$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft File: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft (raw, json) Hash identifier: OttBWFnMUJChMsl5QUfDKoIKEGUMueIiU2AnwjSOXPk= Subject key identifier: 80:5B:10:F8:E0:12:42:AB:B9:97:B3:3E:C0:FD:E8:D8:17:40:4F:88 Authority key identifier: 94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C Certificate issuer: /CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Certificate serial: 2FFFAD1D398A36B0157603E83484A88AA2F8FF31 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft Manifest number: A8 Signing time: Sat 23 Aug 2025 14:11:27 +0000 Manifest this update: Sat 23 Aug 2025 14:06:27 +0000 Manifest next update: Sun 24 Aug 2025 17:25:27 +0000 Files and hashes: 1: 326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa (hash: MnToG5/hHH9Scp/i63sn6+7U3FU6WhprF2dCg9QmzZ4=) 2: 326131343a373538343a333030323a3a2f34382d3438203d3e203530313034.roa (hash: Crxg8Afd9H4uvcM/AEMgGkuEVpajXoOdPvRiA2PLFc4=) 3: 326131343a373538343a333030313a3a2f34382d3438203d3e20313532333638.roa (hash: RycjpThYIZhrgAMUdYbKLisjcTcczyRyV0B6ob/yXcs=) 4: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl (hash: ncWVNsTi7xfH4nHfNBclEokOtp4ZouLWZppl8Vmcpyk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ff:ad:1d:39:8a:36:b0:15:76:03:e8:34:84:a8:8a:a2:f8:ff:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Validity Not Before: Aug 23 14:06:27 2025 GMT Not After : Aug 24 17:25:27 2025 GMT Subject: CN=805B10F8E01242ABB997B33EC0FDE8D817404F88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:05:14:4c:a6:6f:96:5b:d6:81:43:4e:f3:59: b8:e7:62:5d:d2:07:d5:37:72:8d:07:52:28:2c:2b: 44:08:07:db:dc:0f:ea:eb:12:03:c0:d3:8a:21:55: ed:7a:61:44:a1:ab:e8:65:13:6f:f6:0b:e2:1e:a0: 6d:ff:c2:26:a2:d1:b5:63:ff:b3:e0:5c:69:bd:a9: fd:af:e5:74:e9:cc:35:e8:8c:bf:73:79:07:b1:0b: cf:cd:5a:67:b4:8c:bc:23:a1:11:4e:a6:90:da:3c: c1:0f:be:eb:18:ba:0f:b3:3f:65:13:57:c0:e0:a2: 97:c9:47:90:fe:cf:74:d6:26:3a:cb:62:04:b1:07: 83:61:7f:e8:90:94:4a:57:31:0c:6c:bd:f4:7d:4b: 58:23:cf:29:cd:1c:52:0a:6b:68:59:4d:81:56:b1: 4a:46:f5:a6:26:f8:d0:d3:9d:d7:2b:fd:5a:30:d4: 1a:0d:3f:d3:7d:8c:51:2d:fe:8e:87:1a:0a:9a:1e: 58:ac:66:66:9f:bf:fe:7a:4f:62:1d:03:e1:5e:5c: 8a:a0:bc:40:65:09:76:8e:da:c8:22:7f:85:6d:80: b7:04:b9:9d:14:6c:65:42:e7:3b:1c:2f:69:3c:30: 40:70:96:85:20:94:70:7b:8a:34:61:5e:45:fc:a1: 57:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5B:10:F8:E0:12:42:AB:B9:97:B3:3E:C0:FD:E8:D8:17:40:4F:88 X509v3 Authority Key Identifier: keyid:94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:57:9d:01:cf:66:b7:b1:b5:68:b9:4c:fa:55:34:8b:9f:82: 51:ed:18:cb:ad:b8:51:3e:c1:16:61:24:61:73:a3:27:0c:06: ad:2b:81:d9:24:a3:67:d3:1d:42:e3:88:6f:fc:3b:39:e4:af: 66:a0:77:e4:b2:52:d2:c0:bd:90:5d:60:9c:4d:2d:49:5d:55: eb:83:3f:4e:16:0a:3e:87:ed:e9:cf:fe:f7:08:7a:60:a7:67: 8c:c4:cd:e6:fa:54:0c:a0:8c:96:8a:d3:44:0c:76:8a:a5:15: 01:e5:00:52:f4:04:c8:de:2f:94:b1:2f:33:8f:34:fb:3e:cd: f2:b2:5d:f7:dc:ba:67:b6:e1:ac:49:63:fa:8a:1e:9d:d8:24: 94:b7:a9:77:74:fc:29:2e:32:51:3b:29:99:06:7d:8c:d8:6e: 5d:97:fa:07:f6:1a:b2:17:31:a7:8a:f2:e5:44:01:bd:bd:2f: 0b:72:d7:47:00:74:8f:ae:ba:79:e7:31:bf:68:f2:4c:2b:4d: f0:b2:12:10:cf:c5:28:3b:41:c0:e6:79:a5:6e:e8:18:4c:46: 89:91:62:b2:40:97:e2:01:05:09:68:95:8f:0e:92:e2:87:2c: 18:6b:55:d2:1e:03:8e:5f:9e:50:88:41:39:3c:f0:98:ed:06: 07:7e:f2:b4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUL/+tHTmKNrAVdgPoNISoiqL4/zEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkx QjI3QUQ5QzAeFw0yNTA4MjMxNDA2MjdaFw0yNTA4MjQxNzI1MjdaMDMxMTAvBgNV BAMTKDgwNUIxMEY4RTAxMjQyQUJCOTk3QjMzRUMwRkRFOEQ4MTc0MDRGODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwBRRMpm+WW9aBQ07zWbjnYl3S B9U3co0HUigsK0QIB9vcD+rrEgPA04ohVe16YUShq+hlE2/2C+IeoG3/wiai0bVj /7PgXGm9qf2v5XTpzDXojL9zeQexC8/NWme0jLwjoRFOppDaPMEPvusYug+zP2UT V8DgopfJR5D+z3TWJjrLYgSxB4Nhf+iQlEpXMQxsvfR9S1gjzynNHFIKa2hZTYFW sUpG9aYm+NDTndcr/Vow1BoNP9N9jFEt/o6HGgqaHlisZmafv/56T2IdA+FeXIqg vEBlCXaO2sgif4VtgLcEuZ0UbGVC5zscL2k8MEBwloUglHB7ijRhXkX8oVf7AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUgFsQ+OASQqu5l7M+wP3o2BdAT4gwHwYDVR0j BBgwFoAUlG3hXTS+riTinqFqP+HmWRsnrZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzcvOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkxQjI3QUQ5Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85NDZERTE1RDM0QkVBRTI0RTI5RUExNkEz RkUxRTY1OTFCMjdBRDlDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzFiZDMwNmI0LWU1YzMtNDhmOS1iMmVlLTM2YTliZGRlZDhjNC83Lzk0NkRFMTVE MzRCRUFFMjRFMjlFQTE2QTNGRTFFNjU5MUIyN0FEOUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAoV50B z2a3sbVouUz6VTSLn4JR7RjLrbhRPsEWYSRhc6MnDAatK4HZJKNn0x1C44hv/Ds5 5K9moHfkslLSwL2QXWCcTS1JXVXrgz9OFgo+h+3pz/73CHpgp2eMxM3m+lQMoIyW itNEDHaKpRUB5QBS9ATI3i+UsS8zjzT7Ps3ysl333LpntuGsSWP6ih6d2CSUt6l3 dPwpLjJROymZBn2M2G5dl/oH9hqyFzGnivLlRAG9vS8LctdHAHSPrrp55zG/aPJM K03wshIQz8UoO0HA5nmlbugYTEaJkWKyQJfiAQUJaJWPDpLihywYa1XSHgOOX55Q iEE5PPCY7QYHfvK0 -----END CERTIFICATE-----Generated at Sat Aug 23 19:50:58 2025 by rpki-client