$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: skYosyqFpPY4GRVAofx0ancWMi8EWpd9yVzTUoSjHLs= Subject key identifier: 01:A5:1C:53:A6:D0:12:3B:BB:74:DB:46:CA:59:9E:9F:59:63:7F:1A Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 6077248303250FABF4ABF3D4CD9840564EE94770 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 01E0 Signing time: Wed 06 Aug 2025 03:03:03 +0000 Manifest this update: Wed 06 Aug 2025 02:58:03 +0000 Manifest next update: Thu 07 Aug 2025 05:26:03 +0000 Files and hashes: 1: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: qiBSyEfy3iZL+fbYLcN4GxAZ6Nv9/91XKsfJvwBEsDA=) 2: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: LZc2AksEahD5rzoxMFxve6nJwmwqwYYZ+BLhaadaDDA=) 3: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: DO5U+zbxAW9dCHHkG8v0O5pLZTi9rHV+80EYsqI00GY=) 4: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: R+o6n+RjWkxiRu/ckQJHanWEp0DumqtvHG3oGP82QQ8=) 5: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: SsdW0YpcJfef7CtWvRhhfCUEgjAhSHqFG1h0ACBR214=) 6: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: TNC4zrNVSYq6rg1HfzOLsFNL5cW5pcjjIopBseDA51Y=) 7: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=) 8: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: xL09RaMvNnk3zcTxJYCpyR11r2WfajekNMt0OPCzbqM=) 9: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=) 10: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: NfdCiPZo2V7z2IR8DOEcP9s1WlT0wPdEK10WCc6hh18=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:77:24:83:03:25:0f:ab:f4:ab:f3:d4:cd:98:40:56:4e:e9:47:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Aug 6 02:58:03 2025 GMT Not After : Aug 7 05:26:03 2025 GMT Subject: CN=01A51C53A6D0123BBB74DB46CA599E9F59637F1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:7e:1c:2f:2d:05:c1:2f:c9:2f:03:8e:c8: 12:62:09:68:f9:cc:e5:ef:ff:fa:fa:51:db:77:43: d7:af:c7:5a:6e:c2:0a:72:aa:16:30:36:bc:3f:88: fb:aa:46:d1:6b:e0:bf:10:06:c5:c0:18:48:a5:ca: 58:33:2a:d9:8f:33:a0:cd:90:2f:2f:cd:4c:95:0c: d7:b1:31:54:7d:8b:8c:63:18:21:ed:21:6e:66:2a: 38:c3:4a:35:6a:d4:3b:1d:f8:cd:ff:de:c9:46:27: 44:3a:ce:e3:4c:6a:2f:f2:6e:97:b0:40:12:81:cf: 41:ea:6a:8b:d6:98:5b:f7:71:d0:e0:b7:a1:4e:97: 63:1e:8b:1f:52:80:f1:f7:1b:c3:30:f1:a0:c0:0e: 3b:f9:ae:9f:41:8f:7d:94:85:9b:20:98:04:c1:fe: fb:69:aa:da:f7:ec:38:76:c1:06:d9:99:bf:52:ab: b3:f9:45:91:07:b2:6c:aa:2f:2a:e4:b0:31:bf:84: 14:b1:63:71:8c:08:ce:a5:45:d7:bc:9a:75:94:05: 65:9a:4f:31:8b:eb:05:57:2c:6b:bd:93:81:a2:23: 72:e9:f1:1a:76:66:7b:10:66:0e:64:e2:b8:ca:a2: 81:c8:56:27:92:16:2e:a2:c4:f3:72:62:18:ff:20: ac:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A5:1C:53:A6:D0:12:3B:BB:74:DB:46:CA:59:9E:9F:59:63:7F:1A X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:94:9c:47:80:40:6b:a8:91:ae:90:ab:14:57:86:95:28:ba: 39:40:f7:d6:d3:f6:11:e5:c0:45:88:5e:70:95:74:5a:f9:74: aa:ca:ab:c0:97:02:10:8c:68:d1:52:17:03:45:1d:94:01:9b: 6e:34:1b:4c:21:1e:9f:14:d3:bf:31:f2:b2:66:59:0c:de:fb: 9f:f5:76:3d:36:36:9f:44:f9:f0:c7:6c:2a:a2:98:22:ff:b1: da:18:78:81:5a:04:37:0e:9e:7b:77:d7:5d:bd:ce:b5:96:ea: 80:84:9a:c4:f5:5a:27:07:94:00:00:d3:2a:37:5f:f1:d5:26: b8:31:12:c8:ff:29:c7:d3:64:c1:7b:7b:69:76:98:83:51:6c: 44:0d:ba:d7:11:03:28:34:eb:d1:a2:7b:0e:50:58:a7:31:fd: 4f:7e:ea:02:09:4c:2f:6c:63:62:8c:b4:df:ca:e1:30:13:8e: 97:ae:b1:6a:e2:ac:4a:8b:5f:6e:2d:2b:eb:14:48:3f:fd:52: 85:75:b5:a1:cd:22:38:26:11:e6:6d:ed:8a:a0:21:10:19:ba: 2f:35:9a:ed:f3:2e:e9:3b:44:b7:86:c7:eb:15:26:2f:30:55: 6e:b2:9f:58:65:0e:3e:82:4a:97:0d:7e:ad:a9:ed:15:05:85: a7:d4:a5:87 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYHckgwMlD6v0q/PUzZhAVk7pR3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNTA4MDYwMjU4MDNaFw0yNTA4MDcwNTI2MDNaMDMxMTAvBgNV BAMTKDAxQTUxQzUzQTZEMDEyM0JCQjc0REI0NkNBNTk5RTlGNTk2MzdGMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGe34cLy0FwS/JLwOOyBJiCWj5 zOXv//r6Udt3Q9evx1puwgpyqhYwNrw/iPuqRtFr4L8QBsXAGEilylgzKtmPM6DN kC8vzUyVDNexMVR9i4xjGCHtIW5mKjjDSjVq1Dsd+M3/3slGJ0Q6zuNMai/ybpew QBKBz0HqaovWmFv3cdDgt6FOl2Meix9SgPH3G8Mw8aDADjv5rp9Bj32UhZsgmATB /vtpqtr37Dh2wQbZmb9Sq7P5RZEHsmyqLyrksDG/hBSxY3GMCM6lRde8mnWUBWWa TzGL6wVXLGu9k4GiI3Lp8Rp2ZnsQZg5k4rjKooHIVieSFi6ixPNyYhj/IKydAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUAaUcU6bQEju7dNtGylmen1ljfxowHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBklJxH gEBrqJGukKsUV4aVKLo5QPfW0/YR5cBFiF5wlXRa+XSqyqvAlwIQjGjRUhcDRR2U AZtuNBtMIR6fFNO/MfKyZlkM3vuf9XY9NjafRPnwx2wqopgi/7HaGHiBWgQ3Dp57 d9ddvc61luqAhJrE9VonB5QAANMqN1/x1Sa4MRLI/ynH02TBe3tpdpiDUWxEDbrX EQMoNOvRonsOUFinMf1PfuoCCUwvbGNijLTfyuEwE46XrrFq4qxKi19uLSvrFEg/ /VKFdbWhzSI4JhHmbe2KoCEQGbovNZrt8y7pO0S3hsfrFSYvMFVusp9YZQ4+gkqX DX6tqe0VBYWn1KWH -----END CERTIFICATE-----Generated at Wed Aug 6 07:55:39 2025 by rpki-client