$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft File: 090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft (raw, json) Hash identifier: 8ypi8ys7upTQ39mHsZkFdB54DiOGUjiFXLr74Ylg+T0= Subject key identifier: 8B:D7:86:3D:55:9B:3E:91:EB:B3:78:F7:48:F7:53:06:D5:1B:C4:1E Authority key identifier: 09:0F:FD:E4:0B:60:29:CD:7F:E3:1A:6E:DB:46:7E:1A:53:84:B1:E1 Certificate issuer: /CN=090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1 Certificate serial: 77880D3DCE5CCB617E5227ECDC2E7D3EF71048EE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft Manifest number: 031A Signing time: Wed 18 Jun 2025 20:14:08 +0000 Manifest this update: Wed 18 Jun 2025 20:09:08 +0000 Manifest next update: Thu 19 Jun 2025 22:52:08 +0000 Files and hashes: 1: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: /6TLbLr5yUGE6+8nz6p2on3lwleCpU2rYt4G5JE9rDk=) 2: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: QnZhS/jyMu2GcYAJct7dnCIK9fFoWaGlnE/9lHFVCZk=) 3: 090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl (hash: ZRN/bqVVvgJJrKjAZNb7Y5fzR65IvSlovmjNu2UPCuw=) 4: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: q03Pj7BB4FvQqVgWTNPLCqf6FWIvUGBqto+KCXVBKFQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Jun 2025 21:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:88:0d:3d:ce:5c:cb:61:7e:52:27:ec:dc:2e:7d:3e:f7:10:48:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1 Validity Not Before: Jun 18 20:09:08 2025 GMT Not After : Jun 19 22:52:08 2025 GMT Subject: CN=8BD7863D559B3E91EBB378F748F75306D51BC41E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:53:bb:7b:cb:35:f9:1b:ec:61:e6:3b:3f:b5: 2c:c3:5c:66:6e:83:38:9a:a8:4f:8d:8d:3a:fb:06: 19:3a:0e:d2:f8:09:2a:c1:d1:2a:41:7a:12:ce:f9: e2:01:15:19:d1:cd:3a:c6:21:b2:23:01:34:07:da: 65:8f:26:9f:68:05:53:35:7a:8c:44:40:39:58:34: 81:01:1e:55:6f:fb:03:5a:ac:ab:f3:c1:56:b3:ed: c0:58:4d:18:2a:aa:6f:e0:d4:dd:bb:71:ab:6d:0d: d5:65:b6:b6:d6:be:90:13:6b:37:4b:c7:eb:f1:a2: 58:ae:66:44:b6:45:c9:f1:d0:55:bd:21:d3:e6:bc: d9:d9:c3:25:50:7c:ea:70:67:d2:76:87:c7:3b:68: 4c:83:97:04:81:eb:44:b0:83:c3:52:55:c7:86:15: 63:71:6f:0e:31:f5:24:2d:a5:20:18:0a:94:94:39: 7c:ad:45:16:cb:c4:99:26:05:e5:4c:d9:fe:a0:e1: 30:b2:a8:a4:8b:e0:d2:f9:f7:3a:7c:54:72:3e:39: ef:e4:80:a2:e5:eb:08:74:55:66:d6:44:83:a1:8e: 5b:41:e9:0c:8f:2a:60:37:c6:a6:21:bb:7a:32:59: 85:8e:04:58:f7:84:55:35:d3:4d:7d:d9:04:53:dc: 22:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D7:86:3D:55:9B:3E:91:EB:B3:78:F7:48:F7:53:06:D5:1B:C4:1E X509v3 Authority Key Identifier: keyid:09:0F:FD:E4:0B:60:29:CD:7F:E3:1A:6E:DB:46:7E:1A:53:84:B1:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:7a:8a:9d:32:ca:71:57:c8:67:90:fa:59:35:b8:0a:bf:53: aa:0b:92:56:2f:91:89:c9:ec:b2:67:65:07:3c:31:7a:e7:c6: 02:de:5b:eb:bd:32:26:50:ac:26:4b:ee:e9:f8:83:c8:a7:34: 79:eb:25:57:15:90:64:3c:db:e0:4b:df:bf:32:48:ff:54:ef: de:61:ff:24:57:09:b1:9f:72:55:62:0b:cd:a5:83:25:c4:b3: b5:5b:72:cd:a5:46:98:a1:9b:42:1e:d2:6e:13:0e:54:3b:c0: 4c:53:1a:13:6f:2e:6b:93:82:85:99:04:d6:44:f7:61:29:bb: 31:ff:d5:79:95:db:28:6a:9d:60:40:66:91:f4:ba:c9:5d:04: 8a:c5:96:d0:9c:01:3f:4f:44:20:dc:62:c7:a3:85:79:9d:ce: 43:97:56:fa:2e:94:69:ed:df:1e:53:44:19:3f:28:70:9e:73: e9:75:a6:41:62:53:3a:3e:63:a7:d8:db:f9:b3:f6:26:ba:ec: 01:46:04:83:b0:ff:90:37:d1:12:40:50:85:8b:be:90:e3:38: 7a:9a:88:c9:1f:24:0f:1d:13:c5:9c:c3:bd:6c:75:ae:fa:4c: 46:96:19:c4:1d:00:63:38:ef:b2:12:fd:17:ae:64:3f:60:e3: 12:8a:6b:b3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUd4gNPc5cy2F+Uifs3C59PvcQSO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkwRkZERTQwQjYwMjlDRDdGRTMxQTZFREI0NjdFMUE1 Mzg0QjFFMTAeFw0yNTA2MTgyMDA5MDhaFw0yNTA2MTkyMjUyMDhaMDMxMTAvBgNV BAMTKDhCRDc4NjNENTU5QjNFOTFFQkIzNzhGNzQ4Rjc1MzA2RDUxQkM0MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtU7t7yzX5G+xh5js/tSzDXGZu gziaqE+NjTr7Bhk6DtL4CSrB0SpBehLO+eIBFRnRzTrGIbIjATQH2mWPJp9oBVM1 eoxEQDlYNIEBHlVv+wNarKvzwVaz7cBYTRgqqm/g1N27cattDdVltrbWvpATazdL x+vxoliuZkS2Rcnx0FW9IdPmvNnZwyVQfOpwZ9J2h8c7aEyDlwSB60Swg8NSVceG FWNxbw4x9SQtpSAYCpSUOXytRRbLxJkmBeVM2f6g4TCyqKSL4NL59zp8VHI+Oe/k gKLl6wh0VWbWRIOhjltB6QyPKmA3xqYhu3oyWYWOBFj3hFU100192QRT3CJRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUi9eGPVWbPpHrs3j3SPdTBtUbxB4wHwYDVR0j BBgwFoAUCQ/95AtgKc1/4xpu20Z+GlOEseEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzUvMDkwRkZERTQwQjYwMjlDRDdGRTMxQTZFREI0NjdFMUE1Mzg0QjFFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC8wOTBGRkRFNDBCNjAyOUNEN0ZFMzFBNkVE QjQ2N0UxQTUzODRCMUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC81LzA5MEZGREU0 MEI2MDI5Q0Q3RkUzMUE2RURCNDY3RTFBNTM4NEIxRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAOeoqd MspxV8hnkPpZNbgKv1OqC5JWL5GJyeyyZ2UHPDF658YC3lvrvTImUKwmS+7p+IPI pzR56yVXFZBkPNvgS9+/Mkj/VO/eYf8kVwmxn3JVYgvNpYMlxLO1W3LNpUaYoZtC HtJuEw5UO8BMUxoTby5rk4KFmQTWRPdhKbsx/9V5ldsoap1gQGaR9LrJXQSKxZbQ nAE/T0Qg3GLHo4V5nc5Dl1b6LpRp7d8eU0QZPyhwnnPpdaZBYlM6PmOn2Nv5s/Ym uuwBRgSDsP+QN9ESQFCFi76Q4zh6mojJHyQPHRPFnMO9bHWu+kxGlhnEHQBjOO+y Ev0XrmQ/YOMSimuz -----END CERTIFICATE-----Generated at Thu Jun 19 11:05:38 2025 by rpki-client