$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: NGch2IPcEsK79IK7jL0w4Y5yiYxZulY3I8X8t0Do4EE= Subject key identifier: 9B:B1:C5:68:03:AE:E1:06:3D:C2:60:7F:A9:C2:B5:59:8A:C8:47:CD Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 0B9ADC802F61D7224197FF2B7D724C7D8D442FB2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: 01E0 Signing time: Mon 04 Aug 2025 06:02:58 +0000 Manifest this update: Mon 04 Aug 2025 05:57:58 +0000 Manifest next update: Tue 05 Aug 2025 09:57:58 +0000 Files and hashes: 1: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: 8Iv1HdyRUhjcvQFIVfomOSyv77EzHn71qEiaLSvjvAE=) 2: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: 6SMGzy0qxU/C5+Cz9d8WI56z67FiL2uOHLuZUmmEFig=) 3: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: ZAjM+m6kQ9wGvHF1QGWMh8DWJl7vH+cum3N7RzhvZJU=) 4: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: ikRuOA2n8u4zq4qR5S8PkgRSZxYIGPGee0tyFklQIEM=) 5: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: Q+SHdUagvI6KZ73P7qEzwFM/MmpC3zK1RzbKHzMJDSM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:9a:dc:80:2f:61:d7:22:41:97:ff:2b:7d:72:4c:7d:8d:44:2f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: Aug 4 05:57:58 2025 GMT Not After : Aug 5 09:57:58 2025 GMT Subject: CN=9BB1C56803AEE1063DC2607FA9C2B5598AC847CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:49:e1:a3:f0:f1:40:2a:72:5a:5e:24:13:31: 7b:54:8f:60:85:c7:8b:d7:44:23:bd:4f:72:7c:79: a2:32:50:05:cc:e7:7c:bb:42:2d:63:a0:60:22:22: 28:b7:9c:08:4e:9e:47:8c:4e:bb:4a:e0:94:15:74: 6d:40:9f:f8:9c:88:b7:bf:c5:f1:d1:ce:b8:c2:db: fb:8a:f4:30:87:bb:a8:d2:2a:49:6c:22:6d:23:e9: 28:34:77:bd:de:bb:c9:f5:b7:6b:7d:9c:71:85:fe: aa:c3:71:6b:56:38:ae:68:78:6e:7f:33:6b:61:40: 83:27:32:55:0a:15:01:4d:ea:1e:57:9e:a5:39:61: e7:75:f0:4b:9d:d7:76:6e:c4:fc:aa:ee:73:57:12: 43:15:33:2d:27:b0:07:b6:f4:57:33:06:4a:e8:1a: 5d:28:e9:ea:86:62:74:8e:c9:7f:fe:fa:9e:a0:e5: 6a:94:34:4f:6d:27:e6:fa:d4:f1:7c:dd:40:03:94: fd:59:a0:ca:d3:50:5d:c8:06:f6:9a:26:34:c8:74: e1:ea:bb:c2:9d:d7:c3:b7:d3:83:86:02:87:74:6a: 08:93:7e:c5:db:c1:47:f8:ec:dd:bf:1d:0c:57:45: 8c:d5:1a:7e:9f:f7:b0:06:f4:e0:e6:eb:b1:07:5e: 95:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B1:C5:68:03:AE:E1:06:3D:C2:60:7F:A9:C2:B5:59:8A:C8:47:CD X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:c5:ac:d5:4a:9c:a3:e1:29:7c:7a:0a:35:ce:d4:70:9c:16: 69:fb:fe:72:c5:a8:0d:c7:90:36:3f:69:95:f1:27:31:45:7d: f1:31:7c:07:c7:37:03:af:ef:79:72:17:61:7b:6f:ce:2a:97: 7d:41:05:73:10:84:41:93:2a:b1:29:f7:7c:f1:9b:bc:af:2c: 48:12:f8:81:b8:30:18:55:16:3f:34:80:84:cd:5e:69:62:cc: e9:19:27:93:3d:79:8c:ba:08:f5:3b:bb:c2:24:25:82:ef:cc: 43:8a:d9:ad:85:32:10:26:fd:47:0d:b4:7d:a2:b2:9f:9c:5c: 55:0a:35:68:77:57:1f:fa:1e:27:f4:49:d6:69:45:43:ef:34: 19:91:7f:b8:e8:57:ac:2c:42:2a:7d:38:8e:2f:fb:28:c6:f2: 50:a5:2b:b3:1a:37:f1:8a:ea:9a:f2:cf:3c:17:c2:5f:fd:dc: f8:a8:d6:0d:53:84:40:91:29:3d:0e:ca:7d:9c:22:12:59:e3: 9b:1f:8e:39:07:7c:da:8e:db:03:d9:94:b3:58:3f:fe:54:68: 16:22:e0:5a:f6:9b:43:b9:73:af:80:5c:ff:9b:68:d4:d2:d2: 7e:0c:10:4e:4e:aa:5a:c3:95:01:3a:30:f3:a5:87:b7:cb:0f: cd:96:8a:54 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUC5rcgC9h1yJBl/8rfXJMfY1EL7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNTA4MDQwNTU3NThaFw0yNTA4MDUwOTU3NThaMDMxMTAvBgNV BAMTKDlCQjFDNTY4MDNBRUUxMDYzREMyNjA3RkE5QzJCNTU5OEFDODQ3Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpSeGj8PFAKnJaXiQTMXtUj2CF x4vXRCO9T3J8eaIyUAXM53y7Qi1joGAiIii3nAhOnkeMTrtK4JQVdG1An/iciLe/ xfHRzrjC2/uK9DCHu6jSKklsIm0j6Sg0d73eu8n1t2t9nHGF/qrDcWtWOK5oeG5/ M2thQIMnMlUKFQFN6h5XnqU5Yed18Eud13ZuxPyq7nNXEkMVMy0nsAe29FczBkro Gl0o6eqGYnSOyX/++p6g5WqUNE9tJ+b61PF83UADlP1ZoMrTUF3IBvaaJjTIdOHq u8Kd18O304OGAod0agiTfsXbwUf47N2/HQxXRYzVGn6f97AG9ODm67EHXpWpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUm7HFaAOu4QY9wmB/qcK1WYrIR80wHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCjxazV Spyj4Sl8ego1ztRwnBZp+/5yxagNx5A2P2mV8ScxRX3xMXwHxzcDr+95chdhe2/O Kpd9QQVzEIRBkyqxKfd88Zu8ryxIEviBuDAYVRY/NICEzV5pYszpGSeTPXmMugj1 O7vCJCWC78xDitmthTIQJv1HDbR9orKfnFxVCjVod1cf+h4n9EnWaUVD7zQZkX+4 6FesLEIqfTiOL/soxvJQpSuzGjfxiuqa8s88F8Jf/dz4qNYNU4RAkSk9Dsp9nCIS WeObH445B3zajtsD2ZSzWD/+VGgWIuBa9ptDuXOvgFz/m2jU0tJ+DBBOTqpaw5UB OjDzpYe3yw/NlopU -----END CERTIFICATE-----Generated at Mon Aug 4 19:07:15 2025 by rpki-client