$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json) Hash identifier: rfX/AuLzONUImNxfDsDDz85B/seyVleJSSbm9LRPGZw= Subject key identifier: 31:A7:CA:18:51:D0:00:2B:21:DF:C5:DF:4E:F2:38:FD:6C:C3:C4:D6 Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Certificate serial: 1B25B0020B9D0332A51C1B4F7E7160C6C20B39E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft Manifest number: 0113 Signing time: Mon 04 Aug 2025 04:34:16 +0000 Manifest this update: Mon 04 Aug 2025 04:29:16 +0000 Manifest next update: Tue 05 Aug 2025 04:56:16 +0000 Files and hashes: 1: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: e6DNGKmUmYh4KhA4h67tF7nM55oym+8oQ84yYdEmy64=) 2: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: RPFyh+9f4VeLKwhSKFsibkww2V1WrimAJUdSq1OTL10=) 3: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: rQvL6z8yuqUS7v24/Ra9en3S8KmIgkMtv1rcn8o1sfA=) 4: AS215248.asa (hash: pTUqZS2x9dQUc74NpwgDLC9vX7t70r7B83USY00u86o=) 5: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: RQOZ0GeuB2hc8N96mezhBhXKeCrh7X17R4TSsdmASyE=) 6: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: +yFHbjFdcl3OkH9bM82B/wbQvRBlEBGqJ0LTOyulC0Q=) 7: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: aQBGW4UwEpZw1viUGTiicR7R7bF3eHxKluau3FSxHVQ=) 8: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: izH2bRAdoHB65ZOfP1RgM/881EkkTABDPPywFSiQ9f4=) 9: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: M972A2zux5bp2vtM/yV/ifXNBlJMRB7g6qDIDzpgNsU=) 10: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: hYvWm7RFlZS1l2LX8NsvpkNf0MsxvPiQn7slmgwssck=) 11: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: b3AvMY9Sl1B0jVsJOJivHhqGlksNlQ/JV9muHKrGSGQ=) 12: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: MMA7GdmcsuDkvFHzTAo3I0uOxg7huvldcc64dpF42k4=) 13: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: hT2vS1KxZCIrrbIeX36lXo5PB7z3bFiXrMszQcpSghE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 04:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:25:b0:02:0b:9d:03:32:a5:1c:1b:4f:7e:71:60:c6:c2:0b:39:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Validity Not Before: Aug 4 04:29:16 2025 GMT Not After : Aug 5 04:56:16 2025 GMT Subject: CN=31A7CA1851D0002B21DFC5DF4EF238FD6CC3C4D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3f:20:ca:c9:4a:8e:22:2e:f3:a3:ef:61:a4: 0f:21:62:40:88:42:9e:29:eb:0a:1e:5e:68:56:5f: 0f:71:da:ce:6f:31:98:3d:f6:24:5e:e5:47:7b:e2: db:a2:70:09:43:0f:a5:7d:94:9a:7a:fd:4b:9a:bf: 36:e0:6f:87:e4:f8:0a:3b:1d:fd:df:dc:67:54:01: 12:81:7f:52:13:0c:d3:63:b5:1e:e0:fc:1d:66:42: f3:fd:73:1b:35:fe:10:8b:5d:18:ed:06:ee:a5:da: f3:73:83:ff:56:c0:d2:ea:fb:9c:1a:76:db:5b:6c: a3:7c:ef:c1:7a:4f:39:1a:fb:d7:4f:d7:e3:0f:aa: 57:30:72:0d:10:71:0d:d9:ef:41:98:e8:c2:27:78: f1:70:7f:ff:79:61:74:42:1d:c6:6b:ca:ab:4d:4c: d2:49:1c:30:f0:77:63:df:88:40:3f:4e:3a:4c:80: b5:f1:2d:78:1c:c8:26:a0:10:c6:71:68:97:7f:69: 57:ea:f7:76:f8:2c:ec:cf:69:48:ef:ed:98:d1:bb: 4b:9c:75:14:d8:a1:d4:ef:ff:95:a6:30:23:74:21: e1:97:cd:87:37:bd:d7:b0:c9:ae:84:b4:d1:47:17: 28:4a:9b:96:a8:1c:56:cd:82:89:98:be:d8:c0:dc: 02:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A7:CA:18:51:D0:00:2B:21:DF:C5:DF:4E:F2:38:FD:6C:C3:C4:D6 X509v3 Authority Key Identifier: keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8f:26:28:6c:42:e5:36:4a:a6:55:cd:80:c9:ac:19:2a:4f: 14:bc:22:e8:e1:8c:9a:41:9a:d3:d0:3c:fc:e8:53:32:7c:78: 5e:4b:19:10:26:f6:a4:59:9c:82:10:4a:a1:07:06:cf:ea:01: 5e:09:d7:e7:34:31:07:48:76:4a:fa:62:ef:5b:f7:83:5b:95: 1b:16:d2:c5:7d:c6:a4:f6:90:38:56:3f:0c:15:01:61:71:65: a4:93:91:0f:54:4b:a5:5a:ee:ce:af:28:93:91:09:6f:59:56: 3e:0d:11:ba:80:36:6c:7b:67:35:f4:02:86:2c:15:aa:72:ef: 4f:d2:a0:98:65:49:b0:e8:ff:51:e2:c7:e8:30:42:a5:64:2c: 19:b8:e1:7b:65:ea:5c:a3:f2:d2:57:46:15:8b:47:e3:c0:5f: ef:75:c2:47:73:06:67:e4:bc:30:7d:d1:fa:c7:03:e2:72:88: 98:42:3d:ac:72:95:87:09:d9:ba:4a:55:fa:6e:2e:f9:62:5f: a1:4d:2d:b0:f9:05:b9:4f:b9:71:9e:e3:a7:d5:3c:40:7d:00: ca:53:78:96:50:9a:b2:ed:f5:ba:c8:5f:02:91:20:13:77:f0: 70:f8:66:62:1e:ab:8b:a8:02:ca:c7:86:b8:10:94:ab:4c:70: 91:8d:0c:50 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGyWwAgudAzKlHBtPfnFgxsILOegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3 ZTc5N2I2ODAeFw0yNTA4MDQwNDI5MTZaFw0yNTA4MDUwNDU2MTZaMDMxMTAvBgNV BAMTKDMxQTdDQTE4NTFEMDAwMkIyMURGQzVERjRFRjIzOEZENkNDM0M0RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtPyDKyUqOIi7zo+9hpA8hYkCI Qp4p6woeXmhWXw9x2s5vMZg99iRe5Ud74tuicAlDD6V9lJp6/Uuavzbgb4fk+Ao7 Hf3f3GdUARKBf1ITDNNjtR7g/B1mQvP9cxs1/hCLXRjtBu6l2vNzg/9WwNLq+5wa dttbbKN878F6Tzka+9dP1+MPqlcwcg0QcQ3Z70GY6MInePFwf/95YXRCHcZryqtN TNJJHDDwd2PfiEA/TjpMgLXxLXgcyCagEMZxaJd/aVfq93b4LOzPaUjv7ZjRu0uc dRTYodTv/5WmMCN0IeGXzYc3vdewya6EtNFHFyhKm5aoHFbNgomYvtjA3AKdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUMafKGFHQACsh38XfTvI4/WzDxNYwHwYDVR0j BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1 NWUyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZDE5ZGIyMC00 NjUzLTQ4ZDQtOGZjNC01ODBkMTM2OWI3YzQvMC81Q0RDMDRCQjIzRUFBNENFQ0M3 OTFERkUwNEJCMDI4QjdFNzk3QjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjY8mKGxC5TZKplXNgMms GSpPFLwi6OGMmkGa09A8/OhTMnx4XksZECb2pFmcghBKoQcGz+oBXgnX5zQxB0h2 Svpi71v3g1uVGxbSxX3GpPaQOFY/DBUBYXFlpJORD1RLpVruzq8ok5EJb1lWPg0R uoA2bHtnNfQChiwVqnLvT9KgmGVJsOj/UeLH6DBCpWQsGbjhe2XqXKPy0ldGFYtH 48Bf73XCR3MGZ+S8MH3R+scD4nKImEI9rHKVhwnZukpV+m4u+WJfoU0tsPkFuU+5 cZ7jp9U8QH0AylN4llCasu31ushfApEgE3fwcPhmYh6ri6gCyseGuBCUq0xwkY0M UA== -----END CERTIFICATE-----Generated at Mon Aug 4 16:02:12 2025 by rpki-client