$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: gUgeG874Oat/AsVX2u+6D1QIa1AwXAEsYvUOhpYzZDc= Subject key identifier: BE:9A:D4:20:A9:9D:B5:AB:1A:2D:0A:AC:2D:EE:C4:BB:CF:90:13:51 Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 3BEE6B5E4075EB4A1F95D12C72989B585041CF41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 0384 Signing time: Mon 04 Aug 2025 13:49:46 +0000 Manifest this update: Mon 04 Aug 2025 13:44:46 +0000 Manifest next update: Tue 05 Aug 2025 16:21:46 +0000 Files and hashes: 1: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: bvqtExc4o5GUJzraVc9CM0CC2GO3x6c+ohx4q9G/dgk=) 2: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: qqVPSWZLREddEW4nL5NY3Bls+ZrG5ASHmT6xiutXttk=) 3: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: iuam+Y72SFbVuzZ6DMbPvd9+i2O4uNgJ9aW8l1vNV9U=) 4: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: 8ja7Z+swVGTraKxezjgHzXG2GlS/dFRID6jPUC87mFI=) 5: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: 73gzYZJkwfTexbdigouOnFyMKuWv0hmiX8VwS95CE+I=) 6: 39332e39352e3131322e302f32342d3234203d3e2039333034.roa (hash: ogcbgRhECNKG4+F/6zpdBOh/u0edVYhkw7e/c907t3Y=) 7: 39332e39352e3131332e302f32342d3234203d3e203136323736.roa (hash: cS6LWz+NEHJoa0EQVb5z92UR8C9jaztUFOxHHwpRPsY=) 8: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: oaLDq7aS5NFaYNW1gUs7MDdZL5P0TUUEDkjRyQGla3w=) 9: 39332e39352e3131372e302f32342d3234203d3e20323135373732.roa (hash: vLSBueodjY+0YJW63au8p8n765D5sPEn1sQkXoc5D7w=) 10: 39332e39352e3131342e302f32342d3234203d3e2039333034.roa (hash: AmPh9mqd0gwKu0juVvtCR9BPch+T6TfO2inFFXmyRM4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ee:6b:5e:40:75:eb:4a:1f:95:d1:2c:72:98:9b:58:50:41:cf:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Aug 4 13:44:46 2025 GMT Not After : Aug 5 16:21:46 2025 GMT Subject: CN=BE9AD420A99DB5AB1A2D0AAC2DEEC4BBCF901351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:02:a4:41:26:d7:5e:de:8c:97:a3:47:78:7e: e5:f0:35:f1:67:4d:12:14:3a:ba:70:69:8c:fd:b4: 58:66:39:68:72:5c:c7:e2:33:bb:25:29:32:9e:a9: 8e:7b:f2:bd:51:be:77:37:b5:a9:02:0e:06:b2:8d: 30:00:35:52:e4:72:8f:9b:17:d5:3c:fe:eb:3e:71: 20:9e:32:79:e4:0c:2a:ce:96:dd:e9:64:e7:0b:09: db:77:bc:59:c3:08:97:ac:d4:6e:8b:87:f6:1a:c4: 9f:44:ac:70:44:45:69:ba:7d:48:1a:19:5c:7e:e1: 74:d6:82:0f:3c:b4:e2:0a:ad:33:bf:91:28:35:6d: 93:83:67:aa:d7:ec:96:75:56:e2:32:a4:1a:f1:d0: 21:90:da:87:0d:2a:3e:57:e5:c1:c5:c3:36:f7:b2: 7f:76:b2:a3:63:76:ab:9d:18:3a:84:ad:b8:de:8c: 3e:9a:a2:a0:18:fa:a9:b4:ff:11:3c:f7:9b:86:cf: 65:3c:14:d9:d9:a4:a1:6e:09:11:b8:e5:a1:e8:1f: 28:09:7e:2f:59:55:55:80:d7:6c:13:18:da:d0:46: d5:bd:90:1e:22:f3:5e:5b:fd:6e:ee:97:12:8f:1b: f5:ab:bd:fa:5a:23:9b:43:06:49:c5:03:2d:f0:1a: b7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9A:D4:20:A9:9D:B5:AB:1A:2D:0A:AC:2D:EE:C4:BB:CF:90:13:51 X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f7:ee:68:87:9f:9f:fb:47:08:a7:0b:e1:52:02:4b:ba:f0: 5a:b0:7a:15:ed:be:0d:ad:26:35:f8:b9:9f:5f:5b:3a:22:1d: b6:f5:fa:45:5b:51:aa:67:33:91:8b:0c:d6:17:92:43:4e:6b: 78:36:7d:ed:e2:6c:2f:bb:d7:54:c0:f8:e6:a8:69:e5:c7:14: 68:b1:89:5c:91:cb:11:81:3e:3a:09:96:8b:ea:d4:ad:e3:36: ea:9d:0d:95:65:3a:d8:86:30:b8:eb:07:df:33:cb:0c:fd:3a: ef:51:cd:5c:1c:26:b9:f4:af:5f:1b:9b:01:12:ae:8c:d3:64: 9a:f4:69:a9:5d:4f:bd:8e:bd:1e:5c:a9:ee:d4:5d:c3:a8:1c: e2:d5:e1:d4:54:c0:2f:e7:dd:42:84:de:33:dd:66:b2:22:95: e4:2e:a1:e3:a6:a2:bf:80:69:78:d8:2e:8a:9a:91:0e:4e:0c: 4f:8e:d7:4a:78:05:0c:52:8e:01:bd:66:30:dd:f7:75:6a:e1: 4d:22:73:a0:56:89:12:cc:4a:91:de:f4:5a:b2:ea:e3:5b:b1: 47:7a:1e:b4:cc:00:5f:7c:ae:44:30:12:6b:d0:26:f6:cd:29: d6:79:83:dc:90:84:c3:b8:91:50:9a:b4:7c:08:43:65:3a:00: 56:f3:7d:00 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUO+5rXkB160ofldEscpibWFBBz0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNTA4MDQxMzQ0NDZaFw0yNTA4MDUxNjIxNDZaMDMxMTAvBgNV BAMTKEJFOUFENDIwQTk5REI1QUIxQTJEMEFBQzJERUVDNEJCQ0Y5MDEzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0AqRBJtde3oyXo0d4fuXwNfFn TRIUOrpwaYz9tFhmOWhyXMfiM7slKTKeqY578r1Rvnc3takCDgayjTAANVLkco+b F9U8/us+cSCeMnnkDCrOlt3pZOcLCdt3vFnDCJes1G6Lh/YaxJ9ErHBERWm6fUga GVx+4XTWgg88tOIKrTO/kSg1bZODZ6rX7JZ1VuIypBrx0CGQ2ocNKj5X5cHFwzb3 sn92sqNjdqudGDqErbjejD6aoqAY+qm0/xE895uGz2U8FNnZpKFuCRG45aHoHygJ fi9ZVVWA12wTGNrQRtW9kB4i815b/W7ulxKPG/WrvfpaI5tDBknFAy3wGrdlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvprUIKmdtasaLQqsLe7Eu8+QE1EwHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/fuaIefn/tHCKcL4VIC S7rwWrB6Fe2+Da0mNfi5n19bOiIdtvX6RVtRqmczkYsM1heSQ05reDZ97eJsL7vX VMD45qhp5ccUaLGJXJHLEYE+OgmWi+rUreM26p0NlWU62IYwuOsH3zPLDP0671HN XBwmufSvXxubARKujNNkmvRpqV1PvY69Hlyp7tRdw6gc4tXh1FTAL+fdQoTeM91m siKV5C6h46aiv4BpeNguipqRDk4MT47XSngFDFKOAb1mMN33dWrhTSJzoFaJEsxK kd70WrLq41uxR3oetMwAX3yuRDASa9Am9s0p1nmD3JCEw7iRUJq0fAhDZToAVvN9 AA== -----END CERTIFICATE-----Generated at Mon Aug 4 18:38:36 2025 by rpki-client