$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: afmrwJSde0FO7UO+bbeGY/tKB90MKw/xW1WPqMcK80w= Subject key identifier: 54:42:E5:A1:B4:33:1D:D1:29:F0:57:C2:8E:AA:F8:59:A9:71:0F:D6 Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 086A690EF9CBA86A25742C75388BD39961DBDD74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 0463 Signing time: Fri 05 Sep 2025 11:08:48 +0000 Manifest this update: Fri 05 Sep 2025 11:03:48 +0000 Manifest next update: Sat 06 Sep 2025 13:51:48 +0000 Files and hashes: 1: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: hY/iIpaGanxmxatebFYi3ijTkZjHjUc/Iwjsijc0S+E=) 2: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: GCjCQc0vdu8E+NZi5emgx2vW0PKbTzGL5UYc+2R4voE=) 3: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: qGNft1uCzkGwuPJH7iDQ4xUhWrhNnduWexIhT+DgvI8=) 4: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: oQj2no095+LyjZGzWOfw+sSJOW/7fRxpgUOPswu5nqM=) 5: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: qxlkfW/nLMV9I5WoI6HQ89q00naILT20Rguml63Zf0A=) 6: 36322e3131322e3134342e302f32302d3234203d3e203230333236.roa (hash: PvFG9BZ+YdbKPRfUC/0dM3w7V209DRWmI/bk8VoBnFU=) 7: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: SC5TBol/KgiGguAUBha18R5vazBwbZCbAw+6h4aD50k=) 8: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: DuCHe81tO8TVOKBTNFQCS5fRuYDjbGZfxshPpJZXNzc=) 9: 3138352e322e3136302e302f32332d3234203d3e2039333034.roa (hash: vl2Nht2rNjTXwCm1D2P9y8kdqhZOwgeZgf4gpkMvcp8=) 10: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: OKc3uZvr3kmY38TGv/j5cCd/d8TD6IBU2hGWJY9u+K0=) 11: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: dPumV3w+l5K00Z5figZidyPpD2Xj/WObq95u77jhIK4=) 12: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: W95e9h2ypKBcN51G9gRI82wozQL8rXCLvGb2mHpv6bk=) 13: 36322e3131322e3134342e302f32302d3230203d3e203539363432.roa (hash: hNXCqst3dZC+Dp3skkO26cOwh1zWEwx2n+JeuoU1IgU=) 14: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: X+PLwzsRRQMgaM/TWKrSkseThdECGWKV7QbjrMlPn80=) 15: 3138352e322e3136322e302f32332d3234203d3e20323135323639.roa (hash: sEO5Q+LtE+juFIMx1yqrmSkIjuvpVFxY8R1aiQqtGzs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 13:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:6a:69:0e:f9:cb:a8:6a:25:74:2c:75:38:8b:d3:99:61:db:dd:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Sep 5 11:03:48 2025 GMT Not After : Sep 6 13:51:48 2025 GMT Subject: CN=5442E5A1B4331DD129F057C28EAAF859A9710FD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:ef:9b:a7:44:a1:75:f1:cb:30:89:af:1a: fa:22:e4:33:a2:77:4b:6f:1f:2e:1f:6d:12:5b:ff: 5f:19:fb:a8:9f:9e:2f:e8:01:6e:a1:15:73:07:20: 2f:cb:cb:0d:96:25:cc:e7:2b:be:64:61:ad:66:ae: 8f:cb:aa:24:8a:ff:25:ef:cb:e3:76:65:2a:5e:80: 55:bc:f7:6f:c5:5a:e9:d4:6e:36:bc:ff:50:cd:ce: ae:1d:9d:e8:ea:3d:03:21:a3:ad:fb:b5:0a:cc:71: e4:81:52:89:31:b9:4f:02:aa:d0:b6:4d:f1:10:a5: 4f:b0:bf:4a:52:bd:b9:7f:08:c2:cf:41:f7:66:f4: 98:18:77:7b:98:12:e9:40:7c:5a:81:6e:4b:1b:80: 5f:47:c9:76:87:ed:d4:ab:c2:53:8d:fa:2d:c5:09: ae:14:46:4d:8a:c7:c0:21:15:8a:6f:09:88:57:3b: b3:c7:96:3a:48:eb:f0:67:d3:45:11:0d:fe:e6:e4: 80:64:1c:83:8e:a8:61:09:f2:00:7d:e8:ea:86:2d: cc:22:50:9d:3a:76:63:18:8d:03:b7:c1:6a:41:2f: 74:c6:a6:66:ac:3b:f2:02:7c:a1:4a:83:79:c0:27: db:f6:7b:4a:b2:79:5c:15:c9:c5:a8:06:ee:64:35: 29:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:42:E5:A1:B4:33:1D:D1:29:F0:57:C2:8E:AA:F8:59:A9:71:0F:D6 X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:d3:ce:72:25:12:bf:c2:76:54:62:f8:de:59:05:e3:71:78: e7:46:6e:f1:53:fb:2d:96:28:64:e6:7d:07:10:bd:ca:a5:36: 40:b2:99:b5:0b:b0:dc:b7:59:b3:b7:85:44:e7:73:48:a4:96: 20:10:13:8b:4d:fd:14:78:a5:43:ac:67:79:9c:ef:d6:bd:6c: 34:24:15:3e:fa:1f:b0:52:df:a6:69:57:b2:37:2f:f0:40:70: 74:b8:90:d5:8b:34:aa:b0:dd:59:aa:12:35:b2:9d:b1:89:61: 51:bf:88:43:a2:f5:06:e5:ce:7d:be:d2:8f:dc:09:51:ed:4e: fa:08:15:f9:5b:bc:57:cf:92:c0:e8:30:0b:a5:92:12:2b:f9: 61:d9:ad:04:75:98:72:4d:1f:6f:1e:8a:49:ef:cd:2f:a3:f7: c9:ac:a2:61:35:db:fb:74:3a:7c:d5:02:49:44:3b:d6:62:e9: 73:2e:90:e8:f1:94:8a:9d:c2:39:1e:32:31:88:d1:0b:de:55: 01:c2:5f:96:31:a3:e4:bc:cd:40:43:09:7c:2b:a8:af:cd:ea: a1:bc:e8:93:10:e0:93:11:7d:15:23:47:7d:13:d8:b3:88:0a: 79:3d:67:01:fe:39:51:f6:4a:2c:64:27:ff:01:d6:08:c5:d1: b8:f2:92:77 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCGppDvnLqGoldCx1OIvTmWHb3XQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNTA5MDUxMTAzNDhaFw0yNTA5MDYxMzUxNDhaMDMxMTAvBgNV BAMTKDU0NDJFNUExQjQzMzFERDEyOUYwNTdDMjhFQUFGODU5QTk3MTBGRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Hu+bp0ShdfHLMImvGvoi5DOi d0tvHy4fbRJb/18Z+6ifni/oAW6hFXMHIC/Lyw2WJcznK75kYa1mro/LqiSK/yXv y+N2ZSpegFW892/FWunUbja8/1DNzq4dnejqPQMho637tQrMceSBUokxuU8CqtC2 TfEQpU+wv0pSvbl/CMLPQfdm9JgYd3uYEulAfFqBbksbgF9HyXaH7dSrwlON+i3F Ca4URk2Kx8AhFYpvCYhXO7PHljpI6/Bn00URDf7m5IBkHIOOqGEJ8gB96OqGLcwi UJ06dmMYjQO3wWpBL3TGpmasO/ICfKFKg3nAJ9v2e0qyeVwVycWoBu5kNSkhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUVELlobQzHdEp8FfCjqr4WalxD9YwHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdPOciUSv8J2VGL43lkF 43F450Zu8VP7LZYoZOZ9BxC9yqU2QLKZtQuw3LdZs7eFROdzSKSWIBATi039FHil Q6xneZzv1r1sNCQVPvofsFLfpmlXsjcv8EBwdLiQ1Ys0qrDdWaoSNbKdsYlhUb+I Q6L1BuXOfb7Sj9wJUe1O+ggV+Vu8V8+SwOgwC6WSEiv5YdmtBHWYck0fbx6KSe/N L6P3yayiYTXb+3Q6fNUCSUQ71mLpcy6Q6PGUip3COR4yMYjRC95VAcJfljGj5LzN QEMJfCuor83qobzokxDgkxF9FSNHfRPYs4gKeT1nAf45UfZKLGQn/wHWCMXRuPKS dw== -----END CERTIFICATE-----Generated at Sat Sep 6 05:20:25 2025 by rpki-client