$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: N5Hiokf/2cfljIxnoTppd6cYdmerYMauDroBhPYguYk= Subject key identifier: A6:E1:04:EB:CA:B0:BC:01:45:C4:39:BA:9A:9F:FC:EC:9F:A7:15:81 Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 67239DCE8A8895BDB558846B516FB0B1A484709D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 03B3 Signing time: Sun 07 Sep 2025 01:18:56 +0000 Manifest this update: Sun 07 Sep 2025 01:13:56 +0000 Manifest next update: Mon 08 Sep 2025 04:17:56 +0000 Files and hashes: 1: 39332e39352e3131332e302f32342d3234203d3e203136323736.roa (hash: cS6LWz+NEHJoa0EQVb5z92UR8C9jaztUFOxHHwpRPsY=) 2: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: ytmG0XsyzUpFZsKED8X515ggLBtMbJsUhfu2dkAZQ3o=) 3: 39332e39352e3131322e302f32342d3234203d3e2039333034.roa (hash: ogcbgRhECNKG4+F/6zpdBOh/u0edVYhkw7e/c907t3Y=) 4: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: 8ja7Z+swVGTraKxezjgHzXG2GlS/dFRID6jPUC87mFI=) 5: 39332e39352e3131372e302f32342d3234203d3e203231383539.roa (hash: Un+iljfa6BQzZnEghHopYhiwkN2j6KkmFMitjF4eFLQ=) 6: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: qqVPSWZLREddEW4nL5NY3Bls+ZrG5ASHmT6xiutXttk=) 7: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: oaLDq7aS5NFaYNW1gUs7MDdZL5P0TUUEDkjRyQGla3w=) 8: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: iuam+Y72SFbVuzZ6DMbPvd9+i2O4uNgJ9aW8l1vNV9U=) 9: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: bvqtExc4o5GUJzraVc9CM0CC2GO3x6c+ohx4q9G/dgk=) 10: 39332e39352e3131342e302f32342d3234203d3e2039333034.roa (hash: AmPh9mqd0gwKu0juVvtCR9BPch+T6TfO2inFFXmyRM4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 04:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:23:9d:ce:8a:88:95:bd:b5:58:84:6b:51:6f:b0:b1:a4:84:70:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Sep 7 01:13:56 2025 GMT Not After : Sep 8 04:17:56 2025 GMT Subject: CN=A6E104EBCAB0BC0145C439BA9A9FFCEC9FA71581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:93:bc:00:dd:2c:5e:69:6e:84:39:0e:60:10: 81:92:42:df:be:43:15:0b:d1:20:2f:e7:4c:3b:57: 8f:e3:af:58:1d:23:73:66:f3:e0:72:ce:d5:48:dc: bf:1b:58:61:90:11:39:83:fd:74:3f:00:f7:36:38: e6:9b:aa:94:c8:55:d7:da:49:32:3b:3f:fe:c7:01: b6:48:86:d4:3a:d8:c7:57:25:7d:3d:93:8c:57:1d: 27:86:17:43:5d:f5:a8:b6:f5:0f:6f:28:d1:fa:da: 46:90:b4:92:f7:43:ed:a0:68:04:46:b3:e1:aa:76: 3b:36:07:c1:97:c5:0f:c6:55:ba:83:b9:90:db:b7: 03:b6:cd:63:55:2f:56:20:03:04:f8:6b:b1:89:07: 72:cb:f5:28:66:3e:3a:5f:fb:f8:ed:fc:96:bb:dc: 57:fc:41:bc:ef:65:55:3d:1b:e9:21:52:81:de:e7: 0a:0d:5d:80:99:90:fb:38:c2:c7:77:84:ff:bd:1a: 6a:1d:df:70:6b:64:ee:f8:3c:f8:32:2a:1f:e5:1a: 38:2f:f0:31:13:a6:fa:73:76:39:55:0e:35:6f:d5: b8:7f:d1:19:0e:85:a1:9e:66:c9:96:d2:78:54:38: 89:98:30:2d:cb:72:0a:9b:27:84:e3:1b:71:d6:cc: 44:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E1:04:EB:CA:B0:BC:01:45:C4:39:BA:9A:9F:FC:EC:9F:A7:15:81 X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ea:1c:f3:2a:b2:79:a7:e8:8c:e7:76:8a:0f:b3:2e:f6:0b: 1a:8b:66:82:a2:ce:f0:23:26:85:fa:46:cb:71:8f:1d:ff:6e: 24:a5:e1:3b:3c:b9:1c:81:00:08:7e:cd:30:a5:5f:f7:1c:d8: 99:ed:d6:ff:9c:80:28:8b:93:88:05:bc:17:a3:c1:60:51:22: c0:c5:68:ea:21:54:2c:85:09:27:4f:00:e7:25:f9:37:31:c2: 7f:95:64:fb:b5:ae:8d:96:48:a9:b1:27:49:d5:41:b0:05:de: b5:38:66:af:42:8d:db:8d:72:79:7d:7d:0a:00:60:31:e0:f5: a8:76:e9:14:31:c6:b3:0c:cb:80:c6:61:ce:1a:e6:16:e6:77: bc:52:a8:58:a4:83:cd:5f:4e:5b:9f:ab:96:32:36:61:67:2a: 02:35:9d:61:07:c9:57:39:3d:b4:48:e1:c1:fa:27:a1:7f:a6: 82:d1:6e:1a:e3:91:1b:38:57:e6:46:94:8b:cf:b4:53:70:e4: 79:0d:9c:b0:a6:94:0b:11:76:28:69:de:2e:81:7c:1f:5b:7e: ab:d1:45:86:d3:67:2e:73:25:a9:73:d0:f8:3c:9b:00:c2:93: 05:a9:31:13:4b:64:b0:78:25:76:f3:70:1b:97:f4:cd:80:0d: 28:3e:52:ae -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZyOdzoqIlb21WIRrUW+wsaSEcJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNTA5MDcwMTEzNTZaFw0yNTA5MDgwNDE3NTZaMDMxMTAvBgNV BAMTKEE2RTEwNEVCQ0FCMEJDMDE0NUM0MzlCQTlBOUZGQ0VDOUZBNzE1ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZk7wA3SxeaW6EOQ5gEIGSQt++ QxUL0SAv50w7V4/jr1gdI3Nm8+ByztVI3L8bWGGQETmD/XQ/APc2OOabqpTIVdfa STI7P/7HAbZIhtQ62MdXJX09k4xXHSeGF0Nd9ai29Q9vKNH62kaQtJL3Q+2gaARG s+Gqdjs2B8GXxQ/GVbqDuZDbtwO2zWNVL1YgAwT4a7GJB3LL9ShmPjpf+/jt/Ja7 3Ff8QbzvZVU9G+khUoHe5woNXYCZkPs4wsd3hP+9Gmod33BrZO74PPgyKh/lGjgv 8DETpvpzdjlVDjVv1bh/0RkOhaGeZsmW0nhUOImYMC3LcgqbJ4TjG3HWzEQxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUpuEE68qwvAFFxDm6mp/87J+nFYEwHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOoc8yqyeafojOd2ig+z LvYLGotmgqLO8CMmhfpGy3GPHf9uJKXhOzy5HIEACH7NMKVf9xzYme3W/5yAKIuT iAW8F6PBYFEiwMVo6iFULIUJJ08A5yX5NzHCf5Vk+7WujZZIqbEnSdVBsAXetThm r0KN241yeX19CgBgMeD1qHbpFDHGswzLgMZhzhrmFuZ3vFKoWKSDzV9OW5+rljI2 YWcqAjWdYQfJVzk9tEjhwfonoX+mgtFuGuORGzhX5kaUi8+0U3DkeQ2csKaUCxF2 KGneLoF8H1t+q9FFhtNnLnMlqXPQ+DybAMKTBakxE0tksHgldvNwG5f0zYANKD5S rg== -----END CERTIFICATE-----Generated at Sun Sep 7 15:16:54 2025 by rpki-client