$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft File: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json) Hash identifier: 3Ao5wsoC8A7WPYnkGUqPbU1RdnZ7qXnWo4/APYrUwVo= Subject key identifier: 73:52:6F:B0:ED:AD:ED:2E:92:35:49:38:2F:79:40:27:AD:E0:52:BF Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Certificate serial: 4E27AC35E857A0A5F3F80A324D66FC0EF45BDBE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft Manifest number: 0452 Signing time: Tue 05 Aug 2025 17:52:21 +0000 Manifest this update: Tue 05 Aug 2025 17:47:21 +0000 Manifest next update: Wed 06 Aug 2025 20:32:21 +0000 Files and hashes: 1: 34362e3138332e33312e302f32342d3234203d3e20383334.roa (hash: xUsUi3YtopFm9VP8hMqKJ5OknqKCy1oSAbxFuFcm2oA=) 2: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: ii72WRjo+pDoTtYybgLKaFsOG8JUV0CPdunTnf7/tAg=) 3: 34362e3138332e32392e302f32342d3234203d3e20313734.roa (hash: +2zC2IoOcCso/mftEuke8EnaYM8a1UxQtmNUmYAEM7o=) 4: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: EQc8ZSWRYu3w3yABE1KT+uLZnchUtUDhUBMKc9gsz8U=) 5: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: lxi2m0tJ4IwcIv1Qu/mxuwgzf8BGdtHdxfKNM9mKZEQ=) 6: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: C/a+znfo3EMVs3bUcHCYXjpy4Fk7jR4EjA6V67pU7Cc=) 7: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: MBTQi0HOcbTwY/4fQl+vTOHLOQ2FmR/EhBIZ6Dj3u14=) 8: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: 4jq0qwMJqWtfRUuzz3vPyKHtua4FM5/8Y3cvVGfTKBM=) 9: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: pxnqedD3kuwz1m+9x0q4e9R46P3xXGAP6tM7JZr4zqQ=) 10: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: U6sIE1tc5XNg8Vw7jnbxLLCNANnB9wH3voxb1FhuZwc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 20:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:27:ac:35:e8:57:a0:a5:f3:f8:0a:32:4d:66:fc:0e:f4:5b:db:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Validity Not Before: Aug 5 17:47:21 2025 GMT Not After : Aug 6 20:32:21 2025 GMT Subject: CN=73526FB0EDADED2E923549382F794027ADE052BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:98:da:a5:b3:79:22:dd:0c:fb:71:ea:2c:ec: 3f:6b:09:5c:b4:cd:d2:15:cd:8f:70:4e:35:4c:dd: ab:19:c3:3e:52:60:ad:ee:3e:c9:48:52:3f:00:15: 3c:5a:b7:ec:8e:4b:01:45:58:ff:97:73:46:f7:1f: 0a:93:53:c6:15:78:73:a5:4f:a4:07:1a:1c:cd:e2: 2a:aa:db:ad:9c:16:a6:2c:cd:6f:3f:ab:5d:0b:3b: 77:ff:5b:2a:8a:92:6e:c2:bb:ec:32:97:93:74:e9: b8:1d:2b:26:e9:8c:04:8a:fe:b0:68:e1:29:ab:6d: 4b:c1:7a:eb:f7:9c:20:20:af:14:9a:04:df:ef:d9: b7:b0:39:46:78:30:7f:c9:f7:36:bd:10:7b:0e:45: 68:96:bc:69:3d:98:57:8d:65:d2:57:22:91:a8:cc: 9f:94:41:ab:9c:47:54:2b:8b:a3:3c:28:14:1d:75: 0d:14:bd:bf:00:75:f8:41:dd:af:a2:a4:d9:05:1f: 88:ca:60:3e:6b:9a:c2:73:98:0b:2b:4d:79:90:2f: 56:bb:51:b9:34:50:81:90:78:3e:41:5e:f5:af:1a: 94:4a:ae:de:33:ce:7c:da:54:39:86:8f:a7:86:10: e8:ec:6b:22:7a:c8:80:e4:33:21:a3:24:e5:00:9d: 2c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:52:6F:B0:ED:AD:ED:2E:92:35:49:38:2F:79:40:27:AD:E0:52:BF X509v3 Authority Key Identifier: keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:bb:ca:38:e5:39:a9:96:80:22:ba:21:4d:e5:53:3d:1b:16: 98:62:18:99:64:b3:65:58:4e:2d:cf:c7:7d:1a:9d:0a:f3:01: 2c:45:5a:d8:9e:18:13:f0:9d:b3:61:d8:b6:d4:e9:01:72:a7: c9:20:c4:95:b0:e3:6f:7f:2e:cb:57:ac:f6:45:f5:3d:a9:54: 12:2e:8b:b3:0d:33:a9:97:84:68:26:64:61:89:37:a0:01:82: 20:c6:44:83:87:67:4e:2e:7c:23:cb:45:00:8b:5d:32:74:cd: 67:46:b8:b4:bf:58:b7:66:37:31:7a:0b:f4:6e:b7:15:63:ed: ec:88:a2:b7:91:76:8b:d1:a9:34:a7:55:53:4c:8f:8c:bd:5c: 51:45:a2:89:93:fb:b8:94:71:ed:71:72:97:b4:bf:84:b1:a0: 4c:1b:f5:77:e6:46:6e:b4:ca:f6:87:1c:61:4b:36:05:aa:8a: ca:ac:ad:82:b1:a2:6d:60:b2:7e:b2:f6:e6:37:e3:70:88:d1: d2:2c:00:a3:87:30:cf:df:ee:3f:15:5c:18:2f:9c:f4:5b:34: 0d:02:60:2e:b1:99:93:8d:c9:62:92:10:5b:90:3d:50:fa:cb: e4:bb:67:9e:da:5f:69:8a:3a:01:9b:3a:b0:36:4c:38:cb:84: 7d:08:38:e5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTiesNehXoKXz+AoyTWb8DvRb2+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj YzY3N2IwMDAeFw0yNTA4MDUxNzQ3MjFaFw0yNTA4MDYyMDMyMjFaMDMxMTAvBgNV BAMTKDczNTI2RkIwRURBREVEMkU5MjM1NDkzODJGNzk0MDI3QURFMDUyQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1mNqls3ki3Qz7ceos7D9rCVy0 zdIVzY9wTjVM3asZwz5SYK3uPslIUj8AFTxat+yOSwFFWP+Xc0b3HwqTU8YVeHOl T6QHGhzN4iqq262cFqYszW8/q10LO3f/WyqKkm7Cu+wyl5N06bgdKybpjASK/rBo 4SmrbUvBeuv3nCAgrxSaBN/v2bewOUZ4MH/J9za9EHsORWiWvGk9mFeNZdJXIpGo zJ+UQaucR1Qri6M8KBQddQ0Uvb8AdfhB3a+ipNkFH4jKYD5rmsJzmAsrTXmQL1a7 Ubk0UIGQeD5BXvWvGpRKrt4zznzaVDmGj6eGEOjsayJ6yIDkMyGjJOUAnSyVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUc1JvsO2t7S6SNUk4L3lAJ63gUr8wHwYDVR0j BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0 Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4 bmV3QS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xNmFjYjlhMC02 ZDFlLTRhZTQtOTE3Ny1kOTM4ZTk4MDQzOTUvMC8yNEU1Mzc4OEJENEVGQTIzQjFB ODIwN0I3RTc0QThFMUNDNjc3QjAwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLvKOOU5qZaAIrohTeVT PRsWmGIYmWSzZVhOLc/HfRqdCvMBLEVa2J4YE/Cds2HYttTpAXKnySDElbDjb38u y1es9kX1PalUEi6Lsw0zqZeEaCZkYYk3oAGCIMZEg4dnTi58I8tFAItdMnTNZ0a4 tL9Yt2Y3MXoL9G63FWPt7Iiit5F2i9GpNKdVU0yPjL1cUUWiiZP7uJRx7XFyl7S/ hLGgTBv1d+ZGbrTK9occYUs2BaqKyqytgrGibWCyfrL25jfjcIjR0iwAo4cwz9/u PxVcGC+c9Fs0DQJgLrGZk43JYpIQW5A9UPrL5LtnntpfaYo6AZs6sDZMOMuEfQg4 5Q== -----END CERTIFICATE-----Generated at Wed Aug 6 05:25:02 2025 by rpki-client