$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: M4jA0H/4+ijU6rU68pmGZVXjgD5uMApWoG56YYgC7js= Subject key identifier: 1F:E9:31:BC:17:54:5D:4F:8F:53:26:C8:84:92:B7:E8:52:34:4E:1E Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 508D1979A4E2CD164CD5A4D779EF0EB91B1D3CC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 03F3 Signing time: Sat 14 Jun 2025 17:57:54 +0000 Manifest this update: Sat 14 Jun 2025 17:52:54 +0000 Manifest next update: Sun 15 Jun 2025 19:03:54 +0000 Files and hashes: 1: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: cwrS6A/oM7uVoRnag/rHPBb4Qk8hZAq3bZyA0gVPCzk=) 2: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: hY/iIpaGanxmxatebFYi3ijTkZjHjUc/Iwjsijc0S+E=) 3: 3138352e322e3136322e302f32332d3234203d3e20323135323639.roa (hash: sEO5Q+LtE+juFIMx1yqrmSkIjuvpVFxY8R1aiQqtGzs=) 4: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: OKc3uZvr3kmY38TGv/j5cCd/d8TD6IBU2hGWJY9u+K0=) 5: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: novv8uFy0Vs9RwDKIvrp8x1K7XYu7VG1fFRpU1s905g=) 6: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: qxlkfW/nLMV9I5WoI6HQ89q00naILT20Rguml63Zf0A=) 7: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: oQj2no095+LyjZGzWOfw+sSJOW/7fRxpgUOPswu5nqM=) 8: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: dPumV3w+l5K00Z5figZidyPpD2Xj/WObq95u77jhIK4=) 9: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: DuCHe81tO8TVOKBTNFQCS5fRuYDjbGZfxshPpJZXNzc=) 10: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: qGNft1uCzkGwuPJH7iDQ4xUhWrhNnduWexIhT+DgvI8=) 11: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: LBMUHWugPGnJtw9mI4PuIshgxiedjcAOS8XKlWg3eYE=) 12: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: ujOzcUFn73GlYynt8yef9LZrmhEywDFvXOhmuSoBoLw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 19:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:8d:19:79:a4:e2:cd:16:4c:d5:a4:d7:79:ef:0e:b9:1b:1d:3c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Jun 14 17:52:54 2025 GMT Not After : Jun 15 19:03:54 2025 GMT Subject: CN=1FE931BC17545D4F8F5326C88492B7E852344E1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:f4:e8:d4:a0:b5:ef:07:fb:c4:ac:64:d2: 6a:4d:17:25:0b:70:0f:36:5b:7b:6f:12:a7:80:a2: 9a:7d:e8:4c:91:05:95:05:60:08:45:13:3b:67:6c: f7:ac:3b:b4:d6:a0:d8:56:16:98:15:01:80:83:11: 08:07:f0:43:99:d1:80:5a:e7:61:54:79:e9:65:e5: cf:82:5c:41:df:56:ed:ea:e5:38:53:ad:7c:e1:3c: ea:0f:5b:71:a1:15:7a:fb:54:f7:36:f5:ff:76:57: 65:36:40:3d:70:0e:76:74:d0:07:16:79:2c:e2:9c: ac:7e:35:93:2e:2f:10:6a:c1:f6:e5:9e:9a:52:5d: c7:0e:94:de:f0:ef:48:ad:10:6b:fb:cd:24:ba:bd: 55:71:f9:51:2a:05:76:77:50:a9:15:b7:ca:45:a6: d7:b1:64:5e:3a:51:e7:a3:a1:55:3e:c0:85:bf:d7: 25:13:c7:a4:b2:59:75:b0:44:a5:f4:ed:e7:eb:7e: df:7d:24:73:ca:6d:3f:df:a9:58:62:7d:2c:b5:db: 13:ab:70:cb:60:ab:d3:73:56:cd:54:d1:c7:fe:ce: 88:2e:d1:30:6e:84:58:c5:7b:0e:1a:06:65:54:99: 48:56:34:59:de:d4:14:c5:aa:73:39:26:e2:6b:30: e0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E9:31:BC:17:54:5D:4F:8F:53:26:C8:84:92:B7:E8:52:34:4E:1E X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:33:20:c1:57:47:15:14:99:5c:d0:e4:67:34:a5:23:4e:9a: e7:2f:c8:ea:40:72:f1:ec:7a:8e:71:7d:d2:d8:cf:e1:58:ad: 24:7d:77:36:0e:da:df:56:12:57:8e:44:14:d9:99:58:88:c6: 63:3c:14:cf:ba:28:39:4e:35:fe:d1:d4:c1:a7:b2:a4:f7:50: 3f:b4:65:24:98:70:6f:24:82:61:80:5b:f5:8c:2d:19:65:22: b8:bf:de:a9:ec:57:c1:aa:cd:06:86:d9:a2:37:44:e1:e8:b4: 69:c3:20:47:15:9a:d9:31:76:94:fd:eb:b6:4c:a6:f8:32:98: 9c:76:ee:59:0e:2f:4c:7c:61:c3:98:e1:1e:72:22:fc:5a:a0: d5:9b:cd:67:85:b7:80:03:78:c0:cd:2d:7d:a8:93:86:8b:6b: cc:93:b8:83:76:7f:d9:ca:07:02:17:43:57:57:5b:b8:5d:c6: 41:57:80:f5:3c:6f:50:63:c1:cc:27:34:59:df:15:3f:97:c8: 35:91:6b:51:a4:f6:39:78:db:3c:7b:b7:a7:62:68:b8:76:d8: 26:a9:2d:86:17:4a:d3:21:ca:6f:8a:78:db:ed:01:fc:27:f1: eb:11:29:86:16:3a:5f:ab:1c:c6:00:bc:a8:00:f1:3f:1e:c7: 9e:ba:67:7d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUI0ZeaTizRZM1aTXee8OuRsdPMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNTA2MTQxNzUyNTRaFw0yNTA2MTUxOTAzNTRaMDMxMTAvBgNV BAMTKDFGRTkzMUJDMTc1NDVENEY4RjUzMjZDODg0OTJCN0U4NTIzNDRFMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuQfTo1KC17wf7xKxk0mpNFyUL cA82W3tvEqeAopp96EyRBZUFYAhFEztnbPesO7TWoNhWFpgVAYCDEQgH8EOZ0YBa 52FUeell5c+CXEHfVu3q5ThTrXzhPOoPW3GhFXr7VPc29f92V2U2QD1wDnZ00AcW eSzinKx+NZMuLxBqwfblnppSXccOlN7w70itEGv7zSS6vVVx+VEqBXZ3UKkVt8pF ptexZF46UeejoVU+wIW/1yUTx6SyWXWwRKX07efrft99JHPKbT/fqVhifSy12xOr cMtgq9NzVs1U0cf+zogu0TBuhFjFew4aBmVUmUhWNFne1BTFqnM5JuJrMOChAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUH+kxvBdUXU+PUybIhJK36FI0Th4wHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTMgwVdHFRSZXNDkZzSl I06a5y/I6kBy8ex6jnF90tjP4VitJH13Ng7a31YSV45EFNmZWIjGYzwUz7ooOU41 /tHUwaeypPdQP7RlJJhwbySCYYBb9YwtGWUiuL/eqexXwarNBobZojdE4ei0acMg RxWa2TF2lP3rtkym+DKYnHbuWQ4vTHxhw5jhHnIi/Fqg1ZvNZ4W3gAN4wM0tfaiT hotrzJO4g3Z/2coHAhdDV1dbuF3GQVeA9TxvUGPBzCc0Wd8VP5fINZFrUaT2OXjb PHu3p2JouHbYJqkthhdK0yHKb4p42+0B/Cfx6xEphhY6X6scxgC8qADxPx7Hnrpn fQ== -----END CERTIFICATE-----Generated at Sat Jun 14 23:42:10 2025 by rpki-client