$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft File: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft (raw, json) Hash identifier: WKuu+DvLCmTw0U136fDzKpTsYDVmSyK+zGK38N5loXo= Subject key identifier: 79:63:D3:6A:DA:45:DC:05:56:7E:34:4A:C3:82:03:BA:9C:AE:7A:94 Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Certificate serial: 433C5F1AFFDD61D86B45BBB833C4BE136E015D15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft Manifest number: 0459 Signing time: Thu 31 Jul 2025 06:47:13 +0000 Manifest this update: Thu 31 Jul 2025 06:42:13 +0000 Manifest next update: Fri 01 Aug 2025 10:10:13 +0000 Files and hashes: 1: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl (hash: tfbc++o8hARpxPc4nf0P/SuE9quCnmDN2Z3wnG7gUkk=) 2: 3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa (hash: PjHq1CK+fSk+5WuONiKJilG5oXTFh0dZnkKMEZVNP8E=) 3: 3138382e3136342e3135342e302f32342d3234203d3e20383334.roa (hash: dqvIGRBXhp5junH3eUOhnE/BG+vJ7eBfp8AmwMBcjIk=) 4: 3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa (hash: pkJz5L9iLZRF+OIvLDh3t2xUInq31L6An4us+3j1eD0=) 5: 3138382e3136342e3135352e302f32342d3234203d3e203631333137.roa (hash: W1I8woHaqJ6kU4xjFwKm1g6uV7UZ51m6Dv8R/7Dp0Oc=) 6: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (hash: sY/xAuh6Mg68YWt7c8TloEoU7TIBsTXsCx6tRGi7xp4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 Aug 2025 09:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:3c:5f:1a:ff:dd:61:d8:6b:45:bb:b8:33:c4:be:13:6e:01:5d:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Validity Not Before: Jul 31 06:42:13 2025 GMT Not After : Aug 1 10:10:13 2025 GMT Subject: CN=7963D36ADA45DC05567E344AC38203BA9CAE7A94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2b:66:69:5d:71:12:ab:de:88:6b:41:a3:3e: 4e:52:92:a0:13:08:53:8f:5a:82:7f:cf:73:43:41: 99:00:06:7a:5c:08:5d:63:38:bb:5d:d4:88:ad:18: a1:a6:4d:63:b8:f5:41:30:46:d4:09:f1:63:22:76: 2f:c5:0b:60:b8:34:52:6a:71:b9:21:c3:5e:ee:90: 66:b6:10:d8:37:a4:9e:13:5f:1c:dd:8c:ce:d6:b5: 13:2c:22:23:6d:55:a7:dc:5e:fe:2f:38:25:a5:93: b1:74:75:12:52:65:5a:5a:84:a1:45:fc:a2:96:92: 97:e1:a1:a8:43:29:c6:f6:e9:2e:57:c3:8b:a6:fc: 92:32:db:34:9b:65:65:68:b6:b3:9f:ec:d2:78:c5: 20:0d:75:a8:3d:f5:ed:53:17:a2:22:40:31:c3:a2: 06:11:ed:e0:ef:dd:65:61:8b:11:2d:5e:9c:82:5a: 67:66:d9:09:42:e3:f8:c3:48:e5:73:4d:23:86:bf: d8:f4:0b:ce:64:8d:24:2e:f1:b0:08:e2:26:16:58: 90:b2:a1:b1:ed:08:68:31:e3:e8:ac:c8:a1:cc:63: e9:c0:64:53:dc:ec:23:a6:d2:ff:5c:bb:d7:9e:8e: 5e:4a:fe:73:f5:90:93:01:f0:c2:f2:6f:88:06:ce: 2f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:63:D3:6A:DA:45:DC:05:56:7E:34:4A:C3:82:03:BA:9C:AE:7A:94 X509v3 Authority Key Identifier: keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:88:53:20:3c:f6:80:a1:7f:9c:dd:a0:2f:e6:85:11:61:7e: ea:f4:de:d5:95:34:76:ee:fa:c1:47:65:bd:79:38:07:5d:8e: e8:bc:05:df:35:03:b3:aa:16:62:94:dd:f8:3d:ec:eb:ad:91: 2d:15:fc:41:40:20:4d:45:55:0c:48:2a:ad:e5:c6:f8:ce:ae: 99:ab:6f:c4:c5:c4:51:3e:23:5b:0d:7c:09:17:32:ce:84:28: b8:b1:00:ae:b4:f3:e1:9e:a7:ce:f5:b5:0f:16:0e:84:c9:86: 6c:0b:15:0c:4c:86:d5:11:25:91:a3:ef:93:26:35:51:54:3a: bb:b4:bb:b6:98:88:0b:e5:e2:53:3b:c6:36:df:3d:41:77:05: ab:2a:46:32:25:d8:00:0b:17:d1:3e:b5:95:e5:6b:cd:d5:ac: 26:07:d1:6d:07:f3:60:ea:85:8b:fd:1d:6c:9f:ca:d3:b3:30: c0:d4:51:b8:12:d8:bb:f1:d8:e2:0d:e1:cc:2b:d0:ad:15:21: b8:19:6c:ea:24:81:68:b6:47:ac:5a:10:02:30:f9:5f:71:89: 77:ba:bc:df:22:1e:bf:bc:8b:6b:c6:2f:0b:d0:5b:c0:7c:0b: 80:25:5b:d9:bf:fa:65:c8:07:b2:01:fe:6b:f7:64:ba:a7:19: 78:02:39:50 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQzxfGv/dYdhrRbu4M8S+E24BXRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz MGY3YzRjYTAeFw0yNTA3MzEwNjQyMTNaFw0yNTA4MDExMDEwMTNaMDMxMTAvBgNV BAMTKDc5NjNEMzZBREE0NURDMDU1NjdFMzQ0QUMzODIwM0JBOUNBRTdBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuK2ZpXXESq96Ia0GjPk5SkqAT CFOPWoJ/z3NDQZkABnpcCF1jOLtd1IitGKGmTWO49UEwRtQJ8WMidi/FC2C4NFJq cbkhw17ukGa2ENg3pJ4TXxzdjM7WtRMsIiNtVafcXv4vOCWlk7F0dRJSZVpahKFF /KKWkpfhoahDKcb26S5Xw4um/JIy2zSbZWVotrOf7NJ4xSANdag99e1TF6IiQDHD ogYR7eDv3WVhixEtXpyCWmdm2QlC4/jDSOVzTSOGv9j0C85kjSQu8bAI4iYWWJCy obHtCGgx4+isyKHMY+nAZFPc7COm0v9cu9eejl5K/nP1kJMB8MLyb4gGzi8bAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUeWPTatpF3AVWfjRKw4IDupyuepQwHwYDVR0j BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE M3hNby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzAzMDg5MC1m NmUwLTQxMGMtYmM5OS1hZjA5MjFkMWMzYTQvMC84QjlCQTlBRERFOTYzNTc3N0JG NTg2RkQ0OTNFMTRDRDMwRjdDNENBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYhTIDz2gKF/nN2gL+aF EWF+6vTe1ZU0du76wUdlvXk4B12O6LwF3zUDs6oWYpTd+D3s662RLRX8QUAgTUVV DEgqreXG+M6umatvxMXEUT4jWw18CRcyzoQouLEArrTz4Z6nzvW1DxYOhMmGbAsV DEyG1RElkaPvkyY1UVQ6u7S7tpiIC+XiUzvGNt89QXcFqypGMiXYAAsX0T61leVr zdWsJgfRbQfzYOqFi/0dbJ/K07MwwNRRuBLYu/HY4g3hzCvQrRUhuBls6iSBaLZH rFoQAjD5X3GJd7q83yIev7yLa8YvC9BbwHwLgCVb2b/6ZcgHsgH+a/dkuqcZeAI5 UA== -----END CERTIFICATE-----Generated at Thu Jul 31 18:09:20 2025 by rpki-client