$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft File: 1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft (raw, json) Hash identifier: cGao8sz7zKS2p/N9pFf9GnmuDzpT8h/Jbwf3XeQEnyM= Subject key identifier: 20:E9:28:B2:2A:64:32:F0:9E:DB:C2:EF:5D:E9:D1:D3:36:0A:55:70 Authority key identifier: 1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79 Certificate issuer: /CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79 Certificate serial: 7D9D2822BF4EB3F0B8D51A5EE38CE5CAA4EE08F9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft Manifest number: 69 Signing time: Wed 23 Jul 2025 00:04:07 +0000 Manifest this update: Tue 22 Jul 2025 23:59:07 +0000 Manifest next update: Thu 24 Jul 2025 01:12:07 +0000 Files and hashes: 1: 326131343a373538303a3734303a3a2f34342d3434203d3e20313337393038.roa (hash: 2XHTj/cfAPJdVFHVIH4P55LBG+fLJn82CtSAwFgxMbs=) 2: 326131343a373538303a3733303a3a2f34342d3434203d3e20323038373534.roa (hash: YgvU7sxrMhf4/I0u7F9ePehiaAqP0nrViPzYLyrcqg4=) 3: 1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl (hash: THyTtLsOIxaekuZHMaJgm7EiytyyJT3WUT2VDqpyvL0=) 4: 326131343a373538303a3737303a3a2f34342d3434203d3e20323133383931.roa (hash: Y5ilvBbE12qO1Ud5YZb+YMRUcGap41Si5541sY2pw8w=) 5: 326131343a373538303a3730303a3a2f34302d3430203d3e20313531313934.roa (hash: omUm+VClsl1esxeSZas8cPGaOt8NK5P0JK8DttORXSQ=) 6: 326131343a373538303a3730303a3a2f34302d3430203d3e20313938303235.roa (hash: q6g7NvOylKcoMKHIBFZ0Cue6q0bByY4gqgu482bGvYs=) 7: 326131343a373538303a3730303a3a2f34342d3434203d3e20313938303235.roa (hash: 4L0QSAftYtcw4WDJTyxob29wy6e4AqxikKCoI1U7ltM=) 8: 326131343a373538303a3731303a3a2f34382d3438203d3e20313938303235.roa (hash: Hxl/WHpFi1Lrr9tPJHprlKCFg1f6KdSpCnh41pb8RUw=) 9: 326131343a373538303a3732313a3a2f34382d3438203d3e20313938303235.roa (hash: F0yheovlhp7K4XimVlJIY2XY5LQ9rO6Lio/g2Fp5WxY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:9d:28:22:bf:4e:b3:f0:b8:d5:1a:5e:e3:8c:e5:ca:a4:ee:08:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79 Validity Not Before: Jul 22 23:59:07 2025 GMT Not After : Jul 24 01:12:07 2025 GMT Subject: CN=20E928B22A6432F09EDBC2EF5DE9D1D3360A5570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2e:18:d8:d9:c0:c2:b5:0b:90:01:28:3a:22: 19:f3:4f:15:99:0e:ad:69:2f:68:63:6c:7b:e1:ec: e3:62:e5:82:e4:1e:8c:86:80:68:74:f2:95:a2:c7: 3b:cd:9f:07:48:1a:9c:37:ce:43:07:7e:f1:cf:57: 29:8d:54:77:8b:3e:e3:d6:79:47:28:43:68:8c:52: e6:8b:38:b0:86:c3:5b:1b:8c:d0:60:4d:27:62:cc: 75:4d:67:f3:f1:2c:6d:d4:83:57:f7:22:6b:85:f9: 12:2e:7b:33:46:94:43:58:87:3e:e7:bb:f6:52:d9: 53:8a:6d:a6:82:65:a9:74:98:dd:a6:b5:b4:4e:be: 8e:50:4c:6f:11:c8:a0:82:cb:cf:9e:58:26:77:87: 81:16:fa:9e:d1:00:5b:06:a5:9c:37:c1:0e:d4:99: 3f:0d:4b:75:9e:9a:16:89:60:e6:9e:d9:4b:46:6d: 29:28:fe:19:44:40:d7:18:b5:14:d5:d7:6d:9b:36: 64:e6:43:79:08:c0:be:86:61:da:4e:3d:e3:85:96: 7f:93:2d:b8:1b:7f:0e:80:23:fa:5e:09:75:75:7a: 8a:1c:fd:ba:ac:ef:f1:1a:95:4b:72:e8:10:51:9f: 68:bb:a6:64:00:f2:7b:bc:62:70:b8:23:56:b7:ca: 72:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E9:28:B2:2A:64:32:F0:9E:DB:C2:EF:5D:E9:D1:D3:36:0A:55:70 X509v3 Authority Key Identifier: keyid:1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:7e:6a:d4:7d:e6:0e:13:9b:3b:2c:99:90:88:a4:e9:2f:e5: 16:44:e9:60:3a:8a:bb:dc:33:ff:2b:d4:6b:dd:47:2c:27:d4: fc:be:bc:a6:42:11:f0:61:d8:fb:7b:66:ed:e6:94:f8:51:49: 54:e0:01:d1:16:95:9f:c9:db:27:58:56:d6:2e:94:53:f2:fa: b7:82:14:cf:c0:4e:8f:80:21:8e:c1:26:15:91:77:05:57:64: ff:80:8d:01:66:65:81:fe:98:5e:a5:b5:e9:44:2a:23:d5:fc: 2a:be:c0:58:f5:b5:ae:7a:fb:12:dd:17:d6:9a:24:5f:d8:50: e4:ba:23:da:0d:cf:95:a5:1c:f4:4d:98:3d:a8:76:e6:39:d9: 8a:02:46:d6:60:8a:07:b8:b8:03:d0:42:94:8f:37:66:72:c2: d3:18:93:93:f4:62:f2:b9:2a:90:57:81:bf:f2:c8:5f:10:1f: a6:9f:0a:77:ae:5e:f0:a0:07:7a:28:f5:91:f3:eb:ef:a6:17: e9:5c:80:e1:0b:da:8b:97:5d:3f:e4:08:81:1a:b7:64:17:d9: e3:7b:62:63:58:77:6c:89:2e:7c:53:20:f6:a4:02:7e:b5:e3: f0:65:26:30:ea:6f:0d:83:5a:d5:7e:4e:4d:8c:36:b7:80:9b: a9:11:b7:88 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfZ0oIr9Os/C41Rpe44zlyqTuCPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI4MDQ4NTMxQ0ZFRDI1REVERTRFRjkzQ0JFRUJEMzdB MDA1M0M3OTAeFw0yNTA3MjIyMzU5MDdaFw0yNTA3MjQwMTEyMDdaMDMxMTAvBgNV BAMTKDIwRTkyOEIyMkE2NDMyRjA5RURCQzJFRjVERTlEMUQzMzYwQTU1NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwLhjY2cDCtQuQASg6IhnzTxWZ Dq1pL2hjbHvh7ONi5YLkHoyGgGh08pWixzvNnwdIGpw3zkMHfvHPVymNVHeLPuPW eUcoQ2iMUuaLOLCGw1sbjNBgTSdizHVNZ/PxLG3Ug1f3ImuF+RIuezNGlENYhz7n u/ZS2VOKbaaCZal0mN2mtbROvo5QTG8RyKCCy8+eWCZ3h4EW+p7RAFsGpZw3wQ7U mT8NS3WemhaJYOae2UtGbSko/hlEQNcYtRTV122bNmTmQ3kIwL6GYdpOPeOFln+T Lbgbfw6AI/peCXV1eooc/bqs7/EalUty6BBRn2i7pmQA8nu8YnC4I1a3ynJvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUIOkosipkMvCe28LvXenR0zYKVXAwHwYDVR0j BBgwFoAUG4BIUxz+0l3t5O+Ty+69N6AFPHkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzZmZDRlYTEtYTI2Ni00ZGVhLWI0OGEtMTVkYTM1NDUy MTA5LzIvMUI4MDQ4NTMxQ0ZFRDI1REVERTRFRjkzQ0JFRUJEMzdBMDA1M0M3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xQjgwNDg1MzFDRkVEMjVERURFNEVGOTND QkVFQkQzN0EwMDUzQzc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M2ZmQ0ZWExLWEyNjYtNGRlYS1iNDhhLTE1ZGEzNTQ1MjEwOS8yLzFCODA0ODUz MUNGRUQyNURFREU0RUY5M0NCRUVCRDM3QTAwNTNDNzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCTfmrU feYOE5s7LJmQiKTpL+UWROlgOoq73DP/K9Rr3UcsJ9T8vrymQhHwYdj7e2bt5pT4 UUlU4AHRFpWfydsnWFbWLpRT8vq3ghTPwE6PgCGOwSYVkXcFV2T/gI0BZmWB/phe pbXpRCoj1fwqvsBY9bWuevsS3RfWmiRf2FDkuiPaDc+VpRz0TZg9qHbmOdmKAkbW YIoHuLgD0EKUjzdmcsLTGJOT9GLyuSqQV4G/8shfEB+mnwp3rl7woAd6KPWR8+vv phfpXIDhC9qLl10/5AiBGrdkF9nje2JjWHdsiS58UyD2pAJ+tePwZSYw6m8Ng1rV fk5NjDa3gJupEbeI -----END CERTIFICATE-----Generated at Wed Jul 23 06:20:06 2025 by rpki-client