$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft File: 8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json) Hash identifier: ivohVUe+Hc8OuJSs1uMAdHqHjLurZAMqYM+b9WefegI= Subject key identifier: 1E:21:B0:41:81:57:FA:27:A9:09:5E:82:AA:49:25:18:09:BB:D6:C2 Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Certificate serial: 38BFC081F4D554757AA5E0A7B7B271C0F429DE8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft Manifest number: 050A Signing time: Wed 06 Aug 2025 04:42:21 +0000 Manifest this update: Wed 06 Aug 2025 04:37:21 +0000 Manifest next update: Thu 07 Aug 2025 05:02:21 +0000 Files and hashes: 1: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: 1TkU9CuZNSKSA6n8CCEVJKfR3/eejFvKDG72x42fajA=) 2: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: kVRW91gUQQJKDevSNusyEaCMFEQt6idZ9U9pUTvlEwg=) 3: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: VR4JLJ2ZU8eUzCRER2JzBOvrizo3+I5iCEURL4jUDUs=) 4: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: k4QPq18KIVcE3YfXs1geEObswKolsmORhNCPU0jWep8=) 5: 36322e3139322e3137322e302f32342d3234203d3e20383334.roa (hash: 9suncbMIifRLhPgSvXxTq2npeRIMeLWGJ3b53ycqNG0=) 6: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: j6aiC8hmqjNX8bvUvtzfL/WZD+CbfD2TNLTq4Vkaxb8=) 7: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: 1dKp6xe+eLRTQoCYGUtbaGkzNAIMlS65VuQGc12R6RA=) 8: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: ghqRv/6K7HcNH3bO6zPo+kQJpY05BN/Q1aqbHNIEp0s=) 9: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: QDSk8x00L35RICmReakqpkA/56+KGgKX4susJmbToXY=) 10: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: sfBR34BQfUnBG/Dfs9RgO4NWV6dIYQiGWUQLFQnMRUU=) 11: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: J4P/0pJKXXswWDL/U/aSyTpYbnb7RCTWwOsChVTVKX0=) 12: 37372e38332e3235342e302f32342d3234203d3e20313532363732.roa (hash: OF3wSP3yuy0C/T5Z9SXU/JklI6k6e/1ZBs+Z/EFeASc=) 13: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: AO/2wQxFVW1dCHNtgSdMO8qdA9TP6KJffP27Y2ywVzk=) 14: 36322e3139322e3137352e302f32342d3234203d3e203332313637.roa (hash: /WAm5dy4jlcwivOnkIFnMuEvBCc6QOLwRlkX4YTGCBc=) 15: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: oAOTNgxw6bYQVCzHD93BNrqwf7e2+dYeRkUxzvhfYNE=) 16: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: ngHdoUxJymyOOTpWXLZA6HfqcGQkxKDww9uhl5L3bs4=) 17: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: Nx4wSG2k5MsgvkZE/SkqlmuALnm8blh30hh9Mbxj2MU=) 18: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: p6Bk0gZf8IBhPL6y8ZeFGMDiI7CTICtCBqH+ui8UNPk=) 19: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: yu4VS8d4SOotNR90wp+Yzh042rOQsTRk/ltNPBkKiBs=) 20: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: jKhLBm90tx+Wj64bfhAOaNtyd2IRsOIjohul50fMfmI=) 21: 37372e38332e3235342e302f32342d3234203d3e203633303233.roa (hash: 5CqwgOjFFuFV2UfvvpLNhCLDO+4UZEU9TIi9LDwBTT8=) 22: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: 7LxiUpW29bCJDw6ndbnVxwTHPen7XCpx03brWPSWNVo=) 23: 37372e38332e3235342e302f32342d3234203d3e20313432313131.roa (hash: 5E5ubEnGmxuDRTB/crq4AEPdYVHLSryiOVVydmorIJQ=) 24: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: 1mKwdC2ZIiOIr7Rnoef/+fSq7c6umW7Rd7kmaMzPSt8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 05:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:bf:c0:81:f4:d5:54:75:7a:a5:e0:a7:b7:b2:71:c0:f4:29:de:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Validity Not Before: Aug 6 04:37:21 2025 GMT Not After : Aug 7 05:02:21 2025 GMT Subject: CN=1E21B0418157FA27A9095E82AA49251809BBD6C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:26:87:34:56:04:e8:08:75:3b:f2:fb:b6:42: 47:44:37:fc:17:e1:a2:23:4a:f0:7f:39:2d:d3:cf: 8b:a2:0e:05:12:6d:23:28:57:3f:fc:48:90:24:17: aa:71:fe:50:28:70:a0:fd:09:de:52:87:31:44:26: 9a:95:c2:99:d1:da:84:86:48:00:52:b5:47:53:4f: 48:60:b4:1a:31:04:98:8b:39:b3:13:7f:7a:6b:12: 5f:c9:1b:04:75:7b:65:5c:a6:11:31:21:3b:e7:85: 68:4b:37:73:08:19:ec:bb:e2:7e:e9:e1:da:70:27: ac:89:42:2a:88:0b:fb:71:72:b6:48:36:9d:d6:73: d7:1d:d0:6c:b0:fa:f8:c4:8c:17:30:d2:3f:8f:a3: 3f:b6:0f:a9:f6:d4:10:98:42:4b:71:e5:e3:04:ba: 63:d6:23:62:65:fb:c7:0e:43:34:50:fd:4b:55:3b: 51:10:5b:fd:da:6d:67:ce:de:29:d1:00:f0:93:68: 1a:7e:54:a9:01:8c:51:f5:4b:a9:41:af:a9:bd:d7: d9:47:2a:ec:52:73:dd:76:81:50:d6:c5:77:b6:0b: 3e:89:21:2a:4c:6d:f0:06:b2:bf:f4:de:ad:c8:c5: 8c:c4:ca:a8:f2:3e:1c:eb:d7:fb:a4:fe:56:aa:b7: 08:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:21:B0:41:81:57:FA:27:A9:09:5E:82:AA:49:25:18:09:BB:D6:C2 X509v3 Authority Key Identifier: keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:12:b6:77:f9:65:2b:6f:c6:be:b0:f5:e2:27:06:f8:f7:a3: a1:1d:ca:a6:85:2c:8b:01:02:b0:b2:4f:e8:10:d4:92:86:d2: bf:48:84:93:61:41:8d:f7:da:1f:c2:4e:bb:91:c3:2d:dc:ff: 44:8d:8e:10:34:47:f6:78:89:d0:ef:c3:9a:a9:f7:0b:60:c8: 3e:59:bf:5d:90:21:2c:db:2b:5a:9a:1a:58:14:bd:b1:6d:ad: 1c:cb:34:57:c5:6b:90:65:a2:d3:47:06:5a:24:20:02:d6:27: e1:79:19:e1:66:b6:37:ca:49:27:9f:ba:23:99:e5:c9:af:84: c1:4e:22:11:84:a8:c6:fd:c5:da:cd:b9:ee:34:5d:ca:f2:2b: 92:9c:6c:81:d6:e5:08:c7:40:1d:99:4f:36:a6:58:25:87:0e: d1:d9:2d:dc:d6:ba:a1:b1:fa:35:7f:6c:ef:13:53:c8:b8:1c: cf:68:10:39:02:52:81:64:d9:dc:83:95:69:71:40:51:f0:a6: 6f:f6:ad:23:93:c9:ee:cf:3f:3c:8c:1b:2f:cd:22:7f:e0:a0: bc:99:66:2a:4d:5f:4f:c2:3e:06:31:86:d8:5d:16:33:f5:09: 9c:17:27:ac:6f:43:9a:0d:46:a8:5e:81:97:8e:4f:f1:16:33: a8:9c:e8:94 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOL/AgfTVVHV6peCnt7JxwPQp3owwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy NjllYjNkNjAeFw0yNTA4MDYwNDM3MjFaFw0yNTA4MDcwNTAyMjFaMDMxMTAvBgNV BAMTKDFFMjFCMDQxODE1N0ZBMjdBOTA5NUU4MkFBNDkyNTE4MDlCQkQ2QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Joc0VgToCHU78vu2QkdEN/wX 4aIjSvB/OS3Tz4uiDgUSbSMoVz/8SJAkF6px/lAocKD9Cd5ShzFEJpqVwpnR2oSG SABStUdTT0hgtBoxBJiLObMTf3prEl/JGwR1e2VcphExITvnhWhLN3MIGey74n7p 4dpwJ6yJQiqIC/txcrZINp3Wc9cd0Gyw+vjEjBcw0j+Poz+2D6n21BCYQktx5eME umPWI2Jl+8cOQzRQ/UtVO1EQW/3abWfO3inRAPCTaBp+VKkBjFH1S6lBr6m919lH KuxSc912gVDWxXe2Cz6JISpMbfAGsr/03q3IxYzEyqjyPhzr1/uk/laqtwinAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHiGwQYFX+iepCV6CqkklGAm71sIwHwYDVR0j BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0 MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh ZXM5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTk3NzExNS01 MTEwLTQyNTctOTRlZi00ZDJiNDM4ODQwNDAvMC84RjRDRTc3MjJGOTkwNzVEOTQ3 MzhCN0U2MTA3MDQwMTI2OUVCM0Q2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRK2d/llK2/GvrD14icG +PejoR3KpoUsiwECsLJP6BDUkobSv0iEk2FBjffaH8JOu5HDLdz/RI2OEDRH9niJ 0O/Dmqn3C2DIPlm/XZAhLNsrWpoaWBS9sW2tHMs0V8VrkGWi00cGWiQgAtYn4XkZ 4Wa2N8pJJ5+6I5nlya+EwU4iEYSoxv3F2s257jRdyvIrkpxsgdblCMdAHZlPNqZY JYcO0dkt3Na6obH6NX9s7xNTyLgcz2gQOQJSgWTZ3IOVaXFAUfCmb/atI5PJ7s8/ PIwbL80if+CgvJlmKk1fT8I+BjGG2F0WM/UJnBcnrG9Dmg1GqF6Bl45P8RYzqJzo lA== -----END CERTIFICATE-----Generated at Wed Aug 6 16:23:57 2025 by rpki-client