$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: gEekpI7rNw50SXIO24zBN9RGKoE5jAezppj1pNwZHKE= Subject key identifier: 04:23:2B:8D:10:D9:FA:1E:F8:B4:87:34:35:58:FD:BF:1F:A2:56:0C Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 5D2C3AC07E2B8422853F35B014B4BC27902ACF27 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 0187 Signing time: Fri 06 Jun 2025 12:29:55 +0000 Manifest this update: Fri 06 Jun 2025 12:24:55 +0000 Manifest next update: Sat 07 Jun 2025 13:20:55 +0000 Files and hashes: 1: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: TNC4zrNVSYq6rg1HfzOLsFNL5cW5pcjjIopBseDA51Y=) 2: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: DO5U+zbxAW9dCHHkG8v0O5pLZTi9rHV+80EYsqI00GY=) 3: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: Dct84fH99mMy2/Om4r237/z3PSQqISCHW6lEF3QzJV8=) 4: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: NfdCiPZo2V7z2IR8DOEcP9s1WlT0wPdEK10WCc6hh18=) 5: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=) 6: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: R+o6n+RjWkxiRu/ckQJHanWEp0DumqtvHG3oGP82QQ8=) 7: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=) 8: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: xL09RaMvNnk3zcTxJYCpyR11r2WfajekNMt0OPCzbqM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 09:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:2c:3a:c0:7e:2b:84:22:85:3f:35:b0:14:b4:bc:27:90:2a:cf:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Jun 6 12:24:55 2025 GMT Not After : Jun 7 13:20:55 2025 GMT Subject: CN=04232B8D10D9FA1EF8B487343558FDBF1FA2560C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:cd:a5:69:f3:fb:c4:12:a7:30:1e:56:cd: 8e:4d:8a:fa:3f:77:09:2a:01:d6:4d:e1:68:91:16: 75:bf:0f:3b:fe:2c:0d:05:48:c8:11:fb:b5:f2:66: ce:7b:70:d3:b6:03:34:0c:5b:2f:7d:b4:17:95:16: b7:3e:05:73:f1:63:4a:1c:36:47:91:2e:8a:f1:73: 23:28:33:a7:5c:f5:3a:af:a4:09:3f:51:97:19:a3: 95:3f:15:97:fb:4e:4f:c3:3a:8a:35:b8:a9:3b:dd: e5:d4:46:75:84:79:f6:c9:d5:cf:c1:f5:e9:5f:66: 87:4c:b9:8d:69:1e:7c:52:fd:a2:3f:d5:99:9a:d6: 4b:f4:f0:c1:11:e4:77:3f:6e:b6:3a:9e:fb:12:be: 51:f4:04:03:ea:43:8a:07:66:fd:e4:59:96:de:f5: 37:7b:d2:d6:e0:e4:5e:b7:1f:88:e1:18:fc:f0:ca: 6a:3c:dd:3c:ce:b9:6c:00:a0:22:1b:88:71:d5:ba: 01:70:5b:e5:75:55:d1:88:f1:5c:da:db:28:1f:8c: 13:14:b2:25:e9:5c:a3:ef:03:6b:5a:98:a6:bf:60: f5:29:07:5c:bd:26:5b:c1:56:66:c8:71:3f:2e:38: 1c:40:a6:ad:9d:23:89:89:ba:c9:4b:f9:9a:04:7d: 27:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:23:2B:8D:10:D9:FA:1E:F8:B4:87:34:35:58:FD:BF:1F:A2:56:0C X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:7d:a6:a4:ab:71:e9:36:23:55:25:63:b6:b4:4a:d2:7a:8f: 40:ad:fd:9e:f1:49:27:a3:82:3a:1e:eb:12:c3:9b:18:a7:ea: 7a:85:3a:28:70:4a:09:0b:bd:0a:e3:19:38:aa:a1:b0:0a:60: 62:0e:e9:d7:98:8c:21:c0:20:cb:1b:2a:40:ae:75:bb:ab:7d: 35:04:6e:39:74:dc:40:27:80:1b:65:f0:e5:ed:7d:4f:a8:aa: bb:08:7f:d8:1a:3e:2b:37:b2:62:f7:a5:a1:81:b6:a7:3b:42: 23:ac:17:7a:02:c5:28:93:85:54:8e:f2:de:d6:14:82:4c:42: 72:bb:e6:af:89:f4:db:b0:ba:4e:fe:2d:bd:af:c1:f7:f8:00: 87:b7:45:ea:2e:dd:23:00:6a:f0:b9:0a:92:db:90:c4:4d:4e: ef:b9:8d:3a:4a:21:03:0c:39:c4:5b:95:8b:bd:31:56:a8:6a: 01:b7:7b:fb:b6:cd:a7:45:d5:7f:21:2e:2f:14:62:a2:fc:ad: a7:41:23:08:11:6f:a4:f8:4c:30:0d:b1:3b:86:5b:83:b0:9f: c9:7b:35:f1:62:5c:0e:da:a9:09:8c:97:17:80:a0:7d:be:48: 44:1b:56:fe:a0:24:59:f9:b2:b3:f3:dd:98:05:4a:3b:95:aa: a3:c8:2e:ef -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXSw6wH4rhCKFPzWwFLS8J5AqzycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNTA2MDYxMjI0NTVaFw0yNTA2MDcxMzIwNTVaMDMxMTAvBgNV BAMTKDA0MjMyQjhEMTBEOUZBMUVGOEI0ODczNDM1NThGREJGMUZBMjU2MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn1c2lafP7xBKnMB5WzY5Nivo/ dwkqAdZN4WiRFnW/Dzv+LA0FSMgR+7XyZs57cNO2AzQMWy99tBeVFrc+BXPxY0oc NkeRLorxcyMoM6dc9TqvpAk/UZcZo5U/FZf7Tk/DOoo1uKk73eXURnWEefbJ1c/B 9elfZodMuY1pHnxS/aI/1Zma1kv08MER5Hc/brY6nvsSvlH0BAPqQ4oHZv3kWZbe 9Td70tbg5F63H4jhGPzwymo83TzOuWwAoCIbiHHVugFwW+V1VdGI8Vza2ygfjBMU siXpXKPvA2tamKa/YPUpB1y9JlvBVmbIcT8uOBxApq2dI4mJuslL+ZoEfSdFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUBCMrjRDZ+h74tIc0NVj9vx+iVgwwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5faak q3HpNiNVJWO2tErSeo9Arf2e8Ukno4I6HusSw5sYp+p6hToocEoJC70K4xk4qqGw CmBiDunXmIwhwCDLGypArnW7q301BG45dNxAJ4AbZfDl7X1PqKq7CH/YGj4rN7Ji 96WhgbanO0IjrBd6AsUok4VUjvLe1hSCTEJyu+avifTbsLpO/i29r8H3+ACHt0Xq Lt0jAGrwuQqS25DETU7vuY06SiEDDDnEW5WLvTFWqGoBt3v7ts2nRdV/IS4vFGKi /K2nQSMIEW+k+EwwDbE7hluDsJ/JezXxYlwO2qkJjJcXgKB9vkhEG1b+oCRZ+bKz 892YBUo7laqjyC7v -----END CERTIFICATE-----Generated at Fri Jun 6 19:35:07 2025 by rpki-client