$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft File: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft (raw, json) Hash identifier: L4BbRTwJl5Y4ThDL0fNeeJyE8+YUxqUZsr4dhLb1aBM= Subject key identifier: CD:46:60:57:BE:B6:CA:13:2C:63:A8:B6:67:28:C7:C0:C9:9A:88:B5 Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Certificate serial: 4D61694A917E89D6E837D3BC0A314FE2AAEA8E15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft Manifest number: 045E Signing time: Mon 04 Aug 2025 00:27:18 +0000 Manifest this update: Mon 04 Aug 2025 00:22:18 +0000 Manifest next update: Tue 05 Aug 2025 01:24:18 +0000 Files and hashes: 1: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl (hash: Minz+yZ7JUtg7uVbH6KKizUf0RuZiRdqOARZ7OmAkR4=) 2: 3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa (hash: PjHq1CK+fSk+5WuONiKJilG5oXTFh0dZnkKMEZVNP8E=) 3: 3138382e3136342e3135342e302f32342d3234203d3e20383334.roa (hash: dqvIGRBXhp5junH3eUOhnE/BG+vJ7eBfp8AmwMBcjIk=) 4: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (hash: sY/xAuh6Mg68YWt7c8TloEoU7TIBsTXsCx6tRGi7xp4=) 5: 3138382e3136342e3135352e302f32342d3234203d3e203631333137.roa (hash: W1I8woHaqJ6kU4xjFwKm1g6uV7UZ51m6Dv8R/7Dp0Oc=) 6: 3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa (hash: pkJz5L9iLZRF+OIvLDh3t2xUInq31L6An4us+3j1eD0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 01:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:61:69:4a:91:7e:89:d6:e8:37:d3:bc:0a:31:4f:e2:aa:ea:8e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Validity Not Before: Aug 4 00:22:18 2025 GMT Not After : Aug 5 01:24:18 2025 GMT Subject: CN=CD466057BEB6CA132C63A8B66728C7C0C99A88B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:74:fe:21:ba:7e:40:90:ed:3a:c4:de:46: 63:f4:67:63:4c:26:e4:bc:1d:32:8d:c2:f7:2a:c9: 01:04:4d:dd:bc:93:3d:49:f5:90:c8:db:75:57:48: e9:a8:e4:c7:79:c0:fd:4b:73:f7:41:67:2e:fc:68: b6:14:12:7c:5b:ac:be:c3:6d:90:25:46:9f:af:97: 04:b2:e9:1b:11:b1:00:25:74:23:66:ea:92:89:04: 7e:24:69:e4:cf:3e:41:49:36:7d:c6:e4:7d:99:7e: e3:02:e4:b3:4f:eb:b8:35:2a:6b:db:27:f7:c1:fb: f2:9f:00:99:f6:85:ca:cf:bb:f4:8b:11:e1:4c:c1: 64:23:40:78:98:af:d8:e8:8d:10:dd:17:28:93:90: 61:96:e8:e8:93:28:31:44:59:de:3c:dd:b7:8c:2f: cb:07:25:20:45:27:47:64:45:9d:47:0b:6c:cc:ff: 9a:8f:f9:15:3c:8b:7e:37:6e:4f:7b:52:fe:a6:7a: 6f:10:1c:17:ff:32:e9:27:e5:28:48:e9:02:cf:a8: ed:a8:19:50:23:f2:e0:31:a6:59:4d:d6:ba:a6:5a: b6:85:94:d1:a6:30:c3:53:ec:d7:0b:bd:e6:64:88: 17:dc:30:2a:a4:ea:29:da:b9:07:53:08:52:71:14: 13:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:46:60:57:BE:B6:CA:13:2C:63:A8:B6:67:28:C7:C0:C9:9A:88:B5 X509v3 Authority Key Identifier: keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:71:58:8e:ad:4d:ef:0b:df:a3:f3:38:52:20:88:51:a6:ad: 4b:0b:84:1f:e8:4a:14:b8:0b:d7:0e:e3:a2:a3:05:21:bd:84: 01:59:64:85:7e:5f:6b:13:c3:24:b7:8d:b6:c8:22:5a:07:f4: 69:fb:24:fb:d1:cd:e1:2d:4a:ef:63:58:7a:ea:a1:92:0a:10: c5:93:ca:91:06:4d:26:5b:12:26:23:6b:93:84:43:03:83:e0: 5e:26:e9:c3:3f:0e:f1:23:cb:26:ba:17:ff:e9:4a:0a:d3:eb: 69:9a:c7:25:28:99:c1:49:5a:13:d9:95:75:7e:36:75:c4:63: 34:2d:85:f3:62:02:fb:1d:43:07:e7:39:f7:c8:69:b2:a4:45: d9:5a:b4:1a:30:e0:20:1c:7d:7c:5b:29:22:b9:2b:53:c3:80: 07:8c:3b:69:84:d0:a3:30:a8:10:59:24:0a:5f:61:63:7b:fa: 20:7f:f7:35:8f:d0:17:ec:0d:74:a8:12:27:f0:64:8b:ca:15: bb:a0:f6:9e:c0:de:f9:ce:32:ef:57:3d:75:47:91:35:b2:04: d8:f3:89:5c:61:a3:91:bc:ab:6f:86:f6:7e:10:72:cc:09:5a: 44:71:de:ca:62:c5:f7:a4:f4:9a:98:06:c3:e2:ae:23:dd:d3: 30:71:81:4f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTWFpSpF+idboN9O8CjFP4qrqjhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz MGY3YzRjYTAeFw0yNTA4MDQwMDIyMThaFw0yNTA4MDUwMTI0MThaMDMxMTAvBgNV BAMTKENENDY2MDU3QkVCNkNBMTMyQzYzQThCNjY3MjhDN0MwQzk5QTg4QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyK3T+Ibp+QJDtOsTeRmP0Z2NM JuS8HTKNwvcqyQEETd28kz1J9ZDI23VXSOmo5Md5wP1Lc/dBZy78aLYUEnxbrL7D bZAlRp+vlwSy6RsRsQAldCNm6pKJBH4kaeTPPkFJNn3G5H2ZfuMC5LNP67g1Kmvb J/fB+/KfAJn2hcrPu/SLEeFMwWQjQHiYr9jojRDdFyiTkGGW6OiTKDFEWd483beM L8sHJSBFJ0dkRZ1HC2zM/5qP+RU8i343bk97Uv6mem8QHBf/Mukn5ShI6QLPqO2o GVAj8uAxpllN1rqmWraFlNGmMMNT7NcLveZkiBfcMCqk6inauQdTCFJxFBMfAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzUZgV762yhMsY6i2ZyjHwMmaiLUwHwYDVR0j BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE M3hNby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzAzMDg5MC1m NmUwLTQxMGMtYmM5OS1hZjA5MjFkMWMzYTQvMC84QjlCQTlBRERFOTYzNTc3N0JG NTg2RkQ0OTNFMTRDRDMwRjdDNENBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXFYjq1N7wvfo/M4UiCI UaatSwuEH+hKFLgL1w7joqMFIb2EAVlkhX5faxPDJLeNtsgiWgf0afsk+9HN4S1K 72NYeuqhkgoQxZPKkQZNJlsSJiNrk4RDA4PgXibpwz8O8SPLJroX/+lKCtPraZrH JSiZwUlaE9mVdX42dcRjNC2F82IC+x1DB+c598hpsqRF2Vq0GjDgIBx9fFspIrkr U8OAB4w7aYTQozCoEFkkCl9hY3v6IH/3NY/QF+wNdKgSJ/Bki8oVu6D2nsDe+c4y 71c9dUeRNbIE2POJXGGjkbyrb4b2fhByzAlaRHHeymLF96T0mpgGw+KuI93TMHGB Tw== -----END CERTIFICATE-----Generated at Mon Aug 4 19:12:22 2025 by rpki-client