$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: nVR3JfvCJQ5MuMEOIFT6kWn16eSTcdqY9v3G+X69ays= Subject key identifier: 7E:24:E0:37:4B:83:38:05:67:D0:E8:E0:E4:FA:59:55:53:81:DB:C4 Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: 169BF3FB7F1DC0F6685CC2EE8A129EBD1004F0D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 0426 Signing time: Tue 09 Sep 2025 06:27:58 +0000 Manifest this update: Tue 09 Sep 2025 06:22:58 +0000 Manifest next update: Wed 10 Sep 2025 10:12:58 +0000 Files and hashes: 1: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: IiLsd5rWyRAEtPC2BRNztBwgXOWFkCLAq6FHsMnhQxg=) 2: 326131313a353730323a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: zY7Phzmd75TKCthkmSaY4oyTFaKkCEl/y4pnJz6mHMw=) 3: 326131313a353730313a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 0SF0WfEKn6tAt+SqtI0zWos8/5DwYGM33/T6SlnO8Oc=) 4: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: wQ/YXS5V0WqyAz3I38Grxwtf2vC7Tnq0YU0pMolmNpk=) 5: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: /8dVa93viKNoM1pCJooeH0rtbsVAVvDJFpjlC3WNZyI=) 6: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: Fqs+xGh2wCPoRebx3WWGGz8gG+3wDYrzV+eGaABVra0=) 7: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: ma+wlMqMsb7J0TC2Gy822cEZS57hTDfS/GzCjZsgQ1k=) 8: 326131313a353730343a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: e6pNQA8izdBKRkcuzWtfOOmNK456AAkxlNJ6pMTNpsc=) 9: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: SY6OvQv9R/Ut8R5yFxdy0RVK/9dKsg8ZwmC3iNS9Rpw=) 10: 326131313a353730353a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: YvH+3atWqaB4zJsHYK1cEoa4+J3Y8wbDOetaRpGkY9U=) 11: AS48070.asa (hash: g8nZ+0797JM2RRPSAMOVry4oQ3UIESPrss4OXPuwkjo=) 12: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: VIdYFIOIqW5zJ3T1LDGwWjmJ764XjM+ac+86S8Ja5hk=) 13: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: S5WIAkzllTXfMiWpREUuucFgM0BSw7Pb5gT995rR5+k=) 14: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: 242POLRepYH713AUptOGvBkM/JpRNVCsIm5BodQGTyY=) 15: 326131313a353730333a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: amyhppkunQUKDCiBGMFxQfAHBmd/6ZM1Y2JA6Xv6mjw=) 16: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: EEtfGKQPQ42nFzzdsRfixi4zKQ5tTYPEdAQ1iAcmdE4=) 17: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: uOiIvaXDLvA1DINhj12wuMTmBmgks/fPWI2ztpdauyM=) 18: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: Pc4F216M/oD/fxZDUk8HLynWg8D1IQ0ANHs5N2ZC0VQ=) 19: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: NDHvIIcUiAk7uX5boyMA8yHxKUGe6BZWK+cptlXNnOA=) 20: 326131313a353730363a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: +GiVUNSbcYm0MXNlVgxa6VflGOlRp9hOfbY/aidYY1U=) 21: 326131313a353730373a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 11LkJhM5pGNm95iRuza8Ye8pvz7Hby+G2YVPV9KFFMI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 10:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:9b:f3:fb:7f:1d:c0:f6:68:5c:c2:ee:8a:12:9e:bd:10:04:f0:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: Sep 9 06:22:58 2025 GMT Not After : Sep 10 10:12:58 2025 GMT Subject: CN=7E24E0374B83380567D0E8E0E4FA59555381DBC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:63:89:95:6e:d0:80:d8:60:b5:81:fb:ce:07: f0:47:da:41:a4:07:c4:b5:74:be:19:3b:8f:38:9f: 92:33:46:ae:8b:f0:be:fc:0c:b5:f3:30:13:5f:4b: 0b:8b:24:ca:d3:ec:de:e4:b5:b7:17:56:26:ba:2d: 8a:25:77:9b:6f:18:93:89:bf:f8:ee:7d:c4:a0:f9: 22:27:ee:71:98:a6:be:6e:74:0f:f1:7a:d4:52:86: 94:b3:df:53:1c:f4:63:14:60:cd:bf:d3:63:76:ba: ab:55:ee:e6:2d:e0:ad:cc:22:07:1c:e6:7b:cb:9d: 90:b2:52:a0:fe:d9:9d:ad:b7:cd:e8:27:7f:cf:ae: 15:06:ce:8e:6a:a6:63:60:31:85:f1:83:cf:64:64: e7:ce:3c:83:c1:dc:f3:ab:a0:2c:1e:c5:03:17:14: 2e:ce:b2:5b:d6:14:95:4b:04:3b:f5:c2:49:1b:d6: 14:5a:c5:1a:17:79:b8:c0:84:34:b9:83:d4:94:50: 50:de:ec:3a:58:ea:bb:f1:56:e5:b2:35:0a:0c:07: 1a:ec:51:f4:00:74:35:b5:46:4c:4a:01:be:22:5f: a8:d0:a8:c0:9e:65:42:ca:f2:a5:ae:60:99:10:98: 8b:46:7f:ce:21:8e:df:49:53:3e:91:b1:96:84:f8: df:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:24:E0:37:4B:83:38:05:67:D0:E8:E0:E4:FA:59:55:53:81:DB:C4 X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:4e:80:42:bb:35:5c:37:af:79:6f:6a:0a:c0:9a:f3:9e:b8: 85:34:47:99:0d:67:e2:ca:ac:5d:93:b2:c8:f9:5c:f3:bb:7d: 6f:e5:1a:7d:67:b5:0f:65:27:38:cd:9c:64:21:54:e2:71:44: 46:a0:18:c7:08:6e:97:3c:c1:09:89:f8:81:5b:b2:5e:ac:d7: 5e:f0:78:1b:2f:8b:31:a6:ae:aa:ec:f8:ac:6b:37:30:e6:96: eb:26:f6:2f:17:78:a1:ee:21:3a:49:95:c3:38:78:29:ac:08: 03:c2:11:84:b5:bb:80:e7:75:b0:f1:a9:59:2e:8a:f5:65:46: de:cc:2a:50:7d:5c:d1:d0:a0:c8:7c:77:a2:24:fc:70:e3:7e: 81:de:4b:45:cf:45:1f:79:70:49:00:8f:53:5d:7b:c3:c0:c4: b9:04:42:e2:7e:b8:79:45:93:d3:eb:2b:75:03:04:72:e8:f5: 4a:c9:a0:88:d1:b7:19:fe:bf:61:1a:62:75:85:1a:79:f4:92: dc:2b:08:05:df:0e:49:f3:1b:f8:85:e1:8d:f3:b5:d6:58:08: 87:79:a4:48:72:4c:29:f6:d5:7b:42:f1:95:72:15:4e:9b:c3: 92:c9:b6:45:16:f6:1e:24:7e:3b:3f:9f:bd:f5:fa:64:12:93: 08:00:e7:73 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFpvz+38dwPZoXMLuihKevRAE8NYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNTA5MDkwNjIyNThaFw0yNTA5MTAxMDEyNThaMDMxMTAvBgNV BAMTKDdFMjRFMDM3NEI4MzM4MDU2N0QwRThFMEU0RkE1OTU1NTM4MURCQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGY4mVbtCA2GC1gfvOB/BH2kGk B8S1dL4ZO484n5IzRq6L8L78DLXzMBNfSwuLJMrT7N7ktbcXVia6LYold5tvGJOJ v/jufcSg+SIn7nGYpr5udA/xetRShpSz31Mc9GMUYM2/02N2uqtV7uYt4K3MIgcc 5nvLnZCyUqD+2Z2tt83oJ3/PrhUGzo5qpmNgMYXxg89kZOfOPIPB3POroCwexQMX FC7OslvWFJVLBDv1wkkb1hRaxRoXebjAhDS5g9SUUFDe7DpY6rvxVuWyNQoMBxrs UfQAdDW1RkxKAb4iX6jQqMCeZULK8qWuYJkQmItGf84hjt9JUz6RsZaE+N93AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUfiTgN0uDOAVn0Ojg5PpZVVOB28QwHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAU6AQrs1XDeveW9qCsCa 8564hTRHmQ1n4sqsXZOyyPlc87t9b+UafWe1D2UnOM2cZCFU4nFERqAYxwhulzzB CYn4gVuyXqzXXvB4Gy+LMaauquz4rGs3MOaW6yb2Lxd4oe4hOkmVwzh4KawIA8IR hLW7gOd1sPGpWS6K9WVG3swqUH1c0dCgyHx3oiT8cON+gd5LRc9FH3lwSQCPU117 w8DEuQRC4n64eUWT0+srdQMEcuj1SsmgiNG3Gf6/YRpidYUaefSS3CsIBd8OSfMb +IXhjfO11lgIh3mkSHJMKfbVe0LxlXIVTpvDksm2RRb2HiR+Oz+fvfX6ZBKTCADn cw== -----END CERTIFICATE-----Generated at Tue Sep 9 22:09:05 2025 by rpki-client