$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json) Hash identifier: 02ey4C8QEfLaUUjlytRxssRqaTE8aQr5LO7rOyEJeJE= Subject key identifier: 03:D0:39:EC:EE:3E:F8:46:69:D5:F2:1D:BC:92:0B:51:61:C1:DC:F0 Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 48F6BBBB6F13E9C70B4C0DBA316D7854BE3B7F15 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft Manifest number: 0233 Signing time: Mon 04 Aug 2025 04:03:53 +0000 Manifest this update: Mon 04 Aug 2025 03:58:53 +0000 Manifest next update: Tue 05 Aug 2025 04:16:53 +0000 Files and hashes: 1: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: DvQHKT6M+fkiG6o9KW4wBm0yNbqCXWjg78L/cu4BiJ0=) 2: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: R4oy1L8+rEt1QdmoGVV7PiYt423B/xK5i6kPhc7W9aI=) 3: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: I/XtxT2jsv6yRfHh6mkkJvJ/QC9yBzsyPUAJmd3QEUc=) 4: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: 9phDdz/jhh9vxdEc5WXHXIl+cdnJzAyh/6SdvyVejiI=) 5: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: M0+yHEN3VX8K+aVDmpusml/7Hx8dbBnadNDMaFbGOzQ=) 6: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: e+p8+Sw9X8S3Ty3gF9pg+LdvDbV5qMXAYBBthQD4LPE=) 7: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: BL4+PYIdcLs3fiOkkamkg94lgyO9kcRHp6ACoQUQ5y8=) 8: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: KPVNDBydB4lEOCddQAWiNda/rm6IVb4G2i+sUeOhrYg=) 9: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: OTYsTfrglFs/JKFj7RJtAXdrMe1OUcjbc3WSXqeD0dk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f6:bb:bb:6f:13:e9:c7:0b:4c:0d:ba:31:6d:78:54:be:3b:7f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Aug 4 03:58:53 2025 GMT Not After : Aug 5 04:16:53 2025 GMT Subject: CN=03D039ECEE3EF84669D5F21DBC920B5161C1DCF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:53:25:d9:f1:5a:d4:8b:c6:c5:2d:4d:73:16: f3:0d:36:06:f7:ce:b2:70:92:21:3f:24:38:c3:46: 2c:e1:81:82:da:1d:f2:92:30:dd:1e:fb:d4:ee:28: 3c:70:2d:7c:46:c8:8e:03:3c:ec:1d:80:7e:08:fd: 96:32:6c:50:1f:1e:95:97:73:a8:94:7a:2a:0a:bc: 93:af:b6:4d:94:41:e1:bb:50:cf:cb:2f:f1:ec:ae: 03:b1:be:11:4e:5d:37:1a:a8:b0:5e:71:d3:f2:f7: 8f:54:f7:68:70:00:49:18:0c:86:69:d0:38:79:2a: cc:d2:ba:c0:e6:a7:11:0a:63:08:2b:7e:35:ec:5b: ff:22:22:32:77:1f:03:96:15:9d:5f:d5:f5:fd:83: bc:5c:05:03:9d:e3:6b:d3:b7:ea:31:0a:24:6f:6e: 63:32:a4:b1:41:67:6d:9f:d1:44:a6:35:47:4b:20: c6:ba:6f:5b:96:f6:9a:89:68:1a:e5:30:2b:1c:ec: 73:e2:8b:92:d9:b3:80:f0:bc:97:e2:79:7c:d2:5a: ec:3c:fe:d6:e2:69:75:be:fa:d7:40:1e:73:bd:b1: 1d:39:ac:07:d8:d7:ab:d7:b9:7d:ba:f6:fa:14:28: 10:da:e7:a3:b3:c0:33:6c:b2:6a:a8:f2:b0:3c:e2: 7d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D0:39:EC:EE:3E:F8:46:69:D5:F2:1D:BC:92:0B:51:61:C1:DC:F0 X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:23:73:72:32:5a:1a:d5:79:db:4b:14:47:9f:c3:49:f7:31: c2:b9:78:54:57:18:29:59:37:c0:cc:84:66:20:8c:d8:d1:11: 59:9f:7d:1f:29:c3:a8:63:b6:c6:50:bb:d8:80:e7:50:50:60: fc:5a:56:5a:67:3d:8d:b5:11:db:a2:a0:f1:c9:6b:d0:e2:fa: ad:85:71:78:89:26:a3:1d:f3:94:6d:34:68:5f:2c:0d:a0:63: 4a:b1:71:99:92:d0:57:5f:ac:78:fc:d8:7e:7e:b2:6e:b0:34: ef:c4:6b:f2:a0:d0:ee:58:42:2d:31:d4:aa:68:f1:f6:3f:50: 39:c3:7a:5c:d9:f0:e7:63:53:80:00:60:7f:9e:03:51:89:3e: 30:92:62:f3:f5:e2:7b:81:60:1c:73:62:9d:42:e8:6e:bd:b6: 16:28:90:d4:55:ed:8c:af:71:92:67:45:b3:5c:1a:92:53:83: 34:33:36:3f:d8:c6:4d:a7:f6:bd:32:35:a8:8a:36:fa:f8:38: d4:a5:f4:8a:a4:09:29:c8:61:03:ea:7f:34:40:02:f6:e7:e9: 6b:2c:0c:66:e8:67:29:07:65:89:bb:31:aa:10:82:20:dc:36: 22:51:f9:7a:12:71:34:c0:61:9d:4a:8f:a7:21:bb:3c:7f:e6: 38:ec:a6:0f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSPa7u28T6ccLTA26MW14VL47fxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNTA4MDQwMzU4NTNaFw0yNTA4MDUwNDE2NTNaMDMxMTAvBgNV BAMTKDAzRDAzOUVDRUUzRUY4NDY2OUQ1RjIxREJDOTIwQjUxNjFDMURDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdUyXZ8VrUi8bFLU1zFvMNNgb3 zrJwkiE/JDjDRizhgYLaHfKSMN0e+9TuKDxwLXxGyI4DPOwdgH4I/ZYybFAfHpWX c6iUeioKvJOvtk2UQeG7UM/LL/HsrgOxvhFOXTcaqLBecdPy949U92hwAEkYDIZp 0Dh5KszSusDmpxEKYwgrfjXsW/8iIjJ3HwOWFZ1f1fX9g7xcBQOd42vTt+oxCiRv bmMypLFBZ22f0USmNUdLIMa6b1uW9pqJaBrlMCsc7HPii5LZs4DwvJfieXzSWuw8 /tbiaXW++tdAHnO9sR05rAfY16vXuX269voUKBDa56OzwDNssmqo8rA84n39AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUA9A57O4++EZp1fIdvJILUWHB3PAwHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyI3Ny Mloa1XnbSxRHn8NJ9zHCuXhUVxgpWTfAzIRmIIzY0RFZn30fKcOoY7bGULvYgOdQ UGD8WlZaZz2NtRHboqDxyWvQ4vqthXF4iSajHfOUbTRoXywNoGNKsXGZktBXX6x4 /Nh+frJusDTvxGvyoNDuWEItMdSqaPH2P1A5w3pc2fDnY1OAAGB/ngNRiT4wkmLz 9eJ7gWAcc2KdQuhuvbYWKJDUVe2Mr3GSZ0WzXBqSU4M0MzY/2MZNp/a9MjWoijb6 +DjUpfSKpAkpyGED6n80QAL25+lrLAxm6GcpB2WJuzGqEIIg3DYiUfl6EnE0wGGd So+nIbs8f+Y47KYP -----END CERTIFICATE-----Generated at Mon Aug 4 21:37:11 2025 by rpki-client