$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft File: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft (raw, json) Hash identifier: oGrBakFodE7B0qMWFHrPf+BOSFRP0f57fwDmBQTHEB0= Subject key identifier: 09:FE:7C:25:02:EC:90:99:B6:D2:5F:99:DF:23:70:23:8C:5E:A4:80 Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 18931F941464403BC1DD0BFDF28F53A663F8B3E1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft Manifest number: 57 Signing time: Wed 20 Aug 2025 14:53:42 +0000 Manifest this update: Wed 20 Aug 2025 14:48:42 +0000 Manifest next update: Thu 21 Aug 2025 15:31:42 +0000 Files and hashes: 1: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (hash: +z0Qc7b7Pm0YyOUO4LNkttIVrmFKBrkfbPc/zfrDGTk=) 2: 326130363a313238333a386235303a3a2f34342d313238203d3e203131393637.roa (hash: uHWxG8kbtQnmFudwlF37/C8QH9hN+DOmVsGuiAGSHA4=) 3: 326130363a313238333a386230363a3a2f34382d313238203d3e20323133343133.roa (hash: LRX/tmRuBv04fybDYPCQD9lanhfB9HcnVGBpgk5TB5I=) 4: 326130363a313238333a383030333a3a2f34382d313238203d3e20323131303636.roa (hash: hYctHpFLZLrdZbOQKdUp5gBu76GVnDNrzAlSQDHkf8o=) 5: 326130363a313238333a386234303a3a2f34342d313238203d3e20323036363034.roa (hash: jMnRJSIBI/vK/lYdVRqiwNEB3nWoaFm4KV/BQrtgZJI=) 6: 326130363a313238333a386230373a3a2f34382d313238203d3e20323133343133.roa (hash: +LsHR6M/sTp/p218VbiQsurX+iZ7B1G4y6ss3VYV+wk=) 7: 326130363a313238333a386330303a3a2f34302d3438203d3e20323131303636.roa (hash: PjXxPcOFpDrt2/J2rK7/G4zujo+FjWZMvwQwdSAXtCs=) 8: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (hash: 1HZdS5easOTzXqx+g13vhM2s0dAHymCGMDkKOH0yoVM=) 9: 326130363a313238333a386630303a3a2f34302d313238203d3e20323131303636.roa (hash: r9X5RrRgRpcWg3o0DruFRABIQJqS6HSEppSZqEX6zcQ=) 10: 326130363a313238333a386233303a3a2f34342d313238203d3e20323036363034.roa (hash: 6akZ76xc8TUp4h4v2+1J9UTOFvzSXYR8sBgcIPy6fb4=) 11: 326130363a313238333a386235303a3a2f34342d313238203d3e20323036363034.roa (hash: 4reeNbN2ltLfVHU8qpdiliEFl9Ty64DXI/3VJ3ck1VA=) 12: 326130363a313238333a386230343a3a2f34382d313238203d3e20323133343133.roa (hash: 8yrqf+s2g5bw5KG3SyAhrNgPcZSxkzmGXTu5AJ2lCBE=) 13: 326130363a313238333a386230333a3a2f34382d313238203d3e20323133343133.roa (hash: 9C302LCYvU+i5JLVJOH4qrTiJnLXDxCLo10Ivgf+geE=) 14: 326130363a313238333a386230313a3a2f34382d313238203d3e20323037363935.roa (hash: 6vaetUt7c9H+9aVn0u2KQRLHDuQZ528YxlkFqIwRrOU=) 15: 326130363a313238333a386230323a3a2f34382d313238203d3e20323037363935.roa (hash: C58CzcueBZLGi3BZhVC1snl3/HIsG8jd8UxQItY5XqQ=) 16: 326130363a313238333a386235303a3a2f34342d313238203d3e20323133343133.roa (hash: dOOOW/84MfRn0FlaAgKIZlDC6z44Kx+QMeFNOWgEBPc=) 17: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (hash: B3lCmzbMTTF4JEYaqxL5SocH8KSyx1ZOaOngpc1c9xY=) 18: 326130363a313238333a386530303a3a2f34302d3438203d3e20323131303636.roa (hash: zh/0wPRro0Lk1m44hGThxyXQVvLxur06EBEe3Ht0Czk=) 19: 326130363a313238333a386230353a3a2f34382d313238203d3e20323133343133.roa (hash: BwWttvdgE87UTe5eUGryLDR20yKZtRoPBaxCc1jPa9E=) 20: 326130363a313238333a386130303a3a2f34302d3438203d3e20323131303636.roa (hash: 0UwJEaqOuZNt12cGdgRNs6h5sg/UqNE4VWJ7LVXWQWc=) 21: 326130363a313238333a633131663a3a2f34382d313238203d3e20323131303636.roa (hash: MNB/IgLpAkC8BkMxVhMNWcW04HjOlc0Y//dSW/FFyhU=) 22: 326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa (hash: fhZLtEdAcpVe5ZEFnO5ghX4tvoay2QbvYeWWfzdmNM4=) 23: 326130363a313238333a386230303a3a2f34302d3438203d3e20323131303636.roa (hash: E/viu9vBcRpgXLkYydv4L1bSWYconnC9RhF31aVMM/0=) 24: 326130363a313238333a386232303a3a2f34342d313238203d3e20323036363034.roa (hash: 5OdJnaKVh+px3V/b0A5vN4t5kNQD310BBRMdi9J8Cio=) 25: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl (hash: U3TSzFKT3exP9mYCYl1JDnbkNANygmD5IbK+pcKYvMw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 15:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:93:1f:94:14:64:40:3b:c1:dd:0b:fd:f2:8f:53:a6:63:f8:b3:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Aug 20 14:48:42 2025 GMT Not After : Aug 21 15:31:42 2025 GMT Subject: CN=09FE7C2502EC9099B6D25F99DF2370238C5EA480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:81:5a:a6:e2:a5:2b:f3:af:48:9e:69:66:b3: 54:ad:f6:f1:70:0b:da:fb:35:00:36:07:ca:93:37: 4f:24:d4:e8:4d:4f:79:60:74:9f:3d:43:bf:40:fa: 6a:19:c7:13:55:77:03:03:f0:ca:87:ad:7a:3d:fc: e9:9d:a8:d5:b4:07:19:10:fc:c1:4f:69:56:53:61: 6f:46:13:ef:c3:40:89:a3:13:42:87:a8:e4:b0:aa: b6:13:c0:e9:67:51:f0:71:9f:61:1b:25:6b:de:4b: 55:4a:b4:ec:c0:0a:8c:ad:3e:d7:82:7e:0d:a8:38: a4:01:a3:2d:bf:3e:5c:7c:ff:46:b3:2b:36:f4:f0: 15:80:22:62:e7:96:7d:d0:0f:7d:ac:8b:ea:92:5d: d8:d0:58:40:55:09:4f:f5:6c:4f:67:15:6d:69:dd: 27:8e:b6:59:70:63:48:28:9d:13:5b:f0:50:c2:18: 6a:28:06:44:88:e2:ae:d7:95:96:17:ee:ab:96:7c: 7c:e6:22:60:cd:03:9a:d4:0f:8d:3c:5a:b8:69:a5: c9:5a:97:c8:70:84:5d:9f:82:15:5d:d3:c0:6c:37: e6:e5:d6:f7:cb:e7:f6:48:c6:5c:73:3c:ca:c1:07: 66:2f:b7:5c:0a:63:ff:d9:4a:a4:60:93:6a:fd:5a: 65:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FE:7C:25:02:EC:90:99:B6:D2:5F:99:DF:23:70:23:8C:5E:A4:80 X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:9e:a0:5a:e7:d9:a7:38:22:c6:d2:59:24:48:dd:03:bb:66: 66:b3:4e:3f:f4:58:bf:22:79:b5:70:f9:08:81:74:40:2d:e7: dd:41:d9:ed:ed:4a:7d:79:d5:2a:4d:1c:1a:3e:65:d5:30:e4: fc:fa:a8:28:e1:b7:24:6b:1c:b9:fc:d1:03:4a:ca:04:20:7d: 58:d6:50:a1:c3:07:0d:a0:6c:88:5e:80:b3:89:59:a7:d7:a2: 40:01:e6:ec:6a:c9:9c:a0:8b:73:4c:f3:4b:9c:61:f6:d5:f0: f6:fa:98:df:30:2b:fd:70:8c:94:1b:0b:ad:5b:cc:34:17:03: ca:6a:c7:37:0a:3b:82:f2:6b:f7:f9:ee:9a:c6:75:c0:00:92: f8:2a:9c:fb:53:f7:df:ab:05:b1:50:f8:5c:c7:86:cd:0c:49: 70:72:39:59:be:72:5c:9b:45:8c:20:9e:1d:11:6f:86:d0:ad: 32:ab:0a:bb:c5:e5:85:c1:0e:55:9f:9e:e6:46:2d:c9:e9:02: b3:c2:90:44:1d:16:9c:66:b3:04:55:3d:2f:fe:f5:d8:76:18: 1a:7d:56:e2:c2:67:bb:48:78:d9:51:40:e9:4c:8d:14:db:2e: 57:34:2c:3b:3c:df:dd:b9:4b:a6:f8:59:93:ec:44:30:c9:58: 4b:ae:3a:6a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGJMflBRkQDvB3Qv98o9TpmP4s+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNTA4MjAxNDQ4NDJaFw0yNTA4MjExNTMxNDJaMDMxMTAvBgNV BAMTKDA5RkU3QzI1MDJFQzkwOTlCNkQyNUY5OURGMjM3MDIzOEM1RUE0ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEgVqm4qUr869Inmlms1St9vFw C9r7NQA2B8qTN08k1OhNT3lgdJ89Q79A+moZxxNVdwMD8MqHrXo9/OmdqNW0BxkQ /MFPaVZTYW9GE+/DQImjE0KHqOSwqrYTwOlnUfBxn2EbJWveS1VKtOzACoytPteC fg2oOKQBoy2/Plx8/0azKzb08BWAImLnln3QD32si+qSXdjQWEBVCU/1bE9nFW1p 3SeOtllwY0gonRNb8FDCGGooBkSI4q7XlZYX7quWfHzmImDNA5rUD408Wrhppcla l8hwhF2fghVd08BsN+bl1vfL5/ZIxlxzPMrBB2Yvt1wKY//ZSqRgk2r9WmWXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUCf58JQLskJm20l+Z3yNwI4xepIAwHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi82L0Q1NEQ0NDNC NjdDMUNDNUVBMUI1NDQ2RUEwNjQzQ0FDM0E3QThCMkMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC0nqBa 59mnOCLG0lkkSN0Du2Zms04/9Fi/Inm1cPkIgXRALefdQdnt7Up9edUqTRwaPmXV MOT8+qgo4bckaxy5/NEDSsoEIH1Y1lChwwcNoGyIXoCziVmn16JAAebsasmcoItz TPNLnGH21fD2+pjfMCv9cIyUGwutW8w0FwPKasc3CjuC8mv3+e6axnXAAJL4Kpz7 U/ffqwWxUPhcx4bNDElwcjlZvnJcm0WMIJ4dEW+G0K0yqwq7xeWFwQ5Vn57mRi3J 6QKzwpBEHRacZrMEVT0v/vXYdhgafVbiwme7SHjZUUDpTI0U2y5XNCw7PN/duUum +FmT7EQwyVhLrjpq -----END CERTIFICATE-----Generated at Thu Aug 21 04:53:18 2025 by rpki-client