$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: jxki1NKjxGqV/u759JOmsK5aunCYClCxI52dE9387do= Subject key identifier: FB:94:75:1F:F4:F4:60:E8:ED:00:08:EC:D1:9C:C9:2D:1A:42:AB:FD Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 4EF6406A3A69366E0F50072A9A47A319D1D6270D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 032E Signing time: Tue 05 Aug 2025 23:42:21 +0000 Manifest this update: Tue 05 Aug 2025 23:37:21 +0000 Manifest next update: Thu 07 Aug 2025 03:34:21 +0000 Files and hashes: 1: 3138352e31332e3232372e302f32342d3234203d3e203533333536.roa (hash: fyjNZl2BnH5gWmJXj7IkwC9hLUY6iDMpaWQ6H8Zs07M=) 2: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: JO9eMRAwPS+hZf1UF8eYFlm1nYrsRkC7Oj1Lhed/bAU=) 3: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: 9QDAlicDZU2dKA/slyHao02LhaPY7/2iCnESN6BbiqA=) 4: 3138352e31332e3232352e302f32342d3234203d3e203631333137.roa (hash: 8TzKoFnFzYaSWN5mBXGHVTu7YevWpqGi2XUkHCPKssM=) 5: 3135392e3235332e322e302f32342d3234203d3e20323031393439.roa (hash: rMlznZEKjgK14Dq61AY4g7iAg2BKRbr2SN8fW4K6f5M=) 6: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (hash: Y4VGjNKxdM1kt8f9/kG9Dub6HzXbG7OXpVqySki/RW4=) 7: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: cKnNLC66X19KWTLeS9BLlyG6jkzxqkdJwZjUWCrZPHc=) 8: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: uV5gP669aq0NtuCXuZBm6wWsNYwP/024H/522nPjCx8=) 9: 3231372e32382e3133382e302f32342d3234203d3e20323039393736.roa (hash: oyOFvRhi/TPEOopsZuEaDpEux2304igP8lMcDVdyDmE=) 10: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: ium02BtB+GfbIHn2YGUt7i7of/NJnXnez2EEtYL+duE=) 11: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: kbUfx2g7/W6xr6BcRBqigrahrWSKqlZaZ80tT5+SQUk=) 12: 3135392e3235332e312e302f32342d3234203d3e20383334.roa (hash: +Cgri0dz3lCclo0MuT04LNn4FtNZlpiIq1+Gu2V5CA8=) 13: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: BBtDiVH6ipkIX53iiQRjvNqx8tbYlJvtD8VMOI40qtE=) 14: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: 8/3XzRXXjmYpSthB/PqRmvioB+R4a98BuFhtWRNYmtk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 03:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f6:40:6a:3a:69:36:6e:0f:50:07:2a:9a:47:a3:19:d1:d6:27:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Aug 5 23:37:21 2025 GMT Not After : Aug 7 03:34:21 2025 GMT Subject: CN=FB94751FF4F460E8ED0008ECD19CC92D1A42ABFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:77:c7:79:b1:79:e6:35:af:cd:24:65:85:8d: d8:4f:3b:ac:77:7b:fb:a6:b5:41:2e:53:dc:56:f0: 21:92:75:41:47:24:cb:6e:81:a3:ef:58:c6:b9:02: 6f:3c:00:89:1f:48:a7:c5:d6:9c:8d:25:ae:3e:68: fb:d5:32:f0:8e:53:cc:63:61:58:b7:60:8a:2d:9d: 21:97:b5:75:52:ca:8d:92:b2:94:00:e9:4c:71:13: 8a:09:40:1e:b6:fa:e6:fa:62:fe:22:c9:62:c3:fe: d8:75:75:80:57:2e:f4:bc:29:da:12:80:bc:08:43: 8f:21:20:20:83:fd:6d:3f:fc:e1:ed:5d:40:83:fa: d4:07:d3:78:41:19:13:9f:5e:50:da:02:aa:4f:2e: 1e:7b:3c:5c:1b:2a:1e:e1:af:74:81:c8:db:07:6e: bc:fc:7d:f1:40:ab:e0:49:66:4c:8f:10:9d:67:a7: 7c:84:ea:4b:df:43:ec:8c:89:3e:8c:ec:42:7b:93: f0:bd:04:00:53:07:29:b7:09:76:18:98:b2:a0:e9: 3c:4d:5a:f8:6c:8a:d6:42:b1:e4:8b:7c:b8:df:18: 2e:01:85:bf:a9:66:fd:db:09:3b:2c:b1:8b:26:32: 23:7e:62:8f:44:b5:98:cc:43:74:28:71:bb:67:a4: c5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:94:75:1F:F4:F4:60:E8:ED:00:08:EC:D1:9C:C9:2D:1A:42:AB:FD X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:d3:da:97:23:b4:33:7c:ba:30:61:d7:54:53:60:d0:d5:cb: 0b:27:48:c5:d3:ad:ea:72:8b:a9:ef:af:45:df:18:c5:3e:71: b7:f1:b4:32:cb:da:78:8e:8d:8f:ec:84:68:56:30:c7:e8:56: 0e:a0:7e:4d:46:1c:b2:43:eb:72:cf:af:52:cd:2c:9c:ec:98: b2:a6:4a:e8:1d:cf:a8:b0:d3:58:85:ce:b8:0a:ae:52:2f:01: 6e:32:58:e3:1a:0e:dd:ac:6b:09:5a:ae:7a:5e:ca:f8:7d:8b: 3c:63:29:38:66:c1:bf:83:88:75:4e:67:e6:6f:7b:94:bb:48: c2:50:4c:cc:12:cf:2b:bf:6f:7a:1a:29:08:ba:9b:5d:3d:37: db:84:f8:ca:27:e4:3f:66:b6:09:4b:9c:89:2b:45:dc:6b:62: 8f:a8:39:dd:7c:89:6f:06:4e:03:d3:4d:fd:17:17:f2:19:35: 95:9d:8b:8d:f8:5a:e3:56:5a:65:85:f1:c4:79:b8:5e:8e:d2: f8:bc:ad:4f:15:17:8f:b2:55:34:62:40:a7:70:80:9f:c7:9d: 4a:bd:bd:9c:6c:9a:a3:16:ac:bb:f4:f2:35:0d:91:a6:15:a8: 51:2b:3b:13:ce:3d:aa:b7:ed:dc:7b:75:51:97:b3:5b:a3:a6: 52:f7:ad:9e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTvZAajppNm4PUAcqmkejGdHWJw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNTA4MDUyMzM3MjFaFw0yNTA4MDcwMzM0MjFaMDMxMTAvBgNV BAMTKEZCOTQ3NTFGRjRGNDYwRThFRDAwMDhFQ0QxOUNDOTJEMUE0MkFCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpd8d5sXnmNa/NJGWFjdhPO6x3 e/umtUEuU9xW8CGSdUFHJMtugaPvWMa5Am88AIkfSKfF1pyNJa4+aPvVMvCOU8xj YVi3YIotnSGXtXVSyo2SspQA6UxxE4oJQB62+ub6Yv4iyWLD/th1dYBXLvS8KdoS gLwIQ48hICCD/W0//OHtXUCD+tQH03hBGROfXlDaAqpPLh57PFwbKh7hr3SByNsH brz8ffFAq+BJZkyPEJ1np3yE6kvfQ+yMiT6M7EJ7k/C9BABTBym3CXYYmLKg6TxN WvhsitZCseSLfLjfGC4Bhb+pZv3bCTsssYsmMiN+Yo9EtZjMQ3QocbtnpMUtAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+5R1H/T0YOjtAAjs0ZzJLRpCq/0wHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9PalyO0M3y6MGHXVFNg 0NXLCydIxdOt6nKLqe+vRd8YxT5xt/G0MsvaeI6Nj+yEaFYwx+hWDqB+TUYcskPr cs+vUs0snOyYsqZK6B3PqLDTWIXOuAquUi8BbjJY4xoO3axrCVquel7K+H2LPGMp OGbBv4OIdU5n5m97lLtIwlBMzBLPK79vehopCLqbXT0324T4yifkP2a2CUuciStF 3Gtij6g53XyJbwZOA9NN/RcX8hk1lZ2Ljfha41ZaZYXxxHm4Xo7S+LytTxUXj7JV NGJAp3CAn8edSr29nGyaoxasu/TyNQ2RphWoUSs7E849qrft3Ht1UZezW6OmUvet ng== -----END CERTIFICATE-----Generated at Wed Aug 6 12:28:01 2025 by rpki-client