$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: /7Qf0wtG/vJXwPw8ggKDfIylfHngOp5QfxS/jYKsN3s= Subject key identifier: C5:53:DC:63:CC:B8:F3:FC:CD:C6:5B:65:A0:F2:62:6A:8C:6B:E2:39 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 206058FBE2E99D04CBEC625734ED1A0CE3F9F1E9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 0288 Signing time: Tue 22 Jul 2025 20:46:27 +0000 Manifest this update: Tue 22 Jul 2025 20:41:27 +0000 Manifest next update: Wed 23 Jul 2025 22:22:27 +0000 Files and hashes: 1: 326131343a373538303a393630303a3a2f34302d3438203d3e20313533333736.roa (hash: a3qLcUPi+RQppEqo978zrfnO/2oaV9TKnigMH0wuHZQ=) 2: 326131343a373538303a393030303a3a2f34302d3438203d3e20323134363433.roa (hash: TpBOht4fHdBbgzn8V6oN1sv1lzMWI2nPHKIFH/SJnHk=) 3: 326131343a373538303a393430303a3a2f33392d3438203d3e20313430393135.roa (hash: mVqYPHXZFgCW00Y2ej0uNLFZlmcciaFr8mPxKhhXZIs=) 4: 326131343a373538303a393130303a3a2f34302d3438203d3e20323136323939.roa (hash: c4wfh1kOphA8Axvw6+dnj3lAut4b1kpMpQW/rZEnV+o=) 5: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: CiKTSWy4w/tdBFQi1zFhq2PHg9gPLXlCTrXJfjkJVUQ=) 6: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: cFxWp20cVK0UfiJxxcLtUOXevD3OgB7dMefIF5hBHOk=) 7: 326131343a373538303a393130303a3a2f34302d3438203d3e20323031333836.roa (hash: HGfpWKFgSmhSbJJ0S3ZdUrJxu8/156bUgg5vlqYKRis=) 8: 326131343a373538303a393330303a3a2f34302d3438203d3e20323136323939.roa (hash: 0JNkK9KnjI4w2zV41Uw2bLOQhv0TkTdwPhPOAejMVJo=) 9: 326131343a373538303a393230303a3a2f34302d3438203d3e20313430393135.roa (hash: n6lsjVYHHKKKPmzUm98edFKQEZTX7R3BteBSBE3ZmTg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:60:58:fb:e2:e9:9d:04:cb:ec:62:57:34:ed:1a:0c:e3:f9:f1:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Jul 22 20:41:27 2025 GMT Not After : Jul 23 22:22:27 2025 GMT Subject: CN=C553DC63CCB8F3FCCDC65B65A0F2626A8C6BE239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:79:e6:f1:a0:53:df:9a:1c:35:e9:58:ce:21: d6:4c:b8:9c:73:b6:23:da:14:7e:a2:b4:ad:02:33: 12:76:c0:ae:87:02:cf:f2:f6:47:18:19:4d:35:e1: 15:a8:af:b5:fe:0c:6a:e8:37:19:e1:7b:9a:6d:58: 27:0c:9c:e7:89:a4:ae:68:63:1a:bd:19:53:78:3f: 49:66:6d:b1:3d:97:9f:42:9b:36:df:a2:27:b4:95: 35:9f:70:15:56:22:98:5e:b1:06:e9:8d:1e:bc:90: 3b:1a:f6:85:e2:e7:47:57:c6:16:ba:77:b6:46:6e: 2a:1a:55:60:ba:43:7b:97:94:9a:91:92:ce:68:17: 1d:e6:ea:89:be:81:32:38:8b:30:bd:1d:fe:74:34: 25:f7:db:b2:21:2a:27:cb:40:a1:7e:5c:32:28:40: 46:b8:cf:ea:12:40:75:65:8e:48:90:14:26:d6:d6: 32:21:00:2d:a4:c4:c9:4d:23:5f:c0:4a:39:13:d4: 17:70:3a:0b:87:4e:de:a9:3c:68:42:d4:26:b8:be: 77:cc:96:fb:31:f8:c4:ce:8b:11:02:92:01:6a:8e: 39:6e:9e:58:b2:18:83:cd:61:c6:54:fc:93:67:a5: 1a:b2:46:a9:35:8f:43:a5:98:07:5e:23:fc:55:93: ef:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:53:DC:63:CC:B8:F3:FC:CD:C6:5B:65:A0:F2:62:6A:8C:6B:E2:39 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:fc:0e:ca:15:1a:e2:aa:36:77:a2:ca:7e:54:ed:89:0a:b3: 07:b2:dc:05:80:db:88:2f:02:97:15:79:c6:5f:df:6d:83:21: 75:79:95:6e:17:4a:55:74:98:7d:db:16:bf:47:10:14:e2:db: 34:12:2a:71:f6:02:87:2c:58:9f:cf:82:cd:f8:38:64:57:ba: 6f:ec:67:93:45:87:fe:f0:4e:bf:ab:76:1a:ab:c0:27:4a:45: 80:a8:6a:94:11:4f:05:03:17:92:48:87:ad:a1:7d:f8:c4:4e: db:25:96:c3:ae:4b:c9:22:d1:52:5e:65:47:1c:9b:0f:a3:af: 43:c3:cd:26:62:c7:fb:1d:65:a6:fe:88:23:8b:46:0a:49:99: 38:61:d1:ae:ba:c6:68:09:16:0f:8d:01:a7:71:69:2c:68:32: 11:e1:53:99:81:fb:b9:36:58:64:f0:7b:d8:fa:87:33:e8:bd: bf:7d:5a:51:ff:aa:0f:76:a0:44:84:69:12:2f:23:ab:bc:2a: a8:04:81:15:59:80:a2:34:19:08:51:be:23:58:22:8a:cb:ca: 6f:b4:f4:a2:f2:ee:a3:dc:7a:4b:82:29:42:c2:0d:25:0b:cb: 0e:48:60:e0:96:d5:6c:4e:76:3d:4a:0f:2c:e1:0b:b9:70:69: 2c:41:fd:ae -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIGBY++LpnQTL7GJXNO0aDOP58ekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNTA3MjIyMDQxMjdaFw0yNTA3MjMyMjIyMjdaMDMxMTAvBgNV BAMTKEM1NTNEQzYzQ0NCOEYzRkNDREM2NUI2NUEwRjI2MjZBOEM2QkUyMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDteebxoFPfmhw16VjOIdZMuJxz tiPaFH6itK0CMxJ2wK6HAs/y9kcYGU014RWor7X+DGroNxnhe5ptWCcMnOeJpK5o Yxq9GVN4P0lmbbE9l59Cmzbfoie0lTWfcBVWIphesQbpjR68kDsa9oXi50dXxha6 d7ZGbioaVWC6Q3uXlJqRks5oFx3m6om+gTI4izC9Hf50NCX327IhKifLQKF+XDIo QEa4z+oSQHVljkiQFCbW1jIhAC2kxMlNI1/ASjkT1BdwOguHTt6pPGhC1Ca4vnfM lvsx+MTOixECkgFqjjlunliyGIPNYcZU/JNnpRqyRqk1j0OlmAdeI/xVk+/5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUxVPcY8y48/zNxltloPJiaoxr4jkwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDI/A7K FRriqjZ3osp+VO2JCrMHstwFgNuILwKXFXnGX99tgyF1eZVuF0pVdJh92xa/RxAU 4ts0Eipx9gKHLFifz4LN+DhkV7pv7GeTRYf+8E6/q3Yaq8AnSkWAqGqUEU8FAxeS SIetoX34xE7bJZbDrkvJItFSXmVHHJsPo69Dw80mYsf7HWWm/ogji0YKSZk4YdGu usZoCRYPjQGncWksaDIR4VOZgfu5Nlhk8HvY+ocz6L2/fVpR/6oPdqBEhGkSLyOr vCqoBIEVWYCiNBkIUb4jWCKKy8pvtPSi8u6j3HpLgilCwg0lC8sOSGDgltVsTnY9 Sg8s4Qu5cGksQf2u -----END CERTIFICATE-----Generated at Wed Jul 23 02:50:29 2025 by rpki-client