$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: Zk7tX/9+z6gOAQjTHIA262LD5TUZ5eJsZ7mUBl8fjTk= Subject key identifier: E3:18:DC:F8:38:73:D4:30:AE:53:01:74:1B:78:C6:CF:E3:CF:C8:96 Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 6E9D0EDB32B0EBA4B9A7968CAC092F6E5696E76A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 01E8 Signing time: Mon 04 Aug 2025 22:13:09 +0000 Manifest this update: Mon 04 Aug 2025 22:08:09 +0000 Manifest next update: Wed 06 Aug 2025 00:10:09 +0000 Files and hashes: 1: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: E9M8hVhhuMPa08T+3NU3bK2lpHo8DEebb2azsMDxRqY=) 2: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: OYFGGb9dMqAtV18cBeD3NbZ0TuwCvJXmn37LZwaW7zg=) 3: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: jAqeRW+G0tj75/HjlTu9upVrXQ/2AvwaP0ubMorKA1Q=) 4: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: bjWKUcdJK3JxiL+GqIgQQNiLJnq1CfKPBgs/UuOHrJA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 00:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:9d:0e:db:32:b0:eb:a4:b9:a7:96:8c:ac:09:2f:6e:56:96:e7:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Aug 4 22:08:09 2025 GMT Not After : Aug 6 00:10:09 2025 GMT Subject: CN=E318DCF83873D430AE5301741B78C6CFE3CFC896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5c:5a:20:94:99:7e:1b:75:fc:b3:36:28:94: 04:74:d6:5a:38:a2:62:bf:8a:3c:f3:48:5f:df:b8: 7b:f9:c9:a9:1a:da:a0:b4:4e:c5:2a:50:6a:82:7c: 41:f5:c1:fc:cc:cd:21:34:e1:90:58:f4:1f:69:80: cd:e9:d3:aa:b2:15:2f:77:78:94:1d:06:d8:1c:19: 35:42:24:02:44:54:e0:fb:b2:e8:d6:35:cd:2d:56: 45:c1:4a:17:21:b1:74:62:33:76:9f:8e:e2:db:06: 05:23:de:50:a5:de:a2:98:4d:bc:19:a0:f3:7a:85: 24:0f:56:c4:a3:16:3c:5e:66:7a:a0:f6:22:0b:22: e3:fb:47:d2:d1:5a:0f:67:a3:8f:3f:65:1a:c7:c7: cc:d8:d9:25:12:b3:0a:17:23:c8:7e:bf:de:d8:28: c4:35:cc:f4:f2:10:f8:0e:97:e3:92:f0:6c:0f:cd: 14:a5:27:d2:c8:77:86:c6:11:a3:13:1a:01:77:0f: 9f:bb:fe:d6:08:67:fb:43:cb:68:5f:7f:50:a9:ae: a1:ef:10:97:d9:25:ff:4e:a4:3b:82:cb:4f:b5:25: 5e:63:e1:f6:eb:15:c1:b8:f0:2f:62:88:49:a1:2d: 1d:b2:eb:b0:ba:68:c8:69:51:58:c4:74:f6:d4:73: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:18:DC:F8:38:73:D4:30:AE:53:01:74:1B:78:C6:CF:E3:CF:C8:96 X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:3a:15:78:82:59:fd:dc:ea:02:37:7f:a3:5a:f4:12:1a:b8: 7a:6b:d0:bf:75:5c:87:48:7e:1e:7c:1b:65:7b:ce:e8:a6:59: fa:0e:47:e9:d7:d3:06:66:ce:da:73:d8:78:d1:3f:fe:3b:e8: 0b:c0:2e:15:f2:51:45:44:a9:c3:1c:04:bb:ca:44:29:9c:f2: d4:d9:4c:74:ce:5e:e7:09:0d:68:20:67:12:9a:05:de:23:72: a8:4c:8f:fa:2e:b3:a6:5c:4f:d1:19:91:b9:e0:4d:8e:db:db: f8:91:be:1c:cc:7f:1c:e8:44:d6:91:8e:ba:a0:cc:48:43:03: d9:c6:99:1a:3b:2d:6e:e0:e9:fc:41:52:8c:f8:a6:4d:33:ff: ed:45:b5:c8:91:c4:5d:f1:6d:02:63:93:b7:c7:65:41:34:37: 79:e9:ff:a4:70:0d:d6:48:32:5a:56:0b:d2:fb:b8:54:5a:09: 9a:64:99:af:9f:8e:4e:1b:0e:fb:86:39:da:8b:87:b7:bc:33: 70:ea:24:42:c3:42:8a:d9:04:ab:7a:c7:ce:23:56:b9:75:35: cd:93:05:48:46:9f:44:24:57:55:d8:4e:94:37:14:f5:24:79: 4c:81:09:72:66:ab:a8:c6:e6:77:5e:56:dd:84:cf:7c:98:91: 0e:28:2c:f8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbp0O2zKw66S5p5aMrAkvblaW52owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNTA4MDQyMjA4MDlaFw0yNTA4MDYwMDEwMDlaMDMxMTAvBgNV BAMTKEUzMThEQ0Y4Mzg3M0Q0MzBBRTUzMDE3NDFCNzhDNkNGRTNDRkM4OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKXFoglJl+G3X8szYolAR01lo4 omK/ijzzSF/fuHv5yaka2qC0TsUqUGqCfEH1wfzMzSE04ZBY9B9pgM3p06qyFS93 eJQdBtgcGTVCJAJEVOD7sujWNc0tVkXBShchsXRiM3afjuLbBgUj3lCl3qKYTbwZ oPN6hSQPVsSjFjxeZnqg9iILIuP7R9LRWg9no48/ZRrHx8zY2SUSswoXI8h+v97Y KMQ1zPTyEPgOl+OS8GwPzRSlJ9LId4bGEaMTGgF3D5+7/tYIZ/tDy2hff1CprqHv EJfZJf9OpDuCy0+1JV5j4fbrFcG48C9iiEmhLR2y67C6aMhpUVjEdPbUc4hRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU4xjc+Dhz1DCuUwF0G3jGz+PPyJYwHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2OhV4 gln93OoCN3+jWvQSGrh6a9C/dVyHSH4efBtle87opln6Dkfp19MGZs7ac9h40T/+ O+gLwC4V8lFFRKnDHAS7ykQpnPLU2Ux0zl7nCQ1oIGcSmgXeI3KoTI/6LrOmXE/R GZG54E2O29v4kb4czH8c6ETWkY66oMxIQwPZxpkaOy1u4On8QVKM+KZNM//tRbXI kcRd8W0CY5O3x2VBNDd56f+kcA3WSDJaVgvS+7hUWgmaZJmvn45OGw77hjnai4e3 vDNw6iRCw0KK2QSresfOI1a5dTXNkwVIRp9EJFdV2E6UNxT1JHlMgQlyZquoxuZ3 XlbdhM98mJEOKCz4 -----END CERTIFICATE-----Generated at Tue Aug 5 08:24:34 2025 by rpki-client