$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft File: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft (raw, json) Hash identifier: S5Hob789TEuOxxBlNnBtf1SYPG7NhFQgiQdfLveZoPk= Subject key identifier: 18:C8:A8:37:A3:C3:07:FF:BD:F6:19:CF:8D:8C:CE:2C:3C:2B:B2:B0 Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 Certificate issuer: /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Certificate serial: 17F6558F137B505FF30FAA23F5AC6D839B330EA3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft Manifest number: C9 Signing time: Sun 07 Sep 2025 09:48:09 +0000 Manifest this update: Sun 07 Sep 2025 09:43:09 +0000 Manifest next update: Mon 08 Sep 2025 13:10:09 +0000 Files and hashes: 1: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: 0tk68iktR4A+Tmx1ow+QCPfURRQdgNg7+hqUgrcV4SU=) 2: 326131343a373538303a666634313a3a2f34382d3438203d3e20323134333434.roa (hash: pdCqfiQKAk5mpE38Sur9HB4NVG9NXvRtOzzMMORY0Ss=) 3: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: 3uRQGY7O+ZvtbHNtgC5MF4VJ4PR1W0vGtZuXeGQdfrI=) 4: 326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa (hash: aT8cghtaGkqPEEByCDT3I1TbWDM5+v3iYF7i8PWrF94=) 5: 326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa (hash: apRB5OfhlgNP9CjlOyLXHwJtDJcG7Ul2o20dXFYOVFQ=) 6: 326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa (hash: CfKfKnWr6AMoLiLfBVlrhneodY9KAu+Y1wDjsvoRWPk=) 7: 326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa (hash: eBRv+uDGLUqSp7a6GG/a9BPTN3/sPy8oPhg1ivi/5ik=) 8: 326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa (hash: GgRgpO0cir6J2JIvLpFaBWDg0/fcSkJg//f6BlSBDCY=) 9: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: /zrjZ0ZqEzRDQ5mOWK+S06L45z9UxNhwijRkpqGoHX0=) 10: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: Kr++/O1eWk2rhooTEwkNaOpIKHaAHhcWSp5UY9Du6eM=) 11: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: i94AFUzw6e810fYgj7x6pZ8Yx8k5H6Glrkwkeys08UU=) 12: 326131343a373538303a666634343a3a2f34382d3438203d3e20323134333434.roa (hash: wAwmvjP2Xs/JgKfPKl1DdsDpWK9Z2qkOeMDP05em2JQ=) 13: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl (hash: MI8SlWx8Y6nIBT6O0NptMhe9bTM1UeGGTFgbUZH1xjE=) 14: 326131343a373538303a666634303a3a2f34382d3438203d3e20323134333434.roa (hash: dPCGiKkWz0E9rMprVOstBFLQuVK9OG6CBSKX+fk7UXw=) 15: 326131343a373538303a666634353a3a2f34382d3438203d3e20323134333434.roa (hash: 5PYc1rYfh5soL/5eOkdLi7LFwnLpj6iEncugTNMnU6k=) 16: 326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa (hash: gWNOGizaCWeT+eChfA6O1CcYgC4CppF3JVd8ZgY0qsY=) 17: 326131343a373538303a666634323a3a2f34382d3438203d3e20323134333434.roa (hash: 9k9VorkprwzOj4hWnDvwpKS020LK9HlBFwzRrzgLjKw=) 18: 326131343a373538303a666634363a3a2f34382d3438203d3e20323134333434.roa (hash: INfgk/A/FB6y22LomhkCbMfma8QUd57K4w9Tk5H86CM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 09:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f6:55:8f:13:7b:50:5f:f3:0f:aa:23:f5:ac:6d:83:9b:33:0e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Validity Not Before: Sep 7 09:43:09 2025 GMT Not After : Sep 8 13:10:09 2025 GMT Subject: CN=18C8A837A3C307FFBDF619CF8D8CCE2C3C2BB2B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6e:bb:38:e8:8e:f6:0d:9e:d5:de:e4:60:bc: 56:fb:d2:cc:41:98:ff:b5:ef:0b:50:21:bb:4c:c5: e6:91:47:5d:58:30:ca:21:18:d0:32:8b:60:9f:5e: 7a:57:36:f7:cb:15:c8:e7:05:3b:76:4f:cd:13:f3: 9c:48:59:21:9f:61:c7:bc:6c:fa:ba:47:27:50:7b: 45:2d:bf:6d:b3:02:21:6f:37:e8:7c:55:a5:96:86: 37:87:17:32:72:c0:b6:10:f2:46:6e:0c:42:6c:ab: 89:61:73:fb:6d:f1:41:79:f4:ff:8a:68:84:c7:19: 06:55:7a:62:6f:b6:b6:b4:92:6b:8a:21:39:0f:c5: e7:23:24:5c:87:75:ad:f4:de:83:4a:34:44:e2:fe: 29:39:c7:fb:29:9c:52:81:9f:03:96:bb:80:66:e2: 62:81:9a:3f:34:7b:91:4e:59:0b:fb:04:ed:1a:c4: 70:8f:97:c3:d7:aa:94:c9:71:50:74:60:3d:0e:39: 33:6c:96:84:06:92:ab:9c:68:30:6c:8a:d8:3c:63: 2a:08:79:2a:69:bb:29:d8:4f:ac:2c:12:cb:ec:7d: 91:eb:d1:99:13:ad:00:64:e3:6d:36:7e:a7:d8:3a: 64:77:f6:d3:4d:18:f9:89:18:cc:fd:b9:2c:c4:dd: dc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C8:A8:37:A3:C3:07:FF:BD:F6:19:CF:8D:8C:CE:2C:3C:2B:B2:B0 X509v3 Authority Key Identifier: keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:37:07:ac:02:4d:9b:a8:6b:0d:d0:f9:a0:c2:2b:f8:0f:47: 39:57:d1:95:9a:87:84:dc:43:28:f8:11:91:3a:95:e0:23:34: 3e:33:96:49:be:00:23:95:3e:5d:ca:fd:54:f5:80:96:a2:21: 30:c4:05:69:b5:3f:b3:85:74:4b:ec:b1:19:52:b5:ec:91:ad: 9a:52:4d:8d:f6:59:33:32:ff:fe:c2:b2:14:ac:bd:94:41:5d: 7a:77:11:76:8f:12:22:5c:5a:16:36:bd:54:e4:b6:38:63:9f: 8c:1c:44:11:bf:bf:f2:06:80:16:87:57:e8:b6:03:7f:7a:de: 0d:9b:42:51:b4:0a:02:64:9a:8a:85:58:6a:37:0b:d3:9b:02: a1:d5:50:ae:76:64:e3:b7:93:2e:64:61:c5:41:b0:71:50:fc: 5f:89:09:7e:30:4b:e1:cc:27:cd:ea:29:80:ad:3a:80:70:85: dd:0c:53:f1:fd:be:f1:39:30:7a:66:6d:32:e8:0f:81:2e:22: 2b:8a:ca:4c:19:8b:97:9d:96:a2:0b:37:2d:ee:c6:32:9a:27: 3c:f4:f7:8a:58:4f:1d:03:83:00:c3:83:c9:cc:b2:f5:e0:7a: cd:48:4c:5d:24:5d:0c:26:90:f6:2b:36:cb:b2:ae:74:9e:fe: ac:cd:c9:68 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUF/ZVjxN7UF/zD6oj9axtg5szDqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJB ODcyMzk0NTAeFw0yNTA5MDcwOTQzMDlaFw0yNTA5MDgxMzEwMDlaMDMxMTAvBgNV BAMTKDE4QzhBODM3QTNDMzA3RkZCREY2MTlDRjhEOENDRTJDM0MyQkIyQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYbrs46I72DZ7V3uRgvFb70sxB mP+17wtQIbtMxeaRR11YMMohGNAyi2CfXnpXNvfLFcjnBTt2T80T85xIWSGfYce8 bPq6RydQe0Utv22zAiFvN+h8VaWWhjeHFzJywLYQ8kZuDEJsq4lhc/tt8UF59P+K aITHGQZVemJvtra0kmuKITkPxecjJFyHda303oNKNETi/ik5x/spnFKBnwOWu4Bm 4mKBmj80e5FOWQv7BO0axHCPl8PXqpTJcVB0YD0OOTNsloQGkqucaDBsitg8YyoI eSppuynYT6wsEsvsfZHr0ZkTrQBk4202fqfYOmR39tNNGPmJGMz9uSzE3dyXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUGMioN6PDB/+99hnPjYzOLDwrsrAwHwYDVR0j BBgwFoAUh6TITUNm27FakJClWqLc66hyOUUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMw MWRhLzEvODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJBODcyMzk0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84N0E0Qzg0RDQzNjZEQkIxNUE5MDkwQTU1 QUEyRENFQkE4NzIzOTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2E1ZDRjMDBiLWQxMDUtNDkwNi1iOTgxLTFkMDM0M2UzMDFkYS8xLzg3QTRDODRE NDM2NkRCQjE1QTkwOTBBNTVBQTJEQ0VCQTg3MjM5NDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpNwes Ak2bqGsN0Pmgwiv4D0c5V9GVmoeE3EMo+BGROpXgIzQ+M5ZJvgAjlT5dyv1U9YCW oiEwxAVptT+zhXRL7LEZUrXska2aUk2N9lkzMv/+wrIUrL2UQV16dxF2jxIiXFoW Nr1U5LY4Y5+MHEQRv7/yBoAWh1fotgN/et4Nm0JRtAoCZJqKhVhqNwvTmwKh1VCu dmTjt5MuZGHFQbBxUPxfiQl+MEvhzCfN6imArTqAcIXdDFPx/b7xOTB6Zm0y6A+B LiIrispMGYuXnZaiCzct7sYymic89PeKWE8dA4MAw4PJzLL14HrNSExdJF0MJpD2 KzbLsq50nv6szclo -----END CERTIFICATE-----Generated at Sun Sep 7 23:27:15 2025 by rpki-client