$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json) Hash identifier: Lnuq4pn80PApcpzwdic/VQcRfBwMxKJDLLSMLGJCyQk= Subject key identifier: CA:EF:E1:60:E2:84:98:AB:0C:0A:17:CD:E7:59:84:3F:FC:71:0A:A6 Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Certificate serial: 0C4A856B353732975A709F7D5D9E39525072EE8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft Manifest number: 050E Signing time: Tue 09 Sep 2025 09:39:10 +0000 Manifest this update: Tue 09 Sep 2025 09:34:10 +0000 Manifest next update: Wed 10 Sep 2025 12:18:10 +0000 Files and hashes: 1: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: +O83UFzmG+k6OaEA2bcXHgAPULyDDijkoVjPtNoHA2A=) 2: 3134362e3234372e35312e302f32342d3234203d3e203234383531.roa (hash: zRn95fZoa98Dxgk18rTQZPg3Vz861tTnSVUdcy0yTb0=) 3: 3134362e3234372e35392e302f32342d3234203d3e203234383531.roa (hash: cISB3c/lX6ECxkwGaCM313qUlrkmfGXNHg9Sn5Duu/E=) 4: 3134362e3234372e34382e302f32332d3234203d3e203234383531.roa (hash: CYrx2Q8+pBHAyk1lGd5Mg9MkvR7v5zfpX8Vn/ABu+6Q=) 5: 3134362e3234372e36322e302f32342d3234203d3e203234383531.roa (hash: 3irJhAGcE48vEZNOxKTwKsy4d69RVyIL6ZEClAmlLA0=) 6: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: y4OGbSGooI8V9euRtHx6jpjRwWGZstdSARXhTQ70Yxg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 08:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:4a:85:6b:35:37:32:97:5a:70:9f:7d:5d:9e:39:52:50:72:ee:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Validity Not Before: Sep 9 09:34:10 2025 GMT Not After : Sep 10 12:18:10 2025 GMT Subject: CN=CAEFE160E28498AB0C0A17CDE759843FFC710AA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:47:30:4d:83:00:a7:fa:b5:ad:6c:83:8d:d6: 21:2b:6b:7f:30:d9:dc:e7:43:52:6b:d1:27:60:b0: 03:2f:eb:3f:d7:87:4e:3e:e2:74:7c:e6:e1:c0:97: f7:eb:73:57:94:f7:75:52:fe:e6:d6:2d:5f:c5:40: a9:03:c6:96:ec:4c:9e:1c:53:c5:70:46:d7:fb:73: 61:77:23:12:df:a2:a1:52:52:61:91:41:1c:e5:27: 9b:80:93:ca:c7:06:88:45:ec:3b:56:6c:cb:43:00: 32:cc:71:d5:e2:c5:aa:9a:91:77:e0:8b:97:69:f6: c4:ff:58:40:ac:fd:1b:22:de:02:42:af:36:41:54: a4:bf:29:36:f9:4c:98:a5:92:c1:0f:ea:92:3b:43: 50:2e:c2:a3:a2:88:63:51:c0:66:38:ef:14:a0:e6: e7:36:4a:c8:0d:ec:d4:ce:39:57:89:ce:c6:71:a8: 9b:e4:a7:64:14:0a:9e:50:7c:72:9d:70:56:70:79: 34:e1:92:3d:86:a0:f5:b2:b9:43:af:6d:d9:90:42: 44:b9:78:2e:49:f8:41:19:8a:a5:2b:1a:fb:98:7f: 83:57:d5:35:52:bb:85:fc:6e:6c:30:40:9d:b0:e7: 5b:97:fd:b1:01:e8:9f:84:33:62:66:eb:8f:3b:85: 38:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EF:E1:60:E2:84:98:AB:0C:0A:17:CD:E7:59:84:3F:FC:71:0A:A6 X509v3 Authority Key Identifier: keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ba:98:24:f9:3a:97:c8:90:69:72:2d:e5:69:8b:fa:8c:6a: 57:8a:01:92:fb:09:30:c6:fb:d6:56:62:c3:b5:ca:7c:73:ff: ac:f2:f2:f9:b4:00:ab:53:26:be:d2:fc:b4:f2:24:16:1f:db: f7:80:ed:53:6d:44:0d:da:5a:5f:d4:2f:55:0d:e4:47:88:24: e5:f1:6f:5a:57:b4:33:88:20:de:d8:e0:a4:a4:87:cf:bc:dd: 81:15:18:c1:1c:65:39:c0:8d:c1:a2:5a:5d:8a:be:85:38:e2: a3:01:5e:c1:5d:0f:59:33:25:e5:b6:92:99:81:94:e6:07:04: 1f:d6:0b:2f:08:03:c8:19:64:a8:a9:3f:3b:39:84:59:fd:50: f6:99:84:6f:7e:fb:f9:9e:4a:91:56:8f:6f:5c:6b:27:10:f8: dc:51:83:d2:ee:21:d0:1a:48:4c:26:af:10:45:5e:37:0d:c3: 09:20:2a:7a:4b:fa:b5:a0:ea:da:b9:14:37:f7:03:c6:4f:5b: d3:25:b7:1f:f6:23:a5:c5:18:9c:75:40:fa:9d:52:82:ea:96: 5a:95:ea:b6:4b:9a:0b:31:10:3b:d1:b4:61:6a:6f:f4:5f:a0: 41:44:bb:95:6b:a2:36:ff:c6:2e:b7:50:a6:ee:20:1b:a2:97: fd:3a:b9:b0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDEqFazU3MpdacJ99XZ45UlBy7o0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTZjNTA5YmE0OGU1YjUwNDk0NTcyZTA1YzQ1YzU4ZTdl MTZkODdmYjAeFw0yNTA5MDkwOTM0MTBaFw0yNTA5MTAxMjE4MTBaMDMxMTAvBgNV BAMTKENBRUZFMTYwRTI4NDk4QUIwQzBBMTdDREU3NTk4NDNGRkM3MTBBQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1RzBNgwCn+rWtbION1iEra38w 2dznQ1Jr0SdgsAMv6z/Xh04+4nR85uHAl/frc1eU93VS/ubWLV/FQKkDxpbsTJ4c U8VwRtf7c2F3IxLfoqFSUmGRQRzlJ5uAk8rHBohF7DtWbMtDADLMcdXixaqakXfg i5dp9sT/WECs/Rsi3gJCrzZBVKS/KTb5TJilksEP6pI7Q1AuwqOiiGNRwGY47xSg 5uc2SsgN7NTOOVeJzsZxqJvkp2QUCp5QfHKdcFZweTThkj2GoPWyuUOvbdmQQkS5 eC5J+EEZiqUrGvuYf4NX1TVSu4X8bmwwQJ2w51uX/bEB6J+EM2Jm6487hTjvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUyu/hYOKEmKsMChfN51mEP/xxCqYwHwYDVR0j BBgwFoAUpsUJukjltQSUVy4FxFxY5+Fth/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYtOTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1 NWM1LzEvQTZDNTA5QkE0OEU1QjUwNDk0NTcyRTA1QzQ1QzU4RTdFMTZEODdGQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BzVUp1a2psdFFTVVZ5NEZ4RnhZNS1G dGhfcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzhiYjQ0Ni05 MWMwLTQxMzgtYTMzYS1iNDc4NjVkZTU1YzUvMS9BNkM1MDlCQTQ4RTVCNTA0OTQ1 NzJFMDVDNDVDNThFN0UxNkQ4N0ZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrqYJPk6l8iQaXIt5WmL +oxqV4oBkvsJMMb71lZiw7XKfHP/rPLy+bQAq1MmvtL8tPIkFh/b94DtU21EDdpa X9QvVQ3kR4gk5fFvWle0M4gg3tjgpKSHz7zdgRUYwRxlOcCNwaJaXYq+hTjiowFe wV0PWTMl5baSmYGU5gcEH9YLLwgDyBlkqKk/OzmEWf1Q9pmEb377+Z5KkVaPb1xr JxD43FGD0u4h0BpITCavEEVeNw3DCSAqekv6taDq2rkUN/cDxk9b0yW3H/YjpcUY nHVA+p1SguqWWpXqtkuaCzEQO9G0YWpv9F+gQUS7lWuiNv/GLrdQpu4gG6KX/Tq5 sA== -----END CERTIFICATE-----Generated at Tue Sep 9 11:51:49 2025 by rpki-client