$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: CCW1gMNDvLLWhOTjWU7gMU8Tn7mkDEI9amR8WXyuAzo= Subject key identifier: F2:D6:D5:29:09:34:3D:33:D8:90:31:A5:FC:B5:03:85:AE:21:D0:FE Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 0320501B99639498890474AFBFAE904FFF7902F9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: C0 Signing time: Sun 29 Jun 2025 15:10:56 +0000 Manifest this update: Sun 29 Jun 2025 15:05:56 +0000 Manifest next update: Mon 30 Jun 2025 15:20:56 +0000 Files and hashes: 1: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: MorJ8/zqWP+ENMZ78Dfg8lahRlU/VfcwHwmQyMuE7hc=) 2: 326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa (hash: /ul2/wI6OjmF90yvjh37x7TtdkRoh3MUQv78SD8t7W0=) 3: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: /cykpwxlhi9hxPYMLLNqmSuz42bLIi6wzQ4AvTgSqXM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:20:50:1b:99:63:94:98:89:04:74:af:bf:ae:90:4f:ff:79:02:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Jun 29 15:05:56 2025 GMT Not After : Jun 30 15:20:56 2025 GMT Subject: CN=F2D6D52909343D33D89031A5FCB50385AE21D0FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:72:4a:0f:1d:46:05:f0:c4:ab:f8:c4:f9:a2: 91:b1:35:11:12:59:e8:72:93:1a:a5:2c:ed:24:2c: f3:f2:50:16:0f:9d:7e:c0:7e:13:58:8a:49:fd:65: fc:8b:30:61:3c:52:29:4e:fc:7d:3f:45:ee:56:ac: d4:95:81:da:65:56:0d:8c:0d:86:4a:5e:9a:0f:0c: 9b:f7:4d:51:e0:c4:97:2d:43:6e:0f:72:84:50:c3: f6:50:dc:7f:11:54:f2:d8:a6:7b:1a:cb:10:57:2c: 5a:62:ea:b8:ff:b1:64:db:4a:eb:d7:a8:bc:ab:73: e8:6f:e8:64:7b:80:8a:b3:02:5c:1f:03:75:32:96: 50:df:50:aa:58:4f:db:a0:c5:66:0b:36:6f:f7:e7: 78:56:e6:b1:3b:59:9c:1c:f8:ae:ec:9a:5c:68:83: fc:15:05:3e:74:45:4f:af:90:bc:aa:f9:75:a9:d5: b9:9b:61:78:dc:8c:24:93:5f:bc:16:8e:1c:b8:29: 6e:be:9d:2b:03:1e:57:30:b3:48:67:3d:27:ae:c4: ba:79:23:3c:39:74:a8:3b:97:e1:68:4e:fd:35:c5: ff:57:99:f5:59:50:8a:d4:78:5d:3b:49:fa:ff:e5: bf:96:87:b9:da:c5:ef:54:2a:2e:ca:9f:ad:50:2e: 0f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D6:D5:29:09:34:3D:33:D8:90:31:A5:FC:B5:03:85:AE:21:D0:FE X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:12:7f:76:95:33:c4:5f:2d:6f:c0:1c:21:59:a5:fa:3d:e8: c5:5f:ea:35:f1:73:c3:d0:3a:5d:89:32:2c:a9:6f:8d:d5:ba: 8d:94:67:c2:fa:1c:52:38:21:13:40:e0:c4:2c:a4:cb:08:75: e6:a6:62:7e:33:92:ac:72:2a:b0:ee:d1:85:01:27:1a:5d:36: 08:c0:f8:1c:f0:24:09:88:63:1d:ac:4c:eb:29:81:3a:f2:c6: 94:16:e6:1e:d1:94:18:c5:b9:c9:9a:05:c2:9e:41:37:7a:a9: 32:de:0a:db:e8:35:86:f8:4d:f9:64:42:29:25:fb:e9:5d:09: 96:75:76:94:4e:20:4c:f7:5c:0e:06:fe:1e:5c:c1:54:48:89: 03:f9:1a:d6:6d:5e:10:c8:18:9f:5c:b5:26:cc:36:18:5a:28: 1a:f3:74:25:46:b2:de:cc:7e:52:32:4b:e8:6d:98:98:aa:24: cd:06:7b:72:a2:90:5d:cf:7c:e9:af:a5:5b:54:a2:8c:3b:23: 6e:2d:5d:2e:12:69:c9:b8:d6:e3:8e:b0:b5:46:49:15:42:a6: fc:0f:30:ff:08:7d:55:94:df:b3:5c:05:9d:48:d2:e8:10:8d: 4e:ea:91:0b:e8:43:5f:2d:c9:21:88:07:a3:fc:19:1a:ee:6c: 6f:b5:98:17 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUAyBQG5ljlJiJBHSvv66QT/95AvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNTA2MjkxNTA1NTZaFw0yNTA2MzAxNTIwNTZaMDMxMTAvBgNV BAMTKEYyRDZENTI5MDkzNDNEMzNEODkwMzFBNUZDQjUwMzg1QUUyMUQwRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClckoPHUYF8MSr+MT5opGxNRES WehykxqlLO0kLPPyUBYPnX7AfhNYikn9ZfyLMGE8UilO/H0/Re5WrNSVgdplVg2M DYZKXpoPDJv3TVHgxJctQ24PcoRQw/ZQ3H8RVPLYpnsayxBXLFpi6rj/sWTbSuvX qLyrc+hv6GR7gIqzAlwfA3UyllDfUKpYT9ugxWYLNm/353hW5rE7WZwc+K7smlxo g/wVBT50RU+vkLyq+XWp1bmbYXjcjCSTX7wWjhy4KW6+nSsDHlcws0hnPSeuxLp5 Izw5dKg7l+FoTv01xf9XmfVZUIrUeF07Sfr/5b+Wh7naxe9UKi7Kn61QLg/PAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU8tbVKQk0PTPYkDGl/LUDha4h0P4wHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQEn92 lTPEXy1vwBwhWaX6PejFX+o18XPD0DpdiTIsqW+N1bqNlGfC+hxSOCETQODELKTL CHXmpmJ+M5Ksciqw7tGFAScaXTYIwPgc8CQJiGMdrEzrKYE68saUFuYe0ZQYxbnJ mgXCnkE3eqky3grb6DWG+E35ZEIpJfvpXQmWdXaUTiBM91wOBv4eXMFUSIkD+RrW bV4QyBifXLUmzDYYWiga83QlRrLezH5SMkvobZiYqiTNBntyopBdz3zpr6VbVKKM OyNuLV0uEmnJuNbjjrC1RkkVQqb8DzD/CH1VlN+zXAWdSNLoEI1O6pEL6ENfLckh iAej/Bka7mxvtZgX -----END CERTIFICATE-----Generated at Sun Jun 29 19:27:03 2025 by rpki-client