$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/CF1D094BB231C3433115D5C53880889E2E701056.mft File: CF1D094BB231C3433115D5C53880889E2E701056.mft (raw, json) Hash identifier: uBRcrqSdbCV5+pz4jmvBt+Uc6aEyd4QglSTngG7qQec= Subject key identifier: 69:37:2F:73:14:61:D5:A9:D4:6C:07:F8:3F:E9:6D:FB:31:67:9B:E0 Authority key identifier: CF:1D:09:4B:B2:31:C3:43:31:15:D5:C5:38:80:88:9E:2E:70:10:56 Certificate issuer: /CN=CF1D094BB231C3433115D5C53880889E2E701056 Certificate serial: 4BA95BD8817FB8E69C672FA93E5E8106600FBAE7 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/CF1D094BB231C3433115D5C53880889E2E701056.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/CF1D094BB231C3433115D5C53880889E2E701056.mft Manifest number: 11 Signing time: Sat 23 Aug 2025 17:11:41 +0000 Manifest this update: Sat 23 Aug 2025 17:06:41 +0000 Manifest next update: Sun 24 Aug 2025 18:11:41 +0000 Files and hashes: 1: 326130623a346530373a6138303a3a2f34382d3438203d3e20323133343133.roa (hash: VFCaT5gWrcJkaWXTyEtArHJX8FDqDPtqQh1zCLlvdkg=) 2: 326130623a346530373a6130303a3a2f34302d3438203d3e20323036363034.roa (hash: 8Md/La44Xpn1oMAzaG9XDAjv3TiFqdmAMPIZYNeSYkk=) 3: 326130623a346530373a6166303a3a2f34342d3438203d3e20323035393431.roa (hash: 9FuIWN2ec49H8+soA+LiveYXJ3y0qS/R7Tx2QWopf0U=) 4: CF1D094BB231C3433115D5C53880889E2E701056.crl (hash: WOfvnK53txijUuY2gg5lmFSf4iSC7iVHdrr+2e4/En8=) 5: 326130623a346530373a6138323a3a2f34382d3438203d3e20323133343133.roa (hash: MIvcm2K98lb9KDO/Md94OH42iP6tyrugKzMZDItmUtY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/CF1D094BB231C3433115D5C53880889E2E701056.crl rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/CF1D094BB231C3433115D5C53880889E2E701056.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/CF1D094BB231C3433115D5C53880889E2E701056.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 13:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a9:5b:d8:81:7f:b8:e6:9c:67:2f:a9:3e:5e:81:06:60:0f:ba:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF1D094BB231C3433115D5C53880889E2E701056 Validity Not Before: Aug 23 17:06:41 2025 GMT Not After : Aug 24 18:11:41 2025 GMT Subject: CN=69372F731461D5A9D46C07F83FE96DFB31679BE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f4:25:63:22:a5:5b:42:09:fd:bb:d5:2d:40: 0a:3e:66:b5:78:62:b9:21:4e:4f:8d:76:04:24:0e: e0:44:fc:3c:f9:e4:45:15:6c:e1:c8:30:29:88:fb: 25:bb:f5:8e:c1:bf:a2:97:ec:e8:94:01:54:5e:2c: 08:73:42:cc:02:fd:bc:70:48:55:7f:8f:87:df:c3: 26:ef:f7:1b:72:e8:cd:a4:bf:75:23:ef:ac:fc:78: 15:60:67:f2:b6:7a:e5:d4:80:0f:9b:48:a0:1a:52: 3a:95:75:23:00:f0:6e:d9:85:89:c1:a4:80:c7:44: 29:14:c9:58:ff:37:3b:2b:23:4c:86:dc:57:24:b9: ac:02:20:15:6a:c0:98:17:5e:41:b5:fd:68:e2:85: c6:1a:6f:ae:f8:73:60:6b:b8:61:af:ce:d9:65:b5: 14:fb:4c:4c:c8:22:a2:65:38:ba:2a:13:ce:24:ec: ca:c1:47:32:d9:22:85:d8:a3:db:d2:17:39:71:b9: 93:ba:eb:78:89:f5:f2:2d:b1:17:97:f6:b7:71:94: b4:0b:4a:5e:29:45:d3:43:d4:81:45:04:f3:1b:47: 10:04:48:71:9c:f0:cd:4d:ed:02:18:0f:67:19:74: 87:3e:c0:e3:0a:25:fd:67:74:a3:80:02:7c:37:71: e7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:37:2F:73:14:61:D5:A9:D4:6C:07:F8:3F:E9:6D:FB:31:67:9B:E0 X509v3 Authority Key Identifier: keyid:CF:1D:09:4B:B2:31:C3:43:31:15:D5:C5:38:80:88:9E:2E:70:10:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/CF1D094BB231C3433115D5C53880889E2E701056.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/CF1D094BB231C3433115D5C53880889E2E701056.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/CF1D094BB231C3433115D5C53880889E2E701056.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:68:ac:0b:63:78:9b:07:03:b2:65:50:c1:08:32:b7:46:7e: d6:f0:ad:d6:1c:c3:cb:bc:ed:fd:54:bc:06:42:8f:76:32:1e: 55:05:f5:bc:7b:ab:67:94:89:c1:4d:aa:32:59:cb:06:47:d8: b0:c7:d0:b4:df:f1:16:98:db:ec:f5:3d:16:b2:8c:02:7d:a6: e0:4e:41:74:87:70:4f:a7:dd:47:ff:85:23:69:bd:91:b7:52: 96:89:8a:e5:79:09:6d:62:23:c7:90:97:cd:12:aa:85:94:be: 24:d5:c8:d2:5b:ec:65:4f:55:99:77:f1:4f:0c:13:08:11:68: e9:47:2b:6d:8b:9b:fc:5f:46:61:a5:9e:c8:a7:f8:d8:5c:af: d1:ce:0c:d8:c0:a6:ef:e5:2b:91:ad:9c:0f:93:d8:01:c9:ca: 5b:b5:14:9c:9b:8e:10:3e:79:1d:27:94:cb:a8:2b:66:97:e4: e4:04:2a:3c:de:d4:fc:22:ee:19:fd:cb:27:48:2c:fb:59:60: f7:bf:9f:b0:af:41:dc:81:08:a8:c3:38:53:29:25:7f:0f:2d: 39:dc:b9:f4:b7:09:5f:0c:2c:b3:2f:c6:57:f9:7f:da:31:a6: 94:cd:b9:42:62:fb:b0:dc:0a:6d:34:40:9a:17:bb:aa:e4:a7: 99:ed:d5:e0 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUS6lb2IF/uOacZy+pPl6BBmAPuucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YxRDA5NEJCMjMxQzM0MzMxMTVENUM1Mzg4MDg4OUUy RTcwMTA1NjAeFw0yNTA4MjMxNzA2NDFaFw0yNTA4MjQxODExNDFaMDMxMTAvBgNV BAMTKDY5MzcyRjczMTQ2MUQ1QTlENDZDMDdGODNGRTk2REZCMzE2NzlCRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi9CVjIqVbQgn9u9UtQAo+ZrV4 YrkhTk+NdgQkDuBE/Dz55EUVbOHIMCmI+yW79Y7Bv6KX7OiUAVReLAhzQswC/bxw SFV/j4ffwybv9xty6M2kv3Uj76z8eBVgZ/K2euXUgA+bSKAaUjqVdSMA8G7ZhYnB pIDHRCkUyVj/NzsrI0yG3FckuawCIBVqwJgXXkG1/WjihcYab674c2BruGGvztll tRT7TEzIIqJlOLoqE84k7MrBRzLZIoXYo9vSFzlxuZO663iJ9fItsReX9rdxlLQL Sl4pRdND1IFFBPMbRxAESHGc8M1N7QIYD2cZdIc+wOMKJf1ndKOAAnw3ceebAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUaTcvcxRh1anUbAf4P+lt+zFnm+AwHwYDVR0j BBgwFoAUzx0JS7Ixw0MxFdXFOICIni5wEFYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjdlYmRlMDMtMzRkZi00ZjJjLTkyZmEtOGZlMWQwODNk MTVkLzIvQ0YxRDA5NEJCMjMxQzM0MzMxMTVENUM1Mzg4MDg4OUUyRTcwMTA1Ni5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvQ0YxRDA5NEJCMjMxQzM0MzMxMTVENUM1Mzg4MDg4OUUyRTcw MTA1Ni5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yN2ViZGUwMy0z NGRmLTRmMmMtOTJmYS04ZmUxZDA4M2QxNWQvMi9DRjFEMDk0QkIyMzFDMzQzMzEx NUQ1QzUzODgwODg5RTJFNzAxMDU2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2isC2N4mwcDsmVQwQgy t0Z+1vCt1hzDy7zt/VS8BkKPdjIeVQX1vHurZ5SJwU2qMlnLBkfYsMfQtN/xFpjb 7PU9FrKMAn2m4E5BdIdwT6fdR/+FI2m9kbdSlomK5XkJbWIjx5CXzRKqhZS+JNXI 0lvsZU9VmXfxTwwTCBFo6UcrbYub/F9GYaWeyKf42Fyv0c4M2MCm7+Urka2cD5PY AcnKW7UUnJuOED55HSeUy6grZpfk5AQqPN7U/CLuGf3LJ0gs+1lg97+fsK9B3IEI qMM4Uyklfw8tOdy59LcJXwwssy/GV/l/2jGmlM25QmL7sNwKbTRAmhe7quSnme3V 4A== -----END CERTIFICATE-----Generated at Sat Aug 23 23:42:59 2025 by rpki-client