$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft File: E19302BE91C9D4211CDF4AFF091055A173B3593B.mft (raw, json) Hash identifier: g5IdVKqy1+aadbnvlVzP2B9zfdVcl4YBwdjG3oEdKdA= Subject key identifier: 1D:39:3D:05:A3:F6:10:57:FC:42:1A:AF:50:ED:30:86:17:F8:86:A8 Authority key identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B Certificate issuer: /CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Certificate serial: 55F4021F2B682A797CC1187E2D2A068488165D27 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft Manifest number: 5A Signing time: Mon 08 Sep 2025 00:26:57 +0000 Manifest this update: Mon 08 Sep 2025 00:21:57 +0000 Manifest next update: Tue 09 Sep 2025 01:42:57 +0000 Files and hashes: 1: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: p0V0EhuR94jsdFZ1UsjzKoR4Va7GATjKkx+PVQ3cRs4=) 2: E19302BE91C9D4211CDF4AFF091055A173B3593B.crl (hash: OVkHq7QqgXsvgCTnMCjO10sq8/qh2VhtVSFe3VxcqlU=) 3: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: 7m4uBl7pjkxamzWCFShzOT8dP3zXIx3Ew/sIEJmrOk4=) 4: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: BOG3fQtugkiXpKS/p2fTg16ei6qBO6dg8xuWYfodSgU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:f4:02:1f:2b:68:2a:79:7c:c1:18:7e:2d:2a:06:84:88:16:5d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Validity Not Before: Sep 8 00:21:57 2025 GMT Not After : Sep 9 01:42:57 2025 GMT Subject: CN=1D393D05A3F61057FC421AAF50ED308617F886A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:90:14:46:d7:15:98:80:37:c6:f0:b6:a3:9a: 93:6b:fe:f4:85:0b:65:6f:aa:95:cb:86:7d:7a:79: fe:62:7b:86:d9:92:41:92:89:7b:9d:d8:52:3f:d3: 39:7a:a1:08:25:2e:38:93:bc:3b:99:61:8b:e1:92: e3:d4:5e:8e:e0:0e:76:87:78:84:24:41:ba:4d:22: 6f:62:f0:1e:43:21:19:16:7a:50:ca:b1:88:65:f3: a8:bd:d8:88:68:c5:11:30:e8:4f:57:f7:9b:0b:63: 6a:2a:ff:6b:32:ba:f6:51:9e:a8:26:b8:4c:b2:0d: 8a:a5:39:48:e1:77:58:82:c5:0d:b0:c2:ea:d3:39: 88:53:aa:54:52:fc:0e:4f:dd:22:8e:23:8b:c5:03: c9:bc:a2:e5:9f:4a:35:e3:7e:89:e6:8a:bf:d5:6d: 9d:91:8a:65:78:02:76:f7:da:8e:aa:43:f0:49:bc: ae:ac:b5:d5:26:0e:e4:87:40:c6:b2:47:52:7b:f2: 44:57:06:9e:45:1d:d4:96:d9:30:0b:2a:b4:f8:0b: f0:97:50:31:67:99:87:40:12:0e:b9:c7:e5:6f:57: 5b:29:8e:81:70:3f:93:1d:65:66:cf:08:7f:8a:cd: 43:ca:38:c7:8e:11:72:26:cd:6a:97:36:5b:05:c4: 6a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:39:3D:05:A3:F6:10:57:FC:42:1A:AF:50:ED:30:86:17:F8:86:A8 X509v3 Authority Key Identifier: keyid:E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:d0:3b:bb:f0:11:48:b9:05:5d:3c:e1:04:a7:b1:29:7c:c7: 40:b9:19:96:b8:05:c5:31:10:30:c0:78:9a:28:7c:b7:9b:ab: df:f2:91:9f:a5:0b:ec:1d:3e:38:e1:89:eb:a7:15:fd:58:22: 6f:eb:12:d5:30:1b:10:20:76:42:01:4c:7c:9e:f9:04:e7:09: 89:d7:0f:58:2e:d5:40:5c:21:d5:9e:2b:0f:4c:4a:56:f1:9e: c4:35:18:1b:4e:18:c3:92:ff:b6:5c:b8:29:00:9e:8b:95:af: 62:5f:91:57:ea:90:cb:af:9f:59:f0:0f:cc:8b:c1:48:b1:ee: 29:d5:30:c9:21:54:7e:b4:50:e0:00:b0:09:42:fb:98:72:03: d0:c1:f1:e1:8e:f9:1f:84:f9:03:0c:b9:54:cd:fe:7f:a2:3e: 1b:b2:35:e6:c3:64:eb:98:0c:e7:46:1f:bc:84:43:b6:18:c9: 14:00:5e:e4:40:28:17:2e:91:ff:48:e0:b4:5e:b3:af:a2:3c: 00:e4:53:6a:cd:13:80:15:cb:88:2e:2c:c9:db:15:60:ae:27: 24:d2:0d:7f:33:0b:43:01:99:14:19:dc:41:2f:ec:17:bf:9c: 0b:86:2a:05:b3:29:1a:e2:73:dc:84:4b:fa:49:4c:2c:35:d3: e1:a5:8b:40 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUVfQCHytoKnl8wRh+LSoGhIgWXScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5MzAyQkU5MUM5RDQyMTFDREY0QUZGMDkxMDU1QTE3 M0IzNTkzQjAeFw0yNTA5MDgwMDIxNTdaFw0yNTA5MDkwMTQyNTdaMDMxMTAvBgNV BAMTKDFEMzkzRDA1QTNGNjEwNTdGQzQyMUFBRjUwRUQzMDg2MTdGODg2QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9kBRG1xWYgDfG8LajmpNr/vSF C2VvqpXLhn16ef5ie4bZkkGSiXud2FI/0zl6oQglLjiTvDuZYYvhkuPUXo7gDnaH eIQkQbpNIm9i8B5DIRkWelDKsYhl86i92IhoxREw6E9X95sLY2oq/2syuvZRnqgm uEyyDYqlOUjhd1iCxQ2wwurTOYhTqlRS/A5P3SKOI4vFA8m8ouWfSjXjfonmir/V bZ2RimV4Anb32o6qQ/BJvK6stdUmDuSHQMayR1J78kRXBp5FHdSW2TALKrT4C/CX UDFnmYdAEg65x+VvV1spjoFwP5MdZWbPCH+KzUPKOMeOEXImzWqXNlsFxGqhAgMB AAGjggKGMIICgjAdBgNVHQ4EFgQUHTk9BaP2EFf8QhqvUO0whhf4hqgwHwYDVR0j BBgwFoAU4ZMCvpHJ1CEc30r/CRBVoXOzWTswDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNm NTBlOC8xMC9FMTkzMDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNC LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0UxOTMwMkJFOTFDOUQ0MjExQ0RGNEFG RjA5MTA1NUExNzNCMzU5M0IuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYB BQUHMAuGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC8xMC9FMTkz MDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA GNA7u/ARSLkFXTzhBKexKXzHQLkZlrgFxTEQMMB4mih8t5ur3/KRn6UL7B0+OOGJ 66cV/Vgib+sS1TAbECB2QgFMfJ75BOcJidcPWC7VQFwh1Z4rD0xKVvGexDUYG04Y w5L/tly4KQCei5WvYl+RV+qQy6+fWfAPzIvBSLHuKdUwySFUfrRQ4ACwCUL7mHID 0MHx4Y75H4T5Awy5VM3+f6I+G7I15sNk65gM50YfvIRDthjJFABe5EAoFy6R/0jg tF6zr6I8AORTas0TgBXLiC4sydsVYK4nJNINfzMLQwGZFBncQS/sF7+cC4YqBbMp GuJz3IRL+klMLDXT4aWLQA== -----END CERTIFICATE-----Generated at Mon Sep 8 10:12:08 2025 by rpki-client