$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft File: A912092CFA11F378852F52266C793AB678233205.mft (raw, json) Hash identifier: +tSZP5KKIECz3M144QbProqrBorrJsM7ctNDXzYP6S8= Subject key identifier: 65:50:93:2F:2A:6E:F7:36:3A:70:12:28:89:A5:5B:C7:03:83:EE:28 Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205 Certificate serial: 63566FFAE37E6D90A758F88A806666C2307D2A67 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft Manifest number: 5A Signing time: Wed 20 Aug 2025 07:43:08 +0000 Manifest this update: Wed 20 Aug 2025 07:38:08 +0000 Manifest next update: Thu 21 Aug 2025 11:33:08 +0000 Files and hashes: 1: 326130393a353463333a613030303a3a2f34302d313238203d3e20323039383734.roa (hash: ca9GKU5mOXVUfI7Du4XvHpxs7R00F6F4l3yz+1HGWmo=) 2: A912092CFA11F378852F52266C793AB678233205.crl (hash: enmbHl5wDVPtD42tX/Z7yvW9B04g1664o6Jcz1JNOf4=) 3: 3131312e3233352e3135312e302f32342d3332203d3e20323135313437.roa (hash: vew4LNWCVofm5qe2BK5sopfMvrn3w6T63/5S4aLPNx0=) 4: 326130393a353463333a613130313a3a2f34382d313238203d3e20323135313437.roa (hash: 90FGOeqqLptd8qlXcfjJgcF07gJvM1oxc2QmHLuTM1Y=) 5: 326130393a353463333a393030303a3a2f33362d3438203d3e20323131303636.roa (hash: xreaSsj1MwZ82lmTtkcSGJaQcTRS3sQKh+9ELDbqOW0=) 6: 326130393a353463333a613130303a3a2f34382d313238203d3e20323135313437.roa (hash: 5vA7kcahmkhnv7Pjx7uA7TrGRG+XVrMF+mKhb2vEG5U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 04:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:56:6f:fa:e3:7e:6d:90:a7:58:f8:8a:80:66:66:c2:30:7d:2a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912092CFA11F378852F52266C793AB678233205 Validity Not Before: Aug 20 07:38:08 2025 GMT Not After : Aug 21 11:33:08 2025 GMT Subject: CN=6550932F2A6EF7363A70122889A55BC70383EE28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6c:3b:86:37:d2:f9:55:dd:43:bd:d6:b5:3b: 0b:d2:0e:cf:4b:2a:3a:b7:ac:b3:30:2b:d8:dd:df: 86:83:b7:83:44:f3:42:43:54:f2:00:12:cd:9d:45: 8d:e7:1c:8f:13:56:8c:87:f9:4d:3d:51:c1:2e:fb: 44:1b:c3:93:bd:b8:4d:47:b5:46:f7:57:30:9f:ba: 17:bd:de:97:55:9d:08:7d:3d:14:5f:d5:c1:e7:16: 06:98:1d:b9:be:a1:b3:d0:f9:48:b8:38:18:81:90: bf:41:e7:f8:7a:90:70:ac:bc:87:c6:83:30:4c:c2: a9:82:a9:81:f1:ee:9d:83:27:e7:55:ea:54:70:85: 3c:4f:17:a4:38:7c:b7:2a:ab:24:a7:57:52:7f:f3: 66:6f:9b:35:d8:48:2a:7e:16:a8:5d:2b:84:97:c9: fe:66:8e:54:3f:46:87:4f:6e:fe:d6:41:9c:71:60: 92:cc:e4:22:6c:7c:75:67:e9:e1:38:d0:f2:2e:f0: 33:36:ff:ca:3a:a6:2a:7f:ff:a6:de:bd:9e:2c:87: 88:e1:fa:c0:ce:cc:f8:7b:00:ef:52:d5:bb:37:f7: cd:0c:e0:a5:34:4f:05:0e:22:b0:cd:e1:b3:bd:b9: ba:35:62:c6:bd:da:43:c7:52:33:81:2c:f0:73:5c: 6c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:50:93:2F:2A:6E:F7:36:3A:70:12:28:89:A5:5B:C7:03:83:EE:28 X509v3 Authority Key Identifier: keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:d5:7c:3b:41:a5:95:e7:ce:bb:31:8f:e3:22:cb:08:00:33: d4:af:0d:d0:d0:d6:71:4e:a3:f6:b9:9a:52:f9:a3:5f:38:41: 39:71:14:fd:16:34:52:fc:83:64:a1:c5:b9:82:84:5d:cb:86: 84:71:66:56:2c:b8:6b:2d:c6:9d:0e:40:20:71:29:48:19:36: 77:44:8e:49:bd:d7:04:06:16:46:ad:f4:fd:c9:ef:d9:7c:ba: ef:92:71:4d:54:8b:34:97:da:9f:be:ce:3a:4e:98:ad:d4:93: 65:3d:e0:f6:0c:c1:63:82:27:e1:c0:16:f2:c0:a0:fd:c2:ce: 29:58:d3:4e:03:b9:2e:34:d7:54:21:bf:68:c2:c5:1c:60:c9: 97:4f:2c:09:48:4d:54:fc:b0:9b:d6:7c:d9:9f:12:15:00:0f: f2:23:a6:2a:7d:3a:2b:f5:ae:30:d9:1e:80:61:d3:61:c1:ad: f1:58:46:8d:c2:24:70:91:50:52:71:c5:0a:f3:73:d0:18:e8: 11:12:3e:63:37:ce:d5:47:32:02:88:e3:0d:98:d9:2c:c1:f2: b6:fd:ba:11:17:ba:71:28:4b:62:7a:53:58:1f:ab:bb:1b:65: dd:1c:ae:56:bc:08:63:85:bd:4d:ca:cc:8e:f3:69:38:2e:6e: 70:69:13:2d -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUY1Zv+uN+bZCnWPiKgGZmwjB9KmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3 ODIzMzIwNTAeFw0yNTA4MjAwNzM4MDhaFw0yNTA4MjExMTMzMDhaMDMxMTAvBgNV BAMTKDY1NTA5MzJGMkE2RUY3MzYzQTcwMTIyODg5QTU1QkM3MDM4M0VFMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfbDuGN9L5Vd1Dvda1OwvSDs9L Kjq3rLMwK9jd34aDt4NE80JDVPIAEs2dRY3nHI8TVoyH+U09UcEu+0Qbw5O9uE1H tUb3VzCfuhe93pdVnQh9PRRf1cHnFgaYHbm+obPQ+Ui4OBiBkL9B5/h6kHCsvIfG gzBMwqmCqYHx7p2DJ+dV6lRwhTxPF6Q4fLcqqySnV1J/82ZvmzXYSCp+FqhdK4SX yf5mjlQ/RodPbv7WQZxxYJLM5CJsfHVn6eE40PIu8DM2/8o6pip//6bevZ4sh4jh +sDOzPh7AO9S1bs3980M4KU0TwUOIrDN4bO9ubo1Ysa92kPHUjOBLPBzXGxLAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUZVCTLypu9zY6cBIoiaVbxwOD7igwHwYDVR0j BBgwFoAUqRIJLPoR83iFL1ImbHk6tngjMgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIzMzIwNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIz MzIwNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1m MDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNS9BOTEyMDkyQ0ZBMTFGMzc4ODUy RjUyMjY2Qzc5M0FCNjc4MjMzMjA1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAttV8O0GllefOuzGP4yLL CAAz1K8N0NDWcU6j9rmaUvmjXzhBOXEU/RY0UvyDZKHFuYKEXcuGhHFmViy4ay3G nQ5AIHEpSBk2d0SOSb3XBAYWRq30/cnv2Xy675JxTVSLNJfan77OOk6YrdSTZT3g 9gzBY4In4cAW8sCg/cLOKVjTTgO5LjTXVCG/aMLFHGDJl08sCUhNVPywm9Z82Z8S FQAP8iOmKn06K/WuMNkegGHTYcGt8VhGjcIkcJFQUnHFCvNz0BjoERI+YzfO1Ucy AojjDZjZLMHytv26ERe6cShLYnpTWB+ruxtl3RyuVrwIY4W9TcrMjvNpOC5ucGkT LQ== -----END CERTIFICATE-----Generated at Wed Aug 20 16:11:14 2025 by rpki-client