$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: Mq0PRsFTKqwg5YJwbwHYcqkRo+lR/jFcO67YYcbrUA8= Subject key identifier: F2:60:A3:3E:69:0C:EA:B8:00:8A:2F:EF:02:E5:4F:56:FB:94:CA:94 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 0BF5335FBC83799068CE6C40BC669D8FB69FA88F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 026F Signing time: Tue 05 Aug 2025 05:55:01 +0000 Manifest this update: Tue 05 Aug 2025 05:50:01 +0000 Manifest next update: Wed 06 Aug 2025 06:31:01 +0000 Files and hashes: 1: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: polxJUQuuGvo82QFQvRtgLcGzpMrITqZaH9JMW5PByU=) 2: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) 3: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=) 4: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk=) 5: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg=) 6: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: s8PXZ6xun7QdEzluX2KYTIUVTeLEFzlJ1flicK9iKH8=) 7: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: 7RQ0gXCWkNwXJyLVMAjMT4ifOZKJ140AG/jnIia+kz4=) 8: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=) 9: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 10: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: 17qN8Bd0gWBZvDkn96RHqKMURz1HVyJmOiwn1OSD2G0=) 11: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: A8pzppOSQ97jQ8p9M9dl5hUsFfS0sf1neCq+v2l6G2k=) 12: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=) 13: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=) 14: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 15: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo=) 16: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 17: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 06:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f5:33:5f:bc:83:79:90:68:ce:6c:40:bc:66:9d:8f:b6:9f:a8:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Aug 5 05:50:01 2025 GMT Not After : Aug 6 06:31:01 2025 GMT Subject: CN=F260A33E690CEAB8008A2FEF02E54F56FB94CA94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0c:90:e7:97:0b:cf:eb:c3:35:58:e6:bf:7a: c0:ae:44:0e:5d:fb:a5:2d:6d:e2:03:7c:1e:13:58: ce:44:33:29:08:b8:7c:7b:bd:cc:45:71:38:82:03: 76:42:f3:ec:09:20:70:ff:ae:24:1c:fd:8b:b8:a2: 28:1e:9a:58:ed:2d:7d:39:65:68:73:32:3a:8c:10: 0a:86:0b:03:01:34:f1:2d:99:4b:ee:e5:74:86:7a: ea:06:15:ec:05:88:9e:9b:71:e0:0c:78:19:de:f9: ed:88:9e:ca:58:ec:b3:74:74:ec:de:4b:b9:d9:26: a1:ad:56:c2:17:90:90:34:ea:04:2d:7e:3f:bd:60: 7b:ef:4d:c6:a2:c4:6e:48:38:d2:6a:e4:d9:9b:55: 74:4d:c7:44:8f:c5:08:6d:82:c2:ff:4c:ed:aa:4e: 90:3a:79:58:46:e2:f0:d1:3f:9f:c4:72:33:c0:6e: 59:78:96:81:ad:94:b7:11:fe:e2:39:37:76:41:50: 87:be:35:17:06:4d:6b:4a:66:0f:be:63:42:56:46: b0:fc:55:3b:31:1c:a0:f1:d8:4b:40:35:f3:9f:26: 8a:74:7a:d3:c7:7f:40:89:d6:51:ee:c0:59:03:71: 43:61:e8:ff:45:09:81:44:1f:aa:fa:fa:92:7a:aa: 43:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:60:A3:3E:69:0C:EA:B8:00:8A:2F:EF:02:E5:4F:56:FB:94:CA:94 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:54:b0:da:2d:4e:c4:bc:28:4d:5f:46:2a:12:87:3e:b2:29: 62:b3:3f:2f:a6:bb:98:b3:80:c8:c0:e6:0e:e7:cc:a3:90:57: f9:45:cb:fc:07:c8:2f:4d:1e:46:a2:ad:a9:e1:df:32:5f:77: 58:03:d4:6b:ac:a8:27:b6:56:57:e7:a7:5c:4f:29:7f:5e:db: cb:b0:c8:b4:b4:61:67:bf:fa:ab:6c:00:84:78:f3:c0:0f:f7: 03:ab:28:a6:bc:49:b9:51:cf:b1:c6:dc:e7:6c:a5:6d:0b:0d: 00:39:04:5c:50:fc:cd:70:a4:bc:a9:d0:d6:46:10:cb:f5:87: b8:60:12:03:48:de:2f:b8:64:96:20:89:b2:79:6c:cc:7a:a4: 7e:de:12:26:bb:2a:21:87:3e:d2:f0:e5:f5:2f:d0:ed:18:28: a6:e4:96:ad:6b:f9:86:de:48:36:92:d6:61:3c:26:3f:f4:cd: 0f:78:02:14:d0:53:bf:52:2e:d4:00:51:04:13:90:97:22:8f: 0a:4e:c9:6d:a6:64:fe:df:8b:b3:9e:55:04:3c:9e:04:04:7e: c9:2e:46:65:28:b0:86:f8:02:7a:27:63:44:8d:8b:2b:33:90: bb:b4:33:9d:97:0e:42:40:33:d1:ee:e9:99:7f:9a:9a:ee:64: f7:d8:d8:e8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUC/UzX7yDeZBozmxAvGadj7afqI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNTA4MDUwNTUwMDFaFw0yNTA4MDYwNjMxMDFaMDMxMTAvBgNV BAMTKEYyNjBBMzNFNjkwQ0VBQjgwMDhBMkZFRjAyRTU0RjU2RkI5NENBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8DJDnlwvP68M1WOa/esCuRA5d +6UtbeIDfB4TWM5EMykIuHx7vcxFcTiCA3ZC8+wJIHD/riQc/Yu4oigemljtLX05 ZWhzMjqMEAqGCwMBNPEtmUvu5XSGeuoGFewFiJ6bceAMeBne+e2InspY7LN0dOze S7nZJqGtVsIXkJA06gQtfj+9YHvvTcaixG5IONJq5NmbVXRNx0SPxQhtgsL/TO2q TpA6eVhG4vDRP5/EcjPAbll4loGtlLcR/uI5N3ZBUIe+NRcGTWtKZg++Y0JWRrD8 VTsxHKDx2EtANfOfJop0etPHf0CJ1lHuwFkDcUNh6P9FCYFEH6r6+pJ6qkMjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU8mCjPmkM6rgAii/vAuVPVvuUypQwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBOVLDa LU7EvChNX0YqEoc+silisz8vpruYs4DIwOYO58yjkFf5Rcv8B8gvTR5Goq2p4d8y X3dYA9RrrKgntlZX56dcTyl/XtvLsMi0tGFnv/qrbACEePPAD/cDqyimvEm5Uc+x xtznbKVtCw0AOQRcUPzNcKS8qdDWRhDL9Ye4YBIDSN4vuGSWIImyeWzMeqR+3hIm uyohhz7S8OX1L9DtGCim5Jata/mG3kg2ktZhPCY/9M0PeAIU0FO/Ui7UAFEEE5CX Io8KTsltpmT+34uznlUEPJ4EBH7JLkZlKLCG+AJ6J2NEjYsrM5C7tDOdlw5CQDPR 7umZf5qa7mT32Njo -----END CERTIFICATE-----Generated at Tue Aug 5 16:50:22 2025 by rpki-client