$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: a5oO0aAKry3hgp5teFBhrMQ68sV5gW+/PFR9L/hVc1A= Subject key identifier: 98:3B:5D:C5:B7:8B:F2:C3:C3:4A:69:31:61:9C:7A:08:3E:B1:3D:73 Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 7B119F0540B431C64098E5340350BEAEF4BE625E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 01FD Signing time: Sat 23 Aug 2025 00:48:12 +0000 Manifest this update: Sat 23 Aug 2025 00:43:12 +0000 Manifest next update: Sun 24 Aug 2025 03:14:12 +0000 Files and hashes: 1: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: pZyYX9vqAixKUDIqsxujnSVA6UfFKeJc5iZ4yNtLX48=) 2: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: NfdCiPZo2V7z2IR8DOEcP9s1WlT0wPdEK10WCc6hh18=) 3: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: R+o6n+RjWkxiRu/ckQJHanWEp0DumqtvHG3oGP82QQ8=) 4: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: LZc2AksEahD5rzoxMFxve6nJwmwqwYYZ+BLhaadaDDA=) 5: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: SsdW0YpcJfef7CtWvRhhfCUEgjAhSHqFG1h0ACBR214=) 6: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: TNC4zrNVSYq6rg1HfzOLsFNL5cW5pcjjIopBseDA51Y=) 7: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: P/QcqIIy85GjM3tFppq0ggk6JF//5F+UPK6pOIQVrJQ=) 8: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=) 9: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: xL09RaMvNnk3zcTxJYCpyR11r2WfajekNMt0OPCzbqM=) 10: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=) 11: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: DO5U+zbxAW9dCHHkG8v0O5pLZTi9rHV+80EYsqI00GY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 02:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:11:9f:05:40:b4:31:c6:40:98:e5:34:03:50:be:ae:f4:be:62:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Aug 23 00:43:12 2025 GMT Not After : Aug 24 03:14:12 2025 GMT Subject: CN=983B5DC5B78BF2C3C34A6931619C7A083EB13D73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0a:9e:cf:be:ed:2e:3e:28:a0:9f:07:fb:2a: e7:fa:5d:0a:56:91:ba:7c:43:71:fa:f9:91:6b:ba: a9:f1:86:ba:2b:df:c9:d8:08:36:df:8b:32:a3:bc: 2f:82:4f:c7:cf:dc:31:6c:c3:0e:8e:56:10:3e:55: 38:5c:72:42:c0:70:1a:35:31:4f:63:62:22:cd:f1: 59:91:ac:c3:cb:f5:13:83:5b:ea:fa:95:74:bb:04: 79:b0:4c:71:53:b9:0b:fc:3e:e4:57:02:00:a3:8f: b7:ae:d8:3d:98:50:b8:80:f4:59:95:1e:f5:6b:07: 2c:13:75:94:89:38:16:f6:fb:c6:5e:4d:f7:26:26: 8e:c9:25:76:7d:88:11:52:c1:1d:01:4b:25:c9:3c: fc:4d:eb:a1:f6:cc:37:3e:4d:64:60:fb:00:07:a5: ef:4b:bd:66:6a:fd:31:cf:e3:90:1b:c0:8b:bb:57: ec:a0:1f:5e:e3:ca:05:d6:67:00:04:71:c9:5b:f4: 1e:ac:51:f8:5c:95:d5:e4:19:01:d2:db:e3:d2:e1: 82:5d:59:19:4c:e9:cd:ac:6f:01:86:22:0f:6e:91: 38:94:3a:6d:fb:e4:ab:fa:02:0e:e3:a0:3c:a3:dd: d3:c5:7c:18:de:cb:70:fd:2c:f4:7b:0b:d4:ca:36: 56:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3B:5D:C5:B7:8B:F2:C3:C3:4A:69:31:61:9C:7A:08:3E:B1:3D:73 X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:87:6a:01:33:31:44:4e:2d:a9:3b:f3:de:d9:f0:62:fa:03: 9a:7b:33:19:1e:c1:d1:2b:27:13:a3:c5:7e:03:e6:df:3e:bf: 6f:bf:a8:7d:95:ea:87:25:62:64:d7:b3:6e:e4:49:ae:08:ad: ad:70:84:35:f3:27:9e:6a:50:f3:6f:22:1c:2d:a0:9c:3a:b2: d2:a3:55:e8:91:fa:c6:43:da:cf:86:c0:97:c4:ce:5a:06:30: b4:4b:d2:90:b0:15:5a:f1:5e:e1:a8:fe:43:68:4b:63:6f:f1: 20:dc:22:5e:49:d7:48:97:0d:fb:82:f4:6b:0e:01:cd:38:fc: 31:ae:bd:1c:10:06:36:77:1a:6d:1a:8f:69:2f:37:98:76:ad: 61:73:20:26:bc:a3:a9:d3:6d:ef:96:9e:63:42:0a:a6:98:80: 81:98:87:81:4f:99:5b:6f:60:ab:6d:53:31:4d:c5:8c:f5:af: a3:2f:0c:e6:8b:5c:15:25:7e:f5:8a:19:ad:2a:f2:0d:42:41: 23:56:4f:e2:a2:9c:08:6e:67:61:5f:8e:44:54:e7:66:2f:e6: b3:8c:41:b6:e1:7a:d5:14:5c:4a:b4:75:ec:37:14:74:c1:80: f8:60:57:77:54:02:12:64:ea:09:0e:46:5d:b8:c4:d6:9d:08: d0:07:7d:f7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUexGfBUC0McZAmOU0A1C+rvS+Yl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNTA4MjMwMDQzMTJaFw0yNTA4MjQwMzE0MTJaMDMxMTAvBgNV BAMTKDk4M0I1REM1Qjc4QkYyQzNDMzRBNjkzMTYxOUM3QTA4M0VCMTNENzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWCp7Pvu0uPiignwf7Kuf6XQpW kbp8Q3H6+ZFruqnxhror38nYCDbfizKjvC+CT8fP3DFsww6OVhA+VThcckLAcBo1 MU9jYiLN8VmRrMPL9RODW+r6lXS7BHmwTHFTuQv8PuRXAgCjj7eu2D2YULiA9FmV HvVrBywTdZSJOBb2+8ZeTfcmJo7JJXZ9iBFSwR0BSyXJPPxN66H2zDc+TWRg+wAH pe9LvWZq/THP45AbwIu7V+ygH17jygXWZwAEcclb9B6sUfhcldXkGQHS2+PS4YJd WRlM6c2sbwGGIg9ukTiUOm375Kv6Ag7joDyj3dPFfBjey3D9LPR7C9TKNlaJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUmDtdxbeL8sPDSmkxYZx6CD6xPXMwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYh2oB MzFETi2pO/Pe2fBi+gOaezMZHsHRKycTo8V+A+bfPr9vv6h9leqHJWJk17Nu5Emu CK2tcIQ18yeealDzbyIcLaCcOrLSo1XokfrGQ9rPhsCXxM5aBjC0S9KQsBVa8V7h qP5DaEtjb/Eg3CJeSddIlw37gvRrDgHNOPwxrr0cEAY2dxptGo9pLzeYdq1hcyAm vKOp023vlp5jQgqmmICBmIeBT5lbb2CrbVMxTcWM9a+jLwzmi1wVJX71ihmtKvIN QkEjVk/iopwIbmdhX45EVOdmL+azjEG24XrVFFxKtHXsNxR0wYD4YFd3VAISZOoJ DkZduMTWnQjQB333 -----END CERTIFICATE-----Generated at Sat Aug 23 10:52:46 2025 by rpki-client