$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft File: 893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft (raw, json) Hash identifier: NxEMmJ94ouCOQCGXsZ2qqxWA2pFJHvfVUu8WApwOI90= Subject key identifier: 0F:E0:60:24:32:6E:63:69:9A:BA:9B:8A:4B:EA:8A:7F:A3:D6:92:03 Authority key identifier: 89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B Certificate issuer: /CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B Certificate serial: 672464130E0F9CD341BFAB831D9DE2A332551CE6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft Manifest number: 9E Signing time: Tue 05 Aug 2025 20:18:53 +0000 Manifest this update: Tue 05 Aug 2025 20:13:53 +0000 Manifest next update: Wed 06 Aug 2025 23:21:53 +0000 Files and hashes: 1: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: v+wGdsPoD53cB+FPJFplibwWU1IDMTKf0BLLWvOrDJw=) 2: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: Vs7Q5KU9koM9GeO4e0pzIZd/B9BJX1MGwWzBfnT0lFM=) 3: 326131343a373538313a366664303a3a2f34342d3434203d3e20323135393334.roa (hash: vaAEu3pMRFdmKcI/nWa8WyzQWeHMb/mh9I6YRbEX9FY=) 4: 893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl (hash: GlfAezndoFZTUXF2ncsqNTDnCNdOHmAUYbDS+6Fymd0=) 5: 326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa (hash: bkcmt94VX2qT5AatBWPB20wqy19gXukXDxeJ3DXH2P8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:24:64:13:0e:0f:9c:d3:41:bf:ab:83:1d:9d:e2:a3:32:55:1c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B Validity Not Before: Aug 5 20:13:53 2025 GMT Not After : Aug 6 23:21:53 2025 GMT Subject: CN=0FE06024326E63699ABA9B8A4BEA8A7FA3D69203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ed:90:04:b9:8f:e5:64:9e:fa:ee:e0:68:ba: 3c:a0:a0:12:81:b3:a9:2e:81:ca:07:9a:ff:5d:d7: 9d:42:38:ab:34:f2:d9:f7:82:14:18:5e:f5:df:e4: ef:b0:73:7f:06:90:3d:80:1e:2e:df:7d:15:aa:60: 1c:b0:6c:07:71:d1:90:f3:a4:68:7d:a9:68:59:92: 46:de:2f:7f:1a:4c:4c:ad:92:e4:a6:a3:8e:7a:72: a6:89:0f:3a:0f:df:b8:f5:a7:53:26:d9:3d:ce:2c: b6:3a:db:ac:0f:1c:2c:7d:52:79:dd:0d:17:29:bc: 72:5a:4b:d7:4b:1e:9f:3b:43:12:87:8f:db:b4:c3: c4:c5:13:d4:5e:c8:5f:11:d0:e0:cf:a4:b9:98:67: 0e:c3:ee:71:5a:5c:98:0d:cb:f0:df:2b:39:f9:c7: 24:74:02:fb:8d:b3:0b:af:c4:51:1d:4f:d0:fa:c0: 00:66:86:b4:68:66:33:1b:92:aa:76:47:05:f0:e0: 04:a0:d5:9f:b7:7e:36:55:b9:25:a7:6f:6b:89:14: c8:5f:50:80:f6:e0:ba:c6:1a:8d:c9:ff:8d:64:e7: 92:c6:8a:7b:05:ba:a7:e6:7c:37:f5:27:61:c9:8f: ca:5b:57:25:d0:6d:6a:14:fe:71:f4:6e:98:19:5f: 25:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E0:60:24:32:6E:63:69:9A:BA:9B:8A:4B:EA:8A:7F:A3:D6:92:03 X509v3 Authority Key Identifier: keyid:89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:3d:f3:91:e9:51:d0:ad:a1:2c:3e:3d:48:56:da:06:df:e4: 88:8f:dd:91:29:59:ac:60:4b:0e:74:58:1f:ad:46:4f:2f:3c: 05:42:3b:22:48:bf:0d:3b:bc:60:ee:05:9d:e9:a4:ae:27:ff: f5:27:9c:cc:5a:00:a7:3b:f8:12:ec:2b:87:c3:14:e7:17:59: ab:fe:ba:56:82:6a:3a:97:ea:b8:0e:b8:d9:73:e3:2b:b5:3a: 0d:30:67:40:0f:b6:d1:21:4a:17:a1:17:f7:0f:4b:76:44:e1: 37:d5:81:0a:08:c3:9f:93:b2:42:c8:b2:ca:3d:38:15:cc:ce: 43:06:18:eb:bb:93:2d:21:c8:30:2c:a2:6c:5e:bf:79:55:60: 28:07:d4:56:e3:ea:8e:db:dc:bb:87:48:5a:ca:62:cc:8e:47: 66:cc:7a:1a:a3:b8:ae:c3:3c:20:9e:11:ae:4d:59:9e:58:be: a1:b0:ac:49:8c:27:46:b4:0d:15:3e:92:34:fc:de:6a:d6:c6: 43:2e:82:61:fe:c1:2a:80:96:81:cb:ed:37:3d:32:e1:7d:4d: 51:b7:75:10:91:d5:82:11:07:2e:df:70:d5:4d:5c:04:b3:4a: 6e:8a:8d:5c:75:50:e2:39:ac:06:57:d0:7c:a4:68:8c:66:a5: 5b:0d:a5:81 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZyRkEw4PnNNBv6uDHZ3iozJVHOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBC OEYxMjA2QjAeFw0yNTA4MDUyMDEzNTNaFw0yNTA4MDYyMzIxNTNaMDMxMTAvBgNV BAMTKDBGRTA2MDI0MzI2RTYzNjk5QUJBOUI4QTRCRUE4QTdGQTNENjkyMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP7ZAEuY/lZJ767uBoujygoBKB s6kugcoHmv9d151COKs08tn3ghQYXvXf5O+wc38GkD2AHi7ffRWqYBywbAdx0ZDz pGh9qWhZkkbeL38aTEytkuSmo456cqaJDzoP37j1p1Mm2T3OLLY626wPHCx9Unnd DRcpvHJaS9dLHp87QxKHj9u0w8TFE9ReyF8R0ODPpLmYZw7D7nFaXJgNy/DfKzn5 xyR0AvuNswuvxFEdT9D6wABmhrRoZjMbkqp2RwXw4ASg1Z+3fjZVuSWnb2uJFMhf UID24LrGGo3J/41k55LGinsFuqfmfDf1J2HJj8pbVyXQbWoU/nH0bpgZXyUzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUD+BgJDJuY2maupuKS+qKf6PWkgMwHwYDVR0j BBgwFoAUiT/UG94ibFTyrSs92hnBoLjxIGswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFjZmEzMTgtMmE1Yy00MjQxLWFmYmItMzg3ZDcxZThj NTk2LzEvODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBCOEYxMjA2Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTNGRDQxQkRFMjI2QzU0RjJBRDJCM0RE QTE5QzFBMEI4RjEyMDZCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhY2ZhMzE4LTJhNWMtNDI0MS1hZmJiLTM4N2Q3MWU4YzU5Ni8xLzg5M0ZENDFC REUyMjZDNTRGMkFEMkIzRERBMTlDMUEwQjhGMTIwNkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBLPfOR 6VHQraEsPj1IVtoG3+SIj92RKVmsYEsOdFgfrUZPLzwFQjsiSL8NO7xg7gWd6aSu J//1J5zMWgCnO/gS7CuHwxTnF1mr/rpWgmo6l+q4DrjZc+MrtToNMGdAD7bRIUoX oRf3D0t2ROE31YEKCMOfk7JCyLLKPTgVzM5DBhjru5MtIcgwLKJsXr95VWAoB9RW 4+qO29y7h0haymLMjkdmzHoao7iuwzwgnhGuTVmeWL6hsKxJjCdGtA0VPpI0/N5q 1sZDLoJh/sEqgJaBy+03PTLhfU1Rt3UQkdWCEQcu33DVTVwEs0puio1cdVDiOawG V9B8pGiMZqVbDaWB -----END CERTIFICATE-----Generated at Wed Aug 6 09:25:14 2025 by rpki-client