:26:bf:9e:9a:50:a7:91:e5: fe:ce:5d:ae:ef:54:0a:20:93:1f:8a:61:b7:e8:0d:f9:42:2a: 73:15:86:ab:8a:fc:7f:9d:9e:a7:7e:9d:12:33:43:85:c4:03: 46:fe:85:94:31:15:ff:31:ff:ff:3b:d6:8c:f7:9a:7b:e7:99: 3e:6f:59:3a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMVh8MhFooZ2jQkOqPFGHvvvIr0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNTA3MjAxMTM4MDJaFw0yNTA3MjExNTM2MDJaMDMxMTAvBgNV BAMTKDlGQkQ5NDlGMTZEMEQyMDMyMzM2ODExMTg4MTFGRjcyNjc3OTBFQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtREQ1RdD28mwyVTbTEiJNPccg hT9X5S6vyjHde4+t8TbCu3QclG25Zrp1HWXvh4BvY5METa0fBYLhjbZbp+wrvXKZ XJ4RiQymtjVfboabC/yQ8EVLa+Tb2qmYWA8ZWcM8gEFAZnjQLx+CdUIOFpaFyvfM ctwcw+SDQdzWDyTVqqI6Cyqwn/MNHCv2GWW+L9MkUrcGHwkVPXF1JozHPn7eOB+s rcFoQeaG+x8WSEgN8Q3EMmw+UhQ7t/8jgLvvXPp4jB2vpgdSccu2fUeGCYOxgP1/ 27HpnXiFF0zHPos9ViyvM78TdPoAOuYfnmrtR62dLB6CouGz5C0tuRX3KOnPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUn72UnxbQ0gMjNoERiBH/cmd5Ds0wHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAe7Bsn a4CpUX5IM2zbvPMmn9qqdyWLS/ZXbt2CNFYV/dPsd/GntKtpf78AHnWHBGHKqGpd wN7Eg6G6QX1dUEgAwLhJMd79WszqyUqAyVZtNqXRPAKBJuIWuLlIvOjp7lRDgA2d rdRpYDquv55e8cceR2XcmOMoCcG1luiyiniyQPP6P5gTSJWBkOJjbQC+rTKvLaOt idLNjPXZpEhqMSVJNqBuJGOnd94pefjNtGMcvuUjlRJYxpcquer+8ABLJr+emlCn keX+zl2u71QKIJMfimG36A35QipzFYarivx/nZ6nfp0SM0OFxANG/oWUMRX/Mf// O9aM95p755k+b1k6 -----END CERTIFICATE-----Generated at Mon Jul 21 07:25:33 2025 by rpki-client