$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft File: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft (raw, json) Hash identifier: n1nWAZS0cmLj9Gkv3gkeVqUwCV1iCZKYiPeKk44k1T4= Subject key identifier: 01:5C:C4:C2:3D:A1:2A:5B:E3:E4:43:CC:33:54:14:A4:7E:BB:70:16 Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 5C9A656FAB40B05E7844E76B6E0E2BA19B858830 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft Manifest number: 04D8 Signing time: Sun 07 Sep 2025 17:13:57 +0000 Manifest this update: Sun 07 Sep 2025 17:08:57 +0000 Manifest next update: Mon 08 Sep 2025 17:43:57 +0000 Files and hashes: 1: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (hash: LaBCcb8mjeERCC5tHKO7thlovLIwutTtPGiGYEZVPF8=) 2: 34352e38312e35382e302f32342d3234203d3e20323039323432.roa (hash: Cjq2FzLN5G1VEvkKyI6FB5noxcWUxvPOvV4W7hBfw5c=) 3: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (hash: 7ySWNlqh8pfpYqSc3fbfv+VTSwiuDNFNlc7aZa5se9U=) 4: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl (hash: b8saZWNvDoEXW2pMFWSqqwMGM4GWKZCGudkF/+9IC/w=) 5: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (hash: Y0ZApSmGCRch+djTYBN+U0p8LaOUa+NCEgyRR8hvTcU=) 6: 34352e38312e35372e302f32342d3234203d3e203631333137.roa (hash: Nt6v0on8wvNIRTqw0ZzJ5VjTWjEZFT63u0ZbVbhKyNc=) 7: 34352e38312e35362e302f32342d3234203d3e203634323637.roa (hash: kGVNeEKX35ugOpsFmA5GwCl6f0GnZpLJS8pEn3cyWJI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 17:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:9a:65:6f:ab:40:b0:5e:78:44:e7:6b:6e:0e:2b:a1:9b:85:88:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: Sep 7 17:08:57 2025 GMT Not After : Sep 8 17:43:57 2025 GMT Subject: CN=015CC4C23DA12A5BE3E443CC335414A47EBB7016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a0:5f:90:40:ab:6b:0b:4b:1f:63:81:df:d3: 87:6e:34:bc:b2:17:d8:a5:97:1e:42:57:7c:85:fb: 4d:63:85:b3:78:94:03:6b:99:1e:68:e4:93:a9:61: a4:95:91:dc:48:85:c0:41:68:e5:1c:b1:a4:c3:7e: a9:fb:88:57:1f:28:da:a4:f7:77:c8:16:f8:3a:f1: d0:d1:c8:2d:49:fe:7b:f0:d0:ea:6d:12:cb:08:d6: c2:d2:8c:64:6a:40:6c:ed:7e:76:2e:5a:e6:c0:ac: 4d:a5:8c:48:9d:31:a7:f1:c7:88:be:af:27:80:28: a0:ff:1d:1f:65:dd:9b:12:d7:2a:97:8c:89:09:f6: 22:0b:6e:7b:fa:72:d1:63:e6:ed:db:b1:82:ff:de: 45:fd:2d:d5:eb:af:3a:12:70:4c:29:24:33:25:17: 96:2e:87:7a:51:d7:e5:a7:fd:71:78:75:7d:00:9d: 79:fa:88:05:80:27:11:d1:0e:6f:d7:f3:f1:80:2f: b7:6c:f9:d1:f4:87:ce:06:eb:e9:a2:9e:b6:7f:87: d0:e5:dd:8d:50:27:ad:e5:f9:58:98:77:a0:54:2d: 96:c7:14:83:e6:cc:96:ed:45:8f:1c:28:46:6b:1a: 78:dd:97:0d:a3:95:1b:ef:e2:4c:22:b9:00:3d:e1: 35:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5C:C4:C2:3D:A1:2A:5B:E3:E4:43:CC:33:54:14:A4:7E:BB:70:16 X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:23:9a:4a:97:f1:80:89:bd:5b:7b:4d:6d:6d:7d:ac:08:5d: 33:26:f5:2e:0c:26:cc:42:45:b9:18:0f:32:5d:f8:0b:c6:d1: c4:e9:7a:b6:61:ed:16:c0:69:fe:43:e0:db:8e:e6:ef:e4:36: ee:bb:b5:40:26:8d:72:3a:b1:9e:57:3a:8e:2a:4d:0c:6b:27: 77:d9:cc:e6:26:3e:66:80:a8:a2:82:84:1b:55:69:a8:16:7b: e0:e0:f1:aa:84:73:ae:94:09:58:1c:a8:54:6b:65:91:92:81: 50:14:b6:bb:98:b5:35:9a:1b:a5:60:b8:f4:78:cc:fc:1b:d8: 74:89:18:cb:49:23:8f:ef:ce:53:1f:9c:78:48:56:f4:5e:b5: e0:65:3f:db:e2:e8:a3:e6:f9:79:8d:94:32:61:fe:e0:d5:37: 7d:02:69:85:98:d5:7f:7f:04:43:f7:3b:48:bf:ae:2a:d3:3a: 63:7a:0a:dc:bd:be:32:81:59:08:0c:2c:b1:12:c1:b2:ab:5f: 0c:a3:95:0b:58:c1:07:cf:cc:f9:9d:ae:3f:c7:11:9e:f5:4c: d2:f4:6d:44:d7:c7:c3:90:60:6c:8c:c4:7f:6d:5e:41:a7:10: 99:9a:07:37:8e:ca:d7:7f:63:bc:b2:36:09:76:5f:33:3f:7f: e8:0c:2d:ce -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXJplb6tAsF54ROdrbg4roZuFiDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNTA5MDcxNzA4NTdaFw0yNTA5MDgxNzQzNTdaMDMxMTAvBgNV BAMTKDAxNUNDNEMyM0RBMTJBNUJFM0U0NDNDQzMzNTQxNEE0N0VCQjcwMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjoF+QQKtrC0sfY4Hf04duNLyy F9illx5CV3yF+01jhbN4lANrmR5o5JOpYaSVkdxIhcBBaOUcsaTDfqn7iFcfKNqk 93fIFvg68dDRyC1J/nvw0OptEssI1sLSjGRqQGztfnYuWubArE2ljEidMafxx4i+ ryeAKKD/HR9l3ZsS1yqXjIkJ9iILbnv6ctFj5u3bsYL/3kX9LdXrrzoScEwpJDMl F5Yuh3pR1+Wn/XF4dX0AnXn6iAWAJxHRDm/X8/GAL7ds+dH0h84G6+minrZ/h9Dl 3Y1QJ63l+ViYd6BULZbHFIPmzJbtRY8cKEZrGnjdlw2jlRvv4kwiuQA94TVjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUAVzEwj2hKlvj5EPMM1QUpH67cBYwHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjI0NTY3Yi03 YTc0LTRjMWYtYWE4NS1kZDI0YWY3M2NjYmIvMC81REEzMjE1QUJGQTQ2MjFENTc3 MDlGODM4QTkyODAxRjJFOTBEREZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCOaSpfxgIm9W3tNbW19 rAhdMyb1LgwmzEJFuRgPMl34C8bRxOl6tmHtFsBp/kPg247m7+Q27ru1QCaNcjqx nlc6jipNDGsnd9nM5iY+ZoCoooKEG1VpqBZ74ODxqoRzrpQJWByoVGtlkZKBUBS2 u5i1NZobpWC49HjM/BvYdIkYy0kjj+/OUx+ceEhW9F614GU/2+Loo+b5eY2UMmH+ 4NU3fQJphZjVf38EQ/c7SL+uKtM6Y3oK3L2+MoFZCAwssRLBsqtfDKOVC1jBB8/M +Z2uP8cRnvVM0vRtRNfHw5BgbIzEf21eQacQmZoHN47K139jvLI2CXZfMz9/6Awt zg== -----END CERTIFICATE-----Generated at Mon Sep 8 08:52:03 2025 by rpki-client