$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft File: F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft (raw, json) Hash identifier: 9C7BMrHLZ2v9MoORTlP226M9rojeI+4lN8zjpDxHib4= Subject key identifier: 62:44:46:E5:9A:9C:E0:50:D1:EB:E2:D3:65:7F:41:83:05:84:EE:6D Authority key identifier: F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE Certificate issuer: /CN=f1d0572fe72991bd32854bac716676ebdad22ace Certificate serial: 79AFFD34CBD56029BB263EBC454D8124DAEFE655 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft Manifest number: 01C9 Signing time: Sat 14 Jun 2025 17:25:32 +0000 Manifest this update: Sat 14 Jun 2025 17:20:32 +0000 Manifest next update: Sun 15 Jun 2025 18:42:32 +0000 Files and hashes: 1: 326131333a393634343a323232303a3a2f34342d3438203d3e20323134393932.roa (hash: jXKKUMSDIyTb4ezvVpRo3NFIUpia25d8OkLWehTc52I=) 2: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer (hash: Nz2k0o2IS41o55idTp4HvK3uNxIMYgMNKvrr57G+kIE=) 3: 326131333a393634343a343030303a3a2f34302d3438203d3e203133333335.roa (hash: 8/2mbGbaC4ennlzI7y1e8hUNr9fsr7Pr+/K69/OYKQg=) 4: 39312e3230372e31332e302f32342d3234203d3e203532313132.roa (hash: +JU+ydXmMjIBHlt1kVXfkJBGqdmH1ATfk8PRfe8t4Rc=) 5: 326131333a393634323a3130303a3a2f34382d3438203d3e203438323830.roa (hash: 5gKZW/GJ6szyeA660SSSZ04c5MFxaWdT28EUODZAZVs=) 6: 326131333a393634303a3a2f34342d3434203d3e203532313132.roa (hash: Fa+HJyGeN4OUII4mISEevZUyzThis5w7MVhgz+1adr4=) 7: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer (hash: W33AY8n66YBiKFAdMlU1PcWz7qog9dVaO6LUtxa3ULA=) 8: F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl (hash: Adu8qJNgDU5iHF8Gemo+pW/tyErKDy0gLOYjHzr8Xco=) 9: 326131333a393634343a31303a3a2f34362d3438203d3e203438313934.roa (hash: 2yKfO2WqsfZLWhFp8Vgn43JsqJJGZp0JL5E1MzApx8g=) 10: 326131333a393634343a343030303a3a2f34302d3438203d3e20323034323931.roa (hash: 7H9TXOPmRSCpSLvpUH5h0kneMvmA5e0Xb9ByogPe2KE=) 11: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: eJSksT4tbDIQ9nxZDstLl/kGIUJo4Eck2iH/dVXoJzg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 18:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:af:fd:34:cb:d5:60:29:bb:26:3e:bc:45:4d:81:24:da:ef:e6:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d0572fe72991bd32854bac716676ebdad22ace Validity Not Before: Jun 14 17:20:32 2025 GMT Not After : Jun 15 18:42:32 2025 GMT Subject: CN=624446E59A9CE050D1EBE2D3657F41830584EE6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ee:bf:1a:f5:ce:fb:cb:db:aa:c1:03:d9:66: 49:54:a5:92:9c:5e:68:92:5c:58:f0:0d:bf:12:97: 0d:34:80:70:77:91:f4:b1:0e:08:80:05:d4:63:ea: d3:c0:5a:b0:fb:a1:64:7a:42:a4:e0:a4:7c:51:bd: dc:97:6a:bc:4c:8c:81:26:e8:38:3e:3e:a2:c7:2c: ba:3c:5e:74:cd:ba:50:15:21:9a:fe:ca:41:ee:19: 39:0f:ef:76:97:32:17:9a:64:ea:80:ff:74:c4:96: 2a:30:b4:33:18:b5:cf:98:b5:5b:81:22:52:64:a2: 16:c8:ee:bf:9c:dd:b3:29:89:93:6d:97:03:04:f3: ea:37:17:94:79:5a:da:f6:cd:e1:d3:57:d9:fa:2e: 0d:0e:08:b5:d9:38:63:24:1d:ab:30:0c:d2:52:62: ae:16:a7:5b:27:4b:b3:70:a0:cd:10:e0:5f:76:89: 21:2d:97:c6:d1:d2:94:16:d2:45:28:98:1b:20:d9: 09:15:62:56:1b:50:f5:bb:2e:fb:9b:9c:95:74:1b: c8:a8:13:bf:e3:d0:97:3b:b8:f7:a0:c6:14:6d:55: 98:12:3c:57:31:ff:b4:d7:32:af:c5:83:10:49:86: fc:3c:0c:14:4e:79:5f:1f:32:e5:7e:0d:3d:27:19: 3f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:44:46:E5:9A:9C:E0:50:D1:EB:E2:D3:65:7F:41:83:05:84:EE:6D X509v3 Authority Key Identifier: keyid:F1:D0:57:2F:E7:29:91:BD:32:85:4B:AC:71:66:76:EB:DA:D2:2A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:ba:61:07:07:1b:d7:a4:47:3e:7e:6c:de:0e:51:b5:a9:45: ba:d4:5e:17:fd:a4:d8:7c:20:f3:6a:7e:ed:a2:d0:02:8c:04: 17:bf:e5:a7:29:a2:c3:ed:5f:bc:0c:d4:de:1c:e8:4c:4c:4e: bb:cd:69:8d:a2:b3:65:8d:86:fe:5d:90:2c:aa:6f:d3:6e:ee: fd:c6:e3:ec:c1:f8:67:f2:c6:44:63:de:99:b2:a3:b6:28:94: 80:22:5d:1b:04:27:ba:36:07:f5:3a:86:c0:de:df:05:f6:f2: 61:05:88:c4:14:7d:ac:80:94:8d:73:82:cc:f7:e8:cf:56:bd: c7:62:61:53:3a:7f:a4:b7:5f:ee:33:1d:63:aa:77:58:d5:b9: fa:45:ec:73:77:c6:cf:ec:48:4a:aa:bb:91:40:b0:78:b6:0e: eb:d0:e3:5e:98:5c:da:ee:3f:3a:a2:5b:9d:1d:37:07:4b:08: a9:e6:55:a1:f6:24:a6:3a:71:57:19:19:b6:e0:e0:be:93:92: 9e:30:dc:db:e7:28:60:d5:4a:71:ed:7a:7b:69:db:c3:e1:c8: 06:38:fb:4e:df:79:b6:fe:20:ab:bb:2c:65:9a:47:65:90:05: 15:b4:5f:3d:b6:50:d1:a7:51:d0:af:d8:6a:ad:32:d4:62:35: ad:b2:a8:98 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUea/9NMvVYCm7Jj68RU2BJNrv5lUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjFkMDU3MmZlNzI5OTFiZDMyODU0YmFjNzE2Njc2ZWJk YWQyMmFjZTAeFw0yNTA2MTQxNzIwMzJaFw0yNTA2MTUxODQyMzJaMDMxMTAvBgNV BAMTKDYyNDQ0NkU1OUE5Q0UwNTBEMUVCRTJEMzY1N0Y0MTgzMDU4NEVFNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw7r8a9c77y9uqwQPZZklUpZKc XmiSXFjwDb8Slw00gHB3kfSxDgiABdRj6tPAWrD7oWR6QqTgpHxRvdyXarxMjIEm 6Dg+PqLHLLo8XnTNulAVIZr+ykHuGTkP73aXMheaZOqA/3TEliowtDMYtc+YtVuB IlJkohbI7r+c3bMpiZNtlwME8+o3F5R5Wtr2zeHTV9n6Lg0OCLXZOGMkHaswDNJS Yq4Wp1snS7NwoM0Q4F92iSEtl8bR0pQW0kUomBsg2QkVYlYbUPW7LvubnJV0G8io E7/j0Jc7uPegxhRtVZgSPFcx/7TXMq/FgxBJhvw8DBROeV8fMuV+DT0nGT9dAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUYkRG5Zqc4FDR6+LTZX9BgwWE7m0wHwYDVR0j BBgwFoAU8dBXL+cpkb0yhUuscWZ269rSKs4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1 YjQ5LzAvRjFEMDU3MkZFNzI5OTFCRDMyODU0QkFDNzE2Njc2RUJEQUQyMkFDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkQlhMLWNwa2IweWhVdXNjV1oyNjly U0tzNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00 MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMC9GMUQwNTcyRkU3Mjk5MUJEMzI4 NTRCQUM3MTY2NzZFQkRBRDIyQUNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbphBwcb16RHPn5s3g5R talFutReF/2k2Hwg82p+7aLQAowEF7/lpymiw+1fvAzU3hzoTExOu81pjaKzZY2G /l2QLKpv027u/cbj7MH4Z/LGRGPembKjtiiUgCJdGwQnujYH9TqGwN7fBfbyYQWI xBR9rICUjXOCzPfoz1a9x2JhUzp/pLdf7jMdY6p3WNW5+kXsc3fGz+xISqq7kUCw eLYO69DjXphc2u4/OqJbnR03B0sIqeZVofYkpjpxVxkZtuDgvpOSnjDc2+coYNVK ce16e2nbw+HIBjj7Tt95tv4gq7ssZZpHZZAFFbRfPbZQ0adR0K/Yaq0y1GI1rbKo mA== -----END CERTIFICATE-----Generated at Sun Jun 15 00:09:52 2025 by rpki-client