$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: DhNcDt0fA79ota7T48op+lcnOmZFu929XB/NNOH8vgY= Subject key identifier: 5D:55:17:18:42:07:E3:16:7E:C6:FF:3C:7C:D6:F6:62:02:AF:31:CC Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 514513C5501F8AB4C1CC6705CDC13BA565A17D7E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 01A9 Signing time: Sat 28 Jun 2025 21:27:40 +0000 Manifest this update: Sat 28 Jun 2025 21:22:40 +0000 Manifest next update: Mon 30 Jun 2025 00:24:40 +0000 Files and hashes: 1: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: NfdCiPZo2V7z2IR8DOEcP9s1WlT0wPdEK10WCc6hh18=) 2: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: V3SUbUEDX8LHLvBHhcRZFMAtyXi3oKIim+z/ArRGv1o=) 3: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: LZc2AksEahD5rzoxMFxve6nJwmwqwYYZ+BLhaadaDDA=) 4: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: R+o6n+RjWkxiRu/ckQJHanWEp0DumqtvHG3oGP82QQ8=) 5: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=) 6: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: DO5U+zbxAW9dCHHkG8v0O5pLZTi9rHV+80EYsqI00GY=) 7: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: xL09RaMvNnk3zcTxJYCpyR11r2WfajekNMt0OPCzbqM=) 8: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=) 9: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: TNC4zrNVSYq6rg1HfzOLsFNL5cW5pcjjIopBseDA51Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 16:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:45:13:c5:50:1f:8a:b4:c1:cc:67:05:cd:c1:3b:a5:65:a1:7d:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Jun 28 21:22:40 2025 GMT Not After : Jun 30 00:24:40 2025 GMT Subject: CN=5D5517184207E3167EC6FF3C7CD6F66202AF31CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:48:19:66:51:69:81:3c:ef:dd:12:46:69:e5: 6d:ae:e1:3a:4c:c3:ba:a1:ab:71:cf:1f:c7:81:20: 1b:61:81:aa:d1:af:31:8f:4d:14:b3:91:a7:58:67: b6:61:f8:44:38:00:fb:48:e5:e3:cc:a8:e7:14:a0: c1:7b:f7:bf:cf:92:53:5b:ed:72:62:91:bf:05:0b: 99:41:ac:e5:a5:76:21:aa:f3:fc:3b:25:c4:2d:77: cb:5b:57:3a:88:ab:7a:15:82:e0:82:d0:0e:d0:fb: 7c:4b:62:4f:50:89:95:c9:52:7e:c5:2e:1e:04:33: 5d:3c:8f:6b:4c:5b:87:ad:c7:2d:9c:22:f2:34:73: 5f:36:35:50:bc:ca:61:82:66:63:6d:5e:ef:dc:72: f2:d9:00:23:36:54:78:f6:f1:f6:ae:ee:cf:0b:47: 04:33:48:f3:4c:c5:cc:3d:46:fc:72:ba:93:25:7a: 19:0b:a8:9a:0b:36:85:3a:e8:0a:7d:c6:dc:81:ed: ac:85:cb:00:8a:16:0a:3e:ad:95:d0:23:75:0a:c6: a1:a5:83:41:d2:dc:94:81:a5:f0:7e:70:22:97:91: 36:58:ed:39:9e:8d:a5:eb:02:90:47:5a:e3:fb:6a: 91:27:45:8f:73:6f:2c:ca:50:45:6a:76:55:52:20: ae:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:55:17:18:42:07:E3:16:7E:C6:FF:3C:7C:D6:F6:62:02:AF:31:CC X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:da:cd:d1:50:23:37:50:6d:92:be:d3:80:3b:ca:52:d0:93: 60:99:86:3c:37:3d:4b:76:88:68:a7:99:b5:9d:fc:45:63:8e: 3f:66:2f:cb:0e:5a:3c:c5:8f:da:cd:39:6b:b4:70:07:68:1c: 66:1c:25:28:96:f0:12:f4:7b:97:c5:81:ed:ad:0b:04:4c:fb: 6f:7a:0a:65:ed:98:5d:21:88:27:56:bc:37:a2:21:bb:88:ba: 08:95:be:73:46:e8:2b:a8:9a:11:64:4d:ec:0c:4d:14:d0:9d: 34:b8:0f:a7:43:13:38:42:4b:58:a6:90:85:52:c0:5f:3b:b3: 57:7c:86:d5:98:26:3c:2e:dc:11:f9:03:ce:47:61:e5:71:b2: b4:9a:52:5f:de:c7:78:af:52:fa:6d:45:3f:86:2c:0d:16:ee: ca:78:ff:07:17:88:7e:f7:8f:c7:67:93:77:b4:40:f3:47:d6: 8c:b1:6d:f6:b6:7c:eb:1b:a4:cb:95:ff:37:91:25:bf:16:b4: 5b:66:d3:02:74:46:7b:d0:2b:3e:38:7f:9b:dc:c4:b1:c5:9c: a6:f9:d9:44:ed:46:86:c8:d4:64:52:51:6d:7f:7b:eb:a3:65: 00:c0:5a:18:6b:b5:bd:d8:63:cb:63:39:bc:c7:ea:76:e4:37: e0:a3:53:42 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUUUTxVAfirTBzGcFzcE7pWWhfX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNTA2MjgyMTIyNDBaFw0yNTA2MzAwMDI0NDBaMDMxMTAvBgNV BAMTKDVENTUxNzE4NDIwN0UzMTY3RUM2RkYzQzdDRDZGNjYyMDJBRjMxQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUSBlmUWmBPO/dEkZp5W2u4TpM w7qhq3HPH8eBIBthgarRrzGPTRSzkadYZ7Zh+EQ4APtI5ePMqOcUoMF797/PklNb 7XJikb8FC5lBrOWldiGq8/w7JcQtd8tbVzqIq3oVguCC0A7Q+3xLYk9QiZXJUn7F Lh4EM108j2tMW4etxy2cIvI0c182NVC8ymGCZmNtXu/ccvLZACM2VHj28fau7s8L RwQzSPNMxcw9RvxyupMlehkLqJoLNoU66Ap9xtyB7ayFywCKFgo+rZXQI3UKxqGl g0HS3JSBpfB+cCKXkTZY7TmejaXrApBHWuP7apEnRY9zbyzKUEVqdlVSIK4PAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXVUXGEIH4xZ+xv88fNb2YgKvMcwwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/2s3R UCM3UG2SvtOAO8pS0JNgmYY8Nz1Ldohop5m1nfxFY44/Zi/LDlo8xY/azTlrtHAH aBxmHCUolvAS9HuXxYHtrQsETPtvegpl7ZhdIYgnVrw3oiG7iLoIlb5zRugrqJoR ZE3sDE0U0J00uA+nQxM4QktYppCFUsBfO7NXfIbVmCY8LtwR+QPOR2HlcbK0mlJf 3sd4r1L6bUU/hiwNFu7KeP8HF4h+94/HZ5N3tEDzR9aMsW32tnzrG6TLlf83kSW/ FrRbZtMCdEZ70Cs+OH+b3MSxxZym+dlE7UaGyNRkUlFtf3vro2UAwFoYa7W92GPL Yzm8x+p25Dfgo1NC -----END CERTIFICATE-----Generated at Sun Jun 29 08:51:43 2025 by rpki-client