$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft File: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft (raw, json) Hash identifier: 2idRIdTzeNvBy8XoERr6sqhirrL2+nQq3j3q8K0tqHw= Subject key identifier: CA:D9:10:C1:1F:F6:82:81:01:B1:5E:18:43:CF:2D:15:03:7E:55:77 Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 Certificate issuer: /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Certificate serial: 503684076CFBF3642254F3839C1D286244469172 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft Manifest number: 013D Signing time: Mon 08 Sep 2025 21:13:11 +0000 Manifest this update: Mon 08 Sep 2025 21:08:11 +0000 Manifest next update: Tue 09 Sep 2025 21:23:11 +0000 Files and hashes: 1: 326131343a373538303a663333303a3a2f34342d3438203d3e20323134303330.roa (hash: E8taggS6sI4q0LKjH6/GmLcIK3Cj0Fw4lwLi8ILdzT4=) 2: 326131343a373538303a663330313a3a2f34382d3438203d3e20323135343730.roa (hash: GyqnDZwlRU44RSAJS6AmGof5uxXXmzhkRtpFSrxG7Nw=) 3: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl (hash: AFw0d9j0kqNejOuuBltpmiPJajH7TH6tva7nPrgPIr8=) 4: 326131343a373538303a343030303a3a2f33362d3336203d3e20323133343238.roa (hash: f38GGJwA8aLs49rknYyp3/ozCmX5eTGnavOZGUBAqUw=) 5: 326131343a373538303a663334303a3a2f34342d3438203d3e20323133343238.roa (hash: Z7InVHvKI4/fqGkdwdL0zl1WS4Iyc09xlEsVxaD8p5A=) 6: 326131343a373538303a383030303a3a2f33362d3438203d3e20323135343730.roa (hash: ibb68AQAVWJMES3NYRBIOdUeHnGKp+tFUocAxCKgPEU=) 7: 326131343a373538303a363030303a3a2f33362d3438203d3e20323039353534.roa (hash: 7bwiHUB+0vEKFxOfRTRz/zFRAxgK1WxBsECd2SJxocI=) 8: 326131343a373538303a663330303a3a2f34302d3430203d3e20323135343730.roa (hash: NYjufeU5nji5tNLR9669xX3/zAC6IxnZWFE8KHjLm6Y=) 9: 326131343a373538303a663332303a3a2f34342d3434203d3e20323135343730.roa (hash: XgYHMfBb1tBckmqvYy7acYD3hSj36S+vN34vUn5oaD4=) 10: 326131343a373538303a663331303a3a2f34342d3438203d3e20323134303834.roa (hash: 7Ht9ysaUQlknniITxiGGZVb7FReUYStDZL1yen2prNE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 21:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:36:84:07:6c:fb:f3:64:22:54:f3:83:9c:1d:28:62:44:46:91:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Validity Not Before: Sep 8 21:08:11 2025 GMT Not After : Sep 9 21:23:11 2025 GMT Subject: CN=CAD910C11FF6828101B15E1843CF2D15037E5577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1d:7c:f8:09:fd:e5:c7:3c:11:7c:1b:24:c3: c6:cd:99:c8:5e:47:b5:d6:80:68:c8:45:75:f1:6b: 29:7b:0a:15:33:3d:7f:d5:07:86:9e:7c:f6:dd:72: 24:d6:7d:32:d6:21:81:9d:a7:2b:15:71:96:db:6a: 83:d8:30:c0:ac:a1:42:e8:f4:39:fe:0e:34:cc:97: 3a:af:08:3f:7f:9c:ca:29:42:a4:ae:3f:cb:73:57: a6:9a:7f:74:8b:b5:c7:ad:81:6b:f4:7b:cf:5a:9d: cb:66:52:ce:0f:32:6d:8b:dd:86:2d:df:05:6e:1e: 71:a7:e3:5c:75:5c:1e:9b:9a:65:13:f4:9e:52:c0: 59:1f:37:59:9a:65:74:b2:2e:8e:47:dc:ea:33:b6: df:f2:f5:46:59:7c:6c:3f:ce:7f:3f:ad:c3:88:93: 06:19:66:f1:cb:de:3d:cf:8b:09:bb:90:e3:86:61: 51:c4:73:da:83:b7:71:02:b9:39:ec:f7:ce:11:5d: bd:c5:af:07:56:d9:d5:36:07:b9:3e:ab:a0:a9:26: b5:a6:38:35:eb:78:c1:c4:76:c2:b3:81:8c:b8:62: 56:02:1e:ea:ee:0a:27:98:dc:42:b7:b1:a7:38:56: 5e:bb:43:4a:0a:dc:d4:52:c9:ec:a0:bb:0e:54:7f: 0c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D9:10:C1:1F:F6:82:81:01:B1:5E:18:43:CF:2D:15:03:7E:55:77 X509v3 Authority Key Identifier: keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:61:bc:b8:19:d1:24:e8:b0:ef:72:f4:26:09:7c:b1:6c:e7: 7a:a4:68:06:46:e2:66:67:b8:56:7a:df:14:a5:54:cb:51:cb: a7:14:02:7d:d9:b8:f3:2c:92:6d:e8:0d:97:9c:8c:66:ee:77: 35:cb:42:4c:1f:b5:d9:4d:3f:77:07:e1:3c:4e:d6:65:77:d3: 70:6f:19:92:10:f9:ca:c7:3a:fc:5f:1e:b5:4c:f2:c9:fa:0b: 16:21:52:56:11:47:b5:5a:fd:29:39:79:25:42:5e:d8:f3:5b: f4:68:f1:a2:10:17:a5:1a:b8:65:b0:d7:50:26:36:c4:eb:5a: 06:a3:cb:df:70:72:bc:50:fc:2a:ab:d3:64:c1:39:85:4f:fd: 60:b3:c1:a7:1a:71:7f:e3:0b:0a:34:a7:fc:eb:0a:eb:29:d2: c2:e2:08:23:74:1b:52:b5:d3:34:59:a7:90:a3:43:87:02:e1: 66:aa:17:32:13:50:20:36:fa:ae:08:27:d7:8b:89:a6:a6:75: d5:49:99:41:9d:ca:ea:aa:26:d9:cd:7f:e7:ca:4f:d6:7b:45: 44:1c:47:38:a4:d5:86:16:e9:5b:84:1b:5d:42:ed:e7:55:2e: c4:f5:a0:f3:a4:16:b8:eb:1c:b2:b6:4c:f5:65:48:d6:ad:d1: bd:6b:ea:a0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUDaEB2z782QiVPODnB0oYkRGkXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENG OTM5RjRGNDAeFw0yNTA5MDgyMTA4MTFaFw0yNTA5MDkyMTIzMTFaMDMxMTAvBgNV BAMTKENBRDkxMEMxMUZGNjgyODEwMUIxNUUxODQzQ0YyRDE1MDM3RTU1NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwHXz4Cf3lxzwRfBskw8bNmche R7XWgGjIRXXxayl7ChUzPX/VB4aefPbdciTWfTLWIYGdpysVcZbbaoPYMMCsoULo 9Dn+DjTMlzqvCD9/nMopQqSuP8tzV6aaf3SLtcetgWv0e89anctmUs4PMm2L3YYt 3wVuHnGn41x1XB6bmmUT9J5SwFkfN1maZXSyLo5H3Ooztt/y9UZZfGw/zn8/rcOI kwYZZvHL3j3Piwm7kOOGYVHEc9qDt3ECuTns984RXb3FrwdW2dU2B7k+q6CpJrWm ODXreMHEdsKzgYy4YlYCHuruCieY3EK3sac4Vl67Q0oK3NRSyeyguw5UfwzjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUytkQwR/2goEBsV4YQ88tFQN+VXcwHwYDVR0j BBgwFoAU9ABy/9wPGxWmnlvHmi9YjPk59PQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzAvRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENGOTM5RjRGNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNDAwNzJGRkRDMEYxQjE1QTY5RTVCQzc5 QTJGNTg4Q0Y5MzlGNEY0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8wL0Y0MDA3MkZG REMwRjFCMTVBNjlFNUJDNzlBMkY1ODhDRjkzOUY0RjQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDEYby4 GdEk6LDvcvQmCXyxbOd6pGgGRuJmZ7hWet8UpVTLUcunFAJ92bjzLJJt6A2XnIxm 7nc1y0JMH7XZTT93B+E8TtZld9NwbxmSEPnKxzr8Xx61TPLJ+gsWIVJWEUe1Wv0p OXklQl7Y81v0aPGiEBelGrhlsNdQJjbE61oGo8vfcHK8UPwqq9NkwTmFT/1gs8Gn GnF/4wsKNKf86wrrKdLC4ggjdBtStdM0WaeQo0OHAuFmqhcyE1AgNvquCCfXi4mm pnXVSZlBncrqqibZzX/nyk/We0VEHEc4pNWGFulbhBtdQu3nVS7E9aDzpBa46xyy tkz1ZUjWrdG9a+qg -----END CERTIFICATE-----Generated at Tue Sep 9 11:52:31 2025 by rpki-client