$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft File: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json) Hash identifier: tY8OD1rjWsrgAVamJ5aN+uFArWh8zFYLYZott1FMuu4= Subject key identifier: 0F:66:38:77:B4:18:72:14:A5:26:6A:6C:D8:96:5B:67:64:EF:66:5C Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 21041E2E283EAE517106FA4EFDA8991C3EB73A39 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft Manifest number: 024E Signing time: Sun 07 Sep 2025 15:58:44 +0000 Manifest this update: Sun 07 Sep 2025 15:53:44 +0000 Manifest next update: Mon 08 Sep 2025 19:32:44 +0000 Files and hashes: 1: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 8fwqZHGyIJyFYdJn0gwpv+qKZFLFFwexw2Z/QOknvfY=) 2: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: QP4KPs363lKNvbDMC91nWR64EDb9a5wYXaiiUC4k7Hs=) 3: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: IeK6ZG/g9V25xfR3xKZZdyq5xuMwonnHdhMMCLRMWBo=) 4: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: mgbh+id7sfJxNC8FBIA9w2AVClblyfoF7d8LLx0Ph9g=) 5: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: AFFRnUz3ZkXlNWHrOUoEHsMbF+ootZBGJu6N5TM//OE=) 6: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: JVdP0q01IdpmOHNHM/8N7QIeZGO9fY1B0zhs290wioo=) 7: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: XJo8jS2djpRteJlKSIzBy0GSOcq3Jj/2wBDjV1PmcuQ=) 8: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: rLVUcUxyRgJtw6VSAGlKyA8uqmBel4P5gDB+BMhpgCc=) 9: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: lL21MUDpM3YDFXY+VNPjMEqMt9/EFafQb01ArsWLAjk=) 10: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: dkDlXn7ZTKwdhEvN1AyaOINvq0aj0JnSzR14swqFK7s=) 11: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: 33Hc4k2qb/SFtHgCtF148ZPS40TPUk0mIWne3Kl1fjs=) 12: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 7nhFTtPjQhKd1Ac2yjZIA1kYzFwc8dF19rkGkZd+QFk=) 13: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: isp+v1bbWY3zX+eoFLAf4eK3r9/zMrMmocZ2PNCW2Rw=) 14: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: 06Oq8kkXsOv0rKoRYz/dx2UXUSYf9kyOjrjjxWn2c2o=) 15: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: j14pv+Fih0N85ic38d12TDY0uRhDLdNY7cvkmnI17jw=) 16: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: 3t/0qmEuc7HUJ6jbuOuPnmd3ve4/XpcLhj4VdVBS4pk=) 17: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: gQv5NI8fa+cTBzk0tpepQG6QGKXWkVIlxityrSNAUjQ=) 18: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: HscFYsQcMtvjpDQJk86+k68Lr7MoMlx0VU02QHyOcGk=) 19: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: LiQaiw5undZF8O9ZPrbB+SuBZXPDpvcvnNafAQKgteo=) 20: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: z2fbMMdTRhRUpcDHMD2rvY/J1s4P2i8N3FhzYltODNc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 09:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:04:1e:2e:28:3e:ae:51:71:06:fa:4e:fd:a8:99:1c:3e:b7:3a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Sep 7 15:53:44 2025 GMT Not After : Sep 8 19:32:44 2025 GMT Subject: CN=0F663877B4187214A5266A6CD8965B6764EF665C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:d5:03:12:96:cf:0a:3d:70:42:ed:0d:12: e4:5c:be:8e:32:1f:19:7e:91:14:0e:86:de:1b:d3: ad:43:3e:64:46:10:a5:8b:f7:ae:e1:5f:92:fc:d8: 54:76:a3:24:8c:73:8b:2f:35:2a:5c:ff:30:79:7b: 47:bb:40:57:2b:c4:64:5b:d7:6c:ce:12:a0:8b:4a: a1:02:d8:3c:0c:15:b5:1d:ab:f4:40:04:d1:19:57: 95:3c:87:95:b7:ed:b0:d3:8c:80:79:a1:70:5f:2d: 9c:cd:34:c8:d1:f6:bd:2a:4a:aa:37:5e:4d:28:c4: d4:8d:d7:bd:4d:d4:4a:61:76:b4:23:90:b8:f3:c5: b5:ce:00:23:80:e6:92:84:f6:75:42:44:d7:2a:f6: ae:4d:1c:c3:c4:7a:ab:9f:74:69:29:6b:59:77:94: 9b:11:6b:91:1c:38:04:94:b3:ff:38:7f:62:b8:a2: 36:01:51:51:e5:93:78:25:64:66:f9:be:99:23:1a: 48:73:bf:3e:1a:1f:0b:b0:e3:54:e4:4f:bd:29:01: e0:e2:f2:88:be:38:f0:d4:fc:36:c9:8c:12:e9:eb: 22:d5:a4:e0:54:77:18:91:44:4a:24:d0:8b:44:d1: 99:b6:a5:dc:1f:37:f7:8a:ab:cf:f6:87:d5:3c:a8: 1b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:66:38:77:B4:18:72:14:A5:26:6A:6C:D8:96:5B:67:64:EF:66:5C X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b4:35:80:31:51:5d:cd:2d:59:10:37:08:bb:95:15:4d:4e: 34:79:b7:dd:f8:3e:57:fd:e7:0f:78:cb:c6:86:4c:29:56:f8: 6b:08:f1:c3:51:8f:0c:e2:63:5f:65:21:cf:73:1d:85:47:f5: c6:55:ef:1e:8e:7c:6b:22:71:15:8b:d0:c2:d9:80:0d:fb:07: 88:c9:10:a5:ae:3b:31:c2:27:e1:bd:5d:c7:a6:3e:a6:5a:e7: 67:52:c1:08:5e:1c:57:6b:ad:45:c7:a0:08:1a:f5:35:42:c0: 79:40:4e:54:26:97:0b:b8:a5:1c:64:8b:c6:38:8c:af:8e:f8: 79:07:65:e3:5f:bb:88:90:f7:30:5d:bf:35:f6:76:10:c8:4d: 07:a8:13:4e:8b:b0:c5:52:ed:34:b7:4b:2e:96:c4:34:60:e9: 04:d6:4a:eb:53:9c:be:94:88:aa:23:e8:76:72:e0:46:ea:d1: 88:31:e5:2f:c8:fc:36:90:bf:db:63:d4:29:35:78:1f:05:db: 21:3e:aa:de:f4:76:a4:08:35:9d:53:89:6b:58:c1:e7:18:ab: 5a:03:31:97:5b:f2:5a:0c:49:5a:f1:52:8f:5e:89:3f:6d:b4: d6:79:79:6b:e0:ec:44:81:2d:fb:d0:57:91:40:ff:a6:6d:d5: dc:b8:30:8b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIQQeLig+rlFxBvpO/aiZHD63OjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNTA5MDcxNTUzNDRaFw0yNTA5MDgxOTMyNDRaMDMxMTAvBgNV BAMTKDBGNjYzODc3QjQxODcyMTRBNTI2NkE2Q0Q4OTY1QjY3NjRFRjY2NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+L9UDEpbPCj1wQu0NEuRcvo4y Hxl+kRQOht4b061DPmRGEKWL967hX5L82FR2oySMc4svNSpc/zB5e0e7QFcrxGRb 12zOEqCLSqEC2DwMFbUdq/RABNEZV5U8h5W37bDTjIB5oXBfLZzNNMjR9r0qSqo3 Xk0oxNSN171N1EphdrQjkLjzxbXOACOA5pKE9nVCRNcq9q5NHMPEequfdGkpa1l3 lJsRa5EcOASUs/84f2K4ojYBUVHlk3glZGb5vpkjGkhzvz4aHwuw41TkT70pAeDi 8oi+OPDU/DbJjBLp6yLVpOBUdxiRREok0ItE0Zm2pdwfN/eKq8/2h9U8qBs5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUD2Y4d7QYchSlJmps2JZbZ2TvZlwwHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS80LzhFMDdEMzFD NjQ1MkY3QTZCMjRFNjNDRERDNDkwRTEyRTBBRkIzOEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQACtDWA MVFdzS1ZEDcIu5UVTU40ebfd+D5X/ecPeMvGhkwpVvhrCPHDUY8M4mNfZSHPcx2F R/XGVe8ejnxrInEVi9DC2YAN+weIyRClrjsxwifhvV3Hpj6mWudnUsEIXhxXa61F x6AIGvU1QsB5QE5UJpcLuKUcZIvGOIyvjvh5B2XjX7uIkPcwXb819nYQyE0HqBNO i7DFUu00t0sulsQ0YOkE1krrU5y+lIiqI+h2cuBG6tGIMeUvyPw2kL/bY9QpNXgf BdshPqre9HakCDWdU4lrWMHnGKtaAzGXW/JaDEla8VKPXok/bbTWeXlr4OxEgS37 0FeRQP+mbdXcuDCL -----END CERTIFICATE-----Generated at Sun Sep 7 18:57:17 2025 by rpki-client