$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: B6tP441MQoWU1q4xet62xw7TiqLyT6V87KzKdVQPmJQ= Subject key identifier: 9F:C1:96:CA:11:82:5A:E2:65:E1:DC:5E:E7:41:D1:27:D7:F4:83:83 Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 75A965E733567E44BD0EB8EFF71D5F14F82AA346 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: 010A Signing time: Sat 23 Aug 2025 11:11:20 +0000 Manifest this update: Sat 23 Aug 2025 11:06:20 +0000 Manifest next update: Sun 24 Aug 2025 12:51:20 +0000 Files and hashes: 1: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: MorJ8/zqWP+ENMZ78Dfg8lahRlU/VfcwHwmQyMuE7hc=) 2: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: uUxZHmFG4m6itfZwNSY/ImPBkdySvH7qp96iCEiSiLo=) 3: 326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa (hash: /ul2/wI6OjmF90yvjh37x7TtdkRoh3MUQv78SD8t7W0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:a9:65:e7:33:56:7e:44:bd:0e:b8:ef:f7:1d:5f:14:f8:2a:a3:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Aug 23 11:06:20 2025 GMT Not After : Aug 24 12:51:20 2025 GMT Subject: CN=9FC196CA11825AE265E1DC5EE741D127D7F48383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:da:89:42:83:2f:59:d9:a5:e7:07:8d:f6:69: 92:85:55:ee:4c:35:ca:b1:6e:42:ef:f1:50:4c:85: 87:b3:d1:ba:39:aa:3a:1b:2c:79:aa:1c:73:09:2b: 68:49:07:5a:6f:35:e7:33:a5:3b:fa:56:b4:e1:77: 37:41:c6:5e:2d:bd:f2:30:14:05:91:a5:9f:53:7b: b2:cb:8d:4e:da:25:bd:f5:0e:33:d8:45:6c:0c:c0: 35:85:01:9c:00:22:54:b8:7b:af:d0:4e:7b:c0:a6: cf:b6:77:88:32:bf:e4:36:89:31:e8:2e:e8:b0:54: f0:4a:77:cb:04:08:d2:da:47:83:c4:7b:28:93:cc: af:b7:f3:5f:94:35:0f:03:a6:f1:20:0a:96:62:89: ff:e7:f8:51:f9:50:c1:e3:d9:c8:a9:87:9c:da:56: 80:fe:90:73:3c:af:c4:97:2a:e5:7b:57:3a:ea:63: 88:25:49:8c:8d:de:ee:82:5e:5b:d5:b3:b4:4e:8a: d6:7a:c0:28:7a:45:dc:12:88:02:90:76:e5:5c:7b: 17:20:f2:d3:57:93:10:79:d6:ba:50:0b:18:d2:f4: 27:8d:9f:fe:01:7e:f8:e2:a2:80:ad:9b:e7:80:16: c4:92:2a:6f:6a:53:29:02:e1:d9:5f:5b:b2:ed:a7: a6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C1:96:CA:11:82:5A:E2:65:E1:DC:5E:E7:41:D1:27:D7:F4:83:83 X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d2:45:ac:35:ef:a2:50:1c:94:e4:52:b2:9e:43:35:dc:d8: 50:3e:f3:f6:f8:27:a0:0b:5d:96:58:b9:41:9e:7f:c3:11:9b: a9:72:34:3f:a8:dd:ba:5a:92:39:c8:d3:80:9c:25:72:0f:02: 31:4e:8d:2d:81:00:92:e0:67:7f:ed:24:4d:e0:9a:38:f4:68: 79:aa:8e:51:7a:91:4a:d8:cf:91:f3:e2:63:ba:91:f2:98:9d: 03:0d:0a:67:07:47:c8:b5:ce:d4:6a:8d:ea:a4:a1:76:86:1d: 88:f2:e8:e6:e7:e5:00:f9:06:e1:12:87:80:7c:45:0d:17:71: 05:1b:9e:dd:84:4d:60:a9:73:5c:ac:93:bf:0b:3d:dd:f6:f7: 90:e4:e6:66:3b:a9:bf:c1:90:8e:19:36:88:88:db:02:21:c3: 69:9c:a9:3d:b1:49:11:ec:53:3d:91:ef:d5:3f:ff:d9:19:0f: d9:32:49:f0:0d:58:f6:64:5d:14:1c:f5:ca:fe:4e:24:ee:13: 1c:d4:08:b8:75:6c:81:e9:89:75:99:02:3a:a8:b8:39:4e:37: d6:f2:70:52:42:97:56:61:65:f1:63:83:06:70:86:45:e5:3a: eb:91:51:44:04:6e:48:5e:ad:86:1d:a9:89:9d:c4:29:cc:fc: 8a:b9:dc:be -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdall5zNWfkS9Drjv9x1fFPgqo0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNTA4MjMxMTA2MjBaFw0yNTA4MjQxMjUxMjBaMDMxMTAvBgNV BAMTKDlGQzE5NkNBMTE4MjVBRTI2NUUxREM1RUU3NDFEMTI3RDdGNDgzODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/2olCgy9Z2aXnB432aZKFVe5M NcqxbkLv8VBMhYez0bo5qjobLHmqHHMJK2hJB1pvNeczpTv6VrThdzdBxl4tvfIw FAWRpZ9Te7LLjU7aJb31DjPYRWwMwDWFAZwAIlS4e6/QTnvAps+2d4gyv+Q2iTHo LuiwVPBKd8sECNLaR4PEeyiTzK+381+UNQ8DpvEgCpZiif/n+FH5UMHj2ciph5za VoD+kHM8r8SXKuV7VzrqY4glSYyN3u6CXlvVs7ROitZ6wCh6RdwSiAKQduVcexcg 8tNXkxB51rpQCxjS9CeNn/4BfvjiooCtm+eAFsSSKm9qUykC4dlfW7Ltp6ahAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUn8GWyhGCWuJl4dxe50HRJ9f0g4MwHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAt0kWs Ne+iUByU5FKynkM13NhQPvP2+CegC12WWLlBnn/DEZupcjQ/qN26WpI5yNOAnCVy DwIxTo0tgQCS4Gd/7SRN4Jo49Gh5qo5RepFK2M+R8+JjupHymJ0DDQpnB0fItc7U ao3qpKF2hh2I8ujm5+UA+QbhEoeAfEUNF3EFG57dhE1gqXNcrJO/Cz3d9veQ5OZm O6m/wZCOGTaIiNsCIcNpnKk9sUkR7FM9ke/VP//ZGQ/ZMknwDVj2ZF0UHPXK/k4k 7hMc1Ai4dWyB6Yl1mQI6qLg5TjfW8nBSQpdWYWXxY4MGcIZF5TrrkVFEBG5IXq2G HamJncQpzPyKudy+ -----END CERTIFICATE-----Generated at Sun Aug 24 06:14:00 2025 by rpki-client