$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: 2a5cvx6QEWt2nfCd97hUsqg/GDS0GjISsGBREyPeA2U= Subject key identifier: DC:D2:B0:B2:ED:C5:ED:69:38:1A:2B:31:9C:39:52:53:1E:41:A0:0D Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 50A717CAE039F415B4541F1B0131D60B568BD727 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 0370 Signing time: Wed 23 Jul 2025 10:42:04 +0000 Manifest this update: Wed 23 Jul 2025 10:37:04 +0000 Manifest next update: Thu 24 Jul 2025 13:36:04 +0000 Files and hashes: 1: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: iuam+Y72SFbVuzZ6DMbPvd9+i2O4uNgJ9aW8l1vNV9U=) 2: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: EdUOSpaZ+y9dGtGt5a4l4ym1oYSdKUKlHm8fJFwr5bc=) 3: 39332e39352e3131372e302f32342d3234203d3e20323135373732.roa (hash: vLSBueodjY+0YJW63au8p8n765D5sPEn1sQkXoc5D7w=) 4: 39332e39352e3131332e302f32342d3234203d3e203136323736.roa (hash: cS6LWz+NEHJoa0EQVb5z92UR8C9jaztUFOxHHwpRPsY=) 5: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: bvqtExc4o5GUJzraVc9CM0CC2GO3x6c+ohx4q9G/dgk=) 6: 39332e39352e3131322e302f32342d3234203d3e2039333034.roa (hash: zUwgNrj8/Pqn6SSwkBw/pyrAcW11nb3rzQwJkkprQBw=) 7: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: oaLDq7aS5NFaYNW1gUs7MDdZL5P0TUUEDkjRyQGla3w=) 8: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: 8ja7Z+swVGTraKxezjgHzXG2GlS/dFRID6jPUC87mFI=) 9: 39332e39352e3131342e302f32342d3234203d3e2035303635.roa (hash: MF/szlJtg3jR946D7Iy8tt2rHbx2IcEkKMT7PmewPLE=) 10: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: qqVPSWZLREddEW4nL5NY3Bls+ZrG5ASHmT6xiutXttk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a7:17:ca:e0:39:f4:15:b4:54:1f:1b:01:31:d6:0b:56:8b:d7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Jul 23 10:37:04 2025 GMT Not After : Jul 24 13:36:04 2025 GMT Subject: CN=DCD2B0B2EDC5ED69381A2B319C3952531E41A00D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8c:ac:47:19:7e:6c:4f:d1:68:b3:1d:ce:6a: ca:38:08:b6:ef:42:1c:9f:2a:c2:57:a5:06:3e:e8: 23:dc:02:33:09:8f:1d:b4:4b:46:ac:ca:84:0c:5a: bb:33:a5:e1:6d:b0:a8:34:98:08:1d:ac:d0:8e:c1: a7:f2:ac:05:ae:65:b7:1b:83:b7:00:67:8b:e2:a4: 40:16:e4:7b:cb:3c:40:e1:66:5e:29:08:3b:32:17: e8:62:70:76:da:20:98:03:85:9f:e2:61:c9:5b:36: d3:36:05:91:29:59:3b:1b:2c:b6:6e:dd:85:ef:65: ae:c0:98:ef:65:24:d8:1a:05:02:2d:1b:a0:e1:39: 40:43:1a:d6:d9:81:0d:bc:34:26:55:a8:8f:23:37: e5:87:f4:4c:9f:19:bf:ac:b7:13:da:0e:66:38:7f: 72:a6:ee:de:83:b9:8b:d3:35:0c:02:83:68:00:0e: 5c:bd:4b:1e:95:4f:90:cd:eb:11:98:59:02:26:a3: aa:69:33:b6:8d:ee:f4:3f:a6:dc:9b:e4:f7:35:17: 9d:85:67:ed:96:76:6c:41:ec:c4:fb:68:8a:e2:05: 8f:ca:16:87:dd:2e:a5:53:12:97:33:b2:cb:d4:5e: 2d:3a:cd:5d:45:a3:87:c9:47:75:fc:f3:f5:b6:65: b9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D2:B0:B2:ED:C5:ED:69:38:1A:2B:31:9C:39:52:53:1E:41:A0:0D X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:9f:9d:ca:a1:21:2b:a6:14:ef:c4:3d:99:b3:65:07:c2:33: 7d:8d:a6:a7:27:11:52:a8:2b:6b:25:05:f1:d1:5f:1f:6c:3f: 82:84:e8:5e:9d:50:0f:2c:c4:64:b4:74:f0:34:a2:b2:68:74: d2:d2:cb:13:c2:4b:c1:fc:aa:e7:98:6d:21:0e:81:a9:f8:90: 2c:8b:21:b2:06:d6:79:d4:b8:99:5c:8a:e7:c3:db:88:48:04: 8d:9a:f5:90:63:fc:19:75:aa:e7:92:ad:84:5b:59:35:f7:30: 9d:89:c2:87:d7:e1:c6:65:e2:87:8b:68:0a:0c:5c:3c:d3:11: 7c:4a:98:07:b1:62:8f:50:48:69:e3:d7:d2:57:0e:ac:73:3b: 5a:07:f9:9e:91:de:2d:3b:63:35:a9:d7:9c:35:e1:ed:9b:a6: 65:03:63:e6:b3:6c:00:1f:7a:61:49:6b:ff:20:99:6c:27:bd: 29:70:d1:da:1a:fd:5b:49:02:22:52:5e:82:96:4e:88:ab:e6: 5e:cd:9c:0a:8f:d7:51:a4:61:65:4a:3a:38:23:c9:9b:e8:e3: 09:3f:45:b2:3c:0d:9d:45:e8:e4:de:8d:82:a6:bc:5e:20:2d: 89:36:97:d4:11:a2:8e:a3:0f:7a:4a:c8:72:41:8f:33:4c:44: ee:ff:61:98 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUKcXyuA59BW0VB8bATHWC1aL1ycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNTA3MjMxMDM3MDRaFw0yNTA3MjQxMzM2MDRaMDMxMTAvBgNV BAMTKERDRDJCMEIyRURDNUVENjkzODFBMkIzMTlDMzk1MjUzMUU0MUEwMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDjKxHGX5sT9Fosx3Oaso4CLbv QhyfKsJXpQY+6CPcAjMJjx20S0asyoQMWrszpeFtsKg0mAgdrNCOwafyrAWuZbcb g7cAZ4vipEAW5HvLPEDhZl4pCDsyF+hicHbaIJgDhZ/iYclbNtM2BZEpWTsbLLZu 3YXvZa7AmO9lJNgaBQItG6DhOUBDGtbZgQ28NCZVqI8jN+WH9EyfGb+stxPaDmY4 f3Km7t6DuYvTNQwCg2gADly9Sx6VT5DN6xGYWQImo6ppM7aN7vQ/ptyb5Pc1F52F Z+2WdmxB7MT7aIriBY/KFofdLqVTEpczssvUXi06zV1Fo4fJR3X88/W2ZbnnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU3NKwsu3F7Wk4GisxnDlSUx5BoA0wHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZ+dyqEhK6YU78Q9mbNl B8IzfY2mpycRUqgrayUF8dFfH2w/goToXp1QDyzEZLR08DSismh00tLLE8JLwfyq 55htIQ6BqfiQLIshsgbWedS4mVyK58PbiEgEjZr1kGP8GXWq55KthFtZNfcwnYnC h9fhxmXih4toCgxcPNMRfEqYB7Fij1BIaePX0lcOrHM7Wgf5npHeLTtjNanXnDXh 7ZumZQNj5rNsAB96YUlr/yCZbCe9KXDR2hr9W0kCIlJegpZOiKvmXs2cCo/XUaRh ZUo6OCPJm+jjCT9FsjwNnUXo5N6Ngqa8XiAtiTaX1BGijqMPekrIckGPM0xE7v9h mA== -----END CERTIFICATE-----Generated at Wed Jul 23 12:25:29 2025 by rpki-client