$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: 6+NHA3mGc8Y8hu9JEuyJ9zuyTWEMIs0i1soihVDLkQ0= Subject key identifier: A4:F7:E9:11:E5:B5:EA:65:A6:76:06:D2:C1:D9:CF:43:27:43:9A:FF Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 0DF1DEBA290D9DC76D3676559BE7A915E9250F67 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 0196 Signing time: Sat 14 Jun 2025 16:37:35 +0000 Manifest this update: Sat 14 Jun 2025 16:32:35 +0000 Manifest next update: Sun 15 Jun 2025 19:53:35 +0000 Files and hashes: 1: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: NfdCiPZo2V7z2IR8DOEcP9s1WlT0wPdEK10WCc6hh18=) 2: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: DO5U+zbxAW9dCHHkG8v0O5pLZTi9rHV+80EYsqI00GY=) 3: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=) 4: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: xL09RaMvNnk3zcTxJYCpyR11r2WfajekNMt0OPCzbqM=) 5: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: R+o6n+RjWkxiRu/ckQJHanWEp0DumqtvHG3oGP82QQ8=) 6: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: eDxLxWGfylJCXAdFYf0pyjSOdE9ikhdFa/SguYMcQBU=) 7: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=) 8: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: TNC4zrNVSYq6rg1HfzOLsFNL5cW5pcjjIopBseDA51Y=) 9: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: LZc2AksEahD5rzoxMFxve6nJwmwqwYYZ+BLhaadaDDA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 10:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f1:de:ba:29:0d:9d:c7:6d:36:76:55:9b:e7:a9:15:e9:25:0f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Jun 14 16:32:35 2025 GMT Not After : Jun 15 19:53:35 2025 GMT Subject: CN=A4F7E911E5B5EA65A67606D2C1D9CF4327439AFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8a:cd:2f:6a:59:28:38:4c:b0:f1:bd:c7:21: ec:0d:f4:39:d5:09:b2:40:f6:d0:d7:13:14:78:bb: 9c:4b:11:52:08:62:ab:ae:4c:cc:74:c3:8c:7e:b0: c2:0b:cf:7d:8d:f3:90:2c:4e:99:f3:66:14:4e:df: bd:2e:de:be:39:85:9b:77:53:3b:89:32:b4:77:3c: 80:84:cd:dc:09:d7:c0:94:29:40:6e:46:20:db:4a: 8a:27:a6:73:cc:4c:31:9c:68:75:09:77:38:e1:d1: 81:60:9d:ba:c3:ee:55:b2:fd:f6:f7:8d:f1:36:ff: e6:08:45:1f:56:69:83:3e:aa:a9:13:36:c4:2e:11: a0:8b:0c:d5:44:d8:8f:40:33:72:bb:8b:77:da:3c: 22:10:37:71:df:53:6c:1d:02:03:42:73:27:44:06: a9:88:f9:fb:13:54:d3:a7:b6:09:98:e1:89:8c:cc: be:c5:56:75:87:26:1e:18:32:de:aa:3e:ea:81:9a: e7:ba:b6:64:bd:a2:16:0d:d9:34:36:52:b5:1d:96: f7:c5:e3:67:a2:26:3a:37:8f:cc:fc:a2:f3:ad:d0: ce:c4:3b:24:32:e7:57:37:2b:3a:26:1d:2b:74:9f: 4c:2b:4d:aa:4d:aa:aa:5d:fc:e3:c0:e4:8e:d6:37: 0c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F7:E9:11:E5:B5:EA:65:A6:76:06:D2:C1:D9:CF:43:27:43:9A:FF X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:8f:9e:6b:de:67:fc:00:06:4c:66:fe:31:3d:70:ed:0f:f2: 2b:f7:0c:68:22:ce:a4:d3:65:26:d1:60:19:07:27:0a:2d:cf: ea:86:98:9c:c7:6b:ab:46:e6:11:33:23:28:6e:49:9d:98:ba: 2b:9f:a9:e8:9b:4b:e8:9d:81:a3:91:70:c8:ae:82:d4:7e:bf: 53:3a:d4:40:a2:c9:8e:1d:63:c1:70:82:bb:09:5a:e3:ce:6e: 50:6a:61:15:3f:4e:85:c0:8a:bf:8c:4b:66:2b:a7:56:97:44: 57:af:bb:33:eb:0c:cc:e0:71:09:76:a4:fa:d8:70:42:6e:d1: 9f:60:c1:cd:8e:54:00:4d:af:09:0c:66:d3:8f:fc:a6:94:31: 27:f2:95:b1:cf:65:aa:2f:82:e3:be:21:12:fb:04:f2:23:48: 20:15:4f:7d:aa:60:fb:c3:6a:eb:e3:02:87:8d:1c:ce:98:43: 13:29:49:99:c2:1d:8c:83:34:b3:16:fe:4c:79:40:90:9e:47: c4:0f:d3:1c:c4:ad:5c:e1:98:46:28:30:53:8a:49:c9:56:30: 83:e7:f8:ee:84:c6:69:80:9f:5e:fc:3a:91:08:78:1e:3b:66: e4:ff:2f:ed:63:24:58:b0:ed:0e:e9:94:21:f0:85:fe:49:d1: e6:0f:5a:f8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDfHeuikNncdtNnZVm+epFeklD2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNTA2MTQxNjMyMzVaFw0yNTA2MTUxOTUzMzVaMDMxMTAvBgNV BAMTKEE0RjdFOTExRTVCNUVBNjVBNjc2MDZEMkMxRDlDRjQzMjc0MzlBRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtis0valkoOEyw8b3HIewN9DnV CbJA9tDXExR4u5xLEVIIYquuTMx0w4x+sMILz32N85AsTpnzZhRO370u3r45hZt3 UzuJMrR3PICEzdwJ18CUKUBuRiDbSoonpnPMTDGcaHUJdzjh0YFgnbrD7lWy/fb3 jfE2/+YIRR9WaYM+qqkTNsQuEaCLDNVE2I9AM3K7i3faPCIQN3HfU2wdAgNCcydE BqmI+fsTVNOntgmY4YmMzL7FVnWHJh4YMt6qPuqBmue6tmS9ohYN2TQ2UrUdlvfF 42eiJjo3j8z8ovOt0M7EOyQy51c3KzomHSt0n0wrTapNqqpd/OPA5I7WNwwxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUpPfpEeW16mWmdgbSwdnPQydDmv8wHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBuj55r 3mf8AAZMZv4xPXDtD/Ir9wxoIs6k02Um0WAZBycKLc/qhpicx2urRuYRMyMobkmd mLorn6nom0vonYGjkXDIroLUfr9TOtRAosmOHWPBcIK7CVrjzm5QamEVP06FwIq/ jEtmK6dWl0RXr7sz6wzM4HEJdqT62HBCbtGfYMHNjlQATa8JDGbTj/ymlDEn8pWx z2WqL4LjviES+wTyI0ggFU99qmD7w2rr4wKHjRzOmEMTKUmZwh2MgzSzFv5MeUCQ nkfED9McxK1c4ZhGKDBTiknJVjCD5/juhMZpgJ9e/DqRCHgeO2bk/y/tYyRYsO0O 6ZQh8IX+SdHmD1r4 -----END CERTIFICATE-----Generated at Sat Jun 14 18:46:20 2025 by rpki-client