$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: ZebbOjUcZZ/QkTdzti4fEEg6+HQRb2HdIiN2az+X42o= Subject key identifier: 07:1F:D0:5B:23:4D:30:94:72:45:ED:45:27:DF:7D:18:8F:DE:50:FC Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 62BCBA717E3C14E3D53EB5131EEDD833BB2C2F41 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 02AB Signing time: Fri 19 Sep 2025 03:50:58 +0000 Manifest this update: Fri 19 Sep 2025 03:45:58 +0000 Manifest next update: Sat 20 Sep 2025 04:16:58 +0000 Files and hashes: 1: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo=) 2: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 3: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg=) 4: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: polxJUQuuGvo82QFQvRtgLcGzpMrITqZaH9JMW5PByU=) 5: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: 6d230nmz4SIs2mGsI1mibPA5I4VSKZl3fX+ai/EDgcY=) 6: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) 7: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: 7RQ0gXCWkNwXJyLVMAjMT4ifOZKJ140AG/jnIia+kz4=) 8: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=) 9: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=) 10: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: s8PXZ6xun7QdEzluX2KYTIUVTeLEFzlJ1flicK9iKH8=) 11: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=) 12: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=) 13: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 14: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 15: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk=) 16: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) 17: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Sep 2025 22:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:bc:ba:71:7e:3c:14:e3:d5:3e:b5:13:1e:ed:d8:33:bb:2c:2f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Sep 19 03:45:58 2025 GMT Not After : Sep 20 04:16:58 2025 GMT Subject: CN=071FD05B234D30947245ED4527DF7D188FDE50FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ec:41:15:9a:9b:a2:da:da:2a:71:2f:e8:a5: 96:36:5e:7e:bb:d8:7b:7b:40:5c:33:62:aa:a7:0c: 9b:13:22:cf:cc:69:b2:98:7d:a0:e7:12:46:67:49: 16:d1:ff:df:bc:4b:a9:f5:01:f0:d8:f8:9f:fb:19: d3:3f:7d:30:a6:b0:b2:67:51:f8:47:71:04:19:30: fc:11:1b:08:68:ae:09:33:f0:e0:6b:b7:3e:80:d6: a3:7f:06:d8:d6:78:76:c4:0f:d5:47:72:d5:67:2e: cd:a2:8a:1d:7c:cd:e5:29:f4:c2:46:5a:48:e6:ab: 48:ce:af:e5:bd:af:9f:3a:95:da:ac:1b:7c:72:e8: ce:9c:61:37:c2:3f:e0:09:8d:a0:de:a6:14:01:19: 15:6c:12:73:10:5e:98:ce:5b:34:2d:4b:e5:f5:c0: 28:5e:0f:4f:10:ac:a2:6f:c1:a0:4e:61:91:3b:51: a3:a0:3d:d2:78:fd:a6:c6:3e:41:63:51:80:ae:4f: 2d:ea:dc:fb:7b:c5:d5:cc:e1:05:ea:aa:52:11:88: 1f:50:52:5b:f0:53:a9:0f:d3:04:20:c2:43:88:42: 44:db:6d:cd:95:48:f1:c9:7c:a9:5d:07:fe:0e:b9: a3:4a:e8:06:a1:97:46:13:4c:ec:00:28:09:fa:54: 45:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1F:D0:5B:23:4D:30:94:72:45:ED:45:27:DF:7D:18:8F:DE:50:FC X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c8:e2:47:4d:2f:b7:6d:85:44:32:e8:2c:dd:90:fa:4c:1d: be:91:0e:c8:cc:01:83:8f:4e:b3:a1:d2:f5:c6:5b:db:95:d9: 37:e6:b4:cf:33:af:c7:1e:94:52:4a:e2:87:e9:6a:4b:26:20: 95:4d:04:cf:cc:fa:38:6e:29:e9:73:cd:f5:60:c9:c4:43:a3: 2c:f8:e1:05:20:ec:c6:92:7a:9a:28:87:b2:67:b9:2d:cd:a2: 76:c4:38:95:ac:c5:94:94:e6:46:45:f9:a1:2b:64:52:b4:39: 42:7d:ea:fe:1b:d9:7a:e3:b1:70:c7:8f:1f:bb:bb:fc:21:e4: 22:a0:5d:44:a9:11:8f:cc:ab:60:0a:3d:25:25:3e:32:bd:2b: ca:c8:c9:9b:d6:2d:33:c6:cc:17:2d:b0:e5:ef:28:66:63:fb: 6f:1f:5c:5f:66:9c:f4:3f:6d:a9:ae:e3:ab:85:54:68:f4:45: be:85:79:54:87:92:7b:ca:c6:93:a1:8b:59:36:31:6d:f8:da: 05:78:50:49:48:64:0d:95:60:ef:10:5f:9f:3e:a1:06:ef:a2: bf:c3:ef:b5:f5:a5:42:08:04:ec:59:33:dd:91:5e:08:32:68: ac:cc:9f:a1:03:6f:d9:61:c6:20:d7:77:2f:6d:f4:cc:78:c2: 70:a6:2a:ea -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYry6cX48FOPVPrUTHu3YM7ssL0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNTA5MTkwMzQ1NThaFw0yNTA5MjAwNDE2NThaMDMxMTAvBgNV BAMTKDA3MUZEMDVCMjM0RDMwOTQ3MjQ1RUQ0NTI3REY3RDE4OEZERTUwRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq7EEVmpui2toqcS/opZY2Xn67 2Ht7QFwzYqqnDJsTIs/MabKYfaDnEkZnSRbR/9+8S6n1AfDY+J/7GdM/fTCmsLJn UfhHcQQZMPwRGwhorgkz8OBrtz6A1qN/BtjWeHbED9VHctVnLs2iih18zeUp9MJG Wkjmq0jOr+W9r586ldqsG3xy6M6cYTfCP+AJjaDephQBGRVsEnMQXpjOWzQtS+X1 wCheD08QrKJvwaBOYZE7UaOgPdJ4/abGPkFjUYCuTy3q3Pt7xdXM4QXqqlIRiB9Q UlvwU6kP0wQgwkOIQkTbbc2VSPHJfKldB/4OuaNK6Aahl0YTTOwAKAn6VEVpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUBx/QWyNNMJRyRe1FJ999GI/eUPwwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBuyOJH TS+3bYVEMugs3ZD6TB2+kQ7IzAGDj06zodL1xlvbldk35rTPM6/HHpRSSuKH6WpL JiCVTQTPzPo4binpc831YMnEQ6Ms+OEFIOzGknqaKIeyZ7ktzaJ2xDiVrMWUlOZG RfmhK2RStDlCfer+G9l647Fwx48fu7v8IeQioF1EqRGPzKtgCj0lJT4yvSvKyMmb 1i0zxswXLbDl7yhmY/tvH1xfZpz0P22pruOrhVRo9EW+hXlUh5J7ysaToYtZNjFt +NoFeFBJSGQNlWDvEF+fPqEG76K/w++19aVCCATsWTPdkV4IMmiszJ+hA2/ZYcYg 13cvbfTMeMJwpirq -----END CERTIFICATE-----Generated at Fri Sep 19 05:25:01 2025 by rpki-client