$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: 9RMh8cPUVBej5VKc0ZO6fx1UJ6WLR91Gb42R2JPUQmA= Subject key identifier: 49:E7:46:F8:A9:A2:8A:A1:0E:C4:2B:B5:D0:A0:B5:82:31:0E:7B:3E Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 3DEEA0D04D328BF6A2D218CBD62AD8A64E9C1D3D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 0299 Signing time: Mon 04 Aug 2025 17:47:16 +0000 Manifest this update: Mon 04 Aug 2025 17:42:16 +0000 Manifest next update: Tue 05 Aug 2025 18:08:16 +0000 Files and hashes: 1: 326131343a373538303a393630303a3a2f34302d3438203d3e20313533333736.roa (hash: a3qLcUPi+RQppEqo978zrfnO/2oaV9TKnigMH0wuHZQ=) 2: 326131343a373538303a393130303a3a2f34302d3438203d3e20323031333836.roa (hash: HGfpWKFgSmhSbJJ0S3ZdUrJxu8/156bUgg5vlqYKRis=) 3: 326131343a373538303a393230303a3a2f34302d3438203d3e20313430393135.roa (hash: n6lsjVYHHKKKPmzUm98edFKQEZTX7R3BteBSBE3ZmTg=) 4: 326131343a373538303a393130303a3a2f34302d3438203d3e20323136323939.roa (hash: c4wfh1kOphA8Axvw6+dnj3lAut4b1kpMpQW/rZEnV+o=) 5: 326131343a373538303a393330303a3a2f34302d3438203d3e20323136323939.roa (hash: 0JNkK9KnjI4w2zV41Uw2bLOQhv0TkTdwPhPOAejMVJo=) 6: 326131343a373538303a393030303a3a2f34302d3438203d3e20323134363433.roa (hash: TpBOht4fHdBbgzn8V6oN1sv1lzMWI2nPHKIFH/SJnHk=) 7: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: cFxWp20cVK0UfiJxxcLtUOXevD3OgB7dMefIF5hBHOk=) 8: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: pzIjmZaIeqhfvCHQaVfUDav9Z0YWMzFRWHfJd0/j7wo=) 9: 326131343a373538303a393430303a3a2f33392d3438203d3e20313430393135.roa (hash: mVqYPHXZFgCW00Y2ej0uNLFZlmcciaFr8mPxKhhXZIs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ee:a0:d0:4d:32:8b:f6:a2:d2:18:cb:d6:2a:d8:a6:4e:9c:1d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Aug 4 17:42:16 2025 GMT Not After : Aug 5 18:08:16 2025 GMT Subject: CN=49E746F8A9A28AA10EC42BB5D0A0B582310E7B3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c2:ce:4f:5d:65:4d:0c:f2:84:9b:da:33:d1: 21:ea:9a:48:3a:b3:e6:b4:53:64:5a:04:51:27:6d: be:96:5d:92:3e:9f:0d:2e:33:5b:ef:9f:02:b6:fc: c7:7e:e9:11:c9:4f:9b:31:64:cb:b3:47:fc:76:ca: 48:cc:fe:19:8a:00:27:63:9f:d3:7e:6e:ee:ee:8d: 1b:1a:89:98:8b:86:8b:40:df:1a:46:60:bc:d3:fd: 09:e0:2b:99:87:0e:40:b6:46:37:7b:e8:8e:3a:f9: 01:10:54:1a:5e:27:c5:47:2b:f5:99:f2:45:28:cb: 07:ab:ee:8e:75:62:31:26:a2:fd:57:b9:db:12:b2: d1:aa:1a:6e:e7:65:8f:d4:0f:5a:34:97:a4:4a:64: a1:5c:f7:0f:dc:b4:ef:d8:70:34:6e:63:37:ff:b8: 8a:88:94:ab:61:8c:91:60:7a:82:6c:ba:2d:2f:97: b7:4d:c0:b9:94:b9:25:a7:bb:86:cb:0a:59:d0:c8: d5:9b:05:e7:9a:1c:b3:1d:12:31:d2:ad:d7:a4:6f: 24:2a:2d:43:ce:5f:38:da:c9:5c:12:4f:5f:8a:58: 56:37:80:64:3c:c1:c2:28:9b:87:e7:5a:1b:20:04: 92:0c:a2:45:f4:7e:b1:94:68:a9:27:95:77:68:fd: 61:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E7:46:F8:A9:A2:8A:A1:0E:C4:2B:B5:D0:A0:B5:82:31:0E:7B:3E X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:f0:c5:40:48:92:9c:8b:d4:47:8b:bd:19:bc:ba:ca:4c:a8: 13:b1:18:95:f8:60:60:44:2e:57:61:54:46:b2:63:13:2f:f6: bb:9c:86:01:cf:fd:83:cd:9b:d6:07:4d:4e:3c:02:8b:b1:e1: 3d:f2:a9:c3:33:e1:cc:50:17:c7:b0:e2:30:a3:b4:6b:a6:02: af:c1:9d:16:45:21:1b:f5:bb:b7:63:a8:9a:4c:f4:9f:87:87: b5:f3:9d:a1:03:6f:7f:86:1b:11:8c:3f:34:ac:c1:af:40:d5: 35:9d:26:78:8f:4c:91:76:c6:a0:97:8a:9b:2c:a2:27:b7:a8: c2:cd:98:8a:81:2e:f3:78:90:8b:3f:cf:08:61:44:e0:8f:3b: 07:a9:04:14:3a:a8:1a:c8:03:d6:89:26:69:5c:70:72:5e:e8: 44:77:1f:38:b8:47:06:a1:e3:e3:a5:63:46:b2:ad:bf:ab:7a: 5f:b5:33:0d:68:43:1b:d0:00:8b:28:7d:28:7d:d3:03:41:f8: f9:c0:7a:9d:1f:26:62:94:04:f0:11:b1:fb:b4:bd:ca:55:2c: bf:8d:6e:c7:e4:86:d8:d8:5c:a2:f4:1b:62:23:35:d0:a5:9e: 36:7d:8f:7e:97:17:9d:88:00:e7:74:46:73:33:21:12:d8:0d: 8a:77:d4:c8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPe6g0E0yi/ai0hjL1irYpk6cHT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNTA4MDQxNzQyMTZaFw0yNTA4MDUxODA4MTZaMDMxMTAvBgNV BAMTKDQ5RTc0NkY4QTlBMjhBQTEwRUM0MkJCNUQwQTBCNTgyMzEwRTdCM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxws5PXWVNDPKEm9oz0SHqmkg6 s+a0U2RaBFEnbb6WXZI+nw0uM1vvnwK2/Md+6RHJT5sxZMuzR/x2ykjM/hmKACdj n9N+bu7ujRsaiZiLhotA3xpGYLzT/QngK5mHDkC2Rjd76I46+QEQVBpeJ8VHK/WZ 8kUoywer7o51YjEmov1XudsSstGqGm7nZY/UD1o0l6RKZKFc9w/ctO/YcDRuYzf/ uIqIlKthjJFgeoJsui0vl7dNwLmUuSWnu4bLClnQyNWbBeeaHLMdEjHSrdekbyQq LUPOXzjayVwST1+KWFY3gGQ8wcIom4fnWhsgBJIMokX0frGUaKknlXdo/WFTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUSedG+KmiiqEOxCu10KC1gjEOez4wHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBp8MVA SJKci9RHi70ZvLrKTKgTsRiV+GBgRC5XYVRGsmMTL/a7nIYBz/2DzZvWB01OPAKL seE98qnDM+HMUBfHsOIwo7RrpgKvwZ0WRSEb9bu3Y6iaTPSfh4e1852hA29/hhsR jD80rMGvQNU1nSZ4j0yRdsagl4qbLKInt6jCzZiKgS7zeJCLP88IYUTgjzsHqQQU OqgayAPWiSZpXHByXuhEdx84uEcGoePjpWNGsq2/q3pftTMNaEMb0ACLKH0ofdMD Qfj5wHqdHyZilATwEbH7tL3KVSy/jW7H5IbY2Fyi9BtiIzXQpZ42fY9+lxediADn dEZzMyES2A2Kd9TI -----END CERTIFICATE-----Generated at Mon Aug 4 21:36:44 2025 by rpki-client