$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft File: 51917E722DB03952D9056BED2F6BD4BF98B78976.mft (raw, json) Hash identifier: jUpPWiD4rS8RMhm554Zt1VBXNGUIsF3hUVlecg/pJCg= Subject key identifier: D6:7B:67:9D:64:1C:88:9A:24:40:4B:62:DC:87:9A:5B:89:B7:D8:A4 Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 2468C94F24F89B47785A4B73FC1C3003870F9E00 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft Manifest number: 9F Signing time: Sun 07 Sep 2025 16:47:08 +0000 Manifest this update: Sun 07 Sep 2025 16:42:08 +0000 Manifest next update: Mon 08 Sep 2025 16:49:08 +0000 Files and hashes: 1: 326131343a373538303a666635323a3a2f34382d3438203d3e20323039373130.roa (hash: vs66PWFM6L/hirNyhIXTRaz65c001j+IhkCdp8VdfS4=) 2: 51917E722DB03952D9056BED2F6BD4BF98B78976.crl (hash: a5J4asNICIVhQNukWnv6cUNQxWBFdrhl5yeGc3HbBZU=) 3: 326131343a373538303a666635313a3a2f34382d3438203d3e20323039373130.roa (hash: KcfiSDiqDvlLOqfaLqph9s6F4NvpySAcmNFiwDriyms=) 4: 326131343a373538303a3530303a3a2f34302d3430203d3e20323039373130.roa (hash: UtWLjV2JD6X8emwUC9bu8RyXGCD7bzymrTBVIEkaVv8=) 5: 326131343a373538303a666635343a3a2f34382d3438203d3e20323039373130.roa (hash: i7VkbN6Rb5CnHlmR8BF2dlC+Uq3PFV4wJTcaolWAu+U=) 6: 326131343a373538303a666635333a3a2f34382d3438203d3e20323039373130.roa (hash: UpFVw7x1NBf/Uix4G0zJEj+QV4riL3tEIjso5GywhOU=) 7: 326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa (hash: 5weylF9E+kZUqdJn7nMGLccAIkWjUNuo5MqarqyfkO8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 09:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:68:c9:4f:24:f8:9b:47:78:5a:4b:73:fc:1c:30:03:87:0f:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Sep 7 16:42:08 2025 GMT Not After : Sep 8 16:49:08 2025 GMT Subject: CN=D67B679D641C889A24404B62DC879A5B89B7D8A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a7:40:c4:3e:fe:e7:50:b9:7f:d8:3f:cf:f4: e8:ee:67:d8:b2:5f:ab:f6:d7:59:00:9c:a4:59:12: 74:10:25:1e:76:d4:b6:36:46:29:36:fd:6e:f3:85: f9:8f:30:34:fa:32:93:74:8a:9e:f8:4e:61:80:2a: 67:e0:3a:58:9e:0d:e7:d0:80:05:4b:df:18:ae:af: a5:ad:7d:78:29:4e:3a:69:82:56:dd:8d:77:d3:ca: 0d:be:37:86:3a:42:79:a1:a5:c0:c5:98:4b:75:b7: a8:a3:8f:41:6d:08:0c:55:a4:54:fb:65:77:ec:d4: c1:cf:27:8e:aa:56:bd:fe:19:f3:f4:8f:89:31:de: f9:66:0f:eb:c6:b4:f0:fd:33:ca:f6:e6:0e:a9:83: 2a:11:42:3a:ab:ec:6d:07:cc:ce:ef:ac:53:eb:d9: 06:9f:de:21:2a:e8:90:e0:b9:8e:de:3b:32:d1:05: 0e:76:18:8b:26:45:bf:d0:a4:b1:15:84:1e:79:ed: 2d:91:94:4a:91:3e:7f:25:4b:2e:b9:1f:dd:bf:ac: a7:d0:e9:1d:29:09:9f:2d:54:fa:de:b2:60:ee:23: f1:de:99:01:59:10:20:04:1a:d8:af:57:1c:17:b1: b5:66:60:4c:be:7e:29:79:b6:ee:b1:26:37:c4:e9: ef:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7B:67:9D:64:1C:88:9A:24:40:4B:62:DC:87:9A:5B:89:B7:D8:A4 X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:8d:1a:7a:56:84:d2:4d:83:dd:27:21:34:66:16:42:6c:08: 9a:52:66:88:12:33:ce:36:fb:9c:9a:54:86:22:73:1b:3e:b3: 22:d3:14:b2:f2:e7:67:8d:4c:7a:ef:fa:b9:71:c3:95:29:87: 0a:f1:29:58:69:ee:e4:d3:c7:28:15:94:44:21:a2:f9:2a:f3: 3f:f6:ca:ce:25:e3:16:23:a6:00:e3:62:c0:88:b2:75:ab:84: 2c:2f:9d:96:49:d6:75:90:3d:cd:4e:f0:6d:6c:7c:cf:1d:6d: 12:24:f7:c1:01:5f:cb:83:cd:0a:e6:93:9e:15:44:75:54:e6: 79:5b:b1:a5:ee:fe:9d:74:9c:3e:f5:12:32:3c:61:b4:08:21: 89:2f:45:f3:c3:4d:0d:c1:df:4b:70:21:60:5b:99:b7:64:d2: 02:f4:82:73:50:17:48:dc:a3:e7:65:03:65:ef:6f:8e:e5:79: d5:ee:18:91:e1:5f:37:41:f9:b3:de:8f:dc:9d:75:88:f4:36: be:5f:e6:1b:1c:24:32:67:fa:f3:6c:42:92:6a:ab:3d:38:a6: b5:d8:5c:3d:9b:f5:b8:5a:5b:6d:03:06:4c:11:41:54:df:39: fc:21:b1:d6:fc:36:93:b8:74:50:10:35:d6:55:28:15:bb:99: 6d:8f:a5:5e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJGjJTyT4m0d4Wktz/BwwA4cPngAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNTA5MDcxNjQyMDhaFw0yNTA5MDgxNjQ5MDhaMDMxMTAvBgNV BAMTKEQ2N0I2NzlENjQxQzg4OUEyNDQwNEI2MkRDODc5QTVCODlCN0Q4QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6p0DEPv7nULl/2D/P9OjuZ9iy X6v211kAnKRZEnQQJR521LY2Rik2/W7zhfmPMDT6MpN0ip74TmGAKmfgOlieDefQ gAVL3xiur6WtfXgpTjppglbdjXfTyg2+N4Y6QnmhpcDFmEt1t6ijj0FtCAxVpFT7 ZXfs1MHPJ46qVr3+GfP0j4kx3vlmD+vGtPD9M8r25g6pgyoRQjqr7G0HzM7vrFPr 2Qaf3iEq6JDguY7eOzLRBQ52GIsmRb/QpLEVhB557S2RlEqRPn8lSy65H92/rKfQ 6R0pCZ8tVPresmDuI/HemQFZECAEGtivVxwXsbVmYEy+fil5tu6xJjfE6e/jAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU1ntnnWQciJokQEti3IeaW4m32KQwHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzllY2FjNDEzLTRjZDItNDcyYy1iMDFlLTc0NDU4Y2VhMzg2Yy8wLzUxOTE3RTcy MkRCMDM5NTJEOTA1NkJFRDJGNkJENEJGOThCNzg5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxjRp6 VoTSTYPdJyE0ZhZCbAiaUmaIEjPONvucmlSGInMbPrMi0xSy8udnjUx67/q5ccOV KYcK8SlYae7k08coFZREIaL5KvM/9srOJeMWI6YA42LAiLJ1q4QsL52WSdZ1kD3N TvBtbHzPHW0SJPfBAV/Lg80K5pOeFUR1VOZ5W7Gl7v6ddJw+9RIyPGG0CCGJL0Xz w00Nwd9LcCFgW5m3ZNIC9IJzUBdI3KPnZQNl72+O5XnV7hiR4V83Qfmz3o/cnXWI 9Da+X+YbHCQyZ/rzbEKSaqs9OKa12Fw9m/W4WlttAwZMEUFU3zn8IbHW/DaTuHRQ EDXWVSgVu5ltj6Ve -----END CERTIFICATE-----Generated at Sun Sep 7 23:32:28 2025 by rpki-client