$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: RdOF7tg89cL52Q2ZSUCoKJjOjArvdfGS91bDw2EO/rQ= Subject key identifier: 51:20:DA:36:53:C1:37:E7:7F:83:8D:9C:A1:95:31:C3:4B:77:F2:87 Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 60CB18C7AE70DC4700012CC9304AD891995AB741 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: 9C Signing time: Tue 22 Jul 2025 11:21:55 +0000 Manifest this update: Tue 22 Jul 2025 11:16:55 +0000 Manifest next update: Wed 23 Jul 2025 12:41:55 +0000 Files and hashes: 1: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: aUvc4UTsIU7R0m9dsnmxWesOTPr9WQo6/RshJ5X0hb4=) 2: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: obPbW0ZKO9rq4yp7c5UqzqijavPW0CV78gaYhHaBReI=) 3: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: zkm9L2ZOPGd9Toliy4PRiQm8CULaNwVdD4FdLxoKlFU=) 4: 3231332e3135372e3132312e302f32342d3234203d3e2039333034.roa (hash: ZHfI2bxkV7hnGY31X0QEko4MmgUYJCvh7a/XuZiRsPg=) 5: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: u6D0nQIamyf1rwT6EphlkmgpGmdsHhrROhbEzSFSSxQ=) 6: 3231332e3135372e3132332e302f32342d3234203d3e20383334.roa (hash: AFtivI61gfbdC46y0xOZPBtrdddcwvL1pKOVKApf6R4=) 7: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: cK22q6rO6KtktflqsQYlSr1z73xEpoVM/WNGnd6YIEI=) 8: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: fkThFrWbc2SNg5nWL/DjCmp7efO9LKVSLfyHO63Odeo=) 9: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: U2rsj2GmpPBYV9RPLITNHzbaDI2Gxelnlov5msxX9eI=) 10: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: oXC9Asr9SJ7DSslxSZaWUX9xWnSBbY5iUxbxwvvcFUI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 12:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:cb:18:c7:ae:70:dc:47:00:01:2c:c9:30:4a:d8:91:99:5a:b7:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Jul 22 11:16:55 2025 GMT Not After : Jul 23 12:41:55 2025 GMT Subject: CN=5120DA3653C137E77F838D9CA19531C34B77F287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:98:fd:88:01:74:3c:2c:29:a3:c8:0e:c0:56: be:e9:40:74:9e:c5:ca:d9:a5:78:e0:6e:1d:8c:d2: 03:84:27:45:6c:42:3f:27:c9:90:d2:7e:33:0d:23: 4e:fa:f6:92:a3:cf:27:69:36:1d:6c:78:b1:1f:19: 2e:70:f7:63:85:44:e2:c1:f2:43:c6:af:5c:5b:6d: a5:c8:83:8b:cd:53:a5:0d:e2:e4:da:93:9b:b8:85: 43:56:e2:7f:19:dd:32:f7:ee:f1:a5:52:79:29:f8: c2:75:77:3b:8d:aa:8f:7a:9c:6b:03:d9:70:3a:d9: 55:80:e0:45:5b:1a:1f:61:7a:bc:e4:55:79:e7:30: 27:26:9b:bf:74:6e:15:f3:c9:d7:08:3b:fd:ae:eb: bf:ce:9f:19:8b:e5:59:88:75:7b:f9:80:e3:1d:5b: 41:3e:57:14:fd:e0:79:0f:21:9e:2f:fe:63:4c:3f: 21:f8:50:50:e5:f7:30:81:a4:d0:52:fa:d6:51:cc: 4f:d5:0b:dd:aa:ca:50:a4:f0:65:c1:79:d1:2a:42: c4:c0:cd:e3:e5:3a:0e:ea:0f:9c:6b:ac:b2:5a:c9: 34:88:cd:0a:54:5b:2b:61:cf:0d:6d:6b:96:91:35: eb:60:9c:7f:23:b0:a1:33:bd:45:0e:f0:c8:36:5d: 72:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:20:DA:36:53:C1:37:E7:7F:83:8D:9C:A1:95:31:C3:4B:77:F2:87 X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:05:75:47:d3:a9:e8:96:0a:97:f4:0b:9b:e6:5c:c3:2d:e7: 5a:4f:75:b6:4c:f2:c2:18:e3:d6:17:e5:e8:b3:f2:b1:f9:23: 4a:ec:5f:74:b0:d2:d2:e0:13:6f:f0:8e:e3:f6:a8:e1:d9:96: 8c:ef:85:22:64:d1:e5:7d:ac:6c:10:bb:3a:39:d3:03:a8:af: e6:06:03:3f:56:6a:00:ff:80:9b:a6:06:58:c5:84:01:f9:19: 2d:9c:c8:53:a8:39:2b:05:94:ce:25:fe:89:db:c4:b1:dc:56: ce:3f:a4:d3:3c:a9:e2:55:29:79:b3:eb:06:96:e5:a6:e6:f2: 75:53:f0:60:a4:dc:eb:3f:db:2e:02:fe:18:27:c8:12:c5:ef: 51:a1:74:27:08:d3:5e:93:47:a6:d8:75:b8:4c:45:a6:50:d9: ea:c8:a7:22:e8:ed:93:44:d0:13:ea:07:a8:5f:99:00:f2:c1: fb:f8:60:6a:08:de:00:c8:84:f6:38:ba:0c:50:87:1d:01:42: 33:ef:db:6e:c9:29:11:12:90:e8:b4:2e:28:c8:d8:55:5e:96: 51:98:a3:09:73:a6:33:80:b6:6e:89:56:ec:b2:53:5b:2d:b1: 69:78:5c:88:07:95:7a:b0:d7:49:72:15:02:78:81:ef:32:67: ce:10:b0:46 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYMsYx65w3EcAASzJMErYkZlat0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNTA3MjIxMTE2NTVaFw0yNTA3MjMxMjQxNTVaMDMxMTAvBgNV BAMTKDUxMjBEQTM2NTNDMTM3RTc3RjgzOEQ5Q0ExOTUzMUMzNEI3N0YyODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZmP2IAXQ8LCmjyA7AVr7pQHSe xcrZpXjgbh2M0gOEJ0VsQj8nyZDSfjMNI0769pKjzydpNh1seLEfGS5w92OFROLB 8kPGr1xbbaXIg4vNU6UN4uTak5u4hUNW4n8Z3TL37vGlUnkp+MJ1dzuNqo96nGsD 2XA62VWA4EVbGh9herzkVXnnMCcmm790bhXzydcIO/2u67/OnxmL5VmIdXv5gOMd W0E+VxT94HkPIZ4v/mNMPyH4UFDl9zCBpNBS+tZRzE/VC92qylCk8GXBedEqQsTA zePlOg7qD5xrrLJayTSIzQpUWythzw1ta5aRNetgnH8jsKEzvUUO8Mg2XXLtAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUSDaNlPBN+d/g42coZUxw0t38ocwHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgV1R9Op6JYKl/QLm+Zc wy3nWk91tkzywhjj1hfl6LPysfkjSuxfdLDS0uATb/CO4/ao4dmWjO+FImTR5X2s bBC7OjnTA6iv5gYDP1ZqAP+Am6YGWMWEAfkZLZzIU6g5KwWUziX+idvEsdxWzj+k 0zyp4lUpebPrBpblpubydVPwYKTc6z/bLgL+GCfIEsXvUaF0JwjTXpNHpth1uExF plDZ6sinIujtk0TQE+oHqF+ZAPLB+/hgagjeAMiE9ji6DFCHHQFCM+/bbskpERKQ 6LQuKMjYVV6WUZijCXOmM4C2bolW7LJTWy2xaXhciAeVerDXSXIVAniB7zJnzhCw Rg== -----END CERTIFICATE-----Generated at Wed Jul 23 01:26:21 2025 by rpki-client