$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: imVpf9/UjG2v7JpjLj/stZqEJvquDNfwPPj3DJpffYQ= Subject key identifier: 0E:2A:C6:40:8D:7F:CB:DD:C1:30:96:1D:82:63:4C:29:3D:64:9B:65 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 53562AE61B0A1700A9C1A135BBC961E32C354169 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 0274 Signing time: Sat 09 Aug 2025 03:05:01 +0000 Manifest this update: Sat 09 Aug 2025 03:00:01 +0000 Manifest next update: Sun 10 Aug 2025 03:14:01 +0000 Files and hashes: 1: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: 7RQ0gXCWkNwXJyLVMAjMT4ifOZKJ140AG/jnIia+kz4=) 2: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: 17qN8Bd0gWBZvDkn96RHqKMURz1HVyJmOiwn1OSD2G0=) 3: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 4: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 5: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=) 6: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=) 7: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk=) 8: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) 9: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg=) 10: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: yeYxHPIBO0Ja8w/yCB4gl3nbX0u07MBU0GNLvjubaJw=) 11: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 12: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo=) 13: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=) 14: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: polxJUQuuGvo82QFQvRtgLcGzpMrITqZaH9JMW5PByU=) 15: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=) 16: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 17: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: s8PXZ6xun7QdEzluX2KYTIUVTeLEFzlJ1flicK9iKH8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 Aug 2025 03:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:56:2a:e6:1b:0a:17:00:a9:c1:a1:35:bb:c9:61:e3:2c:35:41:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Aug 9 03:00:01 2025 GMT Not After : Aug 10 03:14:01 2025 GMT Subject: CN=0E2AC6408D7FCBDDC130961D82634C293D649B65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:73:c8:fe:25:e4:ec:24:62:69:20:d3:8e:56: ad:4c:fc:e4:4d:31:9c:ca:b3:ed:57:11:e5:dc:e4: 96:41:ec:ee:d0:e5:70:37:ff:14:92:64:d4:1e:0f: 68:ec:3d:93:ab:a9:a1:0e:53:51:58:23:a2:95:c5: 12:5b:f8:90:9f:ef:6a:5a:2d:9b:13:69:a9:9a:7c: 31:5f:93:d7:65:82:c7:24:c0:4c:7c:9a:77:0d:32: 50:f9:c4:d7:f8:59:00:15:fd:14:f1:a7:d5:46:ff: a5:a5:5d:bd:58:b4:e5:7a:2a:fb:dd:f0:d2:80:22: f4:d9:0e:7d:09:5e:aa:c0:78:c5:af:7b:0d:f6:45: 56:11:60:51:58:5f:47:10:6c:43:e8:48:58:25:98: c7:a5:69:a1:60:c1:a8:84:c8:03:3a:46:7f:3a:e7: 3b:02:68:23:78:43:ec:30:aa:c9:72:f1:5b:00:8b: 50:1d:ba:f4:5a:02:fc:98:5a:9c:0b:c7:97:07:65: c6:3e:cb:2a:b3:50:51:c9:b3:43:bb:c4:ef:01:17: 51:e6:44:e3:4c:69:c9:2b:18:7b:6c:d7:87:36:95: 2a:8b:0d:da:24:bb:bf:03:23:7e:11:d3:29:08:ca: 67:03:d6:a0:75:e4:c0:38:a6:8d:b4:75:35:75:b9: bc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2A:C6:40:8D:7F:CB:DD:C1:30:96:1D:82:63:4C:29:3D:64:9B:65 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:89:a4:60:e1:41:f3:a6:34:c1:8a:ad:b8:03:66:7e:85:5a: 9b:86:9b:75:c7:e5:4e:a8:2b:de:bb:10:09:4c:ab:9d:07:79: f6:71:4e:76:d5:c6:b4:05:5d:7b:fe:d8:b6:dd:ea:7c:d4:f8: de:c8:3c:45:ea:4a:c5:c3:e1:72:01:0d:2a:c6:e7:2a:31:33: 0d:b3:f2:e0:20:b7:22:1f:4f:3a:1f:ee:7d:14:fd:38:a4:0a: 91:6d:21:99:e8:f6:52:57:2e:40:cb:70:52:33:c0:e1:fa:ac: be:26:ca:72:3d:65:08:b4:0f:46:ab:bb:fc:fc:76:ea:dd:ae: ba:1f:2f:49:68:d5:c8:ce:ff:1a:81:73:86:87:66:65:50:30: db:0e:55:be:99:fd:52:3f:24:47:24:c5:f2:8a:8b:5e:6e:69: 35:01:c7:ca:22:ea:10:68:7b:b2:68:fe:84:64:6e:37:e5:14: 78:bc:ae:a0:1e:dd:3a:6c:2f:a7:46:96:c8:2d:d6:be:3f:ea: 50:c7:f5:bc:4f:04:45:5e:f7:c8:8a:87:53:0c:37:fd:e4:f2: eb:be:3e:46:b6:1c:c4:50:db:17:d0:cc:2a:c4:de:7c:18:69: d3:13:6a:76:c7:85:31:10:43:37:c4:1c:ff:de:e5:c8:6a:fa: d3:40:47:3f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUU1Yq5hsKFwCpwaE1u8lh4yw1QWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNTA4MDkwMzAwMDFaFw0yNTA4MTAwMzE0MDFaMDMxMTAvBgNV BAMTKDBFMkFDNjQwOEQ3RkNCRERDMTMwOTYxRDgyNjM0QzI5M0Q2NDlCNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLc8j+JeTsJGJpINOOVq1M/ORN MZzKs+1XEeXc5JZB7O7Q5XA3/xSSZNQeD2jsPZOrqaEOU1FYI6KVxRJb+JCf72pa LZsTaamafDFfk9dlgsckwEx8mncNMlD5xNf4WQAV/RTxp9VG/6WlXb1YtOV6Kvvd 8NKAIvTZDn0JXqrAeMWvew32RVYRYFFYX0cQbEPoSFglmMelaaFgwaiEyAM6Rn86 5zsCaCN4Q+wwqsly8VsAi1AduvRaAvyYWpwLx5cHZcY+yyqzUFHJs0O7xO8BF1Hm RONMackrGHts14c2lSqLDdoku78DI34R0ykIymcD1qB15MA4po20dTV1ubxPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUDirGQI1/y93BMJYdgmNMKT1km2UwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCiaRg 4UHzpjTBiq24A2Z+hVqbhpt1x+VOqCveuxAJTKudB3n2cU521ca0BV17/ti23ep8 1PjeyDxF6krFw+FyAQ0qxucqMTMNs/LgILciH086H+59FP04pAqRbSGZ6PZSVy5A y3BSM8Dh+qy+JspyPWUItA9Gq7v8/Hbq3a66Hy9JaNXIzv8agXOGh2ZlUDDbDlW+ mf1SPyRHJMXyiotebmk1AcfKIuoQaHuyaP6EZG435RR4vK6gHt06bC+nRpbILda+ P+pQx/W8TwRFXvfIiodTDDf95PLrvj5GthzEUNsX0MwqxN58GGnTE2p2x4UxEEM3 xBz/3uXIavrTQEc/ -----END CERTIFICATE-----Generated at Sat Aug 9 08:53:33 2025 by rpki-client