$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: vkN46040DyGprt7SLeHWK7559BqCAsKYXOIrMrIcxD8= Subject key identifier: 62:C8:26:C6:D9:64:71:4A:79:7F:5B:06:D2:BE:1B:05:0C:29:42:33 Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 0C9C90A47292C9794B0F390F3E6E8410E21A724B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: AD Signing time: Mon 04 Aug 2025 05:57:18 +0000 Manifest this update: Mon 04 Aug 2025 05:52:18 +0000 Manifest next update: Tue 05 Aug 2025 09:33:18 +0000 Files and hashes: 1: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: U2rsj2GmpPBYV9RPLITNHzbaDI2Gxelnlov5msxX9eI=) 2: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: oXC9Asr9SJ7DSslxSZaWUX9xWnSBbY5iUxbxwvvcFUI=) 3: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: u6D0nQIamyf1rwT6EphlkmgpGmdsHhrROhbEzSFSSxQ=) 4: 3231332e3135372e3132332e302f32342d3234203d3e20383334.roa (hash: AFtivI61gfbdC46y0xOZPBtrdddcwvL1pKOVKApf6R4=) 5: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: fkThFrWbc2SNg5nWL/DjCmp7efO9LKVSLfyHO63Odeo=) 6: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: 8q9dTfV7kWJ8d69HeyPdwsQX9hjWiJjl23J8+Z6j/Jg=) 7: 3231332e3135372e3132312e302f32342d3234203d3e2039333034.roa (hash: ZHfI2bxkV7hnGY31X0QEko4MmgUYJCvh7a/XuZiRsPg=) 8: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: obPbW0ZKO9rq4yp7c5UqzqijavPW0CV78gaYhHaBReI=) 9: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: cK22q6rO6KtktflqsQYlSr1z73xEpoVM/WNGnd6YIEI=) 10: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: aUvc4UTsIU7R0m9dsnmxWesOTPr9WQo6/RshJ5X0hb4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:9c:90:a4:72:92:c9:79:4b:0f:39:0f:3e:6e:84:10:e2:1a:72:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Aug 4 05:52:18 2025 GMT Not After : Aug 5 09:33:18 2025 GMT Subject: CN=62C826C6D964714A797F5B06D2BE1B050C294233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:64:3b:19:d0:32:a2:8b:fc:47:6f:ac:39:0a: 14:ee:fb:c1:97:1a:29:49:e3:89:4d:f5:92:3b:bd: 5d:f7:f5:ba:67:6a:cc:0a:23:3e:2f:47:fb:bd:0a: 10:68:e7:3a:33:aa:ad:4c:69:17:5b:cc:b8:be:a0: e7:95:ee:0a:2b:1f:23:d6:88:1f:19:a8:7e:b2:bc: 5d:8d:df:ba:a7:69:ea:e3:74:8f:54:3c:f6:8e:28: 34:67:d7:28:f2:ac:6d:4d:e0:41:41:b8:da:92:1a: 43:33:27:2c:62:04:0b:e0:d1:81:2a:d9:4d:0a:f7: 3b:f2:1a:57:ae:26:2c:04:fb:93:4c:38:a3:cd:ae: 1e:3e:a5:44:06:c0:d4:0f:15:8e:c7:68:11:71:61: e0:4f:2b:a9:f9:aa:04:b0:ea:ff:2c:d5:3e:8e:33: ba:48:85:96:93:99:32:19:e9:eb:f6:a8:f3:ec:94: c5:5c:90:ee:59:23:47:28:bc:d4:f8:46:a9:0e:0a: cd:bf:7f:ad:38:3c:7f:b8:96:b4:34:2c:50:82:01: 67:e7:07:29:fa:97:5f:b2:01:c7:79:6a:3b:4e:9b: f3:95:43:34:a0:fe:fb:d5:84:5c:40:b8:e3:bc:43: 40:04:e1:fe:44:9c:25:89:2c:d9:63:24:6c:7c:a9: 93:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C8:26:C6:D9:64:71:4A:79:7F:5B:06:D2:BE:1B:05:0C:29:42:33 X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:7c:bd:82:27:ee:74:37:ee:8f:79:e7:4a:8f:b9:46:fc:f4: 64:1e:1a:12:04:d9:63:12:fa:70:1e:8e:b9:32:3e:6d:ee:cb: 86:cc:9d:88:e3:c6:80:56:85:a7:ee:75:e2:4a:9b:e8:06:11: 9b:d3:82:b7:97:80:02:6e:b2:3f:43:67:ad:a7:4c:5b:cb:08: 76:37:6c:76:3e:e7:d5:a1:b5:08:df:7c:de:b4:66:1e:4c:30: 55:f4:6d:d6:b2:49:06:37:c1:44:be:5d:4d:6e:c9:ef:f1:df: c8:02:0b:94:6a:df:d6:b4:4f:97:a2:67:6e:37:f1:84:26:b1: a5:60:6a:f1:59:bb:78:28:f1:61:5f:25:98:85:67:3a:6c:a0: 22:12:53:1b:57:7d:11:5e:0b:d7:96:49:90:6c:b6:b6:21:de: 09:23:06:a6:95:55:2b:04:df:fd:4e:92:f6:b6:eb:7d:e8:b0: c7:83:e9:52:2f:a7:07:10:17:fb:ba:0b:1b:3a:0a:e4:bc:bd: 35:2f:c4:e6:2f:20:b4:7c:09:8c:38:2e:51:da:78:ce:30:42: 75:f3:bc:47:39:5d:6f:ec:f0:97:54:4f:6d:99:ee:86:01:a9: 2f:dd:bb:90:e4:fd:03:14:e4:2a:dd:b0:6c:4c:a8:39:d8:42: af:9b:fb:cd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDJyQpHKSyXlLDzkPPm6EEOIackswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNTA4MDQwNTUyMThaFw0yNTA4MDUwOTMzMThaMDMxMTAvBgNV BAMTKDYyQzgyNkM2RDk2NDcxNEE3OTdGNUIwNkQyQkUxQjA1MEMyOTQyMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVZDsZ0DKii/xHb6w5ChTu+8GX GilJ44lN9ZI7vV339bpnaswKIz4vR/u9ChBo5zozqq1MaRdbzLi+oOeV7gorHyPW iB8ZqH6yvF2N37qnaerjdI9UPPaOKDRn1yjyrG1N4EFBuNqSGkMzJyxiBAvg0YEq 2U0K9zvyGleuJiwE+5NMOKPNrh4+pUQGwNQPFY7HaBFxYeBPK6n5qgSw6v8s1T6O M7pIhZaTmTIZ6ev2qPPslMVckO5ZI0covNT4RqkOCs2/f604PH+4lrQ0LFCCAWfn Byn6l1+yAcd5ajtOm/OVQzSg/vvVhFxAuOO8Q0AE4f5EnCWJLNljJGx8qZOhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUYsgmxtlkcUp5f1sG0r4bBQwpQjMwHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3y9gifudDfuj3nnSo+5 Rvz0ZB4aEgTZYxL6cB6OuTI+be7LhsydiOPGgFaFp+514kqb6AYRm9OCt5eAAm6y P0NnradMW8sIdjdsdj7n1aG1CN983rRmHkwwVfRt1rJJBjfBRL5dTW7J7/HfyAIL lGrf1rRPl6JnbjfxhCaxpWBq8Vm7eCjxYV8lmIVnOmygIhJTG1d9EV4L15ZJkGy2 tiHeCSMGppVVKwTf/U6S9rbrfeiwx4PpUi+nBxAX+7oLGzoK5Ly9NS/E5i8gtHwJ jDguUdp4zjBCdfO8Rzldb+zwl1RPbZnuhgGpL927kOT9AxTkKt2wbEyoOdhCr5v7 zQ== -----END CERTIFICATE-----Generated at Mon Aug 4 11:14:37 2025 by rpki-client