$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft File: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft (raw, json) Hash identifier: 0b492q9tlQcJ4bNxAlHPwljLT0+Wl+QLGNXdKefGU9w= Subject key identifier: 76:63:49:20:64:EA:36:7D:6D:99:8D:B9:DF:31:B5:1E:26:0B:C5:2D Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Certificate serial: 40F75DC35FB56D134FCE3CBEE7DE494F1425F478 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft Manifest number: 049B Signing time: Thu 18 Sep 2025 11:40:29 +0000 Manifest this update: Thu 18 Sep 2025 11:35:29 +0000 Manifest next update: Fri 19 Sep 2025 15:04:29 +0000 Files and hashes: 1: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (hash: sY/xAuh6Mg68YWt7c8TloEoU7TIBsTXsCx6tRGi7xp4=) 2: 3138382e3136342e3135352e302f32342d3234203d3e203631333137.roa (hash: W1I8woHaqJ6kU4xjFwKm1g6uV7UZ51m6Dv8R/7Dp0Oc=) 3: 3138382e3136342e3135342e302f32342d3234203d3e2039333034.roa (hash: Xrl4k2Y1ZQnjBYts0VWEIYeb2G4oTSJ6MhQs1UM8vvM=) 4: 3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa (hash: pkJz5L9iLZRF+OIvLDh3t2xUInq31L6An4us+3j1eD0=) 5: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl (hash: 5OSU/wksLgMuNwXCoivEHKVQHKwUFjpqo9g3AGOQ9vc=) 6: 3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa (hash: PjHq1CK+fSk+5WuONiKJilG5oXTFh0dZnkKMEZVNP8E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Sep 2025 12:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f7:5d:c3:5f:b5:6d:13:4f:ce:3c:be:e7:de:49:4f:14:25:f4:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Validity Not Before: Sep 18 11:35:29 2025 GMT Not After : Sep 19 15:04:29 2025 GMT Subject: CN=7663492064EA367D6D998DB9DF31B51E260BC52D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:04:26:98:5b:9b:b5:b5:ba:b3:da:9d:ec:e4: 9b:c2:7b:66:c4:5d:49:1a:47:23:ab:61:54:78:14: f4:f6:b4:56:a9:43:1c:34:65:7a:f5:e9:a2:c9:ca: e9:86:2c:1c:46:fc:9b:a7:c3:aa:47:47:19:c8:5e: f7:3d:aa:6a:86:1b:3d:eb:df:92:60:95:f8:b4:a9: e6:82:b3:83:eb:01:ec:68:26:29:cb:43:15:26:51: 7a:22:f2:d0:0a:d7:f6:2f:41:8c:06:33:91:a5:0f: 81:48:8f:10:73:09:c4:b3:5f:c5:04:0a:c6:fc:ba: 08:c5:56:81:9e:92:1a:cf:63:b1:52:ac:4c:16:58: 46:71:d9:16:e2:20:d0:2b:b7:20:c8:69:02:34:71: 0e:ea:ec:d9:a5:59:dd:ba:13:f9:a9:3d:1c:13:c4: f7:d9:1a:ce:06:17:40:ce:d0:21:e0:c8:9e:3b:a7: 0f:be:8f:4d:d9:46:65:f1:0d:7c:85:df:0d:c4:f0: 64:60:1a:4d:bf:e1:42:92:0c:51:d5:27:31:07:c1: 9d:34:ae:64:48:03:2b:fb:a8:34:75:1b:53:66:fb: 53:18:c8:c5:2a:ec:fd:5b:ad:7f:6c:70:5f:b3:cc: d7:c1:b0:f2:53:ed:22:65:48:ad:e6:14:e6:cb:78: 78:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:63:49:20:64:EA:36:7D:6D:99:8D:B9:DF:31:B5:1E:26:0B:C5:2D X509v3 Authority Key Identifier: keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ee:1d:a4:ac:45:d6:00:58:e6:c3:06:c9:8f:d1:68:00:ee: c9:f6:05:b2:07:61:d9:a4:74:f6:ee:c6:b7:bd:67:23:16:ca: 4b:26:d9:8f:b8:98:40:e3:2f:ec:1c:0c:7d:67:bd:47:17:5d: ea:3a:17:03:40:26:6e:bd:cd:9a:2d:ea:d0:c0:63:9f:39:00: 18:b1:2e:00:ae:3c:3b:ea:54:0e:0f:84:0e:e8:d6:a8:ed:87: b0:60:dd:ab:43:ad:b0:61:74:16:cd:86:fa:26:5f:d2:9a:ab: 43:5e:7f:7c:ca:72:63:93:73:b4:74:38:c2:2e:a5:3c:9e:5e: 4d:7d:1b:04:0e:4d:b8:85:ed:47:05:95:7c:d0:80:ab:a5:10: 3e:8a:6b:65:b4:ea:c5:90:ba:93:70:13:5f:b3:37:88:a1:94: c2:7e:6c:31:e4:6e:9d:99:4d:ff:63:84:28:49:3e:08:08:42: b3:6e:56:c6:07:0d:5e:f1:e0:29:c8:58:28:ef:2c:f4:f4:dc: ee:ab:0c:82:18:7f:fa:58:eb:e8:0a:4a:0e:16:c0:f3:de:64: 3f:6b:29:55:d6:b7:0e:a0:57:72:c0:fd:4a:ab:22:a7:a4:c3: c0:c4:76:4e:d1:37:6f:6a:43:57:90:cf:a4:3d:e8:d7:39:71: bd:f3:8e:db -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQPddw1+1bRNPzjy+595JTxQl9HgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz MGY3YzRjYTAeFw0yNTA5MTgxMTM1MjlaFw0yNTA5MTkxNTA0MjlaMDMxMTAvBgNV BAMTKDc2NjM0OTIwNjRFQTM2N0Q2RDk5OERCOURGMzFCNTFFMjYwQkM1MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0BCaYW5u1tbqz2p3s5JvCe2bE XUkaRyOrYVR4FPT2tFapQxw0ZXr16aLJyumGLBxG/Junw6pHRxnIXvc9qmqGGz3r 35Jglfi0qeaCs4PrAexoJinLQxUmUXoi8tAK1/YvQYwGM5GlD4FIjxBzCcSzX8UE Csb8ugjFVoGekhrPY7FSrEwWWEZx2RbiINArtyDIaQI0cQ7q7NmlWd26E/mpPRwT xPfZGs4GF0DO0CHgyJ47pw++j03ZRmXxDXyF3w3E8GRgGk2/4UKSDFHVJzEHwZ00 rmRIAyv7qDR1G1Nm+1MYyMUq7P1brX9scF+zzNfBsPJT7SJlSK3mFObLeHgrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUdmNJIGTqNn1tmY253zG1HiYLxS0wHwYDVR0j BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE M3hNby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzAzMDg5MC1m NmUwLTQxMGMtYmM5OS1hZjA5MjFkMWMzYTQvMC84QjlCQTlBRERFOTYzNTc3N0JG NTg2RkQ0OTNFMTRDRDMwRjdDNENBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+4dpKxF1gBY5sMGyY/R aADuyfYFsgdh2aR09u7Gt71nIxbKSybZj7iYQOMv7BwMfWe9Rxdd6joXA0Ambr3N mi3q0MBjnzkAGLEuAK48O+pUDg+EDujWqO2HsGDdq0OtsGF0Fs2G+iZf0pqrQ15/ fMpyY5NztHQ4wi6lPJ5eTX0bBA5NuIXtRwWVfNCAq6UQPoprZbTqxZC6k3ATX7M3 iKGUwn5sMeRunZlN/2OEKEk+CAhCs25WxgcNXvHgKchYKO8s9PTc7qsMghh/+ljr 6ApKDhbA895kP2spVda3DqBXcsD9Sqsip6TDwMR2TtE3b2pDV5DPpD3o1zlxvfOO 2w== -----END CERTIFICATE-----Generated at Thu Sep 18 13:29:23 2025 by rpki-client