$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: aDh3eSx6S92vyhIqf+AtjalquAvZ31Y1DWbnE8wW+Xw= Subject key identifier: A1:F9:A6:3D:60:6C:B7:CA:6A:60:9C:D9:B0:E8:9D:88:87:22:C4:7C Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: 75387A742644686C1E4201DAFBECA7FF608D465E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 03E5 Signing time: Wed 23 Jul 2025 01:54:02 +0000 Manifest this update: Wed 23 Jul 2025 01:49:02 +0000 Manifest next update: Thu 24 Jul 2025 05:43:02 +0000 Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: Pc4F216M/oD/fxZDUk8HLynWg8D1IQ0ANHs5N2ZC0VQ=) 2: 326131313a353730363a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: +GiVUNSbcYm0MXNlVgxa6VflGOlRp9hOfbY/aidYY1U=) 3: 326131313a353730353a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: YvH+3atWqaB4zJsHYK1cEoa4+J3Y8wbDOetaRpGkY9U=) 4: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: SY6OvQv9R/Ut8R5yFxdy0RVK/9dKsg8ZwmC3iNS9Rpw=) 5: 326131313a353730323a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: zY7Phzmd75TKCthkmSaY4oyTFaKkCEl/y4pnJz6mHMw=) 6: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: 242POLRepYH713AUptOGvBkM/JpRNVCsIm5BodQGTyY=) 7: 326131313a353730333a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: amyhppkunQUKDCiBGMFxQfAHBmd/6ZM1Y2JA6Xv6mjw=) 8: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: /8dVa93viKNoM1pCJooeH0rtbsVAVvDJFpjlC3WNZyI=) 9: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: S5WIAkzllTXfMiWpREUuucFgM0BSw7Pb5gT995rR5+k=) 10: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: VIdYFIOIqW5zJ3T1LDGwWjmJ764XjM+ac+86S8Ja5hk=) 11: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: IiLsd5rWyRAEtPC2BRNztBwgXOWFkCLAq6FHsMnhQxg=) 12: 326131313a353730343a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: e6pNQA8izdBKRkcuzWtfOOmNK456AAkxlNJ6pMTNpsc=) 13: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: NDHvIIcUiAk7uX5boyMA8yHxKUGe6BZWK+cptlXNnOA=) 14: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: EEtfGKQPQ42nFzzdsRfixi4zKQ5tTYPEdAQ1iAcmdE4=) 15: 326131313a353730313a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 0SF0WfEKn6tAt+SqtI0zWos8/5DwYGM33/T6SlnO8Oc=) 16: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: Fqs+xGh2wCPoRebx3WWGGz8gG+3wDYrzV+eGaABVra0=) 17: 326131313a353730373a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 11LkJhM5pGNm95iRuza8Ye8pvz7Hby+G2YVPV9KFFMI=) 18: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: ma+wlMqMsb7J0TC2Gy822cEZS57hTDfS/GzCjZsgQ1k=) 19: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: wQ/YXS5V0WqyAz3I38Grxwtf2vC7Tnq0YU0pMolmNpk=) 20: AS48070.asa (hash: YsK0/rV2BmXeHeRJ0VrNqX7Hbez3e33zUXMrV6bup5Y=) 21: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: ltpu/g25APwJGP8jSWEkQ5LVLFp9UpeptrzUAEWKzoY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 05:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:38:7a:74:26:44:68:6c:1e:42:01:da:fb:ec:a7:ff:60:8d:46:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: Jul 23 01:49:02 2025 GMT Not After : Jul 24 05:43:02 2025 GMT Subject: CN=A1F9A63D606CB7CA6A609CD9B0E89D888722C47C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f1:95:ec:02:03:07:c8:5a:97:9a:4b:88:f8: b3:41:d9:1f:1c:78:19:fd:c2:cd:9e:dd:1f:18:33: 58:f6:6a:d6:28:87:bf:d2:91:cc:0a:06:48:aa:26: 94:bc:5c:10:e9:b8:52:5d:c1:93:73:70:8c:3f:5e: 46:bb:59:0c:5a:b7:b1:9a:3e:44:82:de:1d:1a:99: 86:a9:7b:43:9d:5f:d4:58:1b:bc:ce:a4:4d:fe:3a: 3e:96:6c:34:e2:2e:f4:71:7c:ef:22:a6:70:87:a1: 8c:6d:31:fd:ee:15:ca:c7:4e:e8:ac:b2:44:cd:a3: 72:1c:84:39:7b:d2:82:e8:80:11:56:bc:a8:be:5c: 42:38:df:82:ce:70:52:09:96:55:41:79:d5:9c:3d: 1c:38:93:84:d1:08:0e:fd:8a:00:7f:81:f5:04:6a: 6a:93:dc:17:d4:50:3f:41:6c:32:c2:8a:1c:63:46: 94:45:23:a3:45:f5:0d:1e:aa:03:d3:75:ab:e3:ff: b9:f5:a6:23:b9:9d:bb:63:4d:37:f6:e1:94:71:b3: a4:68:e2:19:a6:7d:6c:d0:aa:a3:ed:e4:a0:2b:62: 97:c8:56:76:56:d1:ff:ff:76:a9:60:dd:7c:41:52: 70:47:f6:9f:aa:56:a2:a8:d5:47:7c:e9:b4:36:f1: 21:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F9:A6:3D:60:6C:B7:CA:6A:60:9C:D9:B0:E8:9D:88:87:22:C4:7C X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:28:39:07:db:f8:44:5b:f3:a4:38:09:b4:f0:34:05:4f:96: 64:93:64:f7:9c:9c:b5:a5:af:0c:7a:7d:11:ca:14:0f:ee:2f: 55:20:5d:ec:32:d5:06:12:cf:bb:a8:ef:0d:36:44:7f:ef:7c: 2e:06:dd:88:55:6d:ad:13:e9:bf:64:87:56:33:3a:08:ab:8a: 0c:97:17:db:e9:ff:ba:a5:c2:83:fb:f8:8f:70:b5:20:ce:5e: 91:42:c1:85:6b:22:82:c2:cd:a1:6b:8d:c5:fc:bd:59:bb:8d: 15:f1:87:10:d8:7a:64:39:2b:12:ff:9f:f8:45:a0:36:b2:50: 88:0e:58:d2:79:85:1b:12:86:81:67:67:9c:64:71:88:9b:10: 5b:c5:5a:c2:8c:a8:db:31:ce:f7:73:5c:b3:62:a1:02:b2:69: 31:52:b9:77:59:81:32:1e:ae:87:e6:9d:2f:82:cb:6c:c6:31: ab:65:8d:89:84:5c:fc:b7:de:e6:de:fe:c6:1c:09:d8:24:c3: 4a:4b:6e:e1:33:af:39:fe:4b:68:9b:28:44:d8:25:88:71:62: 80:40:71:49:d8:72:08:f7:d5:e5:96:db:d9:fe:d1:78:ae:3b: 10:35:cd:3c:6f:b2:70:48:a8:9f:32:20:62:13:02:1e:64:10: 73:66:1a:c7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdTh6dCZEaGweQgHa++yn/2CNRl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNTA3MjMwMTQ5MDJaFw0yNTA3MjQwNTQzMDJaMDMxMTAvBgNV BAMTKEExRjlBNjNENjA2Q0I3Q0E2QTYwOUNEOUIwRTg5RDg4ODcyMkM0N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj8ZXsAgMHyFqXmkuI+LNB2R8c eBn9ws2e3R8YM1j2atYoh7/SkcwKBkiqJpS8XBDpuFJdwZNzcIw/Xka7WQxat7Ga PkSC3h0amYape0OdX9RYG7zOpE3+Oj6WbDTiLvRxfO8ipnCHoYxtMf3uFcrHTuis skTNo3IchDl70oLogBFWvKi+XEI434LOcFIJllVBedWcPRw4k4TRCA79igB/gfUE amqT3BfUUD9BbDLCihxjRpRFI6NF9Q0eqgPTdavj/7n1piO5nbtjTTf24ZRxs6Ro 4hmmfWzQqqPt5KArYpfIVnZW0f//dqlg3XxBUnBH9p+qVqKo1Ud86bQ28SF5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUofmmPWBst8pqYJzZsOidiIcixHwwHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSg5B9v4RFvzpDgJtPA0 BU+WZJNk95yctaWvDHp9EcoUD+4vVSBd7DLVBhLPu6jvDTZEf+98LgbdiFVtrRPp v2SHVjM6CKuKDJcX2+n/uqXCg/v4j3C1IM5ekULBhWsigsLNoWuNxfy9WbuNFfGH ENh6ZDkrEv+f+EWgNrJQiA5Y0nmFGxKGgWdnnGRxiJsQW8Vawoyo2zHO93Ncs2Kh ArJpMVK5d1mBMh6uh+adL4LLbMYxq2WNiYRc/Lfe5t7+xhwJ2CTDSktu4TOvOf5L aJsoRNgliHFigEBxSdhyCPfV5Zbb2f7ReK47EDXNPG+ycEionzIgYhMCHmQQc2Ya xw== -----END CERTIFICATE-----Generated at Wed Jul 23 17:55:43 2025 by rpki-client