$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json) Hash identifier: +WxW9QGcW9ZKePUoCwwZCBqcLJX7htV3Kh+mX9L5d6c= Subject key identifier: 17:B5:EF:CA:40:AA:FA:B3:54:E5:A3:0C:6B:2F:7A:34:11:4E:29:CE Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Certificate serial: 2B54462BE0BF6A8B9D78B1D5506E42789B5C2E8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft Manifest number: 0590 Signing time: Wed 20 Aug 2025 08:52:30 +0000 Manifest this update: Wed 20 Aug 2025 08:47:30 +0000 Manifest next update: Thu 21 Aug 2025 10:19:30 +0000 Files and hashes: 1: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: e4sOWlDxZzPIXQ3Vnqya07udsUK1KYBFfN3K3q4TdIQ=) 2: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: NPvxKSNfdGX2aoCtCwLVMBnzeoN7AU2GpBh+K+JOMMc=) 3: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: oF4w7NxC8k0B37OPAPdZahvM79tcHzaficolZDZM7u0=) 4: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0tQfil3TCFdk5LEcr0D0xtOoBgJdLwmHivVySWFI/b8=) 5: 352e3138312e3138362e302f32342d3234203d3e203239303636.roa (hash: 5g1iTpy4+Ocf7g6idB3LUlopM7lH9cpsMczTTuu+hV0=) 6: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: w5NU7XhSCx4TB+ZVVuz65lQXaRG4sh/qolM03TzoQNc=) 7: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=) 8: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=) 9: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: 8eRvRykZqahsRM0VQoPLCYYNfC1yyS358fE8muRhEDA=) 10: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=) 11: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: 6dfl8lI1/2dWL8ffIUYhSFUUS7mSu5VjjS42Z8HkW7c=) 12: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=) 13: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=) 14: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=) 15: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=) 16: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=) 17: 3231322e31382e3131342e302f32342d3234203d3e203133333335.roa (hash: vO05yPqpp4iOUltzxMrFn4LhWc4dalJCoS4kQJCbZB8=) 18: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: K/AgWhdBwRNuHNiBHXtZ25SaRir/NPec0zhFlGbzmks=) 19: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: cUer1fFgoUaMXBv/Ofy3VHFv8QPdEE9BGuKF+6jEGKA=) 20: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=) 21: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=) 22: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=) 23: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=) 24: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: EGBFBscvQ1YWstG9kbxkZOotMsNA8UcpxsIuwRfrnH4=) 25: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: q2CusaPkf+9tq5tpeWHdsbDXlriozRiwrVa0ak4+VcM=) 26: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=) 27: 38352e3230392e3232392e302f32342d3234203d3e2039333034.roa (hash: TKqHRwCUVnc7CRdC56DXSH6l4ApVuAdNtL61vrXPyTg=) 28: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=) 29: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: wXll8iGOq5bo/V4iKTWa0gWLbXOr0lpoVBYORUbUhI0=) 30: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: Hiowcu87+rnRP4VBm949hK9/XoAe1JP45hqg/KNcyVc=) 31: 36322e332e32302e302f32342d3234203d3e2039333034.roa (hash: 753vkBqDOJEpN/a5gmm4zhX9VKR3lQ+josL1BYJMcL8=) 32: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: LvALS0QzJUIn2y2aM1WJBNeefzd38B8yBzedKpN4nB8=) 33: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=) 34: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: tMu2dDNgxRe+VDjoQWDh2D5B14b9X3sh+JRsGfPn8q4=) 35: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: u4qzpzCcpcy7ZWgFmuZevTcx8Lt6OWg/1tciNCqCqYM=) 36: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: D9JHULDkg0M1wT0M8wVTfDaCTJBMJIgvLcTza5q7f5c=) 37: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: tJ6A7U51n+GmIhk14F2miBqIQAmoLzM8TwWGKyDUw/Q=) 38: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: SFZs2oMtwnIqXXrJ+wKfTfWn9twNuN9+e0KffE2zcpE=) 39: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: fFoVzPmBBS3RRm+U3RPtjG4VEvF1de7uQ6FGaPF9XH0=) 40: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=) 41: 3231322e31382e3131342e302f32342d3234203d3e20323635393139.roa (hash: hab4hIGZSaDFVIiuhh8M27XjJNP2UIzC71avB4BPqKc=) 42: 322e35392e36332e302f32342d3234203d3e20323039363432.roa (hash: RaxlZegunO166WwhSyVfZX5K+6/U6SSWAALUv6FWG/c=) 43: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 10:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:54:46:2b:e0:bf:6a:8b:9d:78:b1:d5:50:6e:42:78:9b:5c:2e:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Validity Not Before: Aug 20 08:47:30 2025 GMT Not After : Aug 21 10:19:30 2025 GMT Subject: CN=17B5EFCA40AAFAB354E5A30C6B2F7A34114E29CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:30:0e:c8:fa:cd:20:ce:97:02:e7:49:2d:fb: 71:2c:0d:8a:10:98:51:8c:f3:55:75:9c:d6:f5:b0: 98:9d:74:03:8b:d3:37:6a:d0:65:41:f3:a8:f8:45: 62:b5:f7:8a:ce:a2:84:b5:cf:84:d6:33:a4:82:9c: 08:1b:8d:77:12:e5:8b:1e:fc:cf:ba:a8:f7:81:0e: 25:4f:ee:34:8e:b0:ed:1c:fe:7b:92:33:ec:3f:c0: 83:3b:20:0b:48:aa:50:d8:5a:95:35:70:05:05:12: 78:75:06:e6:47:74:0b:95:c6:64:99:6d:cb:ab:74: bb:27:a2:ca:43:58:c9:a1:22:74:2b:98:cd:b9:dc: e0:88:53:85:b0:1d:67:04:ce:10:42:df:bf:b3:59: d7:b9:91:a6:5d:63:eb:9a:77:75:9c:92:4b:2f:26: 13:66:28:e5:7a:da:f8:a6:d5:b7:27:d8:c8:89:c7: 4e:dc:6f:c0:12:61:66:9a:13:be:43:c8:64:25:a6: e8:36:89:40:5b:21:c0:8e:c3:06:14:3f:7b:ce:9d: 83:57:4b:39:cf:62:5a:e8:fd:b9:74:a0:9c:fc:cc: 80:e6:63:55:a9:ea:d9:ee:7d:91:5f:98:66:ef:27: b3:36:58:65:a8:b1:0e:6c:a8:eb:f6:3c:8f:bc:6e: 1c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B5:EF:CA:40:AA:FA:B3:54:E5:A3:0C:6B:2F:7A:34:11:4E:29:CE X509v3 Authority Key Identifier: keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:95:5d:70:ea:85:54:1f:c2:13:0a:32:37:bc:b9:d7:84:79: 0c:46:bf:85:cf:6a:b4:94:e6:15:1e:9e:63:84:97:2a:fa:e9: 92:b5:89:cf:4f:a1:6e:3c:ac:1e:56:e6:42:f9:e5:1b:76:fa: 9e:04:60:0f:82:3a:f2:e9:c9:a0:d4:fd:c7:a3:d2:61:66:20: 37:28:44:c8:de:85:6f:0f:91:18:0f:80:16:8d:a0:e4:b4:18: 2b:08:73:43:81:58:2d:f3:a6:05:c6:8d:fb:d4:d2:f1:fe:10: 44:8f:b0:76:71:8d:ae:fd:b9:24:c3:bd:d1:2d:4f:a7:79:dc: b8:0a:27:59:e3:4b:73:67:23:12:86:5d:f3:49:75:9c:4e:e5: 85:f3:2f:ec:4d:3d:98:69:61:b9:34:54:8b:b9:27:0c:0a:75: 82:94:5d:d8:25:66:96:5b:c1:59:77:18:03:86:9d:36:3f:83: 14:2a:79:a5:a4:92:ec:a6:4d:4c:f5:7c:b4:84:e5:b9:12:cc: 22:7e:16:28:da:16:b6:c8:f6:14:a4:56:af:c2:e7:e5:d8:78: 87:39:a0:8b:41:4e:5c:f1:b0:6a:1e:d3:39:68:26:09:09:b5: b8:9f:e8:7b:db:27:68:50:15:4d:b3:65:5e:30:3b:52:7e:4f: 71:fe:e0:11 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUK1RGK+C/aoudeLHVUG5CeJtcLo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz NTRmNDVjNjAeFw0yNTA4MjAwODQ3MzBaFw0yNTA4MjExMDE5MzBaMDMxMTAvBgNV BAMTKDE3QjVFRkNBNDBBQUZBQjM1NEU1QTMwQzZCMkY3QTM0MTE0RTI5Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgMA7I+s0gzpcC50kt+3EsDYoQ mFGM81V1nNb1sJiddAOL0zdq0GVB86j4RWK194rOooS1z4TWM6SCnAgbjXcS5Yse /M+6qPeBDiVP7jSOsO0c/nuSM+w/wIM7IAtIqlDYWpU1cAUFEnh1BuZHdAuVxmSZ bcurdLsnospDWMmhInQrmM253OCIU4WwHWcEzhBC37+zWde5kaZdY+uad3Wckksv JhNmKOV62vim1bcn2MiJx07cb8ASYWaaE75DyGQlpug2iUBbIcCOwwYUP3vOnYNX SznPYlro/bl0oJz8zIDmY1Wp6tnufZFfmGbvJ7M2WGWosQ5sqOv2PI+8bhynAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUF7XvykCq+rNU5aMMay96NBFOKc4wHwYDVR0j BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW UFJjWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xZjk4MjNkMC0w ODU1LTQxZjItYWM0Ni01OWEyZTk4ZGE3MzYvMS9BOTQyMEU2QzZGMjRCMEU0MjJE QTdGRTdFNDIwRUY1MDM1NEY0NUM2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5VdcOqFVB/CEwoyN7y5 14R5DEa/hc9qtJTmFR6eY4SXKvrpkrWJz0+hbjysHlbmQvnlG3b6ngRgD4I68unJ oNT9x6PSYWYgNyhEyN6Fbw+RGA+AFo2g5LQYKwhzQ4FYLfOmBcaN+9TS8f4QRI+w dnGNrv25JMO90S1Pp3ncuAonWeNLc2cjEoZd80l1nE7lhfMv7E09mGlhuTRUi7kn DAp1gpRd2CVmllvBWXcYA4adNj+DFCp5paSS7KZNTPV8tITluRLMIn4WKNoWtsj2 FKRWr8Ln5dh4hzmgi0FOXPGwah7TOWgmCQm1uJ/oe9snaFAVTbNlXjA7Un5Pcf7g EQ== -----END CERTIFICATE-----Generated at Thu Aug 21 02:24:40 2025 by rpki-client