$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft File: F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft (raw, json) Hash identifier: TMOPsQyLmpoynNjAvW831W8MrgqT5FZeBzeBBFHx7E4= Subject key identifier: 98:C0:ED:F1:F2:AD:93:83:81:93:DF:35:3C:CF:33:6F:28:A5:EC:9A Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace Certificate serial: 47F1C28CFEEAB50496BCE20DBF90A771C2DFA7FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft Manifest number: 020D Signing time: Sun 03 Aug 2025 22:06:33 +0000 Manifest this update: Sun 03 Aug 2025 22:01:33 +0000 Manifest next update: Tue 05 Aug 2025 00:12:33 +0000 Files and hashes: 1: 326131333a393634323a3130303a3a2f34382d3438203d3e203438323830.roa (hash: j84/Fm1nc/JJrf9h3dAaKkat+XV/si7APTv6iSnl64I=) 2: 326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa (hash: 894RTKAEh4ciZZOdefpuTBSaNDM2TQpQSdGle6pgy08=) 3: 326131333a393634343a343030303a3a2f34302d3438203d3e203133333335.roa (hash: 8/2mbGbaC4ennlzI7y1e8hUNr9fsr7Pr+/K69/OYKQg=) 4: 326131333a393634343a343030303a3a2f34302d3438203d3e20323034323931.roa (hash: OXH7kpuguUKmKnwoouN0IGAOMj3E/W/ffH2kJO7vbOY=) 5: 39312e3230372e31332e302f32342d3234203d3e203532313132.roa (hash: +JU+ydXmMjIBHlt1kVXfkJBGqdmH1ATfk8PRfe8t4Rc=) 6: 326131333a393634343a34303a3a2f34342d3438203d3e20323131343331.roa (hash: UQpEpactphMaN3i4tpyR5s9Tmz685dUuNs8hSuG0cJQ=) 7: 326131333a393634343a34303a3a2f34342d3438203d3e20323136333336.roa (hash: lNHaIlVxi/lYCx53I3+MfwePjUfRoiP0WtejKnMjprU=) 8: F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl (hash: Kc4y3d/YKuYcSWT1Xpd14g+2CWu1i3zLrRXplXXqOsc=) 9: 326131333a393634303a3a2f34342d3434203d3e203532313132.roa (hash: DOR1Pt3ct68s+ey18ZghPrs5rAUoZlIbwxjvP68BE+k=) 10: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer (hash: Nz2k0o2IS41o55idTp4HvK3uNxIMYgMNKvrr57G+kIE=) 11: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer (hash: nYcdq/fifitjvFyPoNBEJvUP1WGfqAJvzv/Dj2Iivv0=) 12: 326131333a393634343a31303a3a2f34362d3438203d3e203438313934.roa (hash: WOAaZY65k+/GoeKbXXymPrZVu7CfbDlQvCXqyS0ZjLA=) 13: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: e3gM8xBShVESXc8MaKIMDq1iDa8wjJWbHPjdOfhPuFQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 18:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f1:c2:8c:fe:ea:b5:04:96:bc:e2:0d:bf:90:a7:71:c2:df:a7:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace Validity Not Before: Aug 3 22:01:33 2025 GMT Not After : Aug 5 00:12:33 2025 GMT Subject: CN=98C0EDF1F2AD93838193DF353CCF336F28A5EC9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:ba:12:55:fe:7d:b5:5a:23:95:3b:0d:44:4b: 97:7e:8f:2a:e0:bd:e7:da:34:c2:b2:13:c0:df:01: 0d:b6:3d:72:d6:7b:25:8b:68:38:e9:56:37:a0:ed: ad:4e:a2:c9:c7:6d:d9:ac:77:e7:f4:84:a1:86:58: 79:9a:32:6c:1b:d2:70:05:91:27:ce:74:ac:5e:ef: 6c:94:3c:d7:6e:2a:17:d8:40:3b:6d:40:31:18:8d: 4b:f9:99:6f:79:36:4b:cf:6a:0e:32:f0:2b:b9:71: cc:61:5e:a7:ae:62:06:e7:ac:c2:0b:34:db:51:d0: ff:94:d2:9b:f2:7c:87:3c:23:fe:7c:c9:de:7b:4f: 28:71:fe:c6:ab:46:f5:0f:c7:7b:25:98:06:96:38: 49:a5:f0:fa:68:01:04:68:47:d9:28:b4:07:f2:fa: da:42:ed:f9:7e:59:f1:3d:f9:a8:53:10:4b:a5:28: 67:78:70:d1:3d:ea:99:2f:e5:8c:65:c2:56:21:69: e7:83:41:70:62:0c:79:1a:43:71:fd:70:1f:aa:82: 7b:2b:13:ae:78:29:64:58:e8:9f:5e:9d:79:ac:99: cd:e5:b3:7d:e3:39:70:d5:4f:ed:b5:fd:f7:ab:00: d7:32:88:ae:59:c9:4c:b1:60:02:42:82:57:dc:f8: 7e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C0:ED:F1:F2:AD:93:83:81:93:DF:35:3C:CF:33:6F:28:A5:EC:9A X509v3 Authority Key Identifier: keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:be:c7:80:58:b5:44:3d:10:05:95:98:aa:ce:70:da:6d:01: e9:9c:38:46:67:33:9b:d8:79:f7:4d:bd:56:28:82:89:18:fe: 42:92:7c:04:d6:2f:d1:3a:18:27:8b:a1:cf:22:4c:6b:5d:28: 79:3f:f1:53:14:dc:fe:02:e4:24:95:bb:af:6e:17:95:1f:3f: 34:4f:56:fc:39:a3:0a:f5:91:44:f8:35:0f:26:c9:0f:9d:56: f5:41:0c:a9:59:7b:50:d5:fa:ae:4b:10:7e:63:82:1d:bd:09: 74:22:22:5f:d2:1b:82:a9:75:cb:8f:4f:f6:a9:31:f4:f9:95: 7b:ed:96:89:16:27:53:a6:c7:72:41:07:f9:6c:2c:11:14:ad: 0b:b2:cc:e6:44:81:a7:cc:df:a4:36:07:b2:5b:52:b7:59:3b: fd:b5:76:97:f6:40:84:ec:b1:e9:22:e2:29:7c:99:1b:10:6b: c1:b1:96:80:be:a3:65:8a:4e:4a:39:1e:0f:bb:d0:9f:a3:71: 47:fd:46:d7:9c:3c:92:33:70:14:5a:90:00:6d:16:d4:dc:10: d8:95:f4:79:55:0a:1e:96:48:f3:f4:25:cf:15:82:cc:b8:8a: cd:be:dc:6b:70:d2:1b:3c:b6:29:d9:54:db:c2:8a:e4:60:0d: 70:9d:2b:78 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUR/HCjP7qtQSWvOINv5CnccLfp/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjFkMDU3MmZlNzI5OTFiZDMyODU0YmFjNzE2Njc2ZWJk YWQyMmFjZTAeFw0yNTA4MDMyMjAxMzNaFw0yNTA4MDUwMDEyMzNaMDMxMTAvBgNV BAMTKDk4QzBFREYxRjJBRDkzODM4MTkzREYzNTNDQ0YzMzZGMjhBNUVDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4uhJV/n21WiOVOw1ES5d+jyrg vefaNMKyE8DfAQ22PXLWeyWLaDjpVjeg7a1OosnHbdmsd+f0hKGGWHmaMmwb0nAF kSfOdKxe72yUPNduKhfYQDttQDEYjUv5mW95NkvPag4y8Cu5ccxhXqeuYgbnrMIL NNtR0P+U0pvyfIc8I/58yd57Tyhx/sarRvUPx3slmAaWOEml8PpoAQRoR9kotAfy +tpC7fl+WfE9+ahTEEulKGd4cNE96pkv5YxlwlYhaeeDQXBiDHkaQ3H9cB+qgnsr E654KWRY6J9enXmsmc3ls33jOXDVT+21/ferANcyiK5ZyUyxYAJCglfc+H4BAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUmMDt8fKtk4OBk981PM8zbyil7JowHwYDVR0j BBgwFoAU8dBXL+cpkb0yhUuscWZ269rSKs4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzAvRjFEMDU3MkZFNzI5OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkQlhMLWNwa2IweWhVdXNjV1oyNjly U0tzNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00 MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMC9GMUQwNTcyRkU3Mjk5MUJEMzI4 NTRCQUM3MTY2NzZFQkRBRDIyQUNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADL7HgFi1RD0QBZWYqs5w 2m0B6Zw4Rmczm9h59029ViiCiRj+QpJ8BNYv0ToYJ4uhzyJMa10oeT/xUxTc/gLk JJW7r24XlR8/NE9W/DmjCvWRRPg1DybJD51W9UEMqVl7UNX6rksQfmOCHb0JdCIi X9Ibgql1y49P9qkx9PmVe+2WiRYnU6bHckEH+WwsERStC7LM5kSBp8zfpDYHsltS t1k7/bV2l/ZAhOyx6SLiKXyZGxBrwbGWgL6jZYpOSjkeD7vQn6NxR/1G15w8kjNw FFqQAG0W1NwQ2JX0eVUKHpZI8/QlzxWCzLiKzb7ca3DSGzy2KdlU28KK5GANcJ0r eA== -----END CERTIFICATE-----Generated at Mon Aug 4 03:24:59 2025 by rpki-client