$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft File: D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft (raw, json) Hash identifier: HhLzNm38qG/681Wv/LL1Q43b+2FU/K28PDZuin687UU= Subject key identifier: 3F:50:17:DA:C4:79:04:E3:A1:16:00:B3:F9:32:E5:28:83:BF:19:C6 Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44 Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444 Certificate serial: 0C63DFEA70AEA3BB2EB33A73EEBDB8CFD48ED49B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft Manifest number: 048C Signing time: Wed 06 Aug 2025 02:17:21 +0000 Manifest this update: Wed 06 Aug 2025 02:12:21 +0000 Manifest next update: Thu 07 Aug 2025 02:32:21 +0000 Files and hashes: 1: 37382e32342e3132332e302f32342d3234203d3e2037303138.roa (hash: yLm71OTqDFRdyl2jt+hmsZQmui0MjgACYd0QbV3wZ9U=) 2: D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl (hash: v4+4EGh+9uP9FW0FKPHql23n5nxsynDah5E8o5Ni7kM=) 3: 37382e32342e3132342e302f32332d3234203d3e20383334.roa (hash: NsnuSxYl6unNGzK/UX953Nm8V+PIcPCCM5lN4meDmN4=) 4: 39332e39322e32322e302f32332d3234203d3e203534333339.roa (hash: MlVhq9YMUDch69apYFS1riPDRY/vCEBSVcnZ0AXUbzA=) 5: 34352e38362e39342e302f32342d3234203d3e2039303039.roa (hash: gq03q2PZTenb5MfLZJOhv7nheUzD9xSGdvhncjMBFfc=) 6: 37382e32342e3132322e302f32342d3234203d3e2037303138.roa (hash: RiGLyTpjx/lhYnZMR/g3INSwpo5JHGzbqqOnRRhQZa8=) 7: 39332e39322e31382e302f32342d3234203d3e203534333339.roa (hash: WMxtcl2Ju6TLrgTtLUBAyAfGF8Gn9pZV9umXAbbzoJo=) 8: 37382e32342e3132352e302f32342d3234203d3e203534333339.roa (hash: 8J7vWDZA6CwD0N0heCZfxarZkaHc987rZNDTEoRqJuw=) 9: 34352e38362e39322e302f32342d3234203d3e20323039313831.roa (hash: gFPXsCrn7VghMZpPQmlNius+Qe9koRj6iqpgIDQpOY8=) 10: 37382e32342e3132342e302f32342d3234203d3e203534333339.roa (hash: Jmas5KP8U8YtPnq0n93kzfbv6wwue5du0IC/hUNUQy4=) 11: 37382e32342e3132362e302f32332d3234203d3e203131343236.roa (hash: daBRkHJPjnP4DyHn4IivnK1qaHgtIwZJtESS0iOn6Xk=) 12: 37382e32342e3132312e302f32342d3234203d3e203631333137.roa (hash: PNy4BBOReJ4B4LRwKHBjnzscIyK0n1F3JT7zrSI8uHw=) 13: 39332e39322e32302e302f32342d3234203d3e2035353131.roa (hash: Anw+Ot0jzMET4Sk6hQNdmMLNf7QzBxX2vhTMbwb0Hp4=) 14: 39332e39322e32312e302f32342d3234203d3e203631333137.roa (hash: fW+zXQmtdqPL01ivRHM0ry5dwDotUJmdzQHE3ZemyUE=) 15: 39332e39322e31392e302f32342d3234203d3e203631333137.roa (hash: bCly8plczaq5qd0H9MlQ1Z8xZKSunOI/jFWKgR1UqBg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 02:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:63:df:ea:70:ae:a3:bb:2e:b3:3a:73:ee:bd:b8:cf:d4:8e:d4:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444 Validity Not Before: Aug 6 02:12:21 2025 GMT Not After : Aug 7 02:32:21 2025 GMT Subject: CN=3F5017DAC47904E3A11600B3F932E52883BF19C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:76:e7:41:4f:48:91:bf:bc:64:3a:4f:f8:e3: 52:84:e5:a3:a4:94:61:cf:11:9e:6c:ee:42:ff:cf: 2a:d0:c9:e1:52:cd:a7:57:2e:5e:79:01:89:c6:0e: f9:d6:78:78:98:bb:b4:c0:58:b1:fd:5f:c1:5f:9b: a4:ff:41:a4:ae:8a:15:de:ee:44:76:58:ec:84:ad: 81:72:56:2d:d4:c6:a1:d4:09:0e:30:95:15:85:f6: 45:15:b7:e3:fd:ba:ef:b2:f9:f3:62:b9:a0:0a:14: 0c:fa:bc:56:5c:6a:b5:b6:df:75:57:a6:c4:88:3a: 94:8a:c8:62:99:c4:f4:87:91:a3:1f:20:6d:ba:cb: d3:66:fa:c0:ae:17:0f:d3:a4:45:10:12:6c:1d:ea: d3:04:22:9f:cb:ce:3f:29:b3:d4:ce:b8:cf:4f:5c: 3d:d4:f3:dc:5b:a4:6b:e9:65:e8:c8:20:fd:db:94: 2c:4f:6a:74:0a:03:44:fa:14:6a:e6:2e:4f:a1:9b: f8:93:03:bb:dc:8f:3c:9e:4f:68:d0:f7:17:5a:cd: 7d:32:fe:c7:40:f4:24:0b:23:98:ab:21:13:6a:4b: 56:7b:9d:c8:e1:5c:13:f9:a7:f0:82:6e:39:e5:8b: 8d:ac:af:fc:bb:fd:d5:17:d9:28:7f:97:58:c8:c7: ca:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:50:17:DA:C4:79:04:E3:A1:16:00:B3:F9:32:E5:28:83:BF:19:C6 X509v3 Authority Key Identifier: keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:20:63:78:cf:74:bc:33:e1:83:4e:c4:e9:43:fd:2f:21:81: 20:2f:8f:f2:bf:ce:20:30:41:55:44:53:8f:e4:00:73:78:6b: ee:21:ae:55:cd:bb:5b:6c:73:5f:3f:1d:54:cc:f8:87:50:1e: 7b:23:31:2d:73:f3:b0:42:ea:2d:e4:e6:a0:c1:d9:e5:41:2a: 34:d6:90:ac:68:c0:ab:e0:8a:5b:9e:d5:5f:82:d1:2d:72:58: 06:bd:dd:17:10:91:33:df:26:ea:cb:ae:fc:67:33:3d:e1:d8: 97:8a:37:e1:15:0e:35:a2:ad:f0:41:8c:97:0c:e9:36:83:e7: 52:df:74:4e:1e:ae:87:85:06:17:4f:93:e4:bd:1d:79:09:79: 5b:33:51:ad:a7:8e:e0:f2:30:d0:4d:61:ec:a6:66:c6:69:e8: 2c:f1:56:4a:2b:9c:44:d8:a7:ac:40:3d:81:82:65:1a:bd:a6: 51:5f:36:e5:02:e6:e9:a6:41:a2:29:46:f5:b0:b3:40:fb:0f: cd:9a:e9:99:da:03:fa:b7:42:ec:bb:59:22:03:a1:d5:6d:72: 67:22:da:8d:bb:fe:38:bb:07:e3:2f:43:53:56:73:52:75:f9: d0:47:88:05:67:a9:51:3c:0e:bc:60:28:99:0a:f4:6d:40:b4: 05:4e:47:94 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDGPf6nCuo7suszpz7r24z9SO1JswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDAxYmEwMTNiYzFlNmQ4NmYwZDZkNThlYWZhNTRlMjdm YWRhMzQ0NDAeFw0yNTA4MDYwMjEyMjFaFw0yNTA4MDcwMjMyMjFaMDMxMTAvBgNV BAMTKDNGNTAxN0RBQzQ3OTA0RTNBMTE2MDBCM0Y5MzJFNTI4ODNCRjE5QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrdudBT0iRv7xkOk/441KE5aOk lGHPEZ5s7kL/zyrQyeFSzadXLl55AYnGDvnWeHiYu7TAWLH9X8Ffm6T/QaSuihXe 7kR2WOyErYFyVi3UxqHUCQ4wlRWF9kUVt+P9uu+y+fNiuaAKFAz6vFZcarW233VX psSIOpSKyGKZxPSHkaMfIG26y9Nm+sCuFw/TpEUQEmwd6tMEIp/Lzj8ps9TOuM9P XD3U89xbpGvpZejIIP3blCxPanQKA0T6FGrmLk+hm/iTA7vcjzyeT2jQ9xdazX0y /sdA9CQLI5irIRNqS1Z7ncjhXBP5p/CCbjnli42sr/y7/dUX2Sh/l1jIx8pXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUP1AX2sR5BOOhFgCz+TLlKIO/GcYwHwYDVR0j BBgwFoAU0BugE7webYbw1tWOr6VOJ/raNEQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYtNjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5 NDMxLzEvRDAxQkEwMTNCQzFFNkQ4NkYwRDZENThFQUZBNTRFMjdGQURBMzQ0NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBCdWdFN3dlYllidzF0V09yNlZPSl9y YU5FUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNTIyYTUyZi02 NTM0LTQxNjUtYTZhNy1lZjlmNzRlZjk0MzEvMS9EMDFCQTAxM0JDMUU2RDg2RjBE NkQ1OEVBRkE1NEUyN0ZBREEzNDQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSBjeM90vDPhg07E6UP9 LyGBIC+P8r/OIDBBVURTj+QAc3hr7iGuVc27W2xzXz8dVMz4h1AeeyMxLXPzsELq LeTmoMHZ5UEqNNaQrGjAq+CKW57VX4LRLXJYBr3dFxCRM98m6suu/GczPeHYl4o3 4RUONaKt8EGMlwzpNoPnUt90Th6uh4UGF0+T5L0deQl5WzNRraeO4PIw0E1h7KZm xmnoLPFWSiucRNinrEA9gYJlGr2mUV825QLm6aZBoilG9bCzQPsPzZrpmdoD+rdC 7LtZIgOh1W1yZyLajbv+OLsH4y9DU1ZzUnX50EeIBWepUTwOvGAomQr0bUC0BU5H lA== -----END CERTIFICATE-----Generated at Wed Aug 6 10:59:35 2025 by rpki-client