$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft File: 1498141819112B8446C2D4A3111F53038F05DBE9.mft (raw, json) Hash identifier: ezGbFSqoMQ6AOS/WqMD8pwV6HGOh/RO/N4nXMhA0JJo= Subject key identifier: 5B:8D:E8:8C:49:DF:B0:21:DF:69:4A:44:91:BA:5B:C5:9A:FA:9D:ED Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9 Certificate serial: 041AB23E2A5809724FE5923F0F6B0D4323770509 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft Manifest number: 7A Signing time: Sat 23 Aug 2025 02:12:33 +0000 Manifest this update: Sat 23 Aug 2025 02:07:33 +0000 Manifest next update: Sun 24 Aug 2025 05:58:33 +0000 Files and hashes: 1: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (hash: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=) 2: 3138352e39312e3131352e302f32342d3234203d3e2034363337.roa (hash: ck91ILJJRhGrU5dcx7s2t1suhnGyLbRTekoZlADPXPE=) 3: 3138352e39312e3131322e302f32342d3234203d3e2039333034.roa (hash: FBmWoOgHZKzCUczEDst+dylscH3cy9pnsw3RbPeSrfU=) 4: 3138352e39312e3131332e302f32342d3234203d3e20323134323038.roa (hash: qSSu/jTa9CtmAhgZlrJ1s4QldXeKp0EqfLu29FuP5Zs=) 5: 1498141819112B8446C2D4A3111F53038F05DBE9.crl (hash: 8EwvAk/xX3wl1ez6YD8Hvaeb7BIwD2FkVQ8j4czy4sg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:1a:b2:3e:2a:58:09:72:4f:e5:92:3f:0f:6b:0d:43:23:77:05:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9 Validity Not Before: Aug 23 02:07:33 2025 GMT Not After : Aug 24 05:58:33 2025 GMT Subject: CN=5B8DE88C49DFB021DF694A4491BA5BC59AFA9DED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8a:9a:8d:61:e6:2f:5d:ee:7c:f6:6a:df:f6: 07:8b:8f:e8:e7:5e:9c:02:6f:fe:2e:23:ef:dd:ea: f9:d0:24:d2:c9:92:18:9e:e9:cb:ac:18:74:5c:07: b2:f4:b7:bf:1a:96:f2:f6:4f:e6:ca:76:ba:0d:23: f6:f9:ba:a1:94:0a:77:2c:bc:a4:ab:52:06:1d:02: 8d:78:84:87:30:db:40:ce:31:56:3d:44:03:3e:23: d2:d3:96:19:8c:08:ed:0a:4a:dd:53:f2:f4:25:a4: 90:46:68:fc:30:c6:72:b1:91:0e:0e:bd:73:c4:c6: 52:9e:65:4b:58:86:89:5f:78:87:4c:75:20:31:79: da:cf:2b:d9:8c:93:c1:a4:1d:aa:bc:53:52:e8:3f: 4c:f9:dd:24:fb:d1:28:12:36:e1:c7:bb:9a:df:21: 57:1a:c6:af:9f:3d:88:ca:c1:c7:9b:08:21:a2:3e: 81:f4:0c:eb:87:19:1b:7d:19:c3:3b:13:0e:e2:6b: 7b:ae:c7:fe:37:32:3f:26:a1:fc:ec:cb:1d:3a:29: ec:f4:a8:b9:b0:af:f3:1b:28:44:7f:4b:5e:6b:76: 52:84:78:fa:0d:7f:18:e0:99:c4:4e:bf:57:6b:c7: 96:1f:06:c3:47:4f:ed:df:05:44:f1:e8:20:ac:83: 9f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8D:E8:8C:49:DF:B0:21:DF:69:4A:44:91:BA:5B:C5:9A:FA:9D:ED X509v3 Authority Key Identifier: keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:52:69:c9:c8:1e:90:b2:0b:23:2a:17:20:6b:f9:a6:bc:c0: 62:90:f4:be:aa:48:9e:bd:26:42:af:e2:01:97:3f:41:58:5e: 19:e1:7c:5e:4f:be:e9:32:03:ef:81:c0:98:76:f8:8b:be:ad: c6:d4:ef:1d:1c:81:9b:d7:fd:b7:fc:2e:a9:ce:95:b0:17:5a: 0a:57:d7:a9:82:9e:50:a9:34:df:2c:74:c0:98:48:97:fa:71: 7a:a6:af:39:5e:ca:26:a8:6b:26:1f:5a:77:ed:ca:32:1b:81: d5:29:47:de:66:4f:eb:bc:ab:b9:8c:60:68:16:77:45:15:28: 89:d4:1a:c8:88:ff:49:23:d1:d2:81:bc:ef:6b:30:a3:44:cb: e7:58:07:69:03:97:69:cb:1b:31:4f:0c:50:15:57:e1:61:89: 43:37:14:98:57:ce:fa:13:9e:9b:36:ef:dd:2b:67:09:e0:ac: 17:4e:0a:1f:84:b0:df:e7:04:2a:ea:b8:41:8e:b7:92:07:42: 36:ec:23:28:dd:38:a7:39:d7:71:9e:13:1e:f7:61:be:79:8b: 37:48:f8:d9:27:b1:52:6c:09:28:f2:1d:97:38:2e:cd:e5:83: 85:17:2c:0d:de:ec:f8:99:67:ae:82:45:07:2e:95:ac:59:6d: 33:cd:46:99 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBBqyPipYCXJP5ZI/D2sNQyN3BQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5ODE0MTgxOTExMmI4NDQ2YzJkNGEzMTExZjUzMDM4 ZjA1ZGJlOTAeFw0yNTA4MjMwMjA3MzNaFw0yNTA4MjQwNTU4MzNaMDMxMTAvBgNV BAMTKDVCOERFODhDNDlERkIwMjFERjY5NEE0NDkxQkE1QkM1OUFGQTlERUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcipqNYeYvXe589mrf9geLj+jn XpwCb/4uI+/d6vnQJNLJkhie6cusGHRcB7L0t78alvL2T+bKdroNI/b5uqGUCncs vKSrUgYdAo14hIcw20DOMVY9RAM+I9LTlhmMCO0KSt1T8vQlpJBGaPwwxnKxkQ4O vXPExlKeZUtYholfeIdMdSAxedrPK9mMk8GkHaq8U1LoP0z53ST70SgSNuHHu5rf IVcaxq+fPYjKwcebCCGiPoH0DOuHGRt9GcM7Ew7ia3uux/43Mj8mofzsyx06Kez0 qLmwr/MbKER/S15rdlKEePoNfxjgmcROv1drx5YfBsNHT+3fBUTx6CCsg58rAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUW43ojEnfsCHfaUpEkbpbxZr6ne0wHwYDVR0j BBgwFoAUFJgUGBkRK4RGwtSjER9TA48F2+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQtZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5 ODk3LzAvMTQ5ODE0MTgxOTExMkI4NDQ2QzJENEEzMTExRjUzMDM4RjA1REJFOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ZKZ1VHQmtSSzRSR3d0U2pFUjlUQTQ4 RjItay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOTA2NmY1ZC1l Y2MxLTQ5MjctOTVjMS1lMWE4ZGY4Zjk4OTcvMC8xNDk4MTQxODE5MTEyQjg0NDZD MkQ0QTMxMTFGNTMwMzhGMDVEQkU5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFJpycgekLILIyoXIGv5 przAYpD0vqpInr0mQq/iAZc/QVheGeF8Xk++6TID74HAmHb4i76txtTvHRyBm9f9 t/wuqc6VsBdaClfXqYKeUKk03yx0wJhIl/pxeqavOV7KJqhrJh9ad+3KMhuB1SlH 3mZP67yruYxgaBZ3RRUoidQayIj/SSPR0oG872swo0TL51gHaQOXacsbMU8MUBVX 4WGJQzcUmFfO+hOemzbv3StnCeCsF04KH4Sw3+cEKuq4QY63kgdCNuwjKN04pznX cZ4THvdhvnmLN0j42SexUmwJKPIdlzguzeWDhRcsDd7s+JlnroJFBy6VrFltM81G mQ== -----END CERTIFICATE-----Generated at Sat Aug 23 12:12:57 2025 by rpki-client