$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft File: 21291D2963EE74682B10BECBA6060EF246C76881.mft (raw, json) Hash identifier: /nxW6pHUYLBOrmfj8/E4eVr+CMVBCppsUklUK3G3UE4= Subject key identifier: 19:5F:29:14:C1:43:18:82:01:43:B3:F4:41:1F:5C:35:1B:23:19:F3 Authority key identifier: 21:29:1D:29:63:EE:74:68:2B:10:BE:CB:A6:06:0E:F2:46:C7:68:81 Certificate issuer: /CN=21291D2963EE74682B10BECBA6060EF246C76881 Certificate serial: 6762C840BA0CCD801ACB05A2118823B93EAFDF57 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft Manifest number: 0F Signing time: Sun 07 Sep 2025 12:47:22 +0000 Manifest this update: Sun 07 Sep 2025 12:42:22 +0000 Manifest next update: Mon 08 Sep 2025 13:17:22 +0000 Files and hashes: 1: 21291D2963EE74682B10BECBA6060EF246C76881.crl (hash: pSlbOVccO+k4XAQFiLsnIbfGXVMddnbipueZEnErJOA=) 2: 326131343a373538333a323030303a3a2f34312d313238203d3e20323133343133.roa (hash: qcv62vhft+CfRefcIljQMYwhTtHw5pqiJA6YzH0JoaE=) 3: 326131343a373538333a323038303a3a2f34362d313238203d3e20323035393431.roa (hash: kC7ihYm/R5OERXYsLtyhxzyEmlKI1XwHLSptM6n0vvg=) 4: 326131343a373538333a323030303a3a2f33362d313238203d3e20323035393431.roa (hash: bttdf07pV56EPNWCClejJ5VLezHQTqirYk24CtzpecY=) 5: 326131343a373538303a666639303a3a2f34342d313238203d3e20323035393431.roa (hash: 5FD/Mehv7v0xNezRDRW9iBPyN5Dfwk8GJ9l323IIqtY=) 6: 326131343a373538333a326663303a3a2f34322d313238203d3e20323039393531.roa (hash: jIJw+Ij9NG2RfUUb/WG8RYGFziJgDuus3WTSfe1Q8Q0=) 7: 326131343a373538333a323038343a3a2f34362d313238203d3e20323035393431.roa (hash: PTSU8qGNCimGfVZLMLacuvM/VXxIUmWAazoLI57rq4o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 09:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:62:c8:40:ba:0c:cd:80:1a:cb:05:a2:11:88:23:b9:3e:af:df:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21291D2963EE74682B10BECBA6060EF246C76881 Validity Not Before: Sep 7 12:42:22 2025 GMT Not After : Sep 8 13:17:22 2025 GMT Subject: CN=195F2914C14318820143B3F4411F5C351B2319F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b9:9b:8e:7d:ab:cf:15:6a:a7:a2:8a:13:99: bb:b0:21:d8:f4:21:a8:bf:01:5f:e6:09:7c:69:ac: 16:4e:d4:7d:db:be:38:06:70:dd:0f:ce:5a:71:64: a1:fc:79:6d:b4:18:ba:13:93:45:e2:41:f4:e7:57: 0a:78:c8:7a:ab:64:4c:0a:07:8d:ec:6a:8a:82:23: a8:d3:4b:bd:3f:b6:71:82:79:2b:fa:15:93:fd:01: 88:23:ab:99:c9:8f:79:5d:00:e7:01:ed:1a:42:80: 02:fa:08:17:5c:ad:36:97:9b:1f:ed:47:c8:ba:c7: 88:d8:03:e8:be:a6:42:f1:85:98:be:7c:5a:bf:56: 12:9d:30:74:ac:54:2a:81:0a:43:1b:23:f4:a6:5b: 2b:b8:af:41:5b:13:5f:3e:76:e7:e9:82:85:94:6c: d4:f5:f9:a0:6a:06:b5:51:d8:a2:7e:14:64:82:0d: 5b:5a:f8:13:01:c7:e6:be:cd:85:4d:24:2b:14:96: c0:fa:b1:96:78:1c:a4:b7:5d:58:12:57:2a:a6:b7: e1:be:e7:43:86:6a:87:f3:ce:98:0f:a7:5d:13:9b: ee:2b:22:a3:c2:ef:5a:24:39:0d:3d:bf:75:29:12: e5:ef:0c:32:d1:1e:fe:8b:4c:2f:bc:14:f3:ea:9f: 1f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5F:29:14:C1:43:18:82:01:43:B3:F4:41:1F:5C:35:1B:23:19:F3 X509v3 Authority Key Identifier: keyid:21:29:1D:29:63:EE:74:68:2B:10:BE:CB:A6:06:0E:F2:46:C7:68:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21291D2963EE74682B10BECBA6060EF246C76881.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/8/21291D2963EE74682B10BECBA6060EF246C76881.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:31:f7:41:e8:92:a1:57:e0:8f:ad:27:1c:9b:6f:d9:59:98: 1a:c3:d3:ae:21:f7:65:a6:e8:7a:70:e9:ca:3f:49:9e:b7:0a: ea:3d:1d:71:ea:26:98:b4:61:94:64:3f:4a:0b:5c:15:92:55: 62:8e:14:e8:5a:f0:ad:ee:6a:1c:b1:41:38:9c:09:a8:1f:7b: df:73:d8:55:4c:7a:c8:2f:8e:a4:d0:9e:15:3c:60:58:6e:3a: 3d:b7:f6:8a:b3:6e:87:94:dd:63:c6:1b:5f:ad:c0:59:83:5b: 71:32:f3:50:62:46:5e:2b:f3:f2:34:08:fe:31:48:f8:32:50: 9c:69:c4:a3:53:e1:66:ed:7e:d9:7f:9d:2b:0d:4b:f9:69:4f: bf:60:a9:fa:70:2e:87:aa:3d:11:e9:b4:4e:a7:43:6c:11:c1: be:ad:d0:d5:cd:5d:26:24:5c:29:8b:1f:76:3f:d0:34:25:f3: d4:97:91:67:75:b4:2a:6f:cd:05:a8:f1:e4:fa:d8:5b:25:78: 97:a9:2c:85:fd:cd:7b:54:ba:9e:d6:ce:44:08:c4:e0:9f:bf: 71:21:7b:b9:5d:6a:4a:7c:9f:d5:bd:37:ec:b2:77:2b:67:11: 9a:f7:5c:43:12:49:bf:01:b9:ab:80:29:97:20:8c:46:30:13: 51:3f:47:8f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZ2LIQLoMzYAaywWiEYgjuT6v31cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEyOTFEMjk2M0VFNzQ2ODJCMTBCRUNCQTYwNjBFRjI0 NkM3Njg4MTAeFw0yNTA5MDcxMjQyMjJaFw0yNTA5MDgxMzE3MjJaMDMxMTAvBgNV BAMTKDE5NUYyOTE0QzE0MzE4ODIwMTQzQjNGNDQxMUY1QzM1MUIyMzE5RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2uZuOfavPFWqnoooTmbuwIdj0 Iai/AV/mCXxprBZO1H3bvjgGcN0PzlpxZKH8eW20GLoTk0XiQfTnVwp4yHqrZEwK B43saoqCI6jTS70/tnGCeSv6FZP9AYgjq5nJj3ldAOcB7RpCgAL6CBdcrTaXmx/t R8i6x4jYA+i+pkLxhZi+fFq/VhKdMHSsVCqBCkMbI/SmWyu4r0FbE18+dufpgoWU bNT1+aBqBrVR2KJ+FGSCDVta+BMBx+a+zYVNJCsUlsD6sZZ4HKS3XVgSVyqmt+G+ 50OGaofzzpgPp10Tm+4rIqPC71okOQ09v3UpEuXvDDLRHv6LTC+8FPPqnx8/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUGV8pFMFDGIIBQ7P0QR9cNRsjGfMwHwYDVR0j BBgwFoAUISkdKWPudGgrEL7LpgYO8kbHaIEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzgvMjEyOTFEMjk2M0VFNzQ2ODJCMTBCRUNCQTYwNjBFRjI0NkM3Njg4MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMTI5MUQyOTYzRUU3NDY4MkIxMEJFQ0JB NjA2MEVGMjQ2Qzc2ODgxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi84LzIxMjkxRDI5 NjNFRTc0NjgyQjEwQkVDQkE2MDYwRUYyNDZDNzY4ODEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPMfdB 6JKhV+CPrSccm2/ZWZgaw9OuIfdlpuh6cOnKP0metwrqPR1x6iaYtGGUZD9KC1wV klVijhToWvCt7mocsUE4nAmoH3vfc9hVTHrIL46k0J4VPGBYbjo9t/aKs26HlN1j xhtfrcBZg1txMvNQYkZeK/PyNAj+MUj4MlCcacSjU+Fm7X7Zf50rDUv5aU+/YKn6 cC6Hqj0R6bROp0NsEcG+rdDVzV0mJFwpix92P9A0JfPUl5FndbQqb80FqPHk+thb JXiXqSyF/c17VLqe1s5ECMTgn79xIXu5XWpKfJ/VvTfssncrZxGa91xDEkm/Abmr gCmXIIxGMBNRP0eP -----END CERTIFICATE-----Generated at Sun Sep 7 23:28:41 2025 by rpki-client