$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft File: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft (raw, json) Hash identifier: xMj/9sAprqa9UB3BV+YY86OcVA/WVz+WcdqlDCsdZuo= Subject key identifier: 9F:0B:67:09:22:D9:A6:07:BB:69:66:A8:A1:47:6E:31:35:B3:E9:A7 Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 Certificate issuer: /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Certificate serial: 3FA3ABC23FBDC9FD58CA4A3E1C9F6D8522E0EBB5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft Manifest number: 86 Signing time: Tue 22 Jul 2025 15:57:54 +0000 Manifest this update: Tue 22 Jul 2025 15:52:54 +0000 Manifest next update: Wed 23 Jul 2025 19:43:54 +0000 Files and hashes: 1: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: 3uRQGY7O+ZvtbHNtgC5MF4VJ4PR1W0vGtZuXeGQdfrI=) 2: 326131343a373538303a666634353a3a2f34382d3438203d3e20323134333434.roa (hash: 8IkTFY6NhSlGUxhiOR1gV0K8W7L2BzrfJSsZgSDz+CM=) 3: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl (hash: 0fflA1j+UqcogzamwIdLE93yOnfe29q0hb//aQwIcXg=) 4: 326131343a373538303a356666663a3a2f34382d3438203d3e20323134333434.roa (hash: pH1DpsNoBXAL0l4o2dyKb1VUo6J4k0AUCBSFbohk97k=) 5: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: 0tk68iktR4A+Tmx1ow+QCPfURRQdgNg7+hqUgrcV4SU=) 6: 326131343a373538303a666634303a3a2f34382d3438203d3e20323134333434.roa (hash: dPCGiKkWz0E9rMprVOstBFLQuVK9OG6CBSKX+fk7UXw=) 7: 326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa (hash: apRB5OfhlgNP9CjlOyLXHwJtDJcG7Ul2o20dXFYOVFQ=) 8: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: /zrjZ0ZqEzRDQ5mOWK+S06L45z9UxNhwijRkpqGoHX0=) 9: 326131343a373538303a666634323a3a2f34382d3438203d3e20323134333434.roa (hash: 9k9VorkprwzOj4hWnDvwpKS020LK9HlBFwzRrzgLjKw=) 10: 326131343a373538303a666634313a3a2f34382d3438203d3e20323134333434.roa (hash: pdCqfiQKAk5mpE38Sur9HB4NVG9NXvRtOzzMMORY0Ss=) 11: 326131343a373538303a666634343a3a2f34382d3438203d3e20323134333434.roa (hash: wAwmvjP2Xs/JgKfPKl1DdsDpWK9Z2qkOeMDP05em2JQ=) 12: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: i94AFUzw6e810fYgj7x6pZ8Yx8k5H6Glrkwkeys08UU=) 13: 326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa (hash: gWNOGizaCWeT+eChfA6O1CcYgC4CppF3JVd8ZgY0qsY=) 14: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: Kr++/O1eWk2rhooTEwkNaOpIKHaAHhcWSp5UY9Du6eM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 19:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a3:ab:c2:3f:bd:c9:fd:58:ca:4a:3e:1c:9f:6d:85:22:e0:eb:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Validity Not Before: Jul 22 15:52:54 2025 GMT Not After : Jul 23 19:43:54 2025 GMT Subject: CN=9F0B670922D9A607BB6966A8A1476E3135B3E9A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:43:bc:d0:24:aa:bb:3d:63:70:db:bf:12: 39:49:9f:a7:bf:cd:66:42:9e:0f:da:78:b6:31:31: e8:fc:c7:b6:dd:25:30:cc:7d:a4:b0:a9:da:00:e4: 4f:e4:cc:18:d8:2f:86:ab:25:bd:07:62:1a:51:72: 6a:e7:10:f6:f7:a5:34:56:ae:cf:2b:7a:6f:74:52: a1:db:7a:fa:d8:8d:bd:ce:11:87:91:16:66:0d:a2: e5:eb:f8:4b:40:a0:ae:f1:b2:2b:e7:91:b5:44:4f: 32:ab:02:a5:d9:ac:92:35:f2:04:37:4d:5b:be:47: f2:fa:fa:4e:dd:d6:4f:30:96:ee:10:3d:92:29:4a: b7:5d:1b:aa:ff:41:b4:4b:6e:69:0b:18:ad:ae:19: 85:2a:d3:ef:c0:f5:9d:ca:98:79:0a:e4:04:84:3f: 97:ff:fe:c1:e3:f0:82:94:ac:90:15:78:bd:fd:c1: e9:5c:68:f8:f8:6c:fd:34:58:67:8b:2c:37:ae:b5: a8:08:ed:6a:c7:7b:7f:1a:10:f6:54:80:16:54:08: 07:54:8e:f4:98:e3:ee:d6:ee:bb:58:8f:57:af:e8: 0a:c1:81:d6:04:a1:09:ef:e0:f0:0a:f0:46:a6:ea: 8f:06:1c:6b:a1:1f:bd:67:a4:5f:39:65:59:51:1e: 82:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0B:67:09:22:D9:A6:07:BB:69:66:A8:A1:47:6E:31:35:B3:E9:A7 X509v3 Authority Key Identifier: keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:09:77:ce:60:71:0c:76:3a:cb:2b:8d:5c:e1:5d:5e:48:24: f0:db:a6:1b:e4:de:44:4d:e1:c5:de:f5:2b:be:98:fc:3d:fe: f6:5c:8f:a6:b4:81:2d:0e:af:c5:2c:97:b6:38:07:e7:f8:ad: 7e:4c:cb:5d:c3:00:1c:a3:09:75:a9:01:65:c7:db:15:cb:1c: 61:64:29:48:32:d2:ba:04:80:7e:34:b9:f4:39:f5:92:a7:17: 93:de:37:d9:ef:90:9e:0f:b2:97:ff:1b:d4:3e:ac:cf:78:63: 14:93:32:b5:c3:f4:82:85:5e:e7:a0:1b:da:d4:83:e4:60:79: 8e:15:2c:9d:c0:05:11:fc:37:5f:ef:9c:c9:c0:33:88:4a:9e: 68:de:82:7f:8a:f0:9a:cb:7a:0b:8b:92:c2:3d:1c:38:34:e8: 72:37:1c:b7:2a:ed:a0:5c:a0:ca:ab:03:c9:df:98:44:17:7c: c7:88:6c:b0:1c:af:bf:e8:70:e6:15:73:ee:d7:1d:f2:f3:32: 2d:58:90:03:39:2d:6b:30:36:fb:c8:8c:da:49:78:6d:cf:31: 99:b2:8d:17:4d:4c:47:24:10:ad:60:31:1f:5d:c1:ba:b6:0f: ad:5e:18:fa:07:04:2f:eb:b4:31:6e:d7:cc:a3:0a:68:69:68: a6:8d:66:3a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUP6Orwj+9yf1Yyko+HJ9thSLg67UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJB ODcyMzk0NTAeFw0yNTA3MjIxNTUyNTRaFw0yNTA3MjMxOTQzNTRaMDMxMTAvBgNV BAMTKDlGMEI2NzA5MjJEOUE2MDdCQjY5NjZBOEExNDc2RTMxMzVCM0U5QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/EO80CSquz1jcNu/EjlJn6e/ zWZCng/aeLYxMej8x7bdJTDMfaSwqdoA5E/kzBjYL4arJb0HYhpRcmrnEPb3pTRW rs8rem90UqHbevrYjb3OEYeRFmYNouXr+EtAoK7xsivnkbVETzKrAqXZrJI18gQ3 TVu+R/L6+k7d1k8wlu4QPZIpSrddG6r/QbRLbmkLGK2uGYUq0+/A9Z3KmHkK5ASE P5f//sHj8IKUrJAVeL39welcaPj4bP00WGeLLDeutagI7WrHe38aEPZUgBZUCAdU jvSY4+7W7rtYj1ev6ArBgdYEoQnv4PAK8Eam6o8GHGuhH71npF85ZVlRHoJvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUnwtnCSLZpge7aWaooUduMTWz6acwHwYDVR0j BBgwFoAUh6TITUNm27FakJClWqLc66hyOUUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMw MWRhLzEvODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJBODcyMzk0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84N0E0Qzg0RDQzNjZEQkIxNUE5MDkwQTU1 QUEyRENFQkE4NzIzOTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2E1ZDRjMDBiLWQxMDUtNDkwNi1iOTgxLTFkMDM0M2UzMDFkYS8xLzg3QTRDODRE NDM2NkRCQjE1QTkwOTBBNTVBQTJEQ0VCQTg3MjM5NDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAUCXfO YHEMdjrLK41c4V1eSCTw26Yb5N5ETeHF3vUrvpj8Pf72XI+mtIEtDq/FLJe2OAfn +K1+TMtdwwAcowl1qQFlx9sVyxxhZClIMtK6BIB+NLn0OfWSpxeT3jfZ75CeD7KX /xvUPqzPeGMUkzK1w/SChV7noBva1IPkYHmOFSydwAUR/Ddf75zJwDOISp5o3oJ/ ivCay3oLi5LCPRw4NOhyNxy3Ku2gXKDKqwPJ35hEF3zHiGywHK+/6HDmFXPu1x3y 8zItWJADOS1rMDb7yIzaSXhtzzGZso0XTUxHJBCtYDEfXcG6tg+tXhj6BwQv67Qx btfMowpoaWimjWY6 -----END CERTIFICATE-----Generated at Wed Jul 23 02:28:04 2025 by rpki-client