$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: 7z3SvlJCc7javvPKqVSAiCbzgMO5NarHV1j0sbncJDw= Subject key identifier: AE:BA:31:FB:DD:22:59:EF:06:9B:FE:B7:E8:BE:47:A3:63:64:73:F1 Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 65D8C4847276E321C8B148B73378278ED4032D53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 0425 Signing time: Mon 21 Jul 2025 17:56:52 +0000 Manifest this update: Mon 21 Jul 2025 17:51:52 +0000 Manifest next update: Tue 22 Jul 2025 18:44:52 +0000 Files and hashes: 1: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: qGNft1uCzkGwuPJH7iDQ4xUhWrhNnduWexIhT+DgvI8=) 2: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: DuCHe81tO8TVOKBTNFQCS5fRuYDjbGZfxshPpJZXNzc=) 3: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: GCjCQc0vdu8E+NZi5emgx2vW0PKbTzGL5UYc+2R4voE=) 4: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: 2RsUZIa3p/hvxjG/Xwq0qIllVLbXzLYVLqha2eLsd9Y=) 5: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: oQj2no095+LyjZGzWOfw+sSJOW/7fRxpgUOPswu5nqM=) 6: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: hY/iIpaGanxmxatebFYi3ijTkZjHjUc/Iwjsijc0S+E=) 7: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: W95e9h2ypKBcN51G9gRI82wozQL8rXCLvGb2mHpv6bk=) 8: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: qxlkfW/nLMV9I5WoI6HQ89q00naILT20Rguml63Zf0A=) 9: 3138352e322e3136322e302f32332d3234203d3e20323135323639.roa (hash: sEO5Q+LtE+juFIMx1yqrmSkIjuvpVFxY8R1aiQqtGzs=) 10: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: X+PLwzsRRQMgaM/TWKrSkseThdECGWKV7QbjrMlPn80=) 11: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: dPumV3w+l5K00Z5figZidyPpD2Xj/WObq95u77jhIK4=) 12: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: OKc3uZvr3kmY38TGv/j5cCd/d8TD6IBU2hGWJY9u+K0=) 13: 36322e3131322e3134342e302f32302d3230203d3e203539363432.roa (hash: hNXCqst3dZC+Dp3skkO26cOwh1zWEwx2n+JeuoU1IgU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 18:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d8:c4:84:72:76:e3:21:c8:b1:48:b7:33:78:27:8e:d4:03:2d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Jul 21 17:51:52 2025 GMT Not After : Jul 22 18:44:52 2025 GMT Subject: CN=AEBA31FBDD2259EF069BFEB7E8BE47A3636473F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c2:29:d6:27:27:50:ea:5b:14:6c:5d:20:a6: be:4a:50:19:f6:4c:a1:94:94:ce:9b:89:67:7c:ef: e2:11:4b:09:87:f5:62:98:4d:3b:7f:a5:18:7d:85: 6e:8d:44:6c:8a:11:34:0d:a4:cf:38:99:72:82:9d: 8e:43:61:d9:d2:33:2f:03:14:61:c9:25:36:85:37: 45:97:ae:5a:f1:05:d9:6d:10:0d:59:ae:a0:50:59: d5:36:e6:39:61:51:ca:96:16:07:47:4d:90:bd:f8: ba:da:3d:0e:86:f7:43:d4:9e:c6:a7:5a:84:de:ba: 17:22:4f:b2:f4:30:de:ea:89:32:9f:33:a7:91:e6: 79:b0:52:96:0f:4a:81:eb:02:2e:e0:95:dc:4a:09: b6:80:f3:91:2b:ca:be:03:67:bf:b3:2a:66:93:01: df:50:82:f0:de:15:90:bd:38:e8:0f:b5:e9:30:b4: b8:13:35:e4:0d:a8:5a:13:92:24:62:c5:3a:85:de: 66:b8:9f:00:90:c1:8e:69:0f:9b:57:35:87:15:b9: 84:06:01:26:2b:c1:1e:b2:d4:35:6d:c3:8b:2f:64: d7:67:bb:23:28:14:8d:d2:85:5b:27:f0:30:a2:d2: 36:94:d4:2c:d9:c8:b1:46:1f:ac:7b:e7:91:03:ce: 65:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BA:31:FB:DD:22:59:EF:06:9B:FE:B7:E8:BE:47:A3:63:64:73:F1 X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:04:cb:2e:4a:8c:ad:c0:db:22:20:38:05:a8:21:f9:8a:62: 8a:c1:67:b2:bc:e9:3e:2a:65:4b:2d:98:4e:d5:87:f7:44:77: 9d:20:2a:8a:8f:ec:32:2a:35:52:61:d5:af:78:fb:45:5b:12: 7a:24:44:7d:ee:7e:35:16:c7:73:0b:88:18:53:a4:75:83:9e: d1:31:9a:1f:ab:bb:df:a8:2c:dd:8b:30:1d:77:df:c5:f0:94: 85:c9:68:4b:f4:58:5a:f8:b8:c9:0e:e9:80:27:28:22:3c:2b: 91:9f:6f:83:41:c2:b8:7d:50:4c:d0:d2:89:1a:5f:ed:ae:5e: cc:8e:94:0a:4c:e3:13:f1:09:6b:43:f6:7b:a9:fb:04:ee:4c: 7c:57:4c:39:ef:db:59:b0:43:c3:51:b0:4a:f9:97:b3:2b:e4: 51:2c:52:53:5f:36:1f:86:14:ac:96:a0:5c:e9:ac:a1:1c:6d: 62:d4:0e:e0:94:11:97:15:5b:12:e6:a6:98:79:f5:0a:2a:56: 2c:c0:26:d2:7a:95:60:32:5d:0f:4d:23:c7:6b:a9:f0:30:e4: b1:5a:46:bc:aa:fb:ce:0b:98:de:9d:1f:fe:28:10:ee:3d:38: ee:9a:f8:52:bd:20:ff:36:7c:e6:01:59:eb:52:da:78:77:88: dd:a0:1b:1a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZdjEhHJ24yHIsUi3M3gnjtQDLVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNTA3MjExNzUxNTJaFw0yNTA3MjIxODQ0NTJaMDMxMTAvBgNV BAMTKEFFQkEzMUZCREQyMjU5RUYwNjlCRkVCN0U4QkU0N0EzNjM2NDczRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwwinWJydQ6lsUbF0gpr5KUBn2 TKGUlM6biWd87+IRSwmH9WKYTTt/pRh9hW6NRGyKETQNpM84mXKCnY5DYdnSMy8D FGHJJTaFN0WXrlrxBdltEA1ZrqBQWdU25jlhUcqWFgdHTZC9+LraPQ6G90PUnsan WoTeuhciT7L0MN7qiTKfM6eR5nmwUpYPSoHrAi7gldxKCbaA85Eryr4DZ7+zKmaT Ad9QgvDeFZC9OOgPtekwtLgTNeQNqFoTkiRixTqF3ma4nwCQwY5pD5tXNYcVuYQG ASYrwR6y1DVtw4svZNdnuyMoFI3ShVsn8DCi0jaU1CzZyLFGH6x755EDzmXJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUrrox+90iWe8Gm/636L5Ho2Nkc/EwHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQTLLkqMrcDbIiA4Bagh +YpiisFnsrzpPiplSy2YTtWH90R3nSAqio/sMio1UmHVr3j7RVsSeiREfe5+NRbH cwuIGFOkdYOe0TGaH6u736gs3YswHXffxfCUhcloS/RYWvi4yQ7pgCcoIjwrkZ9v g0HCuH1QTNDSiRpf7a5ezI6UCkzjE/EJa0P2e6n7BO5MfFdMOe/bWbBDw1GwSvmX syvkUSxSU182H4YUrJagXOmsoRxtYtQO4JQRlxVbEuammHn1CipWLMAm0nqVYDJd D00jx2up8DDksVpGvKr7zguY3p0f/igQ7j047pr4Ur0g/zZ85gFZ61LaeHeI3aAb Gg== -----END CERTIFICATE-----Generated at Tue Jul 22 04:13:48 2025 by rpki-client