$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: kZvhNTWxgUb7RaJplfdh4Yc88s3U0Q1wnCSCLk0kHE0= Subject key identifier: 20:4E:44:66:45:49:03:40:C9:94:6B:2A:A5:4D:47:97:97:59:31:92 Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 23A0B7733166118EA284F2BE66E48A2BE3BDDB37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 03F3 Signing time: Wed 06 Aug 2025 00:52:21 +0000 Manifest this update: Wed 06 Aug 2025 00:47:21 +0000 Manifest next update: Thu 07 Aug 2025 01:32:21 +0000 Files and hashes: 1: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=) 2: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: 2/naNLsZWsKbctisH+91/rgvttkXh//515D4Dxt3bfg=) 3: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: YyMBgTPVms4MPnbkUVc7TpGwl6ukB7kzc/uAePl3SRA=) 4: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: NZcAKMAEu2FS5Zqz0hBFL7Zpu38dDC8QIhg4PJE0Lh4=) 5: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: nmhaoLhqUBAnDccEuteaqmwjmYCIqjMWJmqWnwMVbc8=) 6: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=) 7: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: T+9QQX64dOYanRzHKI9rhWnUyaZt9GgRQXrvhvIBrgs=) 8: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: OZBNVOvtp3V7O1L8kF6JcTp/niAHFDMwWI3RV/AoyZY=) 9: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: yDRyc1h8O+mXAEgAFoITsNpFI2VU0vygznR0PJDNh0M=) 10: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: JUo3cuuHY6xQQpJ8UbutMLipHCu2Sywx+VEHvB/6N8s=) 11: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: 67hzJ7+qEviKc+JKiq3KV4OqZ4fSU1BU+NXzASboCBg=) 12: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: g8GfxZyUsq5sAHB2Ct+7Z9GS7IIVHVNG2gaO8plmjSA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 01:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a0:b7:73:31:66:11:8e:a2:84:f2:be:66:e4:8a:2b:e3:bd:db:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Aug 6 00:47:21 2025 GMT Not After : Aug 7 01:32:21 2025 GMT Subject: CN=204E446645490340C9946B2AA54D479797593192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:98:7a:23:00:19:54:dc:52:a3:1d:4c:e1:eb: 0b:3c:70:19:0f:a3:46:73:a7:93:4b:16:bd:98:ff: 14:8f:d7:32:08:cd:ba:d2:e5:0d:cd:cc:60:db:2d: 94:bf:c0:1d:2a:9e:48:77:88:58:66:e5:26:c3:e4: f2:1b:02:16:c4:af:f2:7f:97:11:66:e4:92:c8:39: aa:06:fa:b3:df:1e:00:de:d8:a0:3e:b7:7d:87:e5: e6:3b:a4:92:c3:78:5b:33:64:57:94:d3:50:03:b6: 7d:c5:8f:2f:06:a2:32:87:b6:61:92:0c:58:4c:a8: f7:78:2c:b2:41:8a:40:7b:8e:c0:c1:71:aa:f3:5c: d0:08:03:97:93:a2:c1:96:60:35:6d:a5:e5:4c:d2: 90:05:b8:56:65:37:8b:c4:c3:c5:4f:c7:23:7f:4e: 43:6b:b9:b8:15:1a:e6:1d:ad:1f:79:50:51:eb:c7: 4c:0c:9c:d8:9d:9c:a8:6b:a8:92:92:1d:41:ad:c9: a8:26:2f:fb:0e:93:51:f0:f7:35:4e:ab:e3:0e:67: bf:1d:6f:55:e1:50:41:46:76:f6:45:2a:a7:81:e1: 79:ee:f1:d8:65:fb:5b:82:5f:5b:9d:4f:e4:29:3a: fe:52:14:91:01:b9:f7:87:9a:52:45:ee:fa:75:48: c0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4E:44:66:45:49:03:40:C9:94:6B:2A:A5:4D:47:97:97:59:31:92 X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:76:4a:4b:ad:4f:d0:32:c5:66:fd:f9:f7:d0:e9:cf:4c:37: 95:75:04:1d:e3:64:5b:76:87:c6:be:d0:55:00:1c:b3:50:1b: b9:00:83:b9:6e:3b:ad:48:be:c8:34:06:54:f2:ba:54:c4:20: ac:1f:af:11:90:d7:cc:20:95:24:94:76:67:e6:68:e7:bf:3d: 9a:a7:d6:de:42:59:2d:27:df:46:0c:11:82:c5:16:0a:41:80: bb:b8:29:6b:00:2f:01:5c:1a:cc:2b:3a:6b:03:c7:af:86:3b: 95:8d:96:a1:a9:58:a3:db:ed:66:95:ec:41:5a:f7:b5:fe:96: 2c:1a:f3:79:9a:58:81:e5:bb:8e:56:c3:43:4e:9f:0c:75:2e: dc:c6:3d:a6:0f:78:f7:46:e2:59:49:12:cc:57:c9:5a:47:fb: a7:65:00:11:fe:0e:5a:1c:e0:ed:6d:a5:3f:dc:df:9d:2f:99: c0:e2:c1:6b:c2:4d:5a:a5:3a:40:1a:a7:ef:36:ea:65:6e:49: d0:3f:b6:6b:90:7b:08:11:a8:d9:e8:f4:f2:f5:39:72:11:e1: 99:35:4a:6a:fe:d0:b0:61:33:84:b2:26:a9:3b:97:7c:ee:fe: 6f:e4:e3:22:2b:d5:da:07:14:a7:a0:01:e0:8f:92:9b:c5:f5: c6:8c:1e:47 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUI6C3czFmEY6ihPK+ZuSKK+O92zcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNTA4MDYwMDQ3MjFaFw0yNTA4MDcwMTMyMjFaMDMxMTAvBgNV BAMTKDIwNEU0NDY2NDU0OTAzNDBDOTk0NkIyQUE1NEQ0Nzk3OTc1OTMxOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLmHojABlU3FKjHUzh6ws8cBkP o0Zzp5NLFr2Y/xSP1zIIzbrS5Q3NzGDbLZS/wB0qnkh3iFhm5SbD5PIbAhbEr/J/ lxFm5JLIOaoG+rPfHgDe2KA+t32H5eY7pJLDeFszZFeU01ADtn3Fjy8GojKHtmGS DFhMqPd4LLJBikB7jsDBcarzXNAIA5eTosGWYDVtpeVM0pAFuFZlN4vEw8VPxyN/ TkNrubgVGuYdrR95UFHrx0wMnNidnKhrqJKSHUGtyagmL/sOk1Hw9zVOq+MOZ78d b1XhUEFGdvZFKqeB4Xnu8dhl+1uCX1udT+QpOv5SFJEBufeHmlJF7vp1SMCFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUIE5EZkVJA0DJlGsqpU1Hl5dZMZIwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnZKS61P0DLFZv3599Dp z0w3lXUEHeNkW3aHxr7QVQAcs1AbuQCDuW47rUi+yDQGVPK6VMQgrB+vEZDXzCCV JJR2Z+Zo5789mqfW3kJZLSffRgwRgsUWCkGAu7gpawAvAVwazCs6awPHr4Y7lY2W oalYo9vtZpXsQVr3tf6WLBrzeZpYgeW7jlbDQ06fDHUu3MY9pg9490biWUkSzFfJ Wkf7p2UAEf4OWhzg7W2lP9zfnS+ZwOLBa8JNWqU6QBqn7zbqZW5J0D+2a5B7CBGo 2ej08vU5chHhmTVKav7QsGEzhLImqTuXfO7+b+TjIivV2gcUp6AB4I+Sm8X1xowe Rw== -----END CERTIFICATE-----Generated at Wed Aug 6 16:03:29 2025 by rpki-client