$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft File: 893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft (raw, json) Hash identifier: staKb4QDWL8TkmsraycLeDdIZZr9CjqUdBmc/8Bd4I8= Subject key identifier: F0:17:00:ED:64:CE:6C:DE:95:17:6A:9D:B0:7B:F9:26:E7:56:93:C8 Authority key identifier: 89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B Certificate issuer: /CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B Certificate serial: 2C1813C621F3EA1F8F3539EAB05989F720F9EF99 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft Manifest number: 59 Signing time: Sun 15 Jun 2025 07:00:38 +0000 Manifest this update: Sun 15 Jun 2025 06:55:38 +0000 Manifest next update: Mon 16 Jun 2025 10:59:38 +0000 Files and hashes: 1: 326131343a373538313a366664303a3a2f34342d3434203d3e20323135393334.roa (hash: vaAEu3pMRFdmKcI/nWa8WyzQWeHMb/mh9I6YRbEX9FY=) 2: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: v+wGdsPoD53cB+FPJFplibwWU1IDMTKf0BLLWvOrDJw=) 3: 893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl (hash: ZpbKWaDrt7G6kszF9riPP9e4cnoyjjJnAvU+mBSBuYE=) 4: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: Vs7Q5KU9koM9GeO4e0pzIZd/B9BJX1MGwWzBfnT0lFM=) 5: 326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa (hash: bkcmt94VX2qT5AatBWPB20wqy19gXukXDxeJ3DXH2P8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 04:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:18:13:c6:21:f3:ea:1f:8f:35:39:ea:b0:59:89:f7:20:f9:ef:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B Validity Not Before: Jun 15 06:55:38 2025 GMT Not After : Jun 16 10:59:38 2025 GMT Subject: CN=F01700ED64CE6CDE95176A9DB07BF926E75693C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0f:5d:1c:5b:bc:41:dd:3e:33:6d:65:48:b7: 06:ad:ef:70:0a:e7:c2:d9:33:40:4f:2a:4b:51:70: 2d:75:ee:94:6d:b9:a9:4f:c9:9b:10:5b:78:4f:24: 59:8f:6d:ea:21:70:d4:a5:2d:63:59:7f:6a:a3:57: 57:72:e4:2b:23:8f:a9:99:cd:f9:b0:36:5b:20:35: 04:22:0a:08:f4:39:e8:88:40:b1:fb:fd:5a:09:a4: 81:a9:e8:d2:45:de:61:b0:08:b5:60:71:61:13:90: 4b:25:be:aa:90:0e:33:0f:9c:75:41:16:9e:c5:9b: 7d:61:9b:42:a7:43:c6:14:80:34:61:ef:6a:af:99: cf:4c:a3:05:84:07:15:28:f6:b9:26:0a:c4:2c:a4: 5b:24:de:d1:3e:f2:69:d9:f0:f8:3d:40:77:45:69: ff:12:31:2b:a9:1a:e9:48:95:14:82:9f:03:96:95: f4:b4:3a:74:e4:da:ac:bc:09:10:4c:12:b5:9b:fe: ce:ce:ab:3c:95:db:57:18:06:17:95:5a:55:bc:72: 39:75:7a:5c:fe:bd:14:11:17:f4:c8:00:af:f4:99: ed:52:f3:e5:e1:3a:18:05:51:c0:68:22:24:49:1b: cb:63:da:84:f9:ad:3a:93:26:e8:a4:9c:48:85:ec: 49:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:17:00:ED:64:CE:6C:DE:95:17:6A:9D:B0:7B:F9:26:E7:56:93:C8 X509v3 Authority Key Identifier: keyid:89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:1a:2f:03:62:87:b6:55:6a:79:67:92:35:ba:a7:77:f2:22: 1e:bb:2e:a9:b9:1c:56:1a:2c:a9:21:ac:66:a9:31:14:e6:43: 1c:ca:b0:18:1c:44:3c:e2:07:cb:99:7c:ac:82:c9:73:2e:47: bf:61:ac:4f:c6:d0:21:74:dd:f6:f1:59:9f:4b:e6:6e:5f:4c: e6:0f:03:19:68:15:4e:0f:cc:8d:d1:df:e9:85:34:54:12:0c: 4a:b0:50:62:bd:6b:64:e8:03:91:5b:66:0a:50:33:d2:aa:8d: fe:20:23:04:d2:c8:e9:57:f0:24:2b:16:58:9a:12:d0:c5:55: c8:73:50:62:7a:cb:04:d5:2e:1b:e3:6a:86:0e:ff:8c:3e:6f: 97:21:fb:20:2b:3e:51:be:5f:6d:08:ea:2d:95:58:41:b2:2e: 35:9b:a4:58:a8:a7:d7:35:3f:2d:c2:14:78:13:34:7f:16:63: b9:47:d8:b8:e3:6c:4d:e6:54:24:f3:0e:c4:72:7d:2d:ea:f7: de:78:90:7f:9e:de:00:34:1c:7b:8e:05:39:51:88:49:c2:57: dc:77:52:91:44:8b:7f:be:ba:22:1b:db:b8:be:ca:62:9c:21: 45:c5:ef:19:6a:bc:3f:3f:7a:2a:ec:f3:45:42:5d:44:11:a9: 8b:a8:e6:85 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULBgTxiHz6h+PNTnqsFmJ9yD575kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBC OEYxMjA2QjAeFw0yNTA2MTUwNjU1MzhaFw0yNTA2MTYxMDU5MzhaMDMxMTAvBgNV BAMTKEYwMTcwMEVENjRDRTZDREU5NTE3NkE5REIwN0JGOTI2RTc1NjkzQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwD10cW7xB3T4zbWVItwat73AK 58LZM0BPKktRcC117pRtualPyZsQW3hPJFmPbeohcNSlLWNZf2qjV1dy5Csjj6mZ zfmwNlsgNQQiCgj0OeiIQLH7/VoJpIGp6NJF3mGwCLVgcWETkEslvqqQDjMPnHVB Fp7Fm31hm0KnQ8YUgDRh72qvmc9MowWEBxUo9rkmCsQspFsk3tE+8mnZ8Pg9QHdF af8SMSupGulIlRSCnwOWlfS0OnTk2qy8CRBMErWb/s7OqzyV21cYBheVWlW8cjl1 elz+vRQRF/TIAK/0me1S8+XhOhgFUcBoIiRJG8tj2oT5rTqTJuiknEiF7ElTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU8BcA7WTObN6VF2qdsHv5JudWk8gwHwYDVR0j BBgwFoAUiT/UG94ibFTyrSs92hnBoLjxIGswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFjZmEzMTgtMmE1Yy00MjQxLWFmYmItMzg3ZDcxZThj NTk2LzEvODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBCOEYxMjA2Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTNGRDQxQkRFMjI2QzU0RjJBRDJCM0RE QTE5QzFBMEI4RjEyMDZCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhY2ZhMzE4LTJhNWMtNDI0MS1hZmJiLTM4N2Q3MWU4YzU5Ni8xLzg5M0ZENDFC REUyMjZDNTRGMkFEMkIzRERBMTlDMUEwQjhGMTIwNkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDGGi8D Yoe2VWp5Z5I1uqd38iIeuy6puRxWGiypIaxmqTEU5kMcyrAYHEQ84gfLmXysgslz Lke/YaxPxtAhdN328VmfS+ZuX0zmDwMZaBVOD8yN0d/phTRUEgxKsFBivWtk6AOR W2YKUDPSqo3+ICME0sjpV/AkKxZYmhLQxVXIc1BiessE1S4b42qGDv+MPm+XIfsg Kz5Rvl9tCOotlVhBsi41m6RYqKfXNT8twhR4EzR/FmO5R9i442xN5lQk8w7Ecn0t 6vfeeJB/nt4ANBx7jgU5UYhJwlfcd1KRRIt/vroiG9u4vspinCFFxe8Zarw/P3oq 7PNFQl1EEamLqOaF -----END CERTIFICATE-----Generated at Sun Jun 15 13:05:09 2025 by rpki-client