$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: E0TaI999w3O5Y9CCMFnKPP5lEgD9EF7upBFdRJ0K5YI= Subject key identifier: BC:ED:D9:69:61:F7:D8:A7:8D:D6:E2:6E:58:41:47:56:E4:3C:E4:4C Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 69FA6BC62E4E32BE981A7C59F28B866132681C92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 035B Signing time: Sun 07 Sep 2025 07:43:56 +0000 Manifest this update: Sun 07 Sep 2025 07:38:56 +0000 Manifest next update: Mon 08 Sep 2025 10:11:56 +0000 Files and hashes: 1: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: 9QDAlicDZU2dKA/slyHao02LhaPY7/2iCnESN6BbiqA=) 2: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (hash: Y4VGjNKxdM1kt8f9/kG9Dub6HzXbG7OXpVqySki/RW4=) 3: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: kbUfx2g7/W6xr6BcRBqigrahrWSKqlZaZ80tT5+SQUk=) 4: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: 8/3XzRXXjmYpSthB/PqRmvioB+R4a98BuFhtWRNYmtk=) 5: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: cKnNLC66X19KWTLeS9BLlyG6jkzxqkdJwZjUWCrZPHc=) 6: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: gdXx/K9o9R0iHcBqvyYGjvMaM7m8YSK3NClOA5QCkyY=) 7: 3138352e31332e3232372e302f32342d3234203d3e203533333536.roa (hash: fyjNZl2BnH5gWmJXj7IkwC9hLUY6iDMpaWQ6H8Zs07M=) 8: 3135392e3235332e312e302f32342d3234203d3e2039333034.roa (hash: dcYXeL7R4SgGVjoaZN9OWp91BkdwHsg557vymFY3FPQ=) 9: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: ium02BtB+GfbIHn2YGUt7i7of/NJnXnez2EEtYL+duE=) 10: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: JO9eMRAwPS+hZf1UF8eYFlm1nYrsRkC7Oj1Lhed/bAU=) 11: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: uV5gP669aq0NtuCXuZBm6wWsNYwP/024H/522nPjCx8=) 12: 3138352e31332e3232352e302f32342d3234203d3e203631333137.roa (hash: 8TzKoFnFzYaSWN5mBXGHVTu7YevWpqGi2XUkHCPKssM=) 13: 3231372e32382e3133382e302f32342d3234203d3e20323039393736.roa (hash: oyOFvRhi/TPEOopsZuEaDpEux2304igP8lMcDVdyDmE=) 14: 3135392e3235332e322e302f32342d3234203d3e20323134313433.roa (hash: qmuf0vkLJtyYNBk6lONse3deUisFPtDCWrL9dDMaewk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 07:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:fa:6b:c6:2e:4e:32:be:98:1a:7c:59:f2:8b:86:61:32:68:1c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Sep 7 07:38:56 2025 GMT Not After : Sep 8 10:11:56 2025 GMT Subject: CN=BCEDD96961F7D8A78DD6E26E58414756E43CE44C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2e:0a:35:fd:da:77:a7:7d:e5:57:f5:50:7a: a3:0a:55:f5:4a:01:92:2c:f8:cf:a4:0e:10:0e:49: a7:43:94:bf:4e:1f:74:56:b7:c1:7f:97:83:09:9d: b9:a2:7f:73:b8:8d:6c:1f:a2:bd:68:70:cd:4b:9b: 0d:01:06:95:e0:6e:15:d9:76:84:1d:5e:44:a0:de: 5b:12:8b:4a:d3:ab:f3:0d:3c:01:60:81:ab:01:bf: bf:ca:34:cf:55:08:70:fe:01:0c:b0:ac:c5:50:3e: be:69:dc:a3:9c:fe:7f:2d:30:a1:60:69:9c:3a:ff: 13:fc:49:60:57:49:dd:0e:4c:d9:aa:ed:60:91:7a: 1c:f2:07:d5:2f:b6:ae:eb:91:9d:c2:23:56:47:a3: 8e:85:aa:05:6a:89:46:43:1f:f9:ea:d6:2a:9f:83: 5f:b0:b2:89:e0:d9:ef:2a:0c:bc:69:be:e1:08:e8: e3:e0:2e:18:2e:d5:3a:1c:1d:6a:51:38:25:41:35: ec:52:5c:66:70:20:0d:97:4b:7b:d1:04:83:a3:92: 2c:d2:4d:35:4d:a9:1c:d8:8f:63:ee:82:ea:88:93: d0:68:92:5a:e7:97:50:be:65:ea:d9:81:21:f5:80: 25:e7:61:06:0f:b8:bc:d8:bd:42:b7:21:dd:44:ad: 83:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:ED:D9:69:61:F7:D8:A7:8D:D6:E2:6E:58:41:47:56:E4:3C:E4:4C X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ee:60:c5:14:70:cc:2c:bc:d3:cc:46:5f:42:82:53:96:41: 98:73:29:61:d0:ac:e7:70:3b:0b:4d:7b:c3:10:4a:be:30:b4: d7:58:52:fe:ed:4b:c6:51:b6:12:b0:ba:75:4d:e9:cc:90:22: d8:3c:36:cc:9b:5d:ce:2d:1f:13:f3:07:63:40:7b:73:c3:13: b7:ae:89:76:20:4c:06:05:c3:0f:9a:c2:83:e0:29:f5:88:46: 09:a4:35:14:9f:d3:f8:b9:ad:45:6b:90:c4:e0:c2:9f:36:a2: fc:45:78:26:8d:93:0a:6e:db:76:f1:a3:17:bc:90:d9:70:8a: 5d:c7:16:52:e4:1e:e5:9c:4e:0d:05:16:e9:8a:b9:c4:79:2f: 8a:5e:24:4f:cb:95:08:cd:e3:83:72:2d:2c:71:bf:e8:0b:63: c6:e0:81:c7:0c:3b:ec:28:5b:08:8b:3c:62:c1:99:da:a6:15: 23:43:de:8e:23:2f:ff:53:65:62:92:e7:d6:f2:12:82:27:10: 9a:56:3c:8e:70:5b:9b:1a:c2:1c:b9:ef:b7:11:3c:a7:40:c3: 62:f9:1b:6e:b1:a8:d6:0c:df:5a:11:5a:e0:b8:22:c8:21:46: 0e:0f:52:33:9a:b8:9a:ca:4b:9f:04:d4:b6:c9:ac:77:f7:5c: 3b:23:dd:28 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUafprxi5OMr6YGnxZ8ouGYTJoHJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNTA5MDcwNzM4NTZaFw0yNTA5MDgxMDExNTZaMDMxMTAvBgNV BAMTKEJDRUREOTY5NjFGN0Q4QTc4REQ2RTI2RTU4NDE0NzU2RTQzQ0U0NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZLgo1/dp3p33lV/VQeqMKVfVK AZIs+M+kDhAOSadDlL9OH3RWt8F/l4MJnbmif3O4jWwfor1ocM1Lmw0BBpXgbhXZ doQdXkSg3lsSi0rTq/MNPAFggasBv7/KNM9VCHD+AQywrMVQPr5p3KOc/n8tMKFg aZw6/xP8SWBXSd0OTNmq7WCRehzyB9Uvtq7rkZ3CI1ZHo46FqgVqiUZDH/nq1iqf g1+wsong2e8qDLxpvuEI6OPgLhgu1TocHWpROCVBNexSXGZwIA2XS3vRBIOjkizS TTVNqRzYj2PuguqIk9Boklrnl1C+ZerZgSH1gCXnYQYPuLzYvUK3Id1ErYMTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvO3ZaWH32KeN1uJuWEFHVuQ85EwwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+5gxRRwzCy808xGX0KC U5ZBmHMpYdCs53A7C017wxBKvjC011hS/u1LxlG2ErC6dU3pzJAi2Dw2zJtdzi0f E/MHY0B7c8MTt66JdiBMBgXDD5rCg+Ap9YhGCaQ1FJ/T+LmtRWuQxODCnzai/EV4 Jo2TCm7bdvGjF7yQ2XCKXccWUuQe5ZxODQUW6Yq5xHkvil4kT8uVCM3jg3ItLHG/ 6AtjxuCBxww77ChbCIs8YsGZ2qYVI0PejiMv/1NlYpLn1vISgicQmlY8jnBbmxrC HLnvtxE8p0DDYvkbbrGo1gzfWhFa4LgiyCFGDg9SM5q4mspLnwTUtsmsd/dcOyPd KA== -----END CERTIFICATE-----Generated at Sun Sep 7 14:48:33 2025 by rpki-client