$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: Dmpt6kPmsNKXIMGESpihDk7fun/29RjaQmyVkx28704= Subject key identifier: 1D:67:71:01:CD:85:91:CF:96:63:F5:C4:13:8E:BA:FE:CA:44:C7:DD Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 2C5D5DD740CFB4D67D3ABD9DDF5A3AF2F601D924 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 0217 Signing time: Sun 07 Sep 2025 22:18:34 +0000 Manifest this update: Sun 07 Sep 2025 22:13:34 +0000 Manifest next update: Mon 08 Sep 2025 23:08:34 +0000 Files and hashes: 1: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: NfdCiPZo2V7z2IR8DOEcP9s1WlT0wPdEK10WCc6hh18=) 2: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: LZc2AksEahD5rzoxMFxve6nJwmwqwYYZ+BLhaadaDDA=) 3: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: SsdW0YpcJfef7CtWvRhhfCUEgjAhSHqFG1h0ACBR214=) 4: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: TNC4zrNVSYq6rg1HfzOLsFNL5cW5pcjjIopBseDA51Y=) 5: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=) 6: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=) 7: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: xL09RaMvNnk3zcTxJYCpyR11r2WfajekNMt0OPCzbqM=) 8: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: CqODojqpi9Nl0vA9nTM8PCkCeX9WJOZVYwMgpgNrkHM=) 9: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: pZyYX9vqAixKUDIqsxujnSVA6UfFKeJc5iZ4yNtLX48=) 10: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: DO5U+zbxAW9dCHHkG8v0O5pLZTi9rHV+80EYsqI00GY=) 11: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: R+o6n+RjWkxiRu/ckQJHanWEp0DumqtvHG3oGP82QQ8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 18:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:5d:5d:d7:40:cf:b4:d6:7d:3a:bd:9d:df:5a:3a:f2:f6:01:d9:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Sep 7 22:13:34 2025 GMT Not After : Sep 8 23:08:34 2025 GMT Subject: CN=1D677101CD8591CF9663F5C4138EBAFECA44C7DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:39:d0:c1:0f:a6:36:71:2d:55:cd:1e:6f:ad: 76:69:8e:63:44:92:e2:20:24:5b:18:6a:8e:e0:55: c1:a5:ee:4e:e3:86:f2:37:4d:ea:f5:53:48:a5:d4: a8:3c:4a:3a:45:72:40:32:2a:03:27:73:45:be:b8: a4:08:7e:06:8b:e8:07:6e:14:68:5a:70:60:01:52: 00:6a:bb:ab:9e:da:c0:59:ee:79:b0:cc:a7:48:14: ae:30:bc:d2:fa:8f:0c:f7:e3:13:57:6e:aa:65:e4: 41:8d:ee:c4:dd:7c:6a:68:17:e2:34:ab:81:fb:25: f3:0d:25:09:74:e6:31:b2:31:4f:69:f1:c2:4a:0d: f8:86:ce:6b:eb:24:49:e6:0b:1a:d5:3b:8f:96:fa: d7:9c:c6:73:32:ad:fe:40:b7:e9:4f:1d:28:2a:31: e7:3e:d5:ac:de:ec:87:76:ca:ba:da:2e:50:cf:50: 37:63:1f:98:7c:d8:1d:df:73:9e:fb:86:96:1a:eb: 48:7c:8c:00:3a:83:cc:ad:b8:27:bc:80:36:fc:57: ac:00:5c:2b:36:80:2b:7b:7b:58:03:4a:e3:44:f2: fa:6b:ff:0b:00:35:df:b2:8d:c9:99:8f:d1:53:3f: 8a:4e:f9:38:fa:fe:b2:3b:dc:d9:15:01:23:8f:a0: 75:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:67:71:01:CD:85:91:CF:96:63:F5:C4:13:8E:BA:FE:CA:44:C7:DD X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:36:e7:8e:9a:27:73:ff:f9:70:1c:80:54:9f:20:6e:0e:a6: 7d:02:70:f3:69:ec:2e:9f:63:8c:d6:3b:a8:77:ce:6b:3b:6c: 11:fd:d2:4a:23:60:e4:5b:70:45:49:a3:a9:c2:13:77:e4:b3: a6:6e:3a:16:ca:d2:25:7a:49:3e:4f:87:af:53:e5:10:21:2f: 49:80:88:2a:bf:74:44:0e:8d:9b:81:4c:6d:00:df:49:b3:e6: d0:45:be:e8:b3:51:2a:f0:42:8d:a2:72:47:7e:cf:67:62:03: f8:a2:89:c9:05:69:fb:7e:97:f1:78:08:de:14:c3:7b:c4:38: 31:d3:c6:66:ad:da:1e:d5:4e:dc:cd:0a:f6:66:4c:96:10:eb: f7:a2:67:c8:a0:62:0c:b4:a1:52:ae:e1:23:bf:f6:ce:d5:38: 22:b1:42:af:c1:24:48:e9:3d:10:75:cc:e3:45:1c:75:1b:bc: 8d:a9:10:73:74:e6:23:91:9d:5a:f9:fc:94:a1:2d:a6:32:9f: 8c:f5:88:ad:bd:cd:4a:66:de:75:38:15:c1:14:fb:be:43:b4: f9:a4:b3:e9:86:e4:93:7d:bb:84:b1:de:da:3d:9d:9d:a8:e2: 5c:10:55:35:a4:92:a7:1f:10:df:55:b6:a6:85:1f:19:59:24: f5:69:8f:2c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULF1d10DPtNZ9Or2d31o68vYB2SQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNTA5MDcyMjEzMzRaFw0yNTA5MDgyMzA4MzRaMDMxMTAvBgNV BAMTKDFENjc3MTAxQ0Q4NTkxQ0Y5NjYzRjVDNDEzOEVCQUZFQ0E0NEM3REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaOdDBD6Y2cS1VzR5vrXZpjmNE kuIgJFsYao7gVcGl7k7jhvI3Ter1U0il1Kg8SjpFckAyKgMnc0W+uKQIfgaL6Adu FGhacGABUgBqu6ue2sBZ7nmwzKdIFK4wvNL6jwz34xNXbqpl5EGN7sTdfGpoF+I0 q4H7JfMNJQl05jGyMU9p8cJKDfiGzmvrJEnmCxrVO4+W+tecxnMyrf5At+lPHSgq Mec+1aze7Id2yrraLlDPUDdjH5h82B3fc577hpYa60h8jAA6g8ytuCe8gDb8V6wA XCs2gCt7e1gDSuNE8vpr/wsANd+yjcmZj9FTP4pO+Tj6/rI73NkVASOPoHVBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUHWdxAc2Fkc+WY/XEE466/spEx90wHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCDNueO midz//lwHIBUnyBuDqZ9AnDzaewun2OM1juod85rO2wR/dJKI2DkW3BFSaOpwhN3 5LOmbjoWytIlekk+T4evU+UQIS9JgIgqv3REDo2bgUxtAN9Js+bQRb7os1Eq8EKN onJHfs9nYgP4oonJBWn7fpfxeAjeFMN7xDgx08Zmrdoe1U7czQr2ZkyWEOv3omfI oGIMtKFSruEjv/bO1TgisUKvwSRI6T0QdczjRRx1G7yNqRBzdOYjkZ1a+fyUoS2m Mp+M9Yitvc1KZt51OBXBFPu+Q7T5pLPphuSTfbuEsd7aPZ2dqOJcEFU1pJKnHxDf VbamhR8ZWST1aY8s -----END CERTIFICATE-----Generated at Mon Sep 8 08:35:36 2025 by rpki-client