$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft File: F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft (raw, json) Hash identifier: 2WuqjQt8DQ2XZbnFQiA4hH8HTwOHUOAy05F1mQgyCDI= Subject key identifier: AD:A6:14:95:27:3F:50:68:66:71:AD:02:C3:FF:F3:41:1C:03:0B:F1 Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace Certificate serial: 40C1A593029FE7C0279D4D2869A9A50C87DD382B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft Manifest number: 01FC Signing time: Tue 22 Jul 2025 04:46:20 +0000 Manifest this update: Tue 22 Jul 2025 04:41:20 +0000 Manifest next update: Wed 23 Jul 2025 08:00:20 +0000 Files and hashes: 1: 39312e3230372e31332e302f32342d3234203d3e203532313132.roa (hash: +JU+ydXmMjIBHlt1kVXfkJBGqdmH1ATfk8PRfe8t4Rc=) 2: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer (hash: Nz2k0o2IS41o55idTp4HvK3uNxIMYgMNKvrr57G+kIE=) 3: 326131333a393634323a3130303a3a2f34382d3438203d3e203438323830.roa (hash: j84/Fm1nc/JJrf9h3dAaKkat+XV/si7APTv6iSnl64I=) 4: 326131333a393634343a31303a3a2f34362d3438203d3e203438313934.roa (hash: WOAaZY65k+/GoeKbXXymPrZVu7CfbDlQvCXqyS0ZjLA=) 5: 326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa (hash: 894RTKAEh4ciZZOdefpuTBSaNDM2TQpQSdGle6pgy08=) 6: 326131333a393634303a3a2f34342d3434203d3e203532313132.roa (hash: DOR1Pt3ct68s+ey18ZghPrs5rAUoZlIbwxjvP68BE+k=) 7: 326131333a393634343a343030303a3a2f34302d3438203d3e203133333335.roa (hash: 8/2mbGbaC4ennlzI7y1e8hUNr9fsr7Pr+/K69/OYKQg=) 8: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer (hash: nYcdq/fifitjvFyPoNBEJvUP1WGfqAJvzv/Dj2Iivv0=) 9: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: e3gM8xBShVESXc8MaKIMDq1iDa8wjJWbHPjdOfhPuFQ=) 10: 326131333a393634343a34303a3a2f34342d3438203d3e20323136333336.roa (hash: lNHaIlVxi/lYCx53I3+MfwePjUfRoiP0WtejKnMjprU=) 11: F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl (hash: ez4aVpc0tIi3Qg4az2L4W3Sa7Dk7jLg7KA0N5qKhl2I=) 12: 326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa (hash: UQpEpactphMaN3i4tpyR5s9Tmz685dUuNs8hSuG0cJQ=) 13: 326131333a393634343a343030303a3a2f34302d3438203d3e20323034323931.roa (hash: OXH7kpuguUKmKnwoouN0IGAOMj3E/W/ffH2kJO7vbOY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 08:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c1:a5:93:02:9f:e7:c0:27:9d:4d:28:69:a9:a5:0c:87:dd:38:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace Validity Not Before: Jul 22 04:41:20 2025 GMT Not After : Jul 23 08:00:20 2025 GMT Subject: CN=ADA61495273F50686671AD02C3FFF3411C030BF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2a:ae:59:e8:13:54:88:2f:1b:22:c8:7b:9e: 08:18:5a:80:e4:a1:7a:ce:e9:89:60:24:93:2a:48: 7d:4f:d9:5a:47:ad:19:1a:6a:d3:6c:5e:8c:74:12: 9f:81:ff:07:79:f8:e7:43:84:a7:49:c6:68:7c:08: 02:df:ff:d5:18:30:fb:4a:24:56:3a:f2:d1:77:3d: 9e:58:14:b5:70:f0:72:ad:12:10:76:d5:50:11:b5: c3:77:f7:7d:e5:c9:32:68:79:e5:4b:41:0a:61:f9: c1:0c:c8:e3:d8:27:62:74:d3:61:dc:f7:18:86:f4: 69:5f:3f:36:da:c3:1b:d1:4c:52:91:f6:92:40:31: 5c:91:fe:68:8d:b1:4b:a4:16:21:4f:c8:c1:77:f6: 67:37:d8:10:21:ce:68:72:aa:2a:f5:73:e4:1e:76: f6:e2:42:23:5a:8c:2c:47:da:48:24:48:21:e3:eb: 7f:ac:f9:c4:31:de:ff:db:da:66:37:48:fe:18:d5: 0a:f3:79:d3:c3:f3:be:10:d9:47:e5:2d:01:e5:4f: c1:c9:ea:f4:14:52:51:de:11:e5:8a:9f:e2:4c:89: 71:37:dc:11:7a:f4:6e:ea:e3:c6:a6:77:30:2c:ad: 72:ba:0d:a0:7c:3d:2b:12:da:81:9d:2b:b6:28:dd: 87:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A6:14:95:27:3F:50:68:66:71:AD:02:C3:FF:F3:41:1C:03:0B:F1 X509v3 Authority Key Identifier: keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:79:92:24:d7:78:55:98:99:e2:0c:c4:02:87:c0:dd:e0:80: 80:e7:bd:3b:06:22:48:5f:ea:0b:2e:3c:e3:e0:d4:33:3e:8a: 26:c3:b5:5a:0f:ac:5b:ae:45:22:90:f2:e4:24:7d:3f:c5:e6: 2e:74:66:f8:0f:5c:1b:ee:3b:a7:ab:35:ea:28:91:91:74:cf: c6:aa:31:01:da:0a:99:b4:2f:77:47:13:29:61:ff:56:73:99: e1:32:7b:9a:12:25:f9:bc:2f:9b:14:d0:63:9e:46:73:4f:98: fe:01:8c:ed:99:51:79:83:0a:00:ab:a6:a5:28:bc:ae:e6:3f: f9:94:5c:b6:a2:32:ec:a9:b1:de:7b:52:93:b5:15:c9:03:02: c5:c2:66:74:75:8d:dc:e2:6c:4e:03:97:ed:f7:7d:58:f8:77: 6a:ed:6c:77:c8:ef:f2:6b:d4:6d:a7:af:66:36:a9:9a:dc:ec: 4a:92:a0:11:c6:b7:a6:73:cb:fd:f9:70:5b:11:24:69:96:48: cc:d3:75:91:74:96:af:9c:66:26:65:03:b8:fa:fc:d3:e3:82: 48:4e:9d:6d:6a:37:bd:de:e5:84:80:af:61:1a:ce:a2:25:37: 30:e9:0e:7a:cc:66:e0:e7:b7:61:38:e4:4d:42:95:63:6f:27: 62:4c:a1:b2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQMGlkwKf58AnnU0oaamlDIfdOCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjFkMDU3MmZlNzI5OTFiZDMyODU0YmFjNzE2Njc2ZWJk YWQyMmFjZTAeFw0yNTA3MjIwNDQxMjBaFw0yNTA3MjMwODAwMjBaMDMxMTAvBgNV BAMTKEFEQTYxNDk1MjczRjUwNjg2NjcxQUQwMkMzRkZGMzQxMUMwMzBCRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwKq5Z6BNUiC8bIsh7nggYWoDk oXrO6YlgJJMqSH1P2VpHrRkaatNsXox0Ep+B/wd5+OdDhKdJxmh8CALf/9UYMPtK JFY68tF3PZ5YFLVw8HKtEhB21VARtcN3933lyTJoeeVLQQph+cEMyOPYJ2J002Hc 9xiG9GlfPzbawxvRTFKR9pJAMVyR/miNsUukFiFPyMF39mc32BAhzmhyqir1c+Qe dvbiQiNajCxH2kgkSCHj63+s+cQx3v/b2mY3SP4Y1QrzedPD874Q2UflLQHlT8HJ 6vQUUlHeEeWKn+JMiXE33BF69G7q48amdzAsrXK6DaB8PSsS2oGdK7Yo3YftAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUraYUlSc/UGhmca0Cw//zQRwDC/EwHwYDVR0j BBgwFoAU8dBXL+cpkb0yhUuscWZ269rSKs4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzAvRjFEMDU3MkZFNzI5OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkQlhMLWNwa2IweWhVdXNjV1oyNjly U0tzNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00 MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMC9GMUQwNTcyRkU3Mjk5MUJEMzI4 NTRCQUM3MTY2NzZFQkRBRDIyQUNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz3mSJNd4VZiZ4gzEAofA 3eCAgOe9OwYiSF/qCy484+DUMz6KJsO1Wg+sW65FIpDy5CR9P8XmLnRm+A9cG+47 p6s16iiRkXTPxqoxAdoKmbQvd0cTKWH/VnOZ4TJ7mhIl+bwvmxTQY55Gc0+Y/gGM 7ZlReYMKAKumpSi8ruY/+ZRctqIy7Kmx3ntSk7UVyQMCxcJmdHWN3OJsTgOX7fd9 WPh3au1sd8jv8mvUbaevZjapmtzsSpKgEca3pnPL/flwWxEkaZZIzNN1kXSWr5xm JmUDuPr80+OCSE6dbWo3vd7lhICvYRrOoiU3MOkOesxm4Oe3YTjkTUKVY28nYkyh sg== -----END CERTIFICATE-----Generated at Tue Jul 22 21:00:51 2025 by rpki-client