$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft File: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json) Hash identifier: jfMIa+5gdkNGvxzhgnj90RX+r1V7c4NEzfXBX/LF20E= Subject key identifier: 28:82:66:C4:76:66:58:41:9D:0A:D2:DA:BA:15:EF:49:11:4E:60:94 Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Certificate serial: 4E9D97FBA11A10BE7EE019DA8043786885F84F43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft Manifest number: 0514 Signing time: Sat 26 Jul 2025 04:17:07 +0000 Manifest this update: Sat 26 Jul 2025 04:12:07 +0000 Manifest next update: Sun 27 Jul 2025 05:56:07 +0000 Files and hashes: 1: 3139332e39332e3135352e302f32342d3234203d3e203631333137.roa (hash: SV7SbziqH7eMIEMJIbsVc3dV1p2SM237aRtzHljTDkg=) 2: 3139332e39332e3135332e302f32342d3234203d3e20323134303336.roa (hash: FgMfWX7zLNqyUMvyIkAVqVqXpYApxS0iTmFAdZ7lH9Q=) 3: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: NLU++5xZjzD437PtmNgvfxHCqYMIFnb00RqdIBmj2Iw=) 4: 3139332e39332e3135342e302f32342d3234203d3e20323131343135.roa (hash: lcDvK25Krwnz/wCtWIMtJ+GA0fjdNOA7l7WMMKyVVUU=) 5: 3139332e39332e3135332e302f32342d3234203d3e203439313237.roa (hash: 0/cfjGj4KR4GGAb3iVBdR7EXi3eZGMMRZK+KEv9RsCI=) 6: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: jAOxURrHtZvlqdFVdBr3F4ACmPO4DT4L5AmOtZPktVY=) 7: 3139332e39332e3135322e302f32342d3234203d3e20313939363134.roa (hash: jNaGJEHXg+vn+v2vVdhmJa1IVdEz/D1ggT5kvM1c0Hk=) 8: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: j/tvDF/xrBJ6Z/GVFcZpOag/ZBQuFXiJ56kFmYlSx34=) 9: 3139332e39332e3135352e302f32342d3234203d3e203230343733.roa (hash: Yia13ZpyH/rxCHPO1ZKxkaJKT40u4xmMRfCLnQCmpaw=) 10: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: GaCs1XkoxB09H+mBgftpbX6yhSpGf6BbrUkOha5EQVk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 21:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9d:97:fb:a1:1a:10:be:7e:e0:19:da:80:43:78:68:85:f8:4f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Validity Not Before: Jul 26 04:12:07 2025 GMT Not After : Jul 27 05:56:07 2025 GMT Subject: CN=288266C4766658419D0AD2DABA15EF49114E6094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d7:7d:47:77:ae:a7:4b:5b:b0:40:b3:2c:26: aa:f1:57:f9:9c:16:09:dc:99:b3:cb:59:59:48:6c: f7:f6:74:36:1e:eb:88:0a:c7:98:c4:20:8c:a0:76: 25:37:67:52:78:15:50:0f:86:b5:39:21:c5:83:7d: 1b:03:f0:e4:eb:27:80:62:c6:42:8c:b0:eb:4c:13: 4c:b7:78:f8:0a:69:a0:58:39:8a:d5:ef:fe:ab:6a: ae:ee:9b:03:b8:4b:49:bd:fa:82:29:24:a5:95:56: 37:d2:ca:bd:2b:eb:5b:f3:9a:ab:cd:a9:f4:09:87: 82:18:72:19:89:20:e7:fc:60:df:a2:8f:e6:68:c6: 7f:c9:99:d8:40:ce:2e:32:9f:0e:8a:82:06:ca:16: 4d:52:2b:63:02:7e:72:a7:58:4b:ab:35:84:93:61: f5:89:a3:7a:f5:e6:bd:a3:6d:dd:48:b4:e7:c0:38: 41:e5:7d:2f:08:df:b0:3a:98:fe:2d:a1:f7:23:6d: f5:fb:15:b0:dd:e6:74:4e:f4:a3:d6:ff:fa:14:89: 64:3f:9b:5a:a1:34:ee:2b:33:a4:e2:73:96:e9:2a: e9:19:7d:1e:ee:15:ce:0d:11:c6:d6:4b:a2:c0:e4: 8d:7b:df:55:c0:89:0f:04:f6:32:32:e8:5d:68:59: b0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:82:66:C4:76:66:58:41:9D:0A:D2:DA:BA:15:EF:49:11:4E:60:94 X509v3 Authority Key Identifier: keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:72:6e:ed:5b:04:56:b3:9b:a8:29:aa:ce:ba:72:a4:9d:b5: 01:bd:32:f5:5b:ac:ed:74:c4:f7:28:12:7e:37:af:56:9a:3e: a5:cd:10:02:77:55:9f:1c:14:60:1f:46:d0:b7:20:2e:34:73: 73:dd:4a:a6:46:36:76:a0:86:e5:c0:92:a7:8e:30:21:f4:bc: aa:55:6e:9d:4f:77:73:8b:2c:5b:f3:83:9f:85:95:73:32:a2: f5:9d:9c:db:a8:df:1f:4c:35:d6:9b:cf:92:82:fd:c8:87:39: 67:4f:de:bb:5f:b1:44:3e:5c:b0:a5:6e:af:8a:f0:cd:69:05: 71:8c:1e:d2:3a:67:47:7c:c3:fc:38:6e:2d:57:d5:7f:90:ca: c4:1f:3e:17:f4:4f:be:36:0f:1f:2f:2e:0f:0d:e0:1b:5c:b7: 2c:be:8c:b1:d5:a6:2f:6b:17:b5:41:6c:02:29:9e:f7:4b:ad: 21:f4:d9:5e:e1:fd:8b:79:6f:30:85:85:bc:b8:15:e9:9f:3a: a6:c6:41:d5:4e:b2:e7:e8:f4:27:48:fa:d3:3b:2e:ca:0e:85: 3b:6b:9b:0c:b0:d1:f3:46:2b:fd:0f:5a:25:9e:11:dd:3d:12: a0:cc:89:42:2e:96:b1:46:06:50:ee:36:94:0b:49:11:54:e5: 92:e6:39:d7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTp2X+6EaEL5+4BnagEN4aIX4T0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx NjJlMWFhZDAeFw0yNTA3MjYwNDEyMDdaFw0yNTA3MjcwNTU2MDdaMDMxMTAvBgNV BAMTKDI4ODI2NkM0NzY2NjU4NDE5RDBBRDJEQUJBMTVFRjQ5MTE0RTYwOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/131Hd66nS1uwQLMsJqrxV/mc FgncmbPLWVlIbPf2dDYe64gKx5jEIIygdiU3Z1J4FVAPhrU5IcWDfRsD8OTrJ4Bi xkKMsOtME0y3ePgKaaBYOYrV7/6raq7umwO4S0m9+oIpJKWVVjfSyr0r61vzmqvN qfQJh4IYchmJIOf8YN+ij+Zoxn/JmdhAzi4ynw6KggbKFk1SK2MCfnKnWEurNYST YfWJo3r15r2jbd1ItOfAOEHlfS8I37A6mP4tofcjbfX7FbDd5nRO9KPW//oUiWQ/ m1qhNO4rM6Tic5bpKukZfR7uFc4NEcbWS6LA5I1731XAiQ8E9jIy6F1oWbDZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUKIJmxHZmWEGdCtLauhXvSRFOYJQwHwYDVR0j BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0 OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ dUdxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjUyZDgxNC0z ZDJmLTRkZjQtODE0MC1kZmI1MzBmNzQ5MTIvMC9GMjlGQkFCNERCODY3RjZCRDlB N0VGRjZBQTU1RDk4QzE2MkUxQUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy3Ju7VsEVrObqCmqzrpy pJ21Ab0y9Vus7XTE9ygSfjevVpo+pc0QAndVnxwUYB9G0LcgLjRzc91KpkY2dqCG 5cCSp44wIfS8qlVunU93c4ssW/ODn4WVczKi9Z2c26jfH0w11pvPkoL9yIc5Z0/e u1+xRD5csKVur4rwzWkFcYwe0jpnR3zD/DhuLVfVf5DKxB8+F/RPvjYPHy8uDw3g G1y3LL6MsdWmL2sXtUFsAime90utIfTZXuH9i3lvMIWFvLgV6Z86psZB1U6y5+j0 J0j60zsuyg6FO2ubDLDR80Yr/Q9aJZ4R3T0SoMyJQi6WsUYGUO42lAtJEVTlkuY5 1w== -----END CERTIFICATE-----Generated at Sat Jul 26 06:12:55 2025 by rpki-client