$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft File: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json) Hash identifier: 85EGfM0UPAk9Gun5BOZuAkt66Dz8yxApj9zHhtm5umI= Subject key identifier: 48:E2:80:DF:42:EB:33:F8:C0:88:31:73:AE:4D:1B:00:14:7A:EA:FF Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 0B7D80DCDC602A8DDAF9865DEAE554F88F12A6E0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft Manifest number: 023A Signing time: Sat 23 Aug 2025 11:15:31 +0000 Manifest this update: Sat 23 Aug 2025 11:10:31 +0000 Manifest next update: Sun 24 Aug 2025 13:21:31 +0000 Files and hashes: 1: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: dkDlXn7ZTKwdhEvN1AyaOINvq0aj0JnSzR14swqFK7s=) 2: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: N14P7OBohSbQy0DehWUtRnaQDiTYui1EPhtUZv+U6kU=) 3: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 7nhFTtPjQhKd1Ac2yjZIA1kYzFwc8dF19rkGkZd+QFk=) 4: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 8fwqZHGyIJyFYdJn0gwpv+qKZFLFFwexw2Z/QOknvfY=) 5: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: JVdP0q01IdpmOHNHM/8N7QIeZGO9fY1B0zhs290wioo=) 6: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: lL21MUDpM3YDFXY+VNPjMEqMt9/EFafQb01ArsWLAjk=) 7: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: isp+v1bbWY3zX+eoFLAf4eK3r9/zMrMmocZ2PNCW2Rw=) 8: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: QP4KPs363lKNvbDMC91nWR64EDb9a5wYXaiiUC4k7Hs=) 9: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: HscFYsQcMtvjpDQJk86+k68Lr7MoMlx0VU02QHyOcGk=) 10: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: 33Hc4k2qb/SFtHgCtF148ZPS40TPUk0mIWne3Kl1fjs=) 11: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: 3t/0qmEuc7HUJ6jbuOuPnmd3ve4/XpcLhj4VdVBS4pk=) 12: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: rLVUcUxyRgJtw6VSAGlKyA8uqmBel4P5gDB+BMhpgCc=) 13: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: 06Oq8kkXsOv0rKoRYz/dx2UXUSYf9kyOjrjjxWn2c2o=) 14: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: gQv5NI8fa+cTBzk0tpepQG6QGKXWkVIlxityrSNAUjQ=) 15: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: IeK6ZG/g9V25xfR3xKZZdyq5xuMwonnHdhMMCLRMWBo=) 16: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: z2fbMMdTRhRUpcDHMD2rvY/J1s4P2i8N3FhzYltODNc=) 17: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: XJo8jS2djpRteJlKSIzBy0GSOcq3Jj/2wBDjV1PmcuQ=) 18: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: j14pv+Fih0N85ic38d12TDY0uRhDLdNY7cvkmnI17jw=) 19: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: mgbh+id7sfJxNC8FBIA9w2AVClblyfoF7d8LLx0Ph9g=) 20: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: LiQaiw5undZF8O9ZPrbB+SuBZXPDpvcvnNafAQKgteo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:7d:80:dc:dc:60:2a:8d:da:f9:86:5d:ea:e5:54:f8:8f:12:a6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Aug 23 11:10:31 2025 GMT Not After : Aug 24 13:21:31 2025 GMT Subject: CN=48E280DF42EB33F8C0883173AE4D1B00147AEAFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:15:cf:25:ff:4a:f5:15:f2:dc:e1:de:84: 8f:78:d1:fa:ee:01:93:df:da:ff:d3:58:a4:08:19: e0:30:dd:b4:49:6e:53:cc:02:9c:ee:fe:0b:d3:8e: 29:24:88:22:cf:28:bd:bc:91:c6:f9:0d:56:00:6f: 04:a8:b7:bd:c2:81:25:2e:8a:14:12:cc:79:1c:b7: f5:c9:01:01:05:6f:c6:07:29:d6:e5:8e:4e:da:e3: 98:a4:01:fe:0c:ef:6e:82:0b:d8:44:be:f5:c3:64: bb:c0:e4:00:b2:48:2e:50:7c:3a:f4:fd:cd:2b:26: d9:66:d9:90:aa:0c:e5:39:7f:1a:91:01:95:7c:30: 5e:a0:5d:77:93:d7:29:8e:f1:79:bb:59:57:53:44: ec:42:e7:d8:3b:e0:08:99:88:88:43:25:b0:23:25: c4:5b:ca:93:f4:69:ff:17:2d:bf:41:fb:65:8a:39: 3b:65:5a:27:6e:d4:e2:25:25:6e:b0:19:69:00:13: 00:07:4f:da:e0:d2:d1:99:a4:f1:01:ec:9a:cc:e3: e1:2c:47:1a:2a:52:1e:79:43:bc:7a:28:e1:9b:86: 0a:c9:49:67:54:b0:bb:cb:51:e5:74:89:06:5b:61: cb:de:0c:82:3c:06:21:6f:4d:df:a9:9f:2e:b6:35: 38:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E2:80:DF:42:EB:33:F8:C0:88:31:73:AE:4D:1B:00:14:7A:EA:FF X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:28:2a:88:1d:13:81:74:39:09:14:59:3a:5a:9b:6c:e2:4d: 58:f3:79:85:8d:e8:81:d7:cf:29:71:8d:1e:51:e3:84:29:5e: 60:2b:f4:57:eb:35:42:34:08:cd:ec:a9:b5:8a:e6:aa:b9:18: 0a:f4:5c:42:ae:ff:4c:18:d4:3e:49:73:65:76:b6:fe:3a:a9: 9d:fa:2d:7d:d5:f7:eb:5b:81:7d:2b:26:77:25:f3:44:a4:de: 8c:49:30:22:88:75:dc:e3:8f:0c:0a:cd:42:a6:d6:07:ca:38: 6b:80:37:1c:fd:4e:fd:ed:f1:d7:79:89:12:bf:46:34:14:0a: e9:71:55:19:9a:0e:9b:65:95:3c:d5:c5:a9:54:fb:7e:12:d3: 31:3e:e4:d5:76:ce:ea:ac:e9:18:49:9b:c2:a1:01:1b:6d:2c: 1e:5d:ba:fa:eb:92:65:4a:d2:19:38:c0:04:41:aa:2c:ad:26: 29:f1:bb:74:75:71:a8:6b:02:38:22:e6:ec:54:fc:42:9c:a6: 32:4c:00:bf:67:8c:d4:da:ee:48:a4:2d:bd:68:6b:10:df:2d: d4:5b:8c:ca:32:4b:ef:0d:42:3b:73:5c:2c:8d:fa:18:99:19: f6:43:94:4a:d6:f8:d2:29:64:74:fc:87:f9:ed:9d:6a:e6:91: d8:02:8a:2a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUC32A3NxgKo3a+YZd6uVU+I8SpuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNTA4MjMxMTEwMzFaFw0yNTA4MjQxMzIxMzFaMDMxMTAvBgNV BAMTKDQ4RTI4MERGNDJFQjMzRjhDMDg4MzE3M0FFNEQxQjAwMTQ3QUVBRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBxXPJf9K9RXy3OHehI940fru AZPf2v/TWKQIGeAw3bRJblPMApzu/gvTjikkiCLPKL28kcb5DVYAbwSot73CgSUu ihQSzHkct/XJAQEFb8YHKdbljk7a45ikAf4M726CC9hEvvXDZLvA5ACySC5QfDr0 /c0rJtlm2ZCqDOU5fxqRAZV8MF6gXXeT1ymO8Xm7WVdTROxC59g74AiZiIhDJbAj JcRbypP0af8XLb9B+2WKOTtlWidu1OIlJW6wGWkAEwAHT9rg0tGZpPEB7JrM4+Es RxoqUh55Q7x6KOGbhgrJSWdUsLvLUeV0iQZbYcveDII8BiFvTd+pny62NTghAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUSOKA30LrM/jAiDFzrk0bABR66v8wHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS80LzhFMDdEMzFD NjQ1MkY3QTZCMjRFNjNDRERDNDkwRTEyRTBBRkIzOEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5KCqI HROBdDkJFFk6Wpts4k1Y83mFjeiB188pcY0eUeOEKV5gK/RX6zVCNAjN7Km1iuaq uRgK9FxCrv9MGNQ+SXNldrb+Oqmd+i191ffrW4F9KyZ3JfNEpN6MSTAiiHXc448M Cs1CptYHyjhrgDcc/U797fHXeYkSv0Y0FArpcVUZmg6bZZU81cWpVPt+EtMxPuTV ds7qrOkYSZvCoQEbbSweXbr665JlStIZOMAEQaosrSYp8bt0dXGoawI4IubsVPxC nKYyTAC/Z4zU2u5IpC29aGsQ3y3UW4zKMkvvDUI7c1wsjfoYmRn2Q5RK1vjSKWR0 /If57Z1q5pHYAooq -----END CERTIFICATE-----Generated at Sat Aug 23 20:15:25 2025 by rpki-client