$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: apU84tNRDrz0UPXt41QLXxpsZxllzzImlEZtoQabuoA= Subject key identifier: 6C:33:2B:3C:36:7D:6F:A0:D2:A7:0B:1C:EC:F4:5F:5B:31:B0:F0:F1 Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 71753458A1A334B093615F9C1B7318C130651D6B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: 011E Signing time: Sun 07 Sep 2025 14:03:09 +0000 Manifest this update: Sun 07 Sep 2025 13:58:09 +0000 Manifest next update: Mon 08 Sep 2025 15:24:09 +0000 Files and hashes: 1: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: mC6OJ0GqzRKrdxLwPW8ivAdo2plh2xdNEJAI8zyEwys=) 2: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: MorJ8/zqWP+ENMZ78Dfg8lahRlU/VfcwHwmQyMuE7hc=) 3: 326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa (hash: /ul2/wI6OjmF90yvjh37x7TtdkRoh3MUQv78SD8t7W0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 15:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:75:34:58:a1:a3:34:b0:93:61:5f:9c:1b:73:18:c1:30:65:1d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Sep 7 13:58:09 2025 GMT Not After : Sep 8 15:24:09 2025 GMT Subject: CN=6C332B3C367D6FA0D2A70B1CECF45F5B31B0F0F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:69:ff:59:a1:a9:eb:f2:7d:6d:4e:60:b5:86: 71:c7:6a:d7:91:cd:fa:03:b7:89:6b:fc:e3:fe:d5: c9:9f:87:63:62:e8:c9:f3:d1:78:b3:fa:21:24:70: 73:49:97:5a:47:38:7a:1f:16:7b:e7:64:bd:ff:81: 4c:15:29:da:0d:bc:9d:dd:0b:c8:30:ba:6d:25:2c: 2d:a2:2a:95:b1:8b:9e:ad:e4:a1:7d:66:50:6d:51: 61:78:ea:dd:2e:57:97:3c:d6:b4:c2:3a:80:b8:8f: 90:f9:d2:1a:02:67:aa:b9:1d:14:67:ef:e6:35:7b: fb:62:50:78:3d:cb:cc:68:16:af:70:fb:ef:3c:26: 2e:04:8e:04:60:85:08:c2:d9:e4:60:61:a7:7e:f9: 3f:c6:fd:6f:ca:20:32:c1:41:bc:52:8e:eb:d2:e5: b9:77:4d:70:df:15:68:7e:fb:75:cf:74:e1:3c:18: 39:43:25:67:41:e1:09:27:63:c0:b4:3f:59:1b:b4: 17:3a:41:b7:1a:92:db:fc:5e:93:48:00:92:f7:dd: 5c:28:dc:9e:d2:c6:c5:ed:49:3d:ba:1a:ae:6f:78: ac:d1:74:e9:17:1d:58:44:05:53:40:f6:f9:02:4a: 86:54:99:a8:e7:fc:9f:af:08:52:ba:04:5e:15:87: f0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:33:2B:3C:36:7D:6F:A0:D2:A7:0B:1C:EC:F4:5F:5B:31:B0:F0:F1 X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:c7:eb:6c:ec:e8:25:2d:18:69:54:cb:91:52:0f:b3:a3:25: 69:b0:04:a3:91:72:73:c7:41:2c:87:d1:17:ce:9d:ce:90:e6: 91:a3:d0:b4:ac:7e:05:51:8c:2e:b9:63:4c:7e:1f:c4:d7:30: 93:0c:66:47:88:99:7b:e9:b3:dd:3d:2e:66:d0:5c:88:cd:d9: 89:15:9d:89:ef:f2:a7:74:42:7b:f7:ab:25:45:22:b2:60:b6: 2c:58:b7:74:a0:bb:06:0d:ce:bf:05:3a:a8:76:76:c1:82:89: a8:2e:6e:c1:82:34:18:4f:e8:01:f9:ec:39:e1:5d:20:a8:e6: 3d:fd:d4:4f:f6:be:24:a5:31:30:6f:df:53:11:bd:7b:0e:1c: 1d:42:c2:ff:5c:87:1a:7b:7d:ae:f7:0f:7e:aa:93:ab:d1:8a: 61:96:d7:bb:5a:5d:62:da:a9:9b:1e:3d:c4:fb:4e:e0:7a:e0: b6:40:e2:f8:d4:36:ee:2d:3b:7e:22:93:c7:51:09:08:6b:7a: 2f:ee:98:a3:fe:74:79:8a:f0:bf:8d:a6:b2:eb:60:4e:7b:b8: 30:ed:1c:f9:7e:2b:47:42:ab:fe:4a:23:5e:0b:3f:67:2a:0d: 33:0b:12:79:4b:5c:4b:d8:c1:be:a2:7c:cb:66:dd:b2:14:17: 2b:22:77:2d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcXU0WKGjNLCTYV+cG3MYwTBlHWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNTA5MDcxMzU4MDlaFw0yNTA5MDgxNTI0MDlaMDMxMTAvBgNV BAMTKDZDMzMyQjNDMzY3RDZGQTBEMkE3MEIxQ0VDRjQ1RjVCMzFCMEYwRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzaf9Zoanr8n1tTmC1hnHHateR zfoDt4lr/OP+1cmfh2Ni6Mnz0Xiz+iEkcHNJl1pHOHofFnvnZL3/gUwVKdoNvJ3d C8gwum0lLC2iKpWxi56t5KF9ZlBtUWF46t0uV5c81rTCOoC4j5D50hoCZ6q5HRRn 7+Y1e/tiUHg9y8xoFq9w++88Ji4EjgRghQjC2eRgYad++T/G/W/KIDLBQbxSjuvS 5bl3TXDfFWh++3XPdOE8GDlDJWdB4QknY8C0P1kbtBc6Qbcaktv8XpNIAJL33Vwo 3J7SxsXtST26Gq5veKzRdOkXHVhEBVNA9vkCSoZUmajn/J+vCFK6BF4Vh/DRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUbDMrPDZ9b6DSpwsc7PRfWzGw8PEwHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4x+ts 7OglLRhpVMuRUg+zoyVpsASjkXJzx0Esh9EXzp3OkOaRo9C0rH4FUYwuuWNMfh/E 1zCTDGZHiJl76bPdPS5m0FyIzdmJFZ2J7/KndEJ796slRSKyYLYsWLd0oLsGDc6/ BTqodnbBgomoLm7BgjQYT+gB+ew54V0gqOY9/dRP9r4kpTEwb99TEb17DhwdQsL/ XIcae32u9w9+qpOr0Yphlte7Wl1i2qmbHj3E+07geuC2QOL41DbuLTt+IpPHUQkI a3ov7pij/nR5ivC/jaay62BOe7gw7Rz5fitHQqv+SiNeCz9nKg0zCxJ5S1xL2MG+ onzLZt2yFBcrInct -----END CERTIFICATE-----Generated at Sun Sep 7 23:14:54 2025 by rpki-client