$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: 35TMu9dDasaVDSGi317NfH5la1IJ03ClZU/cysIkqSI= Subject key identifier: 4C:F9:F5:03:8E:F0:64:3D:BF:75:11:32:AE:0D:5C:73:63:F6:91:FC Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 249A8D9C05C7148F0256070515DFFA09414CBCC6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 0215 Signing time: Sun 07 Sep 2025 12:38:14 +0000 Manifest this update: Sun 07 Sep 2025 12:33:14 +0000 Manifest next update: Mon 08 Sep 2025 15:51:14 +0000 Files and hashes: 1: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: OYFGGb9dMqAtV18cBeD3NbZ0TuwCvJXmn37LZwaW7zg=) 2: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: kB+1C0FcRg7BAqvhJ5H9ayuu2IPtgRXP6p7R4MmjivE=) 3: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: bjWKUcdJK3JxiL+GqIgQQNiLJnq1CfKPBgs/UuOHrJA=) 4: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: jAqeRW+G0tj75/HjlTu9upVrXQ/2AvwaP0ubMorKA1Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 09:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:9a:8d:9c:05:c7:14:8f:02:56:07:05:15:df:fa:09:41:4c:bc:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Sep 7 12:33:14 2025 GMT Not After : Sep 8 15:51:14 2025 GMT Subject: CN=4CF9F5038EF0643DBF751132AE0D5C7363F691FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a3:9e:f9:11:61:fe:52:87:c3:83:5d:d0:3b: 18:01:51:35:f5:cd:3e:ae:a5:d9:8a:8a:48:45:72: 67:68:7d:6b:54:67:03:2b:d5:3a:c3:88:d2:6c:a0: 1f:7c:f8:92:e4:f0:e9:a0:5d:1d:ba:4f:e4:15:dc: d9:85:86:02:c5:c4:03:7e:47:67:78:79:b2:8c:d3: fc:de:9c:3e:4e:27:c9:de:cf:a6:e3:7f:79:e6:98: 84:26:08:01:42:b2:6f:4f:ae:07:88:99:d5:80:fd: d1:7c:a6:71:15:41:78:5a:19:3f:43:25:d3:f7:69: b5:5a:64:bb:e7:7c:fd:a3:db:0c:74:99:24:54:bb: 47:65:c4:3b:10:30:5d:29:21:c0:79:ee:e9:ad:7c: 3e:47:af:c3:2c:aa:af:4b:14:1c:06:1a:cb:f6:7e: 67:b1:20:0d:8a:61:c1:8d:72:b7:30:b6:6d:e9:f3: 56:c5:08:b6:24:a3:dd:74:4d:ba:c4:2b:ae:2c:6b: e2:51:46:2e:a6:31:b7:97:20:c1:ca:16:76:32:59: 32:09:91:ad:b7:5a:9e:1b:5a:73:1a:71:66:19:bc: 79:66:70:fc:65:80:f1:5d:d8:f5:d3:ca:eb:77:40: ea:0a:0c:ac:7d:04:ba:46:44:37:0e:ac:91:0f:32: 6a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F9:F5:03:8E:F0:64:3D:BF:75:11:32:AE:0D:5C:73:63:F6:91:FC X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:cb:2a:b0:09:fa:8b:5a:58:a5:3a:85:56:68:ce:b0:bb:c5: 9e:2e:cb:30:62:42:d3:e9:65:24:45:df:42:f8:25:5b:e5:93: 5d:1a:a4:43:6e:56:90:23:dd:fc:32:39:30:f1:92:6d:55:33: b7:58:ad:2b:c5:45:ec:e5:bd:27:18:72:b9:f8:e6:47:86:fc: af:6f:15:a4:24:61:ab:2c:d4:21:47:74:f1:18:b9:d5:25:67: 5f:67:8d:af:6b:89:fd:98:b0:dd:d8:36:02:16:18:2a:c4:5c: f5:8d:f4:64:a4:8e:1a:68:37:ed:65:01:1a:15:85:6e:12:45: cb:5a:53:ef:24:a7:f5:e1:c1:47:70:ae:7c:ec:16:e4:6d:5e: 64:b9:24:6e:97:c8:fc:97:31:e3:47:bc:95:86:7b:3c:a8:04: 03:08:84:2e:55:cd:97:9c:85:9e:f2:a2:39:82:99:3c:e7:75: cf:4f:31:6d:82:a1:3d:1d:4c:df:22:1a:05:74:fe:74:1d:50: a6:e1:6a:05:df:74:26:85:36:14:eb:9c:8f:5e:42:b8:e0:38: 22:83:22:1c:86:5f:ca:0c:ca:18:35:3f:6a:ab:9c:d1:15:5a: 9c:4c:a2:24:12:83:59:0f:a8:f7:66:4f:eb:8d:06:1e:9e:48: c3:c5:f8:1f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJJqNnAXHFI8CVgcFFd/6CUFMvMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNTA5MDcxMjMzMTRaFw0yNTA5MDgxNTUxMTRaMDMxMTAvBgNV BAMTKDRDRjlGNTAzOEVGMDY0M0RCRjc1MTEzMkFFMEQ1QzczNjNGNjkxRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzo575EWH+UofDg13QOxgBUTX1 zT6updmKikhFcmdofWtUZwMr1TrDiNJsoB98+JLk8OmgXR26T+QV3NmFhgLFxAN+ R2d4ebKM0/zenD5OJ8nez6bjf3nmmIQmCAFCsm9PrgeImdWA/dF8pnEVQXhaGT9D JdP3abVaZLvnfP2j2wx0mSRUu0dlxDsQMF0pIcB57umtfD5Hr8Msqq9LFBwGGsv2 fmexIA2KYcGNcrcwtm3p81bFCLYko910TbrEK64sa+JRRi6mMbeXIMHKFnYyWTIJ ka23Wp4bWnMacWYZvHlmcPxlgPFd2PXTyut3QOoKDKx9BLpGRDcOrJEPMmrdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUTPn1A47wZD2/dREyrg1cc2P2kfwwHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB8yyqw CfqLWlilOoVWaM6wu8WeLsswYkLT6WUkRd9C+CVb5ZNdGqRDblaQI938Mjkw8ZJt VTO3WK0rxUXs5b0nGHK5+OZHhvyvbxWkJGGrLNQhR3TxGLnVJWdfZ42va4n9mLDd 2DYCFhgqxFz1jfRkpI4aaDftZQEaFYVuEkXLWlPvJKf14cFHcK587BbkbV5kuSRu l8j8lzHjR7yVhns8qAQDCIQuVc2XnIWe8qI5gpk853XPTzFtgqE9HUzfIhoFdP50 HVCm4WoF33QmhTYU65yPXkK44DgigyIchl/KDMoYNT9qq5zRFVqcTKIkEoNZD6j3 Zk/rjQYenkjDxfgf -----END CERTIFICATE-----Generated at Sun Sep 7 23:28:43 2025 by rpki-client