$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: +XiY7WjpDcoKWWBu2nghiqRHa+B5hg/O+1Ak89Uhmbs= Subject key identifier: 29:20:67:F8:C4:B4:2A:A3:EA:ED:B3:47:CC:12:8D:4D:21:B7:03:9E Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 73CFCD854764397DB5F87FFF270D84F1D2437861 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 0255 Signing time: Sun 15 Jun 2025 03:05:14 +0000 Manifest this update: Sun 15 Jun 2025 03:00:14 +0000 Manifest next update: Mon 16 Jun 2025 03:51:14 +0000 Files and hashes: 1: 326131343a373538303a393130303a3a2f34302d3438203d3e20323136323939.roa (hash: c4wfh1kOphA8Axvw6+dnj3lAut4b1kpMpQW/rZEnV+o=) 2: 326131343a373538303a393030303a3a2f34302d3438203d3e20323134363433.roa (hash: TpBOht4fHdBbgzn8V6oN1sv1lzMWI2nPHKIFH/SJnHk=) 3: 326131343a373538303a393330303a3a2f34302d3438203d3e20323136323939.roa (hash: 0JNkK9KnjI4w2zV41Uw2bLOQhv0TkTdwPhPOAejMVJo=) 4: 326131343a373538313a653030303a3a2f33362d3438203d3e20323134363433.roa (hash: x9Ws2a9hchs2I1MVNTnPpvnZFWRirIvQpeIuGTe39hw=) 5: 326131343a373538303a393630303a3a2f34302d3438203d3e20313533333736.roa (hash: a3qLcUPi+RQppEqo978zrfnO/2oaV9TKnigMH0wuHZQ=) 6: 326131343a373538303a393230303a3a2f34302d3438203d3e20313430393135.roa (hash: n6lsjVYHHKKKPmzUm98edFKQEZTX7R3BteBSBE3ZmTg=) 7: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: rriSW/6AL7i/Ubw+JKW4C8zh9cmGv9kyzDoYBVwSrdw=) 8: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: cFxWp20cVK0UfiJxxcLtUOXevD3OgB7dMefIF5hBHOk=) 9: 326131343a373538303a393430303a3a2f33392d3438203d3e20313430393135.roa (hash: mVqYPHXZFgCW00Y2ej0uNLFZlmcciaFr8mPxKhhXZIs=) 10: 326131343a373538303a393130303a3a2f34302d3438203d3e20323031333836.roa (hash: HGfpWKFgSmhSbJJ0S3ZdUrJxu8/156bUgg5vlqYKRis=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 16:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:cf:cd:85:47:64:39:7d:b5:f8:7f:ff:27:0d:84:f1:d2:43:78:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Jun 15 03:00:14 2025 GMT Not After : Jun 16 03:51:14 2025 GMT Subject: CN=292067F8C4B42AA3EAEDB347CC128D4D21B7039E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ad:87:57:52:95:b3:12:5c:56:2f:02:8b:6a: 26:06:86:c0:86:d0:bb:67:85:00:15:d0:85:27:89: 65:07:4e:cf:d9:55:b1:3b:9e:66:89:e2:2d:3e:1f: ae:9d:0b:9c:e2:1b:61:0a:56:17:e4:16:30:e3:af: 82:e6:04:7c:ad:71:12:88:4d:94:dd:53:03:ec:9b: 5b:79:33:dd:37:c2:15:6f:e1:b3:d4:ff:de:7c:33: 87:3e:c4:08:9f:d1:ee:08:cc:2c:81:48:3f:d3:49: 63:37:b1:5a:6d:6f:d0:e2:d1:3a:18:85:cc:fd:b4: 9c:d6:37:e2:a4:60:03:b5:12:40:b8:bc:0b:8b:7e: 6b:63:84:3e:64:a5:52:8e:eb:ce:98:18:4c:0b:9b: 44:3d:82:9c:a3:dc:70:f6:66:39:44:3a:f9:98:86: 24:30:ab:cf:0a:18:87:b2:5a:1e:59:02:64:e1:81: cc:52:47:4b:b9:21:a3:28:91:75:96:cb:c3:a8:50: 57:35:38:bb:10:86:8b:43:18:64:93:9e:91:6a:f5: b7:c9:91:51:98:15:98:11:ad:cf:3e:76:8f:09:e5: 4c:36:7e:30:9c:d5:e2:20:9b:e2:b1:fc:f2:37:b4: b6:b8:6e:3a:4f:fb:33:19:43:04:7f:99:b3:11:49: d6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:20:67:F8:C4:B4:2A:A3:EA:ED:B3:47:CC:12:8D:4D:21:B7:03:9E X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:1e:2d:14:cc:f7:8e:ae:c5:57:2e:66:7a:ca:e1:c6:88:c9: 9f:66:79:e5:1a:f8:8d:96:e5:88:2d:ce:9e:31:06:7f:87:5a: bf:ec:af:c0:ce:15:74:6a:e9:d2:66:7a:3b:c0:60:56:66:34: 9f:61:10:0a:f3:d0:ad:b3:42:02:a2:8d:f5:85:69:5e:eb:83: 65:6b:26:4e:b5:24:2b:78:c3:80:44:44:7a:32:01:19:05:1f: 43:fa:ca:6a:78:c5:81:8a:df:30:72:03:7e:45:18:55:d2:08: 25:09:2c:be:4c:aa:b2:57:fe:ba:09:2d:4e:12:86:a1:4c:af: d8:3c:e1:33:6c:e4:9d:60:b9:ad:12:89:6d:b8:3b:76:05:15: 46:d2:c8:81:71:4b:72:2a:c1:77:9a:60:f8:b4:75:df:ab:61: 68:bd:fe:53:04:97:d5:9f:8a:1c:c3:c3:16:92:49:61:09:df: 3e:60:63:d2:42:55:ba:2f:48:4f:2b:1b:16:dd:f6:86:0a:e3: 2f:f3:03:15:c3:10:8a:23:42:21:2d:23:b8:f0:c3:5b:1f:a4: 16:f9:e1:d3:36:f3:5f:0f:52:d4:ee:17:fe:5a:8e:75:56:36: 4e:3a:45:45:4f:ee:c4:2c:8b:e7:90:51:a6:f7:8a:0e:d5:5a: a9:ba:3d:2a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUc8/NhUdkOX21+H//Jw2E8dJDeGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNTA2MTUwMzAwMTRaFw0yNTA2MTYwMzUxMTRaMDMxMTAvBgNV BAMTKDI5MjA2N0Y4QzRCNDJBQTNFQUVEQjM0N0NDMTI4RDREMjFCNzAzOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZrYdXUpWzElxWLwKLaiYGhsCG 0LtnhQAV0IUniWUHTs/ZVbE7nmaJ4i0+H66dC5ziG2EKVhfkFjDjr4LmBHytcRKI TZTdUwPsm1t5M903whVv4bPU/958M4c+xAif0e4IzCyBSD/TSWM3sVptb9Di0ToY hcz9tJzWN+KkYAO1EkC4vAuLfmtjhD5kpVKO686YGEwLm0Q9gpyj3HD2ZjlEOvmY hiQwq88KGIeyWh5ZAmThgcxSR0u5IaMokXWWy8OoUFc1OLsQhotDGGSTnpFq9bfJ kVGYFZgRrc8+do8J5Uw2fjCc1eIgm+Kx/PI3tLa4bjpP+zMZQwR/mbMRSdZ7AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUKSBn+MS0KqPq7bNHzBKNTSG3A54wHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkHi0U zPeOrsVXLmZ6yuHGiMmfZnnlGviNluWILc6eMQZ/h1q/7K/AzhV0aunSZno7wGBW ZjSfYRAK89Cts0ICoo31hWle64NlayZOtSQreMOARER6MgEZBR9D+spqeMWBit8w cgN+RRhV0gglCSy+TKqyV/66CS1OEoahTK/YPOEzbOSdYLmtEoltuDt2BRVG0siB cUtyKsF3mmD4tHXfq2Fovf5TBJfVn4ocw8MWkklhCd8+YGPSQlW6L0hPKxsW3faG CuMv8wMVwxCKI0IhLSO48MNbH6QW+eHTNvNfD1LU7hf+Wo51VjZOOkVFT+7ELIvn kFGm94oO1Vqpuj0q -----END CERTIFICATE-----Generated at Sun Jun 15 08:53:02 2025 by rpki-client