$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft File: 893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft (raw, json) Hash identifier: iNpkD+tzejcEOoa/WRH3wjj1Vwh6MbWz8ShehBPjh+I= Subject key identifier: 6C:C4:D5:94:2C:2F:FC:33:5D:9A:FC:23:3F:6E:BE:C6:70:47:92:17 Authority key identifier: 89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B Certificate issuer: /CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B Certificate serial: 70645BD46A63803A609029F123CA2328881F96E4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft Manifest number: 8B Signing time: Tue 22 Jul 2025 12:42:05 +0000 Manifest this update: Tue 22 Jul 2025 12:37:05 +0000 Manifest next update: Wed 23 Jul 2025 13:56:05 +0000 Files and hashes: 1: 326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa (hash: bkcmt94VX2qT5AatBWPB20wqy19gXukXDxeJ3DXH2P8=) 2: 893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl (hash: 4uPiVPPFpj0EMl2XV16Dq05P6GE59+LtFpzsBY+dKSA=) 3: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: v+wGdsPoD53cB+FPJFplibwWU1IDMTKf0BLLWvOrDJw=) 4: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: Vs7Q5KU9koM9GeO4e0pzIZd/B9BJX1MGwWzBfnT0lFM=) 5: 326131343a373538313a366664303a3a2f34342d3434203d3e20323135393334.roa (hash: vaAEu3pMRFdmKcI/nWa8WyzQWeHMb/mh9I6YRbEX9FY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 13:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:64:5b:d4:6a:63:80:3a:60:90:29:f1:23:ca:23:28:88:1f:96:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B Validity Not Before: Jul 22 12:37:05 2025 GMT Not After : Jul 23 13:56:05 2025 GMT Subject: CN=6CC4D5942C2FFC335D9AFC233F6EBEC670479217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cc:ea:fa:23:f2:69:98:6a:44:4c:29:95:a2: 42:5e:9d:ab:a8:30:4a:63:e5:6a:cc:53:56:22:c9: 0b:fc:7c:d1:b6:5a:49:03:86:90:72:6e:a4:8b:f4: ac:95:c5:92:53:87:6d:3d:8f:99:66:11:ce:e0:7a: 98:34:c3:75:50:fc:7a:35:7b:ed:b3:bf:4a:8a:bd: f4:c4:80:19:1d:cc:03:96:70:89:81:cd:5c:dc:60: 54:0e:49:f6:ec:42:b0:6f:09:6c:a5:8c:2f:55:07: 52:73:f1:83:b8:1e:55:fb:8f:4b:88:49:ba:71:44: 1c:29:79:46:58:30:b0:37:7a:32:be:96:52:13:01: 45:70:08:d8:ce:ad:68:0e:a9:26:66:c9:34:3c:d9: 8d:6a:49:a0:04:ca:5c:89:10:00:f0:02:04:a8:93: 29:1f:28:97:ae:24:95:f6:c1:5f:6e:8b:86:f9:ce: b5:a5:86:28:4d:3a:0d:8c:34:7b:e1:54:fa:e3:2e: 9a:f0:67:65:fd:20:03:00:f8:85:99:e4:2c:46:fa: 4a:d3:1d:93:03:0b:94:fe:f9:9f:03:3c:a9:0d:e9: 2a:51:a7:48:84:e2:8c:78:ad:cc:e9:24:b2:69:2b: 1f:64:fa:73:45:81:92:3e:03:95:29:d3:e3:ab:8a: 0d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C4:D5:94:2C:2F:FC:33:5D:9A:FC:23:3F:6E:BE:C6:70:47:92:17 X509v3 Authority Key Identifier: keyid:89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0c:f3:1b:9d:ee:a4:3e:47:35:bb:a4:89:d6:ca:fb:7e:86: 6f:c6:4a:ff:c8:be:46:b6:31:cc:fa:4b:1e:0c:e9:db:f0:db: 92:bb:fb:48:6c:4c:35:fc:ab:e7:6d:a6:5e:a8:c0:4f:8a:16: 7d:a4:d0:42:99:b8:cc:fb:5d:c9:c9:26:ec:8f:c6:5c:f2:9a: 47:08:ea:44:32:21:25:8f:12:41:6f:62:39:7e:0c:59:dc:55: fa:47:e7:4b:0d:90:8b:13:0d:05:2f:40:5b:7b:3e:f2:ae:12: 65:00:ca:54:45:85:f8:2e:7b:d7:d6:e8:db:0a:0c:a4:0c:b6: 2f:ba:12:fe:8e:48:29:d9:b6:3e:57:29:30:f8:f8:ba:7f:cb: a7:53:8a:f5:b7:45:4e:b7:34:05:14:c2:e5:5a:1b:63:b5:2b: 9e:e2:f6:34:27:f4:5d:d0:6e:f6:c5:98:6a:29:c1:f7:30:e1: d4:1a:0f:24:82:2d:c2:6e:50:47:b7:4e:6f:4e:5d:f0:35:b7: 53:ab:07:fb:13:e5:c1:d2:35:ad:a0:40:9c:9e:74:9f:58:05: 8f:c1:c5:cc:f6:ad:af:fc:25:ef:dd:75:41:8b:c2:28:d7:c1: e9:f0:f7:18:c5:73:d3:4b:f1:38:bd:61:4b:d9:ac:ff:48:27: ff:3c:0e:fd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcGRb1GpjgDpgkCnxI8ojKIgfluQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBC OEYxMjA2QjAeFw0yNTA3MjIxMjM3MDVaFw0yNTA3MjMxMzU2MDVaMDMxMTAvBgNV BAMTKDZDQzRENTk0MkMyRkZDMzM1RDlBRkMyMzNGNkVCRUM2NzA0NzkyMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfzOr6I/JpmGpETCmVokJenauo MEpj5WrMU1YiyQv8fNG2WkkDhpBybqSL9KyVxZJTh209j5lmEc7gepg0w3VQ/Ho1 e+2zv0qKvfTEgBkdzAOWcImBzVzcYFQOSfbsQrBvCWyljC9VB1Jz8YO4HlX7j0uI SbpxRBwpeUZYMLA3ejK+llITAUVwCNjOrWgOqSZmyTQ82Y1qSaAEylyJEADwAgSo kykfKJeuJJX2wV9ui4b5zrWlhihNOg2MNHvhVPrjLprwZ2X9IAMA+IWZ5CxG+krT HZMDC5T++Z8DPKkN6SpRp0iE4ox4rczpJLJpKx9k+nNFgZI+A5Up0+Orig0dAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUbMTVlCwv/DNdmvwjP26+xnBHkhcwHwYDVR0j BBgwFoAUiT/UG94ibFTyrSs92hnBoLjxIGswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFjZmEzMTgtMmE1Yy00MjQxLWFmYmItMzg3ZDcxZThj NTk2LzEvODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBCOEYxMjA2Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTNGRDQxQkRFMjI2QzU0RjJBRDJCM0RE QTE5QzFBMEI4RjEyMDZCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhY2ZhMzE4LTJhNWMtNDI0MS1hZmJiLTM4N2Q3MWU4YzU5Ni8xLzg5M0ZENDFC REUyMjZDNTRGMkFEMkIzRERBMTlDMUEwQjhGMTIwNkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtDPMb ne6kPkc1u6SJ1sr7foZvxkr/yL5GtjHM+kseDOnb8NuSu/tIbEw1/KvnbaZeqMBP ihZ9pNBCmbjM+13JySbsj8Zc8ppHCOpEMiEljxJBb2I5fgxZ3FX6R+dLDZCLEw0F L0Bbez7yrhJlAMpURYX4LnvX1ujbCgykDLYvuhL+jkgp2bY+Vykw+Pi6f8unU4r1 t0VOtzQFFMLlWhtjtSue4vY0J/Rd0G72xZhqKcH3MOHUGg8kgi3CblBHt05vTl3w NbdTqwf7E+XB0jWtoECcnnSfWAWPwcXM9q2v/CXv3XVBi8Io18Hp8PcYxXPTS/E4 vWFL2az/SCf/PA79 -----END CERTIFICATE-----Generated at Wed Jul 23 06:10:23 2025 by rpki-client