$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft File: 020F7ED217FC36532E6B045CFBCCDA68A6604620.mft (raw, json) Hash identifier: pnXQEF6XFAyMtu4o3KL7r6b/ReDXMbvK4eN8I5VCdMk= Subject key identifier: 9B:CE:BE:DD:65:85:DD:F1:5F:73:EF:75:9B:0B:9F:D3:AC:73:DA:52 Authority key identifier: 02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20 Certificate issuer: /CN=020F7ED217FC36532E6B045CFBCCDA68A6604620 Certificate serial: 32DFE81F6111CAB95EEA649BA2D7354C9829323C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft Manifest number: 10 Signing time: Mon 08 Sep 2025 21:05:44 +0000 Manifest this update: Mon 08 Sep 2025 21:00:44 +0000 Manifest next update: Tue 09 Sep 2025 21:35:44 +0000 Files and hashes: 1: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: k0slLXQGak8JfXgcycld4UCv11bkqqJyVwy8WgUs0W4=) 2: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: BfxFUd5DTechXRUy4Ex3ytqAtMEr8QPJBcDEM0dDVlg=) 3: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: 9WwOZQ+czh53N90Wic7WKUZpN9yKrnRBc/mSIwdZviM=) 4: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: xTMyG8vk7HfhKOphzDUHjsL1N+HXzTu0fnBjhyB6AKQ=) 5: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: fPBlj/OX226nVSvX0NnbhELuUhpZ2u/Ytd/uYZbhMTA=) 6: 020F7ED217FC36532E6B045CFBCCDA68A6604620.crl (hash: lDendK37Qs13bNBVx3BpWHngpb7mck1BnKM3N6doHEk=) 7: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eJoFXZz3vH/PzqNzkkd4bWX4CpO0e/s0UWWhyH7ohGo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 21:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:df:e8:1f:61:11:ca:b9:5e:ea:64:9b:a2:d7:35:4c:98:29:32:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020F7ED217FC36532E6B045CFBCCDA68A6604620 Validity Not Before: Sep 8 21:00:44 2025 GMT Not After : Sep 9 21:35:44 2025 GMT Subject: CN=9BCEBEDD6585DDF15F73EF759B0B9FD3AC73DA52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:65:6f:fe:c3:f6:77:c3:16:a0:92:28:d1:3b: 60:21:14:d9:90:9d:75:0e:3d:c1:8d:f8:f2:fd:52: cc:50:7e:87:c9:5d:0c:60:de:a9:75:14:33:14:c7: 2b:ab:b2:4d:ba:e8:d5:f0:1a:87:db:e2:d1:92:cb: da:67:3b:fc:7c:50:2d:e6:b5:04:3c:9f:6f:95:ff: 31:c7:ad:36:45:c2:b1:0d:31:11:ec:14:19:4c:a8: be:0b:95:73:58:18:62:67:3e:1d:42:cf:98:79:9e: 61:e7:7d:c2:db:e3:6f:28:de:77:48:54:2f:57:7e: 5e:8b:cf:b5:e4:52:81:8d:ac:b0:f0:a9:77:38:9b: a7:03:63:c3:dd:f1:d5:33:ce:5c:ac:85:ff:e3:6b: 3e:cf:60:ca:19:da:df:76:6c:94:83:2f:6c:c0:7b: 6e:e0:2d:12:fd:d1:9e:65:bf:af:d5:89:e1:95:77: f7:74:9b:2c:85:d5:e7:0f:a8:b1:18:d5:4d:fe:63: 45:5e:07:fc:0f:5e:23:f5:de:52:2a:a9:e5:0b:23: 73:3a:7e:06:2c:ca:d9:05:bd:51:b1:d0:90:d2:ac: 03:2f:54:b8:b1:95:13:b2:97:84:7c:e4:2b:9e:88: 87:c8:70:3a:f0:ad:ab:8a:45:1b:c7:62:42:57:b3: 30:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CE:BE:DD:65:85:DD:F1:5F:73:EF:75:9B:0B:9F:D3:AC:73:DA:52 X509v3 Authority Key Identifier: keyid:02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:96:c9:5e:98:7e:50:6d:25:cf:c7:b2:8c:17:72:26:2b:79: 75:08:60:e1:3c:d0:5f:9e:ea:09:c6:72:af:d1:0e:2c:0b:2c: 93:fe:4f:0b:d6:ee:49:15:90:f0:fc:15:a6:a4:a1:2e:a4:80: ed:7a:b5:69:7d:a1:29:99:89:56:d6:48:4e:40:c2:bc:61:fc: 2c:ad:d0:a4:38:ad:21:e4:76:58:f5:76:9b:c4:29:c7:df:e3: df:32:bd:47:d9:dd:b8:c8:e4:9f:ec:c5:d7:3a:f1:92:a3:e7: b5:bc:14:57:32:43:56:77:27:2a:a6:57:86:a6:ee:5d:37:1b: 1a:83:eb:3c:ba:ab:05:68:01:30:22:4c:2c:06:1e:ab:0f:85: 01:e5:0d:c5:da:6f:0f:95:fa:5b:aa:f9:8b:74:e8:a2:6b:fa: b3:d3:7f:06:95:2d:e9:bd:74:4f:17:ae:1b:00:d3:00:7c:aa: 36:09:0b:0d:2e:f9:1d:cb:2e:e4:88:9c:67:ec:95:b6:d8:5f: 8b:2f:f2:df:e3:82:d6:a6:23:ab:65:c7:3a:98:18:53:83:8f: 1c:b7:49:b8:7a:47:c6:97:f6:ea:c1:b1:73:73:af:06:d2:f9: 12:3b:16:cf:d4:8c:cb:86:4f:07:d8:79:98:9e:23:5f:d3:23: ea:a0:88:73 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMt/oH2ERyrle6mSbotc1TJgpMjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRjdFRDIxN0ZDMzY1MzJFNkIwNDVDRkJDQ0RBNjhB NjYwNDYyMDAeFw0yNTA5MDgyMTAwNDRaFw0yNTA5MDkyMTM1NDRaMDMxMTAvBgNV BAMTKDlCQ0VCRURENjU4NURERjE1RjczRUY3NTlCMEI5RkQzQUM3M0RBNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIZW/+w/Z3wxagkijRO2AhFNmQ nXUOPcGN+PL9UsxQfofJXQxg3ql1FDMUxyursk266NXwGofb4tGSy9pnO/x8UC3m tQQ8n2+V/zHHrTZFwrENMRHsFBlMqL4LlXNYGGJnPh1Cz5h5nmHnfcLb428o3ndI VC9Xfl6Lz7XkUoGNrLDwqXc4m6cDY8Pd8dUzzlyshf/jaz7PYMoZ2t92bJSDL2zA e27gLRL90Z5lv6/VieGVd/d0myyF1ecPqLEY1U3+Y0VeB/wPXiP13lIqqeULI3M6 fgYsytkFvVGx0JDSrAMvVLixlROyl4R85CueiIfIcDrwrauKRRvHYkJXszAXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUm86+3WWF3fFfc+91mwuf06xz2lIwHwYDVR0j BBgwFoAUAg9+0hf8NlMuawRc+8zaaKZgRiAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWE3Yzk1NmMtMjJlYi00YmI4LWEzMjctYWQ5NzE2MTI5 NWJjLzAvMDIwRjdFRDIxN0ZDMzY1MzJFNkIwNDVDRkJDQ0RBNjhBNjYwNDYyMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wMjBGN0VEMjE3RkMzNjUzMkU2QjA0NUNG QkNDREE2OEE2NjA0NjIwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzVhN2M5NTZjLTIyZWItNGJiOC1hMzI3LWFkOTcxNjEyOTViYy8wLzAyMEY3RUQy MTdGQzM2NTMyRTZCMDQ1Q0ZCQ0NEQTY4QTY2MDQ2MjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAHlsle mH5QbSXPx7KMF3ImK3l1CGDhPNBfnuoJxnKv0Q4sCyyT/k8L1u5JFZDw/BWmpKEu pIDterVpfaEpmYlW1khOQMK8YfwsrdCkOK0h5HZY9XabxCnH3+PfMr1H2d24yOSf 7MXXOvGSo+e1vBRXMkNWdycqpleGpu5dNxsag+s8uqsFaAEwIkwsBh6rD4UB5Q3F 2m8PlfpbqvmLdOiia/qz038GlS3pvXRPF64bANMAfKo2CQsNLvkdyy7kiJxn7JW2 2F+LL/Lf44LWpiOrZcc6mBhTg48ct0m4ekfGl/bqwbFzc68G0vkSOxbP1IzLhk8H 2HmYniNf0yPqoIhz -----END CERTIFICATE-----Generated at Tue Sep 9 11:49:35 2025 by rpki-client