$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: ygu45DiblUT0crgNxat/5CR2o5DJEy/MIy6dshYQiWU= Subject key identifier: DB:A6:A8:D2:4B:CC:A0:E1:CF:48:F0:87:54:64:FA:A0:90:24:3E:17 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 7E474F407CFA1C6B3D3F23D785913A0CBB3530C9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 02C6 Signing time: Sun 07 Sep 2025 19:22:59 +0000 Manifest this update: Sun 07 Sep 2025 19:17:59 +0000 Manifest next update: Mon 08 Sep 2025 21:23:59 +0000 Files and hashes: 1: 326131343a373538303a393130303a3a2f34302d3438203d3e20323031333836.roa (hash: HGfpWKFgSmhSbJJ0S3ZdUrJxu8/156bUgg5vlqYKRis=) 2: 326131343a373538303a393130303a3a2f34302d3438203d3e20323136323939.roa (hash: c4wfh1kOphA8Axvw6+dnj3lAut4b1kpMpQW/rZEnV+o=) 3: 326131343a373538303a393330303a3a2f34302d3438203d3e20323136323939.roa (hash: 0JNkK9KnjI4w2zV41Uw2bLOQhv0TkTdwPhPOAejMVJo=) 4: 326131343a373538303a393630303a3a2f34302d3438203d3e20313533333736.roa (hash: a3qLcUPi+RQppEqo978zrfnO/2oaV9TKnigMH0wuHZQ=) 5: 326131343a373538303a393230303a3a2f34302d3438203d3e20313430393135.roa (hash: n6lsjVYHHKKKPmzUm98edFKQEZTX7R3BteBSBE3ZmTg=) 6: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: jjg3HPw+XVWQVO0XHgF/TKZW97oaDPDZVvcbfhgJX94=) 7: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: CMdZEjYsTq7jVrrh2w3RrXu6xv1+6ak+M0Fv9y7KLKo=) 8: 326131343a373538303a393030303a3a2f34302d3438203d3e20323134363433.roa (hash: TpBOht4fHdBbgzn8V6oN1sv1lzMWI2nPHKIFH/SJnHk=) 9: 326131343a373538303a393430303a3a2f33392d3438203d3e20313430393135.roa (hash: mVqYPHXZFgCW00Y2ej0uNLFZlmcciaFr8mPxKhhXZIs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 09:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:47:4f:40:7c:fa:1c:6b:3d:3f:23:d7:85:91:3a:0c:bb:35:30:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Sep 7 19:17:59 2025 GMT Not After : Sep 8 21:23:59 2025 GMT Subject: CN=DBA6A8D24BCCA0E1CF48F0875464FAA090243E17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:9e:ac:b8:a5:41:bf:85:60:6c:b4:1b:6b: f8:17:a3:ca:a3:0c:e7:f1:31:69:a8:92:ae:e3:a1: e3:e4:8e:2b:94:14:2f:91:03:da:67:f1:e1:56:6b: dc:a5:a3:91:14:e8:95:55:3a:b0:82:70:8d:79:c8: 21:78:c9:bb:db:d2:9e:4e:f5:24:e9:04:11:3c:9e: ec:d5:fb:33:34:f5:b8:9c:c3:61:a6:76:3f:e2:7d: 39:39:12:42:39:66:cc:78:72:b4:14:b9:f0:aa:7a: 38:7d:e8:94:e0:13:42:4f:9c:fd:a9:77:01:b2:f5: c2:77:42:b0:06:1e:8f:2a:d9:ca:af:59:d1:66:8d: 95:75:8e:15:c3:64:5e:0e:e9:b3:e9:81:b9:c5:38: 32:74:8a:8c:0c:71:d7:b8:99:82:39:8c:76:55:44: 28:67:74:95:7a:58:40:11:75:1e:d3:b2:99:01:70: 0f:95:c4:4e:63:95:39:d7:02:90:6a:d0:19:a2:31: ab:3b:2c:db:b5:60:66:50:56:7b:ea:cd:09:af:14: 33:41:c4:6b:34:f1:c5:b3:e5:a1:5f:ea:08:18:23: 5e:c4:f5:56:9c:2c:3c:0c:34:41:7a:2d:03:13:a8: 4c:bd:d9:ae:d6:a6:df:be:59:5d:0b:bb:71:3f:b9: 7c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A6:A8:D2:4B:CC:A0:E1:CF:48:F0:87:54:64:FA:A0:90:24:3E:17 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:bc:52:40:51:02:b3:7e:a1:84:29:69:08:0d:99:a9:69:c5: f5:01:43:ee:be:1a:f8:02:d2:77:be:7d:dd:ba:57:ec:b3:77: bc:bf:e6:99:5f:95:48:01:dd:76:9c:00:61:de:89:fb:9b:89: 13:be:34:4f:31:17:fd:8e:1f:58:aa:c6:ce:cd:d5:2d:de:ec: dd:97:60:37:21:e2:85:af:94:17:9d:c8:4a:fa:15:c0:cf:7e: 27:f8:23:58:16:77:f4:76:27:21:bb:b5:d8:f6:e3:89:ce:5a: ca:b4:64:91:d1:08:5b:0f:17:03:50:c5:3f:e7:ab:8e:4e:39: 5a:5e:9a:e3:ff:b1:e3:a8:df:68:2a:0c:de:0a:99:d7:f5:49: 86:cf:77:0a:ec:aa:cf:0d:da:80:89:15:8d:2d:f2:94:d0:00: e7:e2:64:e0:e1:23:8a:b8:9f:9e:db:d2:27:53:42:7f:f6:f1: 6a:89:52:1d:46:00:b0:5f:c6:5e:70:34:c4:6d:12:97:d6:7c: 79:9f:9f:e8:1b:a5:54:be:f2:7e:ab:64:14:3f:e8:b7:15:36: 73:b6:43:51:11:52:1f:f9:54:dd:e8:80:1f:23:5a:29:72:f8: 3a:64:a7:f3:56:e6:b7:ad:b0:c8:38:7a:83:77:e0:43:f9:fd: 18:77:24:fd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfkdPQHz6HGs9PyPXhZE6DLs1MMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNTA5MDcxOTE3NTlaFw0yNTA5MDgyMTIzNTlaMDMxMTAvBgNV BAMTKERCQTZBOEQyNEJDQ0EwRTFDRjQ4RjA4NzU0NjRGQUEwOTAyNDNFMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfZ6suKVBv4VgbLQba/gXo8qj DOfxMWmokq7joePkjiuUFC+RA9pn8eFWa9ylo5EU6JVVOrCCcI15yCF4ybvb0p5O 9STpBBE8nuzV+zM09bicw2Gmdj/ifTk5EkI5Zsx4crQUufCqejh96JTgE0JPnP2p dwGy9cJ3QrAGHo8q2cqvWdFmjZV1jhXDZF4O6bPpgbnFODJ0iowMcde4mYI5jHZV RChndJV6WEARdR7TspkBcA+VxE5jlTnXApBq0BmiMas7LNu1YGZQVnvqzQmvFDNB xGs08cWz5aFf6ggYI17E9VacLDwMNEF6LQMTqEy92a7Wpt++WV0Lu3E/uXxhAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU26ao0kvMoOHPSPCHVGT6oJAkPhcwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBDvFJA UQKzfqGEKWkIDZmpacX1AUPuvhr4AtJ3vn3dulfss3e8v+aZX5VIAd12nABh3on7 m4kTvjRPMRf9jh9YqsbOzdUt3uzdl2A3IeKFr5QXnchK+hXAz34n+CNYFnf0dich u7XY9uOJzlrKtGSR0QhbDxcDUMU/56uOTjlaXprj/7HjqN9oKgzeCpnX9UmGz3cK 7KrPDdqAiRWNLfKU0ADn4mTg4SOKuJ+e29InU0J/9vFqiVIdRgCwX8ZecDTEbRKX 1nx5n5/oG6VUvvJ+q2QUP+i3FTZztkNREVIf+VTd6IAfI1opcvg6ZKfzVua3rbDI OHqDd+BD+f0YdyT9 -----END CERTIFICATE-----Generated at Sun Sep 7 23:27:15 2025 by rpki-client