$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json) Hash identifier: 7qLG3oNto8oUmj9WSufqZVixqY9P72oP6lr6id8UJ84= Subject key identifier: 6F:F1:74:FD:88:D0:62:16:6A:6D:0B:BA:AE:44:22:A4:83:AD:C4:84 Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Certificate serial: 700923A97A1C67B09A85ABA5D9E4C0E9F41E9114 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft Manifest number: 04F7 Signing time: Fri 22 Aug 2025 20:52:33 +0000 Manifest this update: Fri 22 Aug 2025 20:47:33 +0000 Manifest next update: Sun 24 Aug 2025 00:07:33 +0000 Files and hashes: 1: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: mMDbhGDDs2fJHSb80F0pI+Kl0K3BrtE0IOtIfXWBgrM=) 2: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: y4OGbSGooI8V9euRtHx6jpjRwWGZstdSARXhTQ70Yxg=) 3: 3134362e3234372e35312e302f32342d3234203d3e203234383531.roa (hash: zRn95fZoa98Dxgk18rTQZPg3Vz861tTnSVUdcy0yTb0=) 4: 3134362e3234372e36322e302f32342d3234203d3e203234383531.roa (hash: 3irJhAGcE48vEZNOxKTwKsy4d69RVyIL6ZEClAmlLA0=) 5: 3134362e3234372e34382e302f32332d3234203d3e203234383531.roa (hash: CYrx2Q8+pBHAyk1lGd5Mg9MkvR7v5zfpX8Vn/ABu+6Q=) 6: 3134362e3234372e35392e302f32342d3234203d3e203234383531.roa (hash: cISB3c/lX6ECxkwGaCM313qUlrkmfGXNHg9Sn5Duu/E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:09:23:a9:7a:1c:67:b0:9a:85:ab:a5:d9:e4:c0:e9:f4:1e:91:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Validity Not Before: Aug 22 20:47:33 2025 GMT Not After : Aug 24 00:07:33 2025 GMT Subject: CN=6FF174FD88D062166A6D0BBAAE4422A483ADC484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:37:a1:f6:99:3a:35:3b:c2:0c:9e:d6:26:e2: 45:b4:80:ff:ba:7a:fc:cf:b5:d6:d4:25:a1:55:3f: 87:4f:1b:4b:3a:f7:50:76:0c:7a:87:3a:b9:27:e0: 58:13:d8:77:29:02:51:2b:94:27:4e:9b:52:3b:05: f2:06:cb:a1:d7:ec:a8:27:b0:13:fe:8c:d8:a8:10: 3f:59:a5:c7:71:4c:f1:d0:7e:59:c2:a8:ed:04:bb: 00:87:b0:ba:fb:67:ba:4c:52:05:ca:01:1c:54:3b: 90:43:eb:58:08:82:9f:d0:80:c9:82:33:79:40:7c: 01:fb:51:2a:21:13:20:92:65:05:ec:0a:bc:e4:d2: a0:65:71:1d:e7:e2:a3:6c:3f:21:86:d0:41:c0:2a: 73:bf:68:c2:90:26:28:7a:1e:37:7a:49:36:6e:0c: 07:79:33:17:7e:4d:01:2a:35:27:72:20:0d:19:35: 66:31:ff:0e:05:33:ad:c6:da:b8:9d:d3:c5:61:64: 2a:8d:a0:19:2d:bf:ac:75:17:a6:ba:81:91:fe:c4: 05:58:75:ca:85:49:ca:a3:92:0f:e0:47:98:b1:e4: 91:a4:b3:61:75:4c:31:c9:9b:a7:a4:5a:13:b1:8c: 8e:c4:a3:d9:4b:02:8f:f5:0d:5b:cb:2e:c7:55:93: 6b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F1:74:FD:88:D0:62:16:6A:6D:0B:BA:AE:44:22:A4:83:AD:C4:84 X509v3 Authority Key Identifier: keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:23:c2:e9:b4:69:b5:6f:78:93:20:6b:6a:79:b4:75:27:30: a5:d6:58:87:37:d6:6f:a4:87:37:c8:81:b7:72:57:bc:73:e1: 2c:76:68:b4:ee:60:e9:4d:cf:73:fc:c0:80:d7:12:99:66:45: 17:9a:3c:21:d7:50:cf:91:a0:37:e3:1c:73:15:c5:6d:9f:55: 97:f0:1b:04:2c:32:c1:88:95:b4:5f:cb:b7:52:fe:cf:5a:14: 02:05:4a:c0:7c:b6:03:65:47:53:5c:de:d9:d1:36:32:31:86: 52:60:ec:d8:dd:12:8a:ce:47:9a:25:b4:08:09:6d:1c:94:00: 3e:67:75:0c:6c:cf:4b:7b:84:76:53:c2:d2:dd:66:de:e4:e3: de:47:79:ae:5d:50:1f:5b:ca:a8:a8:aa:45:60:eb:0f:0d:2f: 63:38:c6:27:50:2e:dc:15:d2:59:00:eb:05:a2:2b:68:ca:4c: 7b:dc:2f:26:60:aa:27:d7:de:33:79:b5:ab:cd:dc:ee:b5:2a: 60:b4:bc:03:21:d6:c7:b8:0f:7a:d9:49:7e:4d:85:ac:a8:16: e6:a2:28:e3:64:31:fb:8a:80:f2:42:d4:13:62:d4:9f:72:3f: e0:8d:cb:a6:51:62:8b:e7:0f:66:12:15:71:2e:27:23:cc:5e: d2:35:13:5c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcAkjqXocZ7Cahaul2eTA6fQekRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTZjNTA5YmE0OGU1YjUwNDk0NTcyZTA1YzQ1YzU4ZTdl MTZkODdmYjAeFw0yNTA4MjIyMDQ3MzNaFw0yNTA4MjQwMDA3MzNaMDMxMTAvBgNV BAMTKDZGRjE3NEZEODhEMDYyMTY2QTZEMEJCQUFFNDQyMkE0ODNBREM0ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKN6H2mTo1O8IMntYm4kW0gP+6 evzPtdbUJaFVP4dPG0s691B2DHqHOrkn4FgT2HcpAlErlCdOm1I7BfIGy6HX7Kgn sBP+jNioED9ZpcdxTPHQflnCqO0EuwCHsLr7Z7pMUgXKARxUO5BD61gIgp/QgMmC M3lAfAH7USohEyCSZQXsCrzk0qBlcR3n4qNsPyGG0EHAKnO/aMKQJih6Hjd6STZu DAd5Mxd+TQEqNSdyIA0ZNWYx/w4FM63G2rid08VhZCqNoBktv6x1F6a6gZH+xAVY dcqFScqjkg/gR5ix5JGks2F1TDHJm6ekWhOxjI7Eo9lLAo/1DVvLLsdVk2sRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUb/F0/YjQYhZqbQu6rkQipIOtxIQwHwYDVR0j BBgwFoAUpsUJukjltQSUVy4FxFxY5+Fth/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYtOTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1 NWM1LzEvQTZDNTA5QkE0OEU1QjUwNDk0NTcyRTA1QzQ1QzU4RTdFMTZEODdGQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BzVUp1a2psdFFTVVZ5NEZ4RnhZNS1G dGhfcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzhiYjQ0Ni05 MWMwLTQxMzgtYTMzYS1iNDc4NjVkZTU1YzUvMS9BNkM1MDlCQTQ4RTVCNTA0OTQ1 NzJFMDVDNDVDNThFN0UxNkQ4N0ZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwyPC6bRptW94kyBranm0 dScwpdZYhzfWb6SHN8iBt3JXvHPhLHZotO5g6U3Pc/zAgNcSmWZFF5o8IddQz5Gg N+MccxXFbZ9Vl/AbBCwywYiVtF/Lt1L+z1oUAgVKwHy2A2VHU1ze2dE2MjGGUmDs 2N0Sis5HmiW0CAltHJQAPmd1DGzPS3uEdlPC0t1m3uTj3kd5rl1QH1vKqKiqRWDr Dw0vYzjGJ1Au3BXSWQDrBaIraMpMe9wvJmCqJ9feM3m1q83c7rUqYLS8AyHWx7gP etlJfk2FrKgW5qIo42Qx+4qA8kLUE2LUn3I/4I3LplFii+cPZhIVcS4nI8xe0jUT XA== -----END CERTIFICATE-----Generated at Sat Aug 23 15:39:30 2025 by rpki-client