$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft File: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft (raw, json) Hash identifier: CQHTGWnQTzoJrb6skci4hExhDeivGBupESowuQ1jaTc= Subject key identifier: 6F:42:55:A3:43:50:DA:A9:1E:1E:F5:DD:60:7E:2D:25:9D:26:C8:34 Authority key identifier: 94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C Certificate issuer: /CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Certificate serial: 14FF96429F97FB7304A3C085E93B38555E32C198 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft Manifest number: BA Signing time: Sat 06 Sep 2025 07:48:46 +0000 Manifest this update: Sat 06 Sep 2025 07:43:46 +0000 Manifest next update: Sun 07 Sep 2025 10:32:46 +0000 Files and hashes: 1: 326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa (hash: MnToG5/hHH9Scp/i63sn6+7U3FU6WhprF2dCg9QmzZ4=) 2: 326131343a373538343a333030313a3a2f34382d3438203d3e20313532333638.roa (hash: RycjpThYIZhrgAMUdYbKLisjcTcczyRyV0B6ob/yXcs=) 3: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl (hash: +KLL2IPtNVgKP3+kdecjxK47xDgfDkDaUbHI6X7G71Y=) 4: 326131343a373538343a333030323a3a2f34382d3438203d3e203530313034.roa (hash: Crxg8Afd9H4uvcM/AEMgGkuEVpajXoOdPvRiA2PLFc4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 10:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ff:96:42:9f:97:fb:73:04:a3:c0:85:e9:3b:38:55:5e:32:c1:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Validity Not Before: Sep 6 07:43:46 2025 GMT Not After : Sep 7 10:32:46 2025 GMT Subject: CN=6F4255A34350DAA91E1EF5DD607E2D259D26C834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:85:e3:e2:33:b3:30:29:b8:eb:08:b5:15:76: bf:c3:76:3e:1e:12:9a:36:88:62:0f:4c:77:5b:2a: 91:ab:f6:26:fb:3c:dd:95:f0:5d:4b:c7:4f:c4:ba: e5:fc:6b:80:11:af:b3:2a:a3:fb:38:db:6e:bd:0a: 8b:fc:db:48:8b:c4:2f:94:cf:ab:aa:9a:72:92:d6: f5:43:ee:30:04:a6:73:22:ed:88:20:f9:89:2c:70: a6:81:47:64:a8:23:4a:fe:d8:60:b7:e7:c2:d3:e9: 93:68:a0:79:b3:0c:d6:23:2e:1d:af:87:04:56:c3: c0:20:04:8f:bc:a8:9d:fa:b0:bc:c0:92:96:b5:81: f8:b5:22:e0:3f:d6:be:08:7c:46:fa:f3:4c:10:d5: 42:24:52:9b:7e:a8:8b:13:4c:bf:e4:62:eb:e1:3d: 4a:4d:7b:be:95:ce:79:fb:4e:65:c8:ef:41:90:48: 89:21:ce:04:8d:a4:db:a4:24:e2:16:4a:db:64:33: b8:55:41:34:8e:76:e7:4d:d7:b2:48:d3:79:9d:d9: 7d:4b:54:f3:f9:ec:be:49:b6:3d:b8:3f:1f:d9:7b: e7:ce:9a:7a:a3:e0:fc:d9:94:57:b0:70:82:b2:c8: d0:52:86:9e:11:08:9b:59:68:c9:1e:2a:ef:65:89: 48:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:42:55:A3:43:50:DA:A9:1E:1E:F5:DD:60:7E:2D:25:9D:26:C8:34 X509v3 Authority Key Identifier: keyid:94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:06:f1:06:f1:58:24:72:03:7d:9d:6a:f6:7d:ec:48:31:8e: 5d:5e:6e:66:29:57:eb:a7:96:20:81:ad:63:32:d1:c6:5b:fb: c7:84:f9:75:66:7c:72:4b:92:0b:da:4e:d1:aa:c6:65:f9:c2: ff:a9:3f:db:3a:28:6d:d9:88:cf:6e:89:52:32:49:6f:67:4b: 3b:df:55:97:f0:56:bc:f7:46:5f:91:cc:d2:75:bc:88:dd:6b: a9:7e:35:09:bf:d7:f2:9b:a7:1b:58:69:0e:48:aa:00:25:3d: b4:d8:83:ed:aa:d1:be:79:f9:71:05:b2:8c:75:f4:d2:10:e7: a5:14:54:f9:f0:99:5f:4f:b2:cb:4f:f2:56:76:40:5d:81:b1: e0:4a:f3:c8:b1:4f:b8:3c:89:f7:eb:b5:22:30:13:3c:25:b4: 9c:3e:53:a8:43:6c:29:bc:f4:3d:71:d5:df:4e:38:dd:46:62: 0a:36:da:6c:86:6f:56:7e:98:bf:1c:d9:1f:c4:8e:64:20:bb: 94:6c:3f:43:28:00:8b:e6:b2:37:af:9b:ff:1a:f9:30:23:9d: 77:a4:50:42:5d:2d:cd:8f:3b:18:95:9f:8c:66:2c:25:83:43: 74:9d:a2:12:97:ac:0d:9d:71:13:a2:58:bd:ab:e3:01:7b:cc: 62:66:80:16 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFP+WQp+X+3MEo8CF6Ts4VV4ywZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkx QjI3QUQ5QzAeFw0yNTA5MDYwNzQzNDZaFw0yNTA5MDcxMDMyNDZaMDMxMTAvBgNV BAMTKDZGNDI1NUEzNDM1MERBQTkxRTFFRjVERDYwN0UyRDI1OUQyNkM4MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuhePiM7MwKbjrCLUVdr/Ddj4e Epo2iGIPTHdbKpGr9ib7PN2V8F1Lx0/EuuX8a4ARr7Mqo/s42269Cov820iLxC+U z6uqmnKS1vVD7jAEpnMi7Ygg+YkscKaBR2SoI0r+2GC358LT6ZNooHmzDNYjLh2v hwRWw8AgBI+8qJ36sLzAkpa1gfi1IuA/1r4IfEb680wQ1UIkUpt+qIsTTL/kYuvh PUpNe76Vznn7TmXI70GQSIkhzgSNpNukJOIWSttkM7hVQTSOdudN17JI03md2X1L VPP57L5Jtj24Px/Ze+fOmnqj4PzZlFewcIKyyNBShp4RCJtZaMkeKu9liUg5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUb0JVo0NQ2qkeHvXdYH4tJZ0myDQwHwYDVR0j BBgwFoAUlG3hXTS+riTinqFqP+HmWRsnrZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzcvOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkxQjI3QUQ5Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85NDZERTE1RDM0QkVBRTI0RTI5RUExNkEz RkUxRTY1OTFCMjdBRDlDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzFiZDMwNmI0LWU1YzMtNDhmOS1iMmVlLTM2YTliZGRlZDhjNC83Lzk0NkRFMTVE MzRCRUFFMjRFMjlFQTE2QTNGRTFFNjU5MUIyN0FEOUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBNBvEG 8VgkcgN9nWr2fexIMY5dXm5mKVfrp5Ygga1jMtHGW/vHhPl1ZnxyS5IL2k7RqsZl +cL/qT/bOiht2YjPbolSMklvZ0s731WX8Fa890ZfkczSdbyI3WupfjUJv9fym6cb WGkOSKoAJT202IPtqtG+eflxBbKMdfTSEOelFFT58JlfT7LLT/JWdkBdgbHgSvPI sU+4PIn367UiMBM8JbScPlOoQ2wpvPQ9cdXfTjjdRmIKNtpshm9Wfpi/HNkfxI5k ILuUbD9DKACL5rI3r5v/GvkwI513pFBCXS3NjzsYlZ+MZiwlg0N0naISl6wNnXET oli9q+MBe8xiZoAW -----END CERTIFICATE-----Generated at Sat Sep 6 16:41:02 2025 by rpki-client