$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: RAAuKPq9teSqEWHNfZYR5NsSs/Zd61qSwakDd3gQagM= Subject key identifier: 57:68:93:9D:AD:F5:36:76:7B:11:00:76:A8:3F:D9:A9:62:C7:5B:5F Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 491BE83D3AF7D907CAAD902713CA20D9CB203AA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 0437 Signing time: Sun 03 Aug 2025 21:42:16 +0000 Manifest this update: Sun 03 Aug 2025 21:37:16 +0000 Manifest next update: Tue 05 Aug 2025 01:41:16 +0000 Files and hashes: 1: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: OKc3uZvr3kmY38TGv/j5cCd/d8TD6IBU2hGWJY9u+K0=) 2: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: mNr2a695tJtgjMhke240qU2qO2/t+/dLL2ca36qnMss=) 3: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: qGNft1uCzkGwuPJH7iDQ4xUhWrhNnduWexIhT+DgvI8=) 4: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: qxlkfW/nLMV9I5WoI6HQ89q00naILT20Rguml63Zf0A=) 5: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: GCjCQc0vdu8E+NZi5emgx2vW0PKbTzGL5UYc+2R4voE=) 6: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: W95e9h2ypKBcN51G9gRI82wozQL8rXCLvGb2mHpv6bk=) 7: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: hY/iIpaGanxmxatebFYi3ijTkZjHjUc/Iwjsijc0S+E=) 8: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: DuCHe81tO8TVOKBTNFQCS5fRuYDjbGZfxshPpJZXNzc=) 9: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: oQj2no095+LyjZGzWOfw+sSJOW/7fRxpgUOPswu5nqM=) 10: 36322e3131322e3134342e302f32302d3230203d3e203539363432.roa (hash: hNXCqst3dZC+Dp3skkO26cOwh1zWEwx2n+JeuoU1IgU=) 11: 3138352e322e3136322e302f32332d3234203d3e20323135323639.roa (hash: sEO5Q+LtE+juFIMx1yqrmSkIjuvpVFxY8R1aiQqtGzs=) 12: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: X+PLwzsRRQMgaM/TWKrSkseThdECGWKV7QbjrMlPn80=) 13: 36322e3131322e3134342e302f32302d3234203d3e203230333236.roa (hash: PvFG9BZ+YdbKPRfUC/0dM3w7V209DRWmI/bk8VoBnFU=) 14: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: dPumV3w+l5K00Z5figZidyPpD2Xj/WObq95u77jhIK4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 01:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:1b:e8:3d:3a:f7:d9:07:ca:ad:90:27:13:ca:20:d9:cb:20:3a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Aug 3 21:37:16 2025 GMT Not After : Aug 5 01:41:16 2025 GMT Subject: CN=5768939DADF536767B110076A83FD9A962C75B5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:93:43:7f:1c:78:f4:1e:61:b7:f0:96:25:05: c0:26:46:47:d6:87:7a:4f:a0:43:ef:c9:34:0f:e5: 59:85:90:6e:6a:b7:0f:c8:47:47:87:5a:15:d9:22: b2:15:c9:9f:d7:31:db:4d:c9:66:2e:11:62:db:e9: 11:27:43:27:87:c9:2d:76:44:c4:dd:01:90:02:76: cc:09:3d:d2:2c:66:60:d5:ea:08:1d:70:45:d3:b3: ab:1c:4c:cd:f6:d9:6b:c1:0e:1d:90:46:65:86:70: 5d:a3:dc:cb:40:d1:34:5c:ff:df:66:91:2e:b2:5e: e7:71:c5:21:76:1c:1a:fd:2b:af:95:bd:fe:fe:e2: 70:f4:aa:2c:2c:1a:c9:9a:d6:b8:f5:8b:e1:84:f4: 33:be:1c:b9:08:03:cd:f3:6b:26:15:eb:9e:00:00: 1d:5f:f6:49:fe:d6:96:2c:5b:38:7c:53:18:10:69: 07:bb:12:cb:ae:89:8e:30:06:3a:90:33:e9:e9:83: 26:3e:33:5c:e8:a9:8d:a1:72:8d:08:a6:96:b1:45: 21:56:7e:27:44:e6:5a:a2:93:9d:05:eb:7c:7e:45: 0d:54:5f:df:7a:be:07:93:98:2d:b5:9c:48:43:83: 38:b1:52:08:2d:3d:28:e3:0c:fd:9e:62:fc:db:8d: 47:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:68:93:9D:AD:F5:36:76:7B:11:00:76:A8:3F:D9:A9:62:C7:5B:5F X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b9:69:96:e3:5f:a3:ad:60:de:32:2b:90:ac:4b:f1:4a:d7: 8e:88:c2:4b:5f:7f:64:da:f3:07:85:8f:cf:5b:b4:c9:5e:56: 86:1e:e3:64:d3:93:c1:97:1c:f7:18:b4:b1:92:3d:99:6d:5c: 28:95:01:ac:1f:30:83:4a:c8:a2:e5:c5:cc:2f:51:96:33:00: 8b:36:51:1c:6b:12:c2:18:c8:0d:cc:34:29:c6:6d:12:60:c0: 6f:fc:31:90:e7:2a:41:03:b0:6d:a6:b2:83:f2:f0:8a:aa:3e: c0:a6:c0:a0:c3:37:6c:83:14:31:4b:58:34:8a:28:e2:18:ff: 19:f4:fa:a7:d1:b1:9a:b3:33:6d:b7:fa:ea:60:3f:6b:37:78: 7f:84:ad:56:84:18:e6:2d:b2:31:88:db:59:71:f4:9e:75:18: e5:fd:f0:54:c0:c2:e9:f9:d2:ad:cb:30:06:6b:e9:98:b5:4a: 77:c3:12:b6:f4:b5:a5:21:82:36:df:ce:3e:44:31:9a:16:55: b8:b8:dd:90:da:e1:4f:6d:81:ee:c4:48:e7:29:59:0b:14:2d: 2e:f1:0c:df:bb:dd:51:4e:4a:7b:70:a7:3d:fe:56:f8:51:40: 1e:3f:56:0a:37:4c:24:cf:e7:7e:73:27:6f:b0:fc:19:0b:14: 04:ba:75:22 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSRvoPTr32QfKrZAnE8og2csgOqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNTA4MDMyMTM3MTZaFw0yNTA4MDUwMTQxMTZaMDMxMTAvBgNV BAMTKDU3Njg5MzlEQURGNTM2NzY3QjExMDA3NkE4M0ZEOUE5NjJDNzVCNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCok0N/HHj0HmG38JYlBcAmRkfW h3pPoEPvyTQP5VmFkG5qtw/IR0eHWhXZIrIVyZ/XMdtNyWYuEWLb6REnQyeHyS12 RMTdAZACdswJPdIsZmDV6ggdcEXTs6scTM322WvBDh2QRmWGcF2j3MtA0TRc/99m kS6yXudxxSF2HBr9K6+Vvf7+4nD0qiwsGsma1rj1i+GE9DO+HLkIA83zayYV654A AB1f9kn+1pYsWzh8UxgQaQe7EsuuiY4wBjqQM+npgyY+M1zoqY2hco0IppaxRSFW fidE5lqik50F63x+RQ1UX996vgeTmC21nEhDgzixUggtPSjjDP2eYvzbjUd9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUV2iTna31NnZ7EQB2qD/ZqWLHW18wHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfrlpluNfo61g3jIrkKxL 8UrXjojCS19/ZNrzB4WPz1u0yV5Whh7jZNOTwZcc9xi0sZI9mW1cKJUBrB8wg0rI ouXFzC9RljMAizZRHGsSwhjIDcw0KcZtEmDAb/wxkOcqQQOwbaayg/Lwiqo+wKbA oMM3bIMUMUtYNIoo4hj/GfT6p9GxmrMzbbf66mA/azd4f4StVoQY5i2yMYjbWXH0 nnUY5f3wVMDC6fnSrcswBmvpmLVKd8MStvS1pSGCNt/OPkQxmhZVuLjdkNrhT22B 7sRI5ylZCxQtLvEM37vdUU5Ke3CnPf5W+FFAHj9WCjdMJM/nfnMnb7D8GQsUBLp1 Ig== -----END CERTIFICATE-----Generated at Mon Aug 4 18:12:42 2025 by rpki-client