$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json) Hash identifier: XtKLhua51agJDj1drD1yQxlOyZtd2ljvUCluvyEk3zE= Subject key identifier: 39:23:DF:46:9B:85:2B:1F:F7:B2:CF:2D:28:C8:40:D2:2E:41:B8:FC Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 122CD49F54D491B4D3882FF233227A62DA2D7BCC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft Manifest number: 0221 Signing time: Tue 22 Jul 2025 00:27:33 +0000 Manifest this update: Tue 22 Jul 2025 00:22:33 +0000 Manifest next update: Wed 23 Jul 2025 01:53:33 +0000 Files and hashes: 1: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: BL4+PYIdcLs3fiOkkamkg94lgyO9kcRHp6ACoQUQ5y8=) 2: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: 9phDdz/jhh9vxdEc5WXHXIl+cdnJzAyh/6SdvyVejiI=) 3: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: R4oy1L8+rEt1QdmoGVV7PiYt423B/xK5i6kPhc7W9aI=) 4: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: KPVNDBydB4lEOCddQAWiNda/rm6IVb4G2i+sUeOhrYg=) 5: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: ge94XZPdvpHTxzoWkcp0iVs09Kzkk06tRQONEllynjs=) 6: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: e+p8+Sw9X8S3Ty3gF9pg+LdvDbV5qMXAYBBthQD4LPE=) 7: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: DvQHKT6M+fkiG6o9KW4wBm0yNbqCXWjg78L/cu4BiJ0=) 8: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: M0+yHEN3VX8K+aVDmpusml/7Hx8dbBnadNDMaFbGOzQ=) 9: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: OTYsTfrglFs/JKFj7RJtAXdrMe1OUcjbc3WSXqeD0dk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 09:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:2c:d4:9f:54:d4:91:b4:d3:88:2f:f2:33:22:7a:62:da:2d:7b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Jul 22 00:22:33 2025 GMT Not After : Jul 23 01:53:33 2025 GMT Subject: CN=3923DF469B852B1FF7B2CF2D28C840D22E41B8FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:52:86:4e:b1:27:3d:f6:89:0d:5a:fb:e8:37: bf:c3:c2:51:8c:57:ad:91:a4:6d:dc:43:7f:da:fa: d4:0e:16:67:d5:01:ee:69:0a:8d:2d:37:88:c1:cb: 78:78:47:54:8c:dc:23:3a:fa:c4:42:f9:80:4b:be: ec:a9:9f:8a:0d:a5:6b:ca:ec:2b:33:b5:7e:67:d0: e6:06:46:80:d8:16:ab:3d:73:ef:7b:51:fe:e0:30: 51:fc:b4:c0:48:72:fb:a9:86:e5:9b:d5:2e:9b:ba: 1f:42:36:67:e9:74:41:b2:0c:79:c2:a1:a9:b1:0f: 65:c6:cc:8e:44:9e:a0:f9:61:34:a6:02:a7:95:3a: 0b:84:a6:ab:d7:d9:d9:13:b1:2f:b1:d5:e9:a4:41: e7:68:bf:ac:9d:67:82:97:d6:8a:0a:dc:55:84:dc: b0:5d:cf:81:ae:9c:8c:88:db:47:04:5a:c8:c3:97: e5:33:34:4d:65:b6:1b:c9:5e:1b:1d:d3:42:75:a0: e4:ec:e9:35:1d:06:87:b2:2c:38:e2:23:95:12:0f: f9:eb:b3:2a:5b:e0:bc:55:bd:e1:30:7c:69:49:e4: 29:74:bb:59:a8:d2:58:bf:6e:b7:37:ac:ab:65:17: bc:87:8f:44:8d:8a:90:38:5f:83:4a:a8:84:a1:b1: 5e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:23:DF:46:9B:85:2B:1F:F7:B2:CF:2D:28:C8:40:D2:2E:41:B8:FC X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:84:29:00:e6:6a:77:a4:34:e6:5b:8d:52:dc:19:c7:26:dd: 9f:a7:a3:ff:8a:bb:9c:59:03:e3:d5:01:6d:1f:9a:aa:6f:6b: e5:98:44:8f:c0:a2:53:0a:4a:a7:ee:07:6e:28:a2:f8:63:a6: 7b:4d:89:99:3a:e0:bb:56:cc:8f:7a:e5:53:61:21:46:4c:b3: a4:36:dc:fd:da:3f:56:4b:66:8e:92:da:cc:d4:35:59:24:43: 77:79:34:7e:e6:b8:21:16:fa:84:23:2f:f9:82:78:1d:0d:23: 08:70:d1:ae:4e:15:1c:a1:bc:f0:a0:41:da:d5:ac:df:1e:44: 39:94:27:73:06:b2:89:15:8e:0f:89:f7:2e:68:ed:34:02:ec: be:37:68:45:ca:81:8f:31:3f:1b:fb:bb:44:01:0a:da:0c:b0: bc:65:90:ea:f0:9c:66:88:fe:16:75:69:71:6d:36:21:5a:7c: 1a:b4:e5:9b:e6:28:69:c5:36:7f:69:5e:5c:59:1b:98:3b:eb: fc:f0:53:41:17:b3:fa:73:26:f0:66:79:e4:7d:0f:18:e3:eb: 4f:f5:bf:ab:dd:6b:bf:d6:df:97:7b:58:69:8e:24:0b:33:ef: 5f:c6:7a:02:f8:f3:45:07:2e:a8:bf:67:27:73:b7:40:9b:ec: 76:a1:a1:31 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEizUn1TUkbTTiC/yMyJ6Ytote8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNTA3MjIwMDIyMzNaFw0yNTA3MjMwMTUzMzNaMDMxMTAvBgNV BAMTKDM5MjNERjQ2OUI4NTJCMUZGN0IyQ0YyRDI4Qzg0MEQyMkU0MUI4RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPUoZOsSc99okNWvvoN7/DwlGM V62RpG3cQ3/a+tQOFmfVAe5pCo0tN4jBy3h4R1SM3CM6+sRC+YBLvuypn4oNpWvK 7CsztX5n0OYGRoDYFqs9c+97Uf7gMFH8tMBIcvuphuWb1S6buh9CNmfpdEGyDHnC oamxD2XGzI5EnqD5YTSmAqeVOguEpqvX2dkTsS+x1emkQedov6ydZ4KX1ooK3FWE 3LBdz4GunIyI20cEWsjDl+UzNE1lthvJXhsd00J1oOTs6TUdBoeyLDjiI5USD/nr sypb4LxVveEwfGlJ5Cl0u1mo0li/brc3rKtlF7yHj0SNipA4X4NKqIShsV4DAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUOSPfRpuFKx/3ss8tKMhA0i5BuPwwHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBchCkA 5mp3pDTmW41S3BnHJt2fp6P/irucWQPj1QFtH5qqb2vlmESPwKJTCkqn7gduKKL4 Y6Z7TYmZOuC7VsyPeuVTYSFGTLOkNtz92j9WS2aOktrM1DVZJEN3eTR+5rghFvqE Iy/5gngdDSMIcNGuThUcobzwoEHa1azfHkQ5lCdzBrKJFY4PifcuaO00Auy+N2hF yoGPMT8b+7tEAQraDLC8ZZDq8JxmiP4WdWlxbTYhWnwatOWb5ihpxTZ/aV5cWRuY O+v88FNBF7P6cybwZnnkfQ8Y4+tP9b+r3Wu/1t+Xe1hpjiQLM+9fxnoC+PNFBy6o v2cnc7dAm+x2oaEx -----END CERTIFICATE-----Generated at Tue Jul 22 04:13:47 2025 by rpki-client