$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: +OXDjiKr0r/BfMNsiQQZXzV/UwgRkhGEryU7CGwavXc= Subject key identifier: E5:F9:4B:37:18:46:65:1F:A2:A4:7C:24:C5:55:22:1D:FD:BF:69:6A Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 4911318C6116C04AF53C4C0E21CA88CB6DDE3F38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: DA Signing time: Sun 07 Sep 2025 02:08:56 +0000 Manifest this update: Sun 07 Sep 2025 02:03:56 +0000 Manifest next update: Mon 08 Sep 2025 02:27:56 +0000 Files and hashes: 1: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: oXC9Asr9SJ7DSslxSZaWUX9xWnSBbY5iUxbxwvvcFUI=) 2: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: aUvc4UTsIU7R0m9dsnmxWesOTPr9WQo6/RshJ5X0hb4=) 3: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: u6D0nQIamyf1rwT6EphlkmgpGmdsHhrROhbEzSFSSxQ=) 4: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: U2rsj2GmpPBYV9RPLITNHzbaDI2Gxelnlov5msxX9eI=) 5: 3231332e3135372e3132312e302f32342d3234203d3e2039333034.roa (hash: ZHfI2bxkV7hnGY31X0QEko4MmgUYJCvh7a/XuZiRsPg=) 6: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: fkThFrWbc2SNg5nWL/DjCmp7efO9LKVSLfyHO63Odeo=) 7: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: FZgC9IB+lV+UcaQ0VW+E5apokBYSSreSZjAXXrh+yUY=) 8: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: cK22q6rO6KtktflqsQYlSr1z73xEpoVM/WNGnd6YIEI=) 9: 3231332e3135372e3132332e302f32342d3234203d3e2039333034.roa (hash: vxjXWaCdelX3l/Dq0oCF9svJSK3Gm/FVltSuWwTdg0M=) 10: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: obPbW0ZKO9rq4yp7c5UqzqijavPW0CV78gaYhHaBReI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 02:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:11:31:8c:61:16:c0:4a:f5:3c:4c:0e:21:ca:88:cb:6d:de:3f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Sep 7 02:03:56 2025 GMT Not After : Sep 8 02:27:56 2025 GMT Subject: CN=E5F94B371846651FA2A47C24C555221DFDBF696A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:95:66:00:fc:5b:a8:a1:69:37:fc:68:8b:b7: 02:02:de:9c:5b:0a:3c:be:96:21:a9:a7:31:6d:2b: f0:df:5b:7f:aa:0a:a0:e7:c9:16:25:49:b6:dc:ef: 40:58:a3:75:ea:7d:76:fa:74:31:f4:2d:65:34:89: 06:b2:ad:12:be:dd:98:34:a3:3c:97:32:de:c3:37: cb:de:1d:16:b1:ff:8a:fb:b7:db:ab:90:be:34:dc: e8:24:1c:3a:51:c1:a7:2a:57:3a:65:1b:a3:9d:e1: 3a:96:20:75:ff:61:87:fc:b1:2d:e3:0a:e0:de:c3: 00:37:04:0f:48:a3:50:d8:f5:91:99:74:af:0e:80: 58:dd:57:e1:e3:a7:45:fe:e1:b2:2c:f7:7a:90:ac: 8e:a3:0d:39:da:fd:35:ee:5b:8a:42:e3:a6:7f:83: cf:45:c6:9b:93:a9:7d:ee:29:78:4f:02:bb:31:55: 03:ed:af:fe:78:37:f6:4a:90:47:90:49:f4:b3:5e: 7c:a3:c6:16:96:45:9d:5b:ce:6c:ee:5b:a6:dc:2f: 40:8e:a5:a4:0a:45:91:cf:85:17:58:eb:e8:23:42: db:19:0f:c6:4a:e3:10:01:67:21:59:73:99:27:61: 5f:a5:56:a6:ff:fa:c7:ed:47:e8:4a:a3:a2:49:ed: 3c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F9:4B:37:18:46:65:1F:A2:A4:7C:24:C5:55:22:1D:FD:BF:69:6A X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6e:7d:08:52:95:41:02:c0:5f:c0:1e:58:2b:1d:b6:80:31: 1c:33:76:1d:9d:e5:d3:00:fc:f5:62:2f:1b:bd:22:fb:10:77: 6c:00:d1:6d:a4:0c:b3:d4:50:0b:78:b8:18:d8:e8:0b:98:b7: 46:7a:66:47:42:fc:08:30:65:ed:e9:b6:00:29:81:8e:73:27: 4a:78:98:22:7a:09:9a:31:5f:c7:3c:9e:4b:b5:ac:35:de:9a: 90:53:d0:d4:f7:01:b5:7a:9d:42:f6:13:1d:75:8f:f9:50:7f: 0a:e1:d7:38:69:df:ba:7f:e9:c4:70:27:77:12:dd:dd:f7:7b: 50:98:9f:d6:5a:c0:b9:e1:67:28:21:2a:bf:8f:98:25:c9:9e: 61:3c:62:d1:3d:cd:8f:00:1b:1a:c8:7d:2b:79:c3:5c:50:1e: bd:e9:3b:85:b6:8a:8f:a8:d0:d1:2b:89:44:91:ee:0b:91:1c: 1b:0f:98:48:d5:59:76:f5:7b:c8:48:5b:16:56:a0:43:e2:a3: e3:ab:72:2c:0c:b4:69:62:83:d7:05:fb:e2:61:f6:9e:5c:c6: 70:d7:57:1c:8d:39:5a:67:7e:8b:9d:d6:af:e3:09:71:1a:d4: 15:c6:87:bf:88:41:5a:d6:63:26:e7:dc:2b:f0:3c:0d:30:90: 5c:c8:08:1e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSRExjGEWwEr1PEwOIcqIy23ePzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNTA5MDcwMjAzNTZaFw0yNTA5MDgwMjI3NTZaMDMxMTAvBgNV BAMTKEU1Rjk0QjM3MTg0NjY1MUZBMkE0N0MyNEM1NTUyMjFERkRCRjY5NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9lWYA/FuooWk3/GiLtwIC3pxb Cjy+liGppzFtK/DfW3+qCqDnyRYlSbbc70BYo3XqfXb6dDH0LWU0iQayrRK+3Zg0 ozyXMt7DN8veHRax/4r7t9urkL403OgkHDpRwacqVzplG6Od4TqWIHX/YYf8sS3j CuDewwA3BA9Io1DY9ZGZdK8OgFjdV+Hjp0X+4bIs93qQrI6jDTna/TXuW4pC46Z/ g89FxpuTqX3uKXhPArsxVQPtr/54N/ZKkEeQSfSzXnyjxhaWRZ1bzmzuW6bcL0CO paQKRZHPhRdY6+gjQtsZD8ZK4xABZyFZc5knYV+lVqb/+sftR+hKo6JJ7TyBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU5flLNxhGZR+ipHwkxVUiHf2/aWowHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAW59CFKVQQLAX8AeWCsd toAxHDN2HZ3l0wD89WIvG70i+xB3bADRbaQMs9RQC3i4GNjoC5i3RnpmR0L8CDBl 7em2ACmBjnMnSniYInoJmjFfxzyeS7WsNd6akFPQ1PcBtXqdQvYTHXWP+VB/CuHX OGnfun/pxHAndxLd3fd7UJif1lrAueFnKCEqv4+YJcmeYTxi0T3NjwAbGsh9K3nD XFAevek7hbaKj6jQ0SuJRJHuC5EcGw+YSNVZdvV7yEhbFlagQ+Kj46tyLAy0aWKD 1wX74mH2nlzGcNdXHI05Wmd+i53Wr+MJcRrUFcaHv4hBWtZjJufcK/A8DTCQXMgI Hg== -----END CERTIFICATE-----Generated at Sun Sep 7 15:16:53 2025 by rpki-client