$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft File: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json) Hash identifier: bJl4mWBx1qHHE1vZKTqJR/fexYtgPDAKBJnv5I/G42o= Subject key identifier: FB:16:9D:CF:F1:55:CC:64:D9:ED:36:84:A3:64:AF:91:F9:5F:36:C6 Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Certificate serial: 64069A49F6AD8A10FDC329B9B0C43BC1646F8739 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft Manifest number: 0551 Signing time: Mon 08 Sep 2025 23:24:08 +0000 Manifest this update: Mon 08 Sep 2025 23:19:08 +0000 Manifest next update: Wed 10 Sep 2025 01:03:08 +0000 Files and hashes: 1: 3139332e39332e3135322e302f32342d3234203d3e20313939363134.roa (hash: jNaGJEHXg+vn+v2vVdhmJa1IVdEz/D1ggT5kvM1c0Hk=) 2: 3139332e39332e3135342e302f32342d3234203d3e20323131343135.roa (hash: lcDvK25Krwnz/wCtWIMtJ+GA0fjdNOA7l7WMMKyVVUU=) 3: 3139332e39332e3135352e302f32342d3234203d3e203631333137.roa (hash: SV7SbziqH7eMIEMJIbsVc3dV1p2SM237aRtzHljTDkg=) 4: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: xPevzrnOjbLSKnV3l4XippKimEQKPuE1gNWr3GUWXnU=) 5: 3139332e39332e3135332e302f32342d3234203d3e203439313237.roa (hash: 0/cfjGj4KR4GGAb3iVBdR7EXi3eZGMMRZK+KEv9RsCI=) 6: 3139332e39332e3135352e302f32342d3234203d3e203230343733.roa (hash: hDOoONSAS9eAuwlCmW30VHEN0/zXt8vJpH/fFLKimsM=) 7: 3139332e39332e3135332e302f32342d3234203d3e20323134303336.roa (hash: FgMfWX7zLNqyUMvyIkAVqVqXpYApxS0iTmFAdZ7lH9Q=) 8: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: ht90MUomGkgWhJETWF0rvugOS8SI8qvW9OndsUlGu80=) 9: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: jAOxURrHtZvlqdFVdBr3F4ACmPO4DT4L5AmOtZPktVY=) 10: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: 5zFYerIngzLwSwbeiiGPHVQadLBE1/J7oEEXeFR/OFM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 01:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:06:9a:49:f6:ad:8a:10:fd:c3:29:b9:b0:c4:3b:c1:64:6f:87:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Validity Not Before: Sep 8 23:19:08 2025 GMT Not After : Sep 10 01:03:08 2025 GMT Subject: CN=FB169DCFF155CC64D9ED3684A364AF91F95F36C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:56:16:97:27:55:56:98:05:50:ac:83:32:27: e6:e7:a0:01:b5:22:54:f3:c3:c3:bb:ea:b1:7d:fe: 6b:55:b5:94:4a:d9:87:5c:5d:8a:de:66:92:e8:d4: 55:b0:ed:fc:0a:97:98:15:8f:37:a2:98:c1:d8:e5: 1a:78:c2:02:c6:93:c1:9b:3f:c5:b2:2f:a1:83:13: 45:0f:8c:18:96:26:17:dc:31:14:d9:69:73:86:88: de:df:ed:fe:ac:f7:ed:8d:2a:62:62:40:d6:b1:06: a1:de:53:94:09:57:a6:65:88:54:ea:6c:7f:62:81: 06:10:4f:0a:d1:02:e8:ea:f6:41:1d:4b:86:dc:90: 23:65:ba:0b:a2:be:a9:32:72:0a:e9:96:da:92:0a: 39:9c:e5:2f:8a:d6:34:8e:d6:b7:ff:8b:b9:91:88: 49:bb:82:6d:02:85:ff:4f:78:d3:31:50:54:9a:f8: da:c1:6a:1c:ad:bf:25:21:99:06:7f:bd:f5:42:28: 75:53:23:b7:1e:25:e9:f1:07:39:69:bf:c5:a5:0e: 57:29:68:10:b5:ce:d0:4c:ba:60:bc:7c:db:9e:cf: d3:66:4b:a4:6e:12:93:82:b5:05:02:25:b4:78:0e: ee:21:40:71:33:cb:55:4e:a8:97:48:3d:fb:58:83: 3a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:16:9D:CF:F1:55:CC:64:D9:ED:36:84:A3:64:AF:91:F9:5F:36:C6 X509v3 Authority Key Identifier: keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:7b:9a:b5:7e:9e:de:05:f8:db:ae:4e:f7:d4:ea:6d:ce:b7: 40:3e:3e:97:4d:7c:4d:a5:d0:81:0a:58:50:86:25:84:c3:af: 47:06:dc:ce:4d:d4:dd:84:e7:55:ef:ae:d3:a7:03:92:e9:39: 18:d1:d6:b3:9b:f9:cf:b2:0a:9b:a6:7b:42:f8:4f:3b:25:d2: 54:a8:96:6c:e9:e1:12:59:d7:8c:84:eb:19:8a:40:3d:88:ef: 76:54:08:ce:91:08:38:fe:a4:2d:c7:f9:83:a8:16:40:0d:79: d6:0e:95:d4:a4:72:a3:62:04:52:f7:8e:2c:98:20:a2:45:b5: 38:b6:da:3a:e5:13:74:45:a7:c5:6e:f7:e7:29:0a:80:fd:72: 16:cb:34:96:18:fb:5f:7a:ec:f5:55:16:0c:26:46:94:fd:24: d9:8f:c9:98:2b:90:32:be:bb:78:d2:36:11:7e:9d:d9:ff:e5: 66:3c:85:8a:89:80:01:9f:60:ff:27:03:b7:e5:24:4b:68:00: e2:c8:53:50:84:94:91:4c:c1:37:af:38:79:62:14:f2:a4:86: bd:35:5d:1c:ba:df:7b:5a:b1:a7:af:57:24:0c:3a:07:0e:01: 48:ce:e4:e3:01:d2:7b:90:b2:5d:56:df:24:44:f1:12:4a:64: 40:c6:8c:13 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZAaaSfatihD9wym5sMQ7wWRvhzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx NjJlMWFhZDAeFw0yNTA5MDgyMzE5MDhaFw0yNTA5MTAwMTAzMDhaMDMxMTAvBgNV BAMTKEZCMTY5RENGRjE1NUNDNjREOUVEMzY4NEEzNjRBRjkxRjk1RjM2QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUVhaXJ1VWmAVQrIMyJ+bnoAG1 IlTzw8O76rF9/mtVtZRK2YdcXYreZpLo1FWw7fwKl5gVjzeimMHY5Rp4wgLGk8Gb P8WyL6GDE0UPjBiWJhfcMRTZaXOGiN7f7f6s9+2NKmJiQNaxBqHeU5QJV6ZliFTq bH9igQYQTwrRAujq9kEdS4bckCNluguivqkycgrpltqSCjmc5S+K1jSO1rf/i7mR iEm7gm0Chf9PeNMxUFSa+NrBahytvyUhmQZ/vfVCKHVTI7ceJenxBzlpv8WlDlcp aBC1ztBMumC8fNuez9NmS6RuEpOCtQUCJbR4Du4hQHEzy1VOqJdIPftYgzoxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+xadz/FVzGTZ7TaEo2SvkflfNsYwHwYDVR0j BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0 OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ dUdxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjUyZDgxNC0z ZDJmLTRkZjQtODE0MC1kZmI1MzBmNzQ5MTIvMC9GMjlGQkFCNERCODY3RjZCRDlB N0VGRjZBQTU1RDk4QzE2MkUxQUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXuatX6e3gX4265O99Tq bc63QD4+l018TaXQgQpYUIYlhMOvRwbczk3U3YTnVe+u06cDkuk5GNHWs5v5z7IK m6Z7QvhPOyXSVKiWbOnhElnXjITrGYpAPYjvdlQIzpEIOP6kLcf5g6gWQA151g6V 1KRyo2IEUveOLJggokW1OLbaOuUTdEWnxW735ykKgP1yFss0lhj7X3rs9VUWDCZG lP0k2Y/JmCuQMr67eNI2EX6d2f/lZjyFiomAAZ9g/ycDt+UkS2gA4shTUISUkUzB N684eWIU8qSGvTVdHLrfe1qxp69XJAw6Bw4BSM7k4wHSe5CyXVbfJETxEkpkQMaM Ew== -----END CERTIFICATE-----Generated at Tue Sep 9 17:36:18 2025 by rpki-client