$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft File: A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json) Hash identifier: Wv0ZviuIqorasl05wCAet3PXtC/jejvBgqIAnAgEd/w= Subject key identifier: FF:9D:B5:E7:B3:5C:3B:9C:92:D7:7C:D7:2D:85:49:AC:64:98:BE:A1 Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Certificate serial: 6861C69ACF6DAA3F469E02B4260CAA63E55C01FB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft Manifest number: 022C Signing time: Wed 23 Jul 2025 03:35:29 +0000 Manifest this update: Wed 23 Jul 2025 03:30:29 +0000 Manifest next update: Thu 24 Jul 2025 05:00:29 +0000 Files and hashes: 1: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: g9TWsQZsTWz7mSDp6Y61gNZDSwAn6dADsEyVm1AJtlU=) 2: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: 5IFSShC1J1DPKr9fgEjy0DHzTqmR8W17B+sGrWUb29Q=) 3: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0nNVfH0UNkgevPAH9ITuwY5tE24LlYCDjFx46F3vtM0=) 4: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: imEjvtvCCz1eqwuI8/eFHCFB+WwTlJEDfPXRombfVNU=) 5: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: OQ4RqrDYKEIbwYrpahxr3oiIK4bPWEM26r9x0oOW16k=) 6: 326131343a373538313a393261303a3a2f34382d3438203d3e20323135333634.roa (hash: vpFkcPB4ncBh9VZRsIiAgJdk+akiA1X6oI9yFkMsGRg=) 7: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: 34CzDRdWck3x5QdKwY21JLn4ljy5X8PbpWV6VL1UPl8=) 8: 326131343a373538313a393330303a3a2f34302d3438203d3e20323135333634.roa (hash: HxvdekWDniqUROXJ3YOPd7kMDR81qja1R4es7Rc0gNE=) 9: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: F9b5BNgK8TO7NWcYalz+qyjvcxyYqlq+/TYg6mk1sTI=) 10: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: TejNBoLvDqd6zzS1lptpFez+EdbwzXYJ6yM06vDQ9j0=) 11: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: MyeYfbLc0//rjwnR8ZJ3TnxqQq4JflTHlrUTLQvk3gU=) 12: 326131343a373538313a6666303a3a2f34382d3438203d3e20323135333634.roa (hash: nCwmmbP9gIjoEy95/v504iaQnyadcB1V8SB+J8/exJE=) 13: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 2aDuD/D+lIpzPYcnGpfR3f4GvH7bzD6tXNlt4SzLv7s=) 14: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: JYfFIGSSsdhSc4V2wOJu9QFkSSC76MmCAjKsdTBmtQA=) 15: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: a41Xyu+1QM63sJBLjRXDXCMByy5FuK1D59e4kuksRCE=) 16: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: coziJfcvV7NZzAVbts1JQ6BKxT5yxFwdbwzsra8WCDw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:61:c6:9a:cf:6d:aa:3f:46:9e:02:b4:26:0c:aa:63:e5:5c:01:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Validity Not Before: Jul 23 03:30:29 2025 GMT Not After : Jul 24 05:00:29 2025 GMT Subject: CN=FF9DB5E7B35C3B9C92D77CD72D8549AC6498BEA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:f2:91:4f:2d:be:2e:8f:ab:18:90:d9:cd: c6:ed:86:b7:6a:7f:e2:07:5a:89:9e:ce:3f:be:fc: 84:62:5b:d2:97:df:50:13:9d:b0:1e:ec:43:68:51: 06:5f:20:3f:cb:27:f5:0e:6e:87:e4:76:de:f8:5c: 2c:c0:3d:b1:5c:8c:33:a9:41:b6:7c:3e:d5:d7:bb: e5:4c:78:55:50:dc:98:17:46:ea:58:ea:79:14:1f: 92:96:ab:e5:6b:87:b9:e8:8e:b6:2f:88:40:2f:ae: 58:4c:58:af:57:dd:1a:f5:5a:92:22:df:9a:7f:db: f8:95:b1:ff:78:c3:12:c1:bb:47:1a:66:e3:d1:39: c2:4a:4d:bc:8c:20:f1:c1:81:67:21:2b:30:d3:2d: 28:c0:c8:0e:d2:74:a1:89:0e:b3:cf:b4:ba:7d:cf: 21:58:b6:de:8a:48:cb:b7:84:25:b2:34:3c:f0:36: c9:96:62:25:7d:b5:c8:67:75:96:00:fb:df:60:c2: b9:25:f9:df:87:ff:0a:4e:26:88:eb:ea:0f:5e:aa: 84:70:e3:0f:3a:ba:f2:9d:ab:1f:e3:4b:53:21:62: 1e:fc:c4:fd:d8:9c:a9:02:14:fc:1b:bb:55:ca:79: 0b:5a:57:27:7a:f2:63:2f:c2:5b:cf:fd:1a:43:1b: e0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9D:B5:E7:B3:5C:3B:9C:92:D7:7C:D7:2D:85:49:AC:64:98:BE:A1 X509v3 Authority Key Identifier: keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c5:7a:e0:9c:3a:4a:a1:81:6e:fd:10:7e:1e:7f:15:3f:2c: 14:c6:99:aa:c3:8f:c0:19:a6:da:ca:0c:8d:e4:d4:c7:7b:64: 8e:51:23:74:e9:97:4e:0c:31:c5:84:ff:f1:06:b3:9b:f9:57: 98:46:d6:17:71:28:d2:8b:54:af:74:7e:fe:89:38:c0:47:c4: a8:9d:8d:eb:18:cf:13:90:e4:01:1f:bf:fe:9a:72:fc:5f:c4: 28:d5:53:2d:66:9e:53:1a:5b:4d:b7:0e:9d:2b:cb:07:ea:e3: e3:dd:59:9a:00:a7:8b:d6:47:3f:6b:3c:51:bc:c5:43:03:84: e6:37:a0:1e:77:2f:48:a1:73:b0:a0:39:4c:9d:96:3f:05:60: b0:2a:34:ba:42:82:79:17:78:69:62:3b:4d:6d:09:d5:11:76: 8c:c6:8d:88:55:e9:a0:11:31:e5:51:35:fa:0c:69:3f:6c:b0: 1e:71:88:e4:c6:6c:33:4c:2a:d9:44:d1:57:47:54:ad:94:56: ca:1b:3a:3b:d2:1b:84:7e:6d:e1:e6:58:73:36:53:c3:2e:2a: c3:70:92:ac:45:4b:76:a4:99:18:66:56:b1:58:de:8e:90:63: 9e:63:de:3f:08:8f:65:14:29:ec:fa:6c:d9:7e:cd:c4:ab:bc: ad:f3:f4:83 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaGHGms9tqj9GngK0JgyqY+VcAfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3 NzdEQTkyNjAeFw0yNTA3MjMwMzMwMjlaFw0yNTA3MjQwNTAwMjlaMDMxMTAvBgNV BAMTKEZGOURCNUU3QjM1QzNCOUM5MkQ3N0NENzJEODU0OUFDNjQ5OEJFQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDApfKRTy2+Lo+rGJDZzcbthrdq f+IHWomezj++/IRiW9KX31ATnbAe7ENoUQZfID/LJ/UObofkdt74XCzAPbFcjDOp QbZ8PtXXu+VMeFVQ3JgXRupY6nkUH5KWq+Vrh7nojrYviEAvrlhMWK9X3Rr1WpIi 35p/2/iVsf94wxLBu0caZuPROcJKTbyMIPHBgWchKzDTLSjAyA7SdKGJDrPPtLp9 zyFYtt6KSMu3hCWyNDzwNsmWYiV9tchndZYA+99gwrkl+d+H/wpOJojr6g9eqoRw 4w86uvKdqx/jS1MhYh78xP3YnKkCFPwbu1XKeQtaVyd68mMvwlvP/RpDG+DVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU/52157NcO5yS13zXLYVJrGSYvqEwHwYDVR0j BBgwFoAUoe5dCaD10Nh2EQExdcYuNXd9qSYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw NDhjLzAvQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3NzdEQTkyNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BMUVFNUQwOUEwRjVEMEQ4NzYxMTAxMzE3 NUM2MkUzNTc3N0RBOTI2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg1NWM3ZDVhLTE1YzQtNDU4OS04NWZhLWI0OTFhMDcxMDQ4Yy8wL0ExRUU1RDA5 QTBGNUQwRDg3NjExMDEzMTc1QzYyRTM1Nzc3REE5MjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7xXrg nDpKoYFu/RB+Hn8VPywUxpmqw4/AGabaygyN5NTHe2SOUSN06ZdODDHFhP/xBrOb +VeYRtYXcSjSi1SvdH7+iTjAR8SonY3rGM8TkOQBH7/+mnL8X8Qo1VMtZp5TGltN tw6dK8sH6uPj3VmaAKeL1kc/azxRvMVDA4TmN6Aedy9IoXOwoDlMnZY/BWCwKjS6 QoJ5F3hpYjtNbQnVEXaMxo2IVemgETHlUTX6DGk/bLAecYjkxmwzTCrZRNFXR1St lFbKGzo70huEfm3h5lhzNlPDLirDcJKsRUt2pJkYZlaxWN6OkGOeY94/CI9lFCns +mzZfs3Eq7yt8/SD -----END CERTIFICATE-----Generated at Wed Jul 23 12:09:47 2025 by rpki-client