$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json) Hash identifier: QTFToNyXJ0CFWibvFFDTgx9+H80CQfMzxve5LAzsnns= Subject key identifier: A9:30:C6:13:97:27:1C:5B:37:83:DB:AC:FB:20:30:2D:20:EA:A1:A6 Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Certificate serial: 42E5317A06CD65B974ABE71D7A23CB72A4C41707 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft Manifest number: 04DD Signing time: Sun 03 Aug 2025 17:47:16 +0000 Manifest this update: Sun 03 Aug 2025 17:42:16 +0000 Manifest next update: Mon 04 Aug 2025 19:54:16 +0000 Files and hashes: 1: 3134362e3234372e36322e302f32342d3234203d3e203234383531.roa (hash: 3irJhAGcE48vEZNOxKTwKsy4d69RVyIL6ZEClAmlLA0=) 2: 3134362e3234372e35392e302f32342d3234203d3e203234383531.roa (hash: cISB3c/lX6ECxkwGaCM313qUlrkmfGXNHg9Sn5Duu/E=) 3: 3134362e3234372e34382e302f32332d3234203d3e203234383531.roa (hash: CYrx2Q8+pBHAyk1lGd5Mg9MkvR7v5zfpX8Vn/ABu+6Q=) 4: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: kVQQOnDERYYEk3TQKxEptB2FIspexIMAXq7IowzhRHU=) 5: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: y4OGbSGooI8V9euRtHx6jpjRwWGZstdSARXhTQ70Yxg=) 6: 3134362e3234372e35312e302f32342d3234203d3e203234383531.roa (hash: zRn95fZoa98Dxgk18rTQZPg3Vz861tTnSVUdcy0yTb0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 19:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e5:31:7a:06:cd:65:b9:74:ab:e7:1d:7a:23:cb:72:a4:c4:17:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Validity Not Before: Aug 3 17:42:16 2025 GMT Not After : Aug 4 19:54:16 2025 GMT Subject: CN=A930C61397271C5B3783DBACFB20302D20EAA1A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:5c:f5:e1:bb:25:88:b8:cc:4c:4a:f5:63: c8:8e:07:82:46:ff:c0:c4:43:35:47:0a:43:9b:8f: ab:22:b0:2d:15:57:8d:50:c7:1b:36:86:fe:8b:71: c7:aa:76:9e:fb:56:aa:d3:b3:d4:e2:b3:9e:12:87: fb:ab:c5:d7:4f:dc:00:17:43:b0:77:04:00:c1:f3: e2:fe:8e:99:9e:e0:fe:2d:f6:18:30:af:a4:b2:7d: 38:60:76:8c:2d:3d:0e:74:86:6c:89:a9:0b:d0:e3: 05:e4:68:c5:bb:db:ae:57:7a:06:80:6d:ce:b1:9e: 79:ac:e1:13:8b:27:89:67:9d:13:b9:50:e0:7c:3d: 8e:d4:4e:c8:42:8a:28:f3:bc:d5:b1:0d:17:00:b1: 2a:ed:15:9f:2e:6e:e1:34:6f:4a:87:81:54:b2:0e: cb:60:4a:b4:91:01:77:13:a1:92:36:58:ba:3d:ec: c9:cb:ae:4d:5a:61:81:17:7e:eb:fb:3e:35:91:8c: 60:5b:90:7f:74:4d:92:c0:73:02:db:d3:23:9f:0c: c3:c7:6c:36:02:3e:8e:01:41:8b:0b:a2:0c:c4:c5: 1e:f0:14:d6:6f:98:ba:72:e7:0f:35:f1:27:44:ce: 7f:76:42:5d:c6:30:ba:e3:d8:bb:5d:8e:ed:b1:9b: 5e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:30:C6:13:97:27:1C:5B:37:83:DB:AC:FB:20:30:2D:20:EA:A1:A6 X509v3 Authority Key Identifier: keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:44:88:4b:6c:01:33:a7:f4:4b:c6:95:e9:32:cf:0f:8c:75: 4a:3d:97:68:77:cb:dc:51:5a:68:b9:c0:00:55:e0:d0:20:0d: ae:36:72:9a:93:bd:da:6a:0d:67:b1:91:ed:18:9b:6e:3e:25: a9:9c:3d:25:96:d4:61:c2:92:63:a1:44:2c:18:f0:7d:7c:88: f8:44:1b:c3:94:56:8f:c6:90:62:77:03:ea:ee:20:0c:8e:24: 5d:75:e3:24:7a:75:4c:41:20:eb:90:77:a6:cc:94:99:53:20: f3:a3:57:d7:37:3c:71:5a:fb:83:52:6b:35:b9:69:dc:77:72: fc:b8:31:93:1e:39:7e:89:59:0e:2e:4d:c4:70:8a:24:5d:59: 03:f7:59:e2:1a:78:aa:07:a5:a1:2f:de:ac:43:fc:4e:0a:c2: c7:c9:e7:0c:5b:15:05:40:ca:e5:26:85:74:14:30:c0:b0:02: 60:9d:45:92:18:2e:20:81:75:8c:f3:d1:f6:4f:ad:d4:80:16: ad:ab:84:9e:14:7b:bc:fd:4e:7c:11:5c:36:1f:3f:37:07:95: 3a:7e:80:a0:d0:14:b6:7d:db:91:75:c1:82:fa:28:d5:7c:07: 5a:2e:d5:bc:8b:bf:cd:dd:53:43:4c:9b:7e:b6:52:42:96:44: da:d5:3e:8d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQuUxegbNZbl0q+cdeiPLcqTEFwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTZjNTA5YmE0OGU1YjUwNDk0NTcyZTA1YzQ1YzU4ZTdl MTZkODdmYjAeFw0yNTA4MDMxNzQyMTZaFw0yNTA4MDQxOTU0MTZaMDMxMTAvBgNV BAMTKEE5MzBDNjEzOTcyNzFDNUIzNzgzREJBQ0ZCMjAzMDJEMjBFQUExQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIl1z14bsliLjMTEr1Y8iOB4JG /8DEQzVHCkObj6sisC0VV41Qxxs2hv6Lcceqdp77VqrTs9Tis54Sh/urxddP3AAX Q7B3BADB8+L+jpme4P4t9hgwr6SyfThgdowtPQ50hmyJqQvQ4wXkaMW7265XegaA bc6xnnms4ROLJ4lnnRO5UOB8PY7UTshCiijzvNWxDRcAsSrtFZ8ubuE0b0qHgVSy DstgSrSRAXcToZI2WLo97MnLrk1aYYEXfuv7PjWRjGBbkH90TZLAcwLb0yOfDMPH bDYCPo4BQYsLogzExR7wFNZvmLpy5w818SdEzn92Ql3GMLrj2Ltdju2xm14fAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUqTDGE5cnHFs3g9us+yAwLSDqoaYwHwYDVR0j BBgwFoAUpsUJukjltQSUVy4FxFxY5+Fth/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYtOTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1 NWM1LzEvQTZDNTA5QkE0OEU1QjUwNDk0NTcyRTA1QzQ1QzU4RTdFMTZEODdGQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BzVUp1a2psdFFTVVZ5NEZ4RnhZNS1G dGhfcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzhiYjQ0Ni05 MWMwLTQxMzgtYTMzYS1iNDc4NjVkZTU1YzUvMS9BNkM1MDlCQTQ4RTVCNTA0OTQ1 NzJFMDVDNDVDNThFN0UxNkQ4N0ZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkSIS2wBM6f0S8aV6TLP D4x1Sj2XaHfL3FFaaLnAAFXg0CANrjZympO92moNZ7GR7Ribbj4lqZw9JZbUYcKS Y6FELBjwfXyI+EQbw5RWj8aQYncD6u4gDI4kXXXjJHp1TEEg65B3psyUmVMg86NX 1zc8cVr7g1JrNblp3Hdy/Lgxkx45folZDi5NxHCKJF1ZA/dZ4hp4qgeloS/erEP8 TgrCx8nnDFsVBUDK5SaFdBQwwLACYJ1FkhguIIF1jPPR9k+t1IAWrauEnhR7vP1O fBFcNh8/NweVOn6AoNAUtn3bkXXBgvoo1XwHWi7VvIu/zd1TQ0ybfrZSQpZE2tU+ jQ== -----END CERTIFICATE-----Generated at Mon Aug 4 11:19:43 2025 by rpki-client