$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json) Hash identifier: YimJsYZkpFP1tZDvsBk/xOkhaX6xWc3SiBvzEctOlaM= Subject key identifier: 66:6E:3F:A2:E3:39:AA:A9:D9:7A:BC:3B:4B:58:EE:D7:C3:4E:E5:D6 Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 24832A8C53A902CE0F1E55D8FAB40596A8FEA499 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft Manifest number: 0261 Signing time: Sun 07 Sep 2025 20:56:41 +0000 Manifest this update: Sun 07 Sep 2025 20:51:41 +0000 Manifest next update: Mon 08 Sep 2025 22:58:41 +0000 Files and hashes: 1: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: 9phDdz/jhh9vxdEc5WXHXIl+cdnJzAyh/6SdvyVejiI=) 2: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: e+p8+Sw9X8S3Ty3gF9pg+LdvDbV5qMXAYBBthQD4LPE=) 3: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: KPVNDBydB4lEOCddQAWiNda/rm6IVb4G2i+sUeOhrYg=) 4: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: DvQHKT6M+fkiG6o9KW4wBm0yNbqCXWjg78L/cu4BiJ0=) 5: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: OTYsTfrglFs/JKFj7RJtAXdrMe1OUcjbc3WSXqeD0dk=) 6: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: BL4+PYIdcLs3fiOkkamkg94lgyO9kcRHp6ACoQUQ5y8=) 7: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: oh6KQuvFZpPj650jdkjIRbvrzoDyE3OJyuhp6Pqum8g=) 8: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: R4oy1L8+rEt1QdmoGVV7PiYt423B/xK5i6kPhc7W9aI=) 9: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: M0+yHEN3VX8K+aVDmpusml/7Hx8dbBnadNDMaFbGOzQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 09:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:83:2a:8c:53:a9:02:ce:0f:1e:55:d8:fa:b4:05:96:a8:fe:a4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Sep 7 20:51:41 2025 GMT Not After : Sep 8 22:58:41 2025 GMT Subject: CN=666E3FA2E339AAA9D97ABC3B4B58EED7C34EE5D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:6d:f7:1a:d8:28:8c:80:4b:f7:82:1a:1d: a6:f7:00:4b:65:c4:dd:a6:b3:55:1a:21:ee:54:c6: 00:c7:e1:53:e4:83:01:02:77:5c:62:6f:3a:a4:a9: 7e:62:00:8a:7c:9a:37:bb:79:57:8b:03:52:05:d8: da:42:26:f0:77:25:cd:f7:7d:e2:2a:4f:72:25:89: db:a2:2c:4c:0f:9a:75:02:a0:5a:58:33:af:ba:05: f5:30:0c:cb:3d:c8:93:b5:da:6c:c2:29:82:a1:10: 28:43:71:ce:22:24:b2:e4:cf:d3:9a:ce:3e:76:81: d2:61:00:bb:6a:d0:e0:86:0a:a3:78:36:39:16:5a: 0f:8c:67:5b:d2:f2:6d:5d:a9:b4:a1:44:33:b1:73: 1f:ec:24:94:3d:3d:ce:df:b6:91:14:e5:0e:23:aa: 32:7d:d7:7e:c4:63:84:39:c7:b6:b9:35:41:b1:16: ef:74:12:3b:ff:dc:ea:da:91:72:3d:09:17:95:59: 08:ad:dd:81:4e:bf:d9:10:3e:ff:05:d8:8e:bb:b7: 55:ab:cb:3e:fa:3b:0e:91:a9:f3:a5:8c:db:b6:9d: 27:99:06:84:10:cf:22:28:4d:38:9e:c0:74:0a:aa: ec:6d:84:cb:52:28:63:8e:a9:a6:07:a1:4c:f3:16: 98:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6E:3F:A2:E3:39:AA:A9:D9:7A:BC:3B:4B:58:EE:D7:C3:4E:E5:D6 X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:d0:1a:d0:b9:c8:67:b4:ab:fb:40:d7:c5:fb:d2:53:59:f2: ca:eb:67:df:0a:85:12:dd:93:63:b0:cf:6b:3d:09:dc:8d:ee: 23:e9:dd:bf:98:fa:5f:98:f6:d8:85:cb:5d:bc:65:e9:79:63: cc:3c:16:26:3f:11:1d:67:20:bb:08:0d:53:06:af:44:b7:98: 64:6b:2e:48:61:18:ab:0b:97:23:79:c4:ba:6c:bf:fa:b5:45: fe:ed:85:ee:5c:24:6a:13:24:e4:fb:72:a4:ab:b2:8c:8f:a9: 46:fa:ef:8f:f8:99:b4:f3:22:da:a9:79:af:6c:c2:6f:77:46: 83:78:fa:0e:4d:63:51:86:69:d5:de:49:53:53:b4:70:0b:0f: b4:bb:d3:be:6a:6e:09:6a:52:df:0c:92:e2:94:ec:86:91:18: 1a:13:77:fe:a1:fc:a6:4c:6c:2c:3a:a8:af:2b:e8:07:8e:cf: 73:15:07:73:35:f2:8d:28:39:35:67:d0:a0:0e:d7:cf:e9:76: 5e:45:27:7b:35:06:94:3f:b3:88:80:ab:c1:97:3d:6c:bf:67: 2e:e7:21:bd:50:88:9a:3e:84:55:20:72:44:99:13:1b:3a:a4: 7b:41:64:a5:ad:1e:b0:02:3a:01:5d:e0:31:e0:ae:d7:8c:bc: 1c:da:32:9f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJIMqjFOpAs4PHlXY+rQFlqj+pJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNTA5MDcyMDUxNDFaFw0yNTA5MDgyMjU4NDFaMDMxMTAvBgNV BAMTKDY2NkUzRkEyRTMzOUFBQTlEOTdBQkMzQjRCNThFRUQ3QzM0RUU1RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCupm33GtgojIBL94IaHab3AEtl xN2ms1UaIe5UxgDH4VPkgwECd1xibzqkqX5iAIp8mje7eVeLA1IF2NpCJvB3Jc33 feIqT3IliduiLEwPmnUCoFpYM6+6BfUwDMs9yJO12mzCKYKhEChDcc4iJLLkz9Oa zj52gdJhALtq0OCGCqN4NjkWWg+MZ1vS8m1dqbShRDOxcx/sJJQ9Pc7ftpEU5Q4j qjJ9137EY4Q5x7a5NUGxFu90Ejv/3OrakXI9CReVWQit3YFOv9kQPv8F2I67t1Wr yz76Ow6RqfOljNu2nSeZBoQQzyIoTTiewHQKquxthMtSKGOOqaYHoUzzFpjNAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUZm4/ouM5qqnZerw7S1ju18NO5dYwHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA10BrQ uchntKv7QNfF+9JTWfLK62ffCoUS3ZNjsM9rPQncje4j6d2/mPpfmPbYhctdvGXp eWPMPBYmPxEdZyC7CA1TBq9Et5hkay5IYRirC5cjecS6bL/6tUX+7YXuXCRqEyTk +3Kkq7KMj6lG+u+P+Jm08yLaqXmvbMJvd0aDePoOTWNRhmnV3klTU7RwCw+0u9O+ am4JalLfDJLilOyGkRgaE3f+ofymTGwsOqivK+gHjs9zFQdzNfKNKDk1Z9CgDtfP 6XZeRSd7NQaUP7OIgKvBlz1sv2cu5yG9UIiaPoRVIHJEmRMbOqR7QWSlrR6wAjoB XeAx4K7XjLwc2jKf -----END CERTIFICATE-----Generated at Sun Sep 7 23:27:15 2025 by rpki-client