$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: dmGLWQBiz+rHS/mPrJnfLAX2dGcCgEXv02F7D2mPAkY= Subject key identifier: BA:9C:C2:3B:78:65:A7:32:D0:E7:9F:17:F4:17:1B:54:69:B7:AF:20 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 1482F5D87F94D5D8795F3B2A4B0D699D7BDC792C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 031A Signing time: Wed 23 Jul 2025 02:27:02 +0000 Manifest this update: Wed 23 Jul 2025 02:22:02 +0000 Manifest next update: Thu 24 Jul 2025 04:41:02 +0000 Files and hashes: 1: 3135392e3235332e322e302f32342d3234203d3e20323031393439.roa (hash: rMlznZEKjgK14Dq61AY4g7iAg2BKRbr2SN8fW4K6f5M=) 2: 3231372e32382e3133382e302f32342d3234203d3e20323039393736.roa (hash: oyOFvRhi/TPEOopsZuEaDpEux2304igP8lMcDVdyDmE=) 3: 3138352e31332e3232372e302f32342d3234203d3e203533333536.roa (hash: fyjNZl2BnH5gWmJXj7IkwC9hLUY6iDMpaWQ6H8Zs07M=) 4: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: uV5gP669aq0NtuCXuZBm6wWsNYwP/024H/522nPjCx8=) 5: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: cKnNLC66X19KWTLeS9BLlyG6jkzxqkdJwZjUWCrZPHc=) 6: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (hash: k6qvY6qYLtrsDEyi8J+SScxT9enfuaIRYNZH2IHqC8o=) 7: 3138352e31332e3232352e302f32342d3234203d3e203631333137.roa (hash: 8TzKoFnFzYaSWN5mBXGHVTu7YevWpqGi2XUkHCPKssM=) 8: 3135392e3235332e362e302f32342d3234203d3e20383334.roa (hash: 5NdQ//spLweNzxs8zHAGi1gJMib8lPFrPng4LsW41ME=) 9: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: 9QDAlicDZU2dKA/slyHao02LhaPY7/2iCnESN6BbiqA=) 10: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: kLEQm5PsgCStkPXWXORAWhDRYI4TpAfDvaDXZJ0h1Ho=) 11: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: JO9eMRAwPS+hZf1UF8eYFlm1nYrsRkC7Oj1Lhed/bAU=) 12: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: 8/3XzRXXjmYpSthB/PqRmvioB+R4a98BuFhtWRNYmtk=) 13: 3135392e3235332e312e302f32342d3234203d3e20383334.roa (hash: +Cgri0dz3lCclo0MuT04LNn4FtNZlpiIq1+Gu2V5CA8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:82:f5:d8:7f:94:d5:d8:79:5f:3b:2a:4b:0d:69:9d:7b:dc:79:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Jul 23 02:22:02 2025 GMT Not After : Jul 24 04:41:02 2025 GMT Subject: CN=BA9CC23B7865A732D0E79F17F4171B5469B7AF20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:61:64:23:7a:3d:ae:79:0c:84:16:03:53: 6a:2c:b7:cb:74:d8:11:55:7f:bc:01:75:c7:9e:09: 3b:d5:d1:18:bd:0f:18:ae:87:c5:60:f8:50:64:54: 69:b9:dc:b1:45:d0:fb:a2:cc:bf:b1:64:d7:bf:22: 1a:ea:ae:a5:22:af:14:48:3c:51:fd:cf:0d:1a:4e: 35:9c:3e:c4:3b:54:fd:59:9b:91:be:dd:ef:8b:7a: 90:1c:b6:de:c1:52:69:8a:57:3e:70:87:cc:a9:92: 03:af:3f:25:b9:54:20:7d:71:7b:b0:ab:4b:ff:4f: 5d:0a:13:0b:bb:b7:11:62:f1:b8:99:91:20:c0:01: 7a:31:29:f9:78:ba:2b:79:9f:b6:8a:b3:56:0a:04: b2:d2:8a:c4:b5:a7:84:85:b7:95:47:48:c1:26:c5: 9f:d2:bf:4c:9c:c0:43:37:9c:86:ab:d7:38:b8:ef: e4:7e:80:3e:f9:a0:24:89:23:ef:b2:0b:d5:5d:b3: ea:e8:b2:74:30:f1:4f:38:34:8e:a8:0c:2a:4a:e6: e4:6f:e5:a0:7d:9d:30:45:40:5c:a8:ee:98:4e:8c: c1:e7:02:bb:13:ae:3f:7f:dc:ce:81:7f:dc:25:09: 01:da:60:a6:3d:58:17:ca:ef:c2:10:e1:90:0a:3e: 46:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9C:C2:3B:78:65:A7:32:D0:E7:9F:17:F4:17:1B:54:69:B7:AF:20 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:07:75:2f:0c:78:50:ac:6c:58:70:5f:2b:0e:14:42:0f:14: d9:e3:ce:dc:c2:2f:1e:1c:fc:c6:c2:dc:d6:e5:57:af:da:ff: ff:92:18:60:01:f6:c4:59:e6:94:02:1f:32:6d:93:f8:5f:35: 8e:84:c8:b6:26:be:42:dc:0f:55:27:9a:74:7b:a0:46:b6:42: 45:44:6a:93:86:8e:15:6d:d5:7e:1c:63:30:4a:5a:c0:28:bf: 3e:60:e9:9a:8b:72:ed:53:ad:e3:49:cb:d9:85:ed:4e:f0:39: 89:4b:fb:a8:b4:24:15:d2:86:8b:2b:e1:57:b3:a9:c6:18:f7: 75:97:06:92:16:69:dd:df:76:3f:44:c2:58:e1:63:9a:c0:08: e8:e5:5e:38:e2:4a:ad:1c:34:e4:1e:0d:d2:68:df:d4:08:7d: 92:10:4a:3a:c0:1d:cd:24:bf:b2:9e:cf:30:64:de:a8:4b:00: ad:50:93:ac:f3:c3:50:13:a5:6c:d6:57:eb:8a:49:7e:23:7b: f5:67:c6:e7:cd:d4:97:36:a2:a8:77:90:67:49:8c:ad:dc:ac: 4b:cd:21:bd:4b:99:9a:aa:0f:ed:54:4d:2a:1a:d3:b0:2c:af: 0d:94:04:0e:d9:00:e3:0e:cd:91:17:05:bc:06:f5:70:f4:59: 2b:1c:91:76 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFIL12H+U1dh5XzsqSw1pnXvceSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNTA3MjMwMjIyMDJaFw0yNTA3MjQwNDQxMDJaMDMxMTAvBgNV BAMTKEJBOUNDMjNCNzg2NUE3MzJEMEU3OUYxN0Y0MTcxQjU0NjlCN0FGMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6AmFkI3o9rnkMhBYDU2ost8t0 2BFVf7wBdceeCTvV0Ri9Dxiuh8Vg+FBkVGm53LFF0PuizL+xZNe/IhrqrqUirxRI PFH9zw0aTjWcPsQ7VP1Zm5G+3e+LepActt7BUmmKVz5wh8ypkgOvPyW5VCB9cXuw q0v/T10KEwu7txFi8biZkSDAAXoxKfl4uit5n7aKs1YKBLLSisS1p4SFt5VHSMEm xZ/Sv0ycwEM3nIar1zi47+R+gD75oCSJI++yC9Vds+rosnQw8U84NI6oDCpK5uRv 5aB9nTBFQFyo7phOjMHnArsTrj9/3M6Bf9wlCQHaYKY9WBfK78IQ4ZAKPkZRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUupzCO3hlpzLQ558X9BcbVGm3ryAwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwd1Lwx4UKxsWHBfKw4U Qg8U2ePO3MIvHhz8xsLc1uVXr9r//5IYYAH2xFnmlAIfMm2T+F81joTItia+QtwP VSeadHugRrZCRURqk4aOFW3VfhxjMEpawCi/PmDpmoty7VOt40nL2YXtTvA5iUv7 qLQkFdKGiyvhV7Opxhj3dZcGkhZp3d92P0TCWOFjmsAI6OVeOOJKrRw05B4N0mjf 1Ah9khBKOsAdzSS/sp7PMGTeqEsArVCTrPPDUBOlbNZX64pJfiN79WfG583Ulzai qHeQZ0mMrdysS80hvUuZmqoP7VRNKhrTsCyvDZQEDtkA4w7NkRcFvAb1cPRZKxyR dg== -----END CERTIFICATE-----Generated at Wed Jul 23 06:04:36 2025 by rpki-client