$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft File: A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json) Hash identifier: OvLTJ0a7giDi8j+VA32+uJhZ7RcxGmNoOyZ3tEg8D5I= Subject key identifier: 98:E9:0A:D8:20:A1:F0:29:1B:E3:73:FC:CE:26:8F:A0:D1:97:25:6C Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Certificate serial: 1DDD66C54E9B7809476D5C714B8BA6A3A8AF46D9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft Manifest number: 01F9 Signing time: Sat 14 Jun 2025 18:30:06 +0000 Manifest this update: Sat 14 Jun 2025 18:25:06 +0000 Manifest next update: Sun 15 Jun 2025 18:53:06 +0000 Files and hashes: 1: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: a41Xyu+1QM63sJBLjRXDXCMByy5FuK1D59e4kuksRCE=) 2: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 2aDuD/D+lIpzPYcnGpfR3f4GvH7bzD6tXNlt4SzLv7s=) 3: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: g9TWsQZsTWz7mSDp6Y61gNZDSwAn6dADsEyVm1AJtlU=) 4: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: F9b5BNgK8TO7NWcYalz+qyjvcxyYqlq+/TYg6mk1sTI=) 5: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: 34CzDRdWck3x5QdKwY21JLn4ljy5X8PbpWV6VL1UPl8=) 6: 326131343a373538313a6666303a3a2f34382d3438203d3e20323135333634.roa (hash: nCwmmbP9gIjoEy95/v504iaQnyadcB1V8SB+J8/exJE=) 7: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: imEjvtvCCz1eqwuI8/eFHCFB+WwTlJEDfPXRombfVNU=) 8: 326131343a373538313a393330303a3a2f34302d3438203d3e20323135333634.roa (hash: HxvdekWDniqUROXJ3YOPd7kMDR81qja1R4es7Rc0gNE=) 9: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: MyeYfbLc0//rjwnR8ZJ3TnxqQq4JflTHlrUTLQvk3gU=) 10: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: 3V4Gfs43V7ocGSTuDy/9WCbaZn4Tr+7Hy++1eWDq0HE=) 11: 326131343a373538313a393261303a3a2f34382d3438203d3e20323135333634.roa (hash: vpFkcPB4ncBh9VZRsIiAgJdk+akiA1X6oI9yFkMsGRg=) 12: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0nNVfH0UNkgevPAH9ITuwY5tE24LlYCDjFx46F3vtM0=) 13: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: JYfFIGSSsdhSc4V2wOJu9QFkSSC76MmCAjKsdTBmtQA=) 14: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: TejNBoLvDqd6zzS1lptpFez+EdbwzXYJ6yM06vDQ9j0=) 15: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: 5IFSShC1J1DPKr9fgEjy0DHzTqmR8W17B+sGrWUb29Q=) 16: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: coziJfcvV7NZzAVbts1JQ6BKxT5yxFwdbwzsra8WCDw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 16:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:dd:66:c5:4e:9b:78:09:47:6d:5c:71:4b:8b:a6:a3:a8:af:46:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Validity Not Before: Jun 14 18:25:06 2025 GMT Not After : Jun 15 18:53:06 2025 GMT Subject: CN=98E90AD820A1F0291BE373FCCE268FA0D197256C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d9:0a:57:50:53:b1:65:62:ca:7c:07:55:e5: 64:5c:33:e4:88:66:7b:89:5b:b7:fa:ac:5f:db:e1: 31:b1:3e:ee:f6:a0:4b:4f:c7:a5:72:68:57:24:95: a9:c0:eb:f6:ae:7d:e2:f6:6a:50:94:8c:a5:f2:24: 93:d2:55:cd:9a:54:bf:59:c5:84:c9:75:bb:e1:85: b4:c8:94:3d:61:31:29:22:26:a8:cf:0e:f6:62:ee: 12:f5:34:69:9c:d7:86:36:2c:8f:60:a1:19:4b:2a: 7b:16:a0:4f:7a:c9:cf:38:1d:93:fe:2b:1a:e1:68: 30:8b:b6:93:e0:62:cf:7a:ed:fa:81:5b:40:9d:90: 8e:03:31:a8:46:fd:70:e2:e6:34:29:98:45:7a:31: c2:f1:96:3f:8a:12:d7:36:31:54:53:09:72:4c:f1: 38:cf:ce:43:ea:71:3b:e1:f4:c1:6b:52:51:58:ee: f6:6a:7c:57:a0:80:a0:0b:76:19:74:c2:96:11:13: 40:ac:0b:fb:35:7c:1a:66:3f:fe:0d:c8:0d:0c:f0: 53:4b:b0:c0:01:18:76:4a:dd:ad:06:c6:88:61:e7: 10:8c:54:66:ed:8e:0c:8d:b4:f1:63:4f:a5:99:15: 81:1d:d1:ac:d5:58:c8:41:80:9f:bc:dd:3b:4c:b7: 5e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E9:0A:D8:20:A1:F0:29:1B:E3:73:FC:CE:26:8F:A0:D1:97:25:6C X509v3 Authority Key Identifier: keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:13:d3:66:6e:a4:59:5d:04:6b:85:b7:93:9b:c8:d1:83:94: 15:d3:0e:0a:21:c1:61:cf:a5:43:33:30:0d:de:2f:9b:bc:9e: 25:82:7d:a2:bb:8f:9a:2f:8c:f8:96:91:8f:37:c4:84:c2:4e: 5c:be:1f:3d:cc:0e:d1:01:15:fb:5e:88:a2:d4:85:84:f9:e4: 69:79:26:a6:aa:36:45:3b:a2:37:e7:81:b3:12:dd:df:c5:cc: 44:9c:ea:55:b0:63:76:23:f8:bf:18:51:e8:92:92:ce:64:b8: c4:87:24:6c:e8:4f:f1:66:82:bc:15:fe:08:40:c3:02:b6:28: db:76:6a:72:1f:cd:e9:26:52:7e:ef:eb:85:fb:c1:d3:18:05: f7:34:22:de:59:d9:6d:c7:c3:13:cb:9d:56:12:22:90:e8:4c: 03:c0:19:f2:08:1e:b1:09:48:4a:bb:80:c6:49:6c:5a:c3:7f: a3:e9:db:58:5c:56:88:90:e2:5d:7e:cd:9b:d5:f9:8a:cc:aa: af:f2:cf:29:bd:5e:59:6b:d9:a7:55:35:fd:76:49:77:ac:d5: f6:1e:9f:d3:10:51:5a:6e:a5:fc:0e:64:b4:92:78:fd:10:cc: 69:24:64:8b:47:ac:cc:04:58:4e:bb:4d:a1:24:7c:c9:73:e4: e2:34:c7:d5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHd1mxU6beAlHbVxxS4umo6ivRtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3 NzdEQTkyNjAeFw0yNTA2MTQxODI1MDZaFw0yNTA2MTUxODUzMDZaMDMxMTAvBgNV BAMTKDk4RTkwQUQ4MjBBMUYwMjkxQkUzNzNGQ0NFMjY4RkEwRDE5NzI1NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2QpXUFOxZWLKfAdV5WRcM+SI ZnuJW7f6rF/b4TGxPu72oEtPx6VyaFcklanA6/aufeL2alCUjKXyJJPSVc2aVL9Z xYTJdbvhhbTIlD1hMSkiJqjPDvZi7hL1NGmc14Y2LI9goRlLKnsWoE96yc84HZP+ KxrhaDCLtpPgYs967fqBW0CdkI4DMahG/XDi5jQpmEV6McLxlj+KEtc2MVRTCXJM 8TjPzkPqcTvh9MFrUlFY7vZqfFeggKALdhl0wpYRE0CsC/s1fBpmP/4NyA0M8FNL sMABGHZK3a0Gxohh5xCMVGbtjgyNtPFjT6WZFYEd0azVWMhBgJ+83TtMt15rAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUmOkK2CCh8Ckb43P8ziaPoNGXJWwwHwYDVR0j BBgwFoAUoe5dCaD10Nh2EQExdcYuNXd9qSYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw NDhjLzAvQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3NzdEQTkyNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BMUVFNUQwOUEwRjVEMEQ4NzYxMTAxMzE3 NUM2MkUzNTc3N0RBOTI2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg1NWM3ZDVhLTE1YzQtNDU4OS04NWZhLWI0OTFhMDcxMDQ4Yy8wL0ExRUU1RDA5 QTBGNUQwRDg3NjExMDEzMTc1QzYyRTM1Nzc3REE5MjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBoE9Nm bqRZXQRrhbeTm8jRg5QV0w4KIcFhz6VDMzAN3i+bvJ4lgn2iu4+aL4z4lpGPN8SE wk5cvh89zA7RARX7Xoii1IWE+eRpeSamqjZFO6I354GzEt3fxcxEnOpVsGN2I/i/ GFHokpLOZLjEhyRs6E/xZoK8Ff4IQMMCtijbdmpyH83pJlJ+7+uF+8HTGAX3NCLe Wdltx8MTy51WEiKQ6EwDwBnyCB6xCUhKu4DGSWxaw3+j6dtYXFaIkOJdfs2b1fmK zKqv8s8pvV5Za9mnVTX9dkl3rNX2Hp/TEFFabqX8DmS0knj9EMxpJGSLR6zMBFhO u02hJHzJc+TiNMfV -----END CERTIFICATE-----Generated at Sun Jun 15 09:01:10 2025 by rpki-client