$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft File: A912092CFA11F378852F52266C793AB678233205.mft (raw, json) Hash identifier: l2IzWwyHkhJgi8VYe05AvHANekHjckZ6cHzv3nlgzZM= Subject key identifier: B8:AE:96:DC:8E:B7:AF:6F:53:62:41:99:5F:91:A6:69:2F:33:4B:29 Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205 Certificate serial: 0950ABC81D535FC1B0F96AA1C4CBFBFCC2681481 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft Manifest number: 5E Signing time: Sat 23 Aug 2025 08:52:37 +0000 Manifest this update: Sat 23 Aug 2025 08:47:36 +0000 Manifest next update: Sun 24 Aug 2025 10:48:36 +0000 Files and hashes: 1: 326130393a353463333a613130303a3a2f34382d313238203d3e20323135313437.roa (hash: 5vA7kcahmkhnv7Pjx7uA7TrGRG+XVrMF+mKhb2vEG5U=) 2: 3131312e3233352e3135312e302f32342d3332203d3e20323135313437.roa (hash: vew4LNWCVofm5qe2BK5sopfMvrn3w6T63/5S4aLPNx0=) 3: 326130393a353463333a613030303a3a2f34302d313238203d3e20323039383734.roa (hash: ca9GKU5mOXVUfI7Du4XvHpxs7R00F6F4l3yz+1HGWmo=) 4: 326130393a353463333a613130313a3a2f34382d313238203d3e20323135313437.roa (hash: 90FGOeqqLptd8qlXcfjJgcF07gJvM1oxc2QmHLuTM1Y=) 5: A912092CFA11F378852F52266C793AB678233205.crl (hash: 2Iih1Jbcpfy6QUwuD3xLTKkA7WnpQVd/pZ5rjRkR6Gk=) 6: 326130393a353463333a393030303a3a2f33362d3438203d3e20323131303636.roa (hash: xreaSsj1MwZ82lmTtkcSGJaQcTRS3sQKh+9ELDbqOW0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 10:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:50:ab:c8:1d:53:5f:c1:b0:f9:6a:a1:c4:cb:fb:fc:c2:68:14:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912092CFA11F378852F52266C793AB678233205 Validity Not Before: Aug 23 08:47:36 2025 GMT Not After : Aug 24 10:48:36 2025 GMT Subject: CN=B8AE96DC8EB7AF6F536241995F91A6692F334B29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:88:d9:0e:c9:4d:fd:ee:d1:0e:4b:0f:1e:05: 74:86:00:25:51:13:30:26:ba:ac:d1:19:31:21:04: d5:dd:00:ef:67:cd:5e:f5:2f:b9:7f:45:41:45:a2: d6:a9:5e:fa:b8:6d:ca:74:17:3f:8b:c3:58:a2:ed: 7f:4b:1a:0c:e0:06:c1:c1:f8:1f:4e:45:cd:23:ec: 35:1b:df:e7:67:20:29:c4:68:d8:b7:f3:4f:14:0c: 5b:48:2d:6b:82:24:a1:21:ab:4c:5e:18:ac:64:c5: 78:fc:f6:e2:4e:c3:ad:b6:e4:b0:ba:fe:33:48:dd: 39:66:27:9c:21:4d:22:cb:c0:c8:f1:f4:6a:60:07: 76:0d:35:85:a4:3c:51:52:be:61:96:13:ca:b3:c8: a0:e7:b0:c5:c7:5a:fc:1f:c8:3c:4b:02:5c:d6:41: bc:0a:b9:c5:8c:b0:7d:e6:92:aa:91:87:de:0f:e6: f3:b2:f9:46:58:47:96:dc:92:68:f3:ee:5d:0a:04: 5c:cc:30:e8:1b:02:ee:62:e5:4c:8d:1e:49:85:60: 21:97:4c:5d:88:41:57:28:52:c6:02:cc:9b:52:79: 6c:31:42:24:52:fd:53:85:42:66:f8:e8:9a:2f:fe: 1b:6c:61:04:10:52:fb:a5:5f:d3:55:e2:f4:e6:97: e4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AE:96:DC:8E:B7:AF:6F:53:62:41:99:5F:91:A6:69:2F:33:4B:29 X509v3 Authority Key Identifier: keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f4:21:68:48:40:c7:6e:3d:51:a4:f0:33:fc:c7:b6:bb:70: 81:4a:b0:79:0e:21:e4:5a:cb:ea:61:31:97:df:3d:12:c3:0b: 40:41:f0:13:08:81:07:d1:ea:ed:7e:cc:3f:36:5d:30:d7:68: d6:7e:97:14:24:7e:8a:97:39:15:e7:a7:af:84:9f:ca:74:f4: 9f:b3:f4:15:eb:1a:31:5b:6e:b2:8e:53:de:1f:b0:c3:b3:da: 69:08:f1:fe:20:89:42:d1:69:e2:af:94:4a:75:a3:86:d1:c2: 92:85:b8:24:1c:37:cc:70:ae:09:d4:8c:9b:60:be:10:ac:02: 1e:88:52:85:57:2e:70:e2:be:1b:cb:46:ae:bd:a6:60:e8:93: e0:26:87:43:66:6d:13:58:75:e7:f1:6f:f6:ac:d6:e2:6e:1c: 08:c3:33:56:56:56:4a:2d:72:93:06:ad:9d:7b:1b:2b:eb:ab: 38:4f:9e:f3:f4:f9:c0:8d:3e:df:62:f8:ba:a5:f5:42:ee:02: 11:62:9e:46:70:c4:95:aa:40:86:fb:f2:0d:19:94:a8:95:4d: 2d:ce:cb:4b:ee:92:b6:aa:62:a1:ca:b5:98:b0:3c:59:f9:3c: ba:0c:65:c5:91:e2:4a:a2:49:ac:36:bb:bf:d2:60:a8:98:36: 91:aa:1a:30 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUCVCryB1TX8Gw+WqhxMv7/MJoFIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3 ODIzMzIwNTAeFw0yNTA4MjMwODQ3MzZaFw0yNTA4MjQxMDQ4MzZaMDMxMTAvBgNV BAMTKEI4QUU5NkRDOEVCN0FGNkY1MzYyNDE5OTVGOTFBNjY5MkYzMzRCMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6iNkOyU397tEOSw8eBXSGACVR EzAmuqzRGTEhBNXdAO9nzV71L7l/RUFFotapXvq4bcp0Fz+Lw1ii7X9LGgzgBsHB +B9ORc0j7DUb3+dnICnEaNi3808UDFtILWuCJKEhq0xeGKxkxXj89uJOw6225LC6 /jNI3TlmJ5whTSLLwMjx9GpgB3YNNYWkPFFSvmGWE8qzyKDnsMXHWvwfyDxLAlzW QbwKucWMsH3mkqqRh94P5vOy+UZYR5bckmjz7l0KBFzMMOgbAu5i5UyNHkmFYCGX TF2IQVcoUsYCzJtSeWwxQiRS/VOFQmb46Jov/htsYQQQUvulX9NV4vTml+SBAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUuK6W3I63r29TYkGZX5GmaS8zSykwHwYDVR0j BBgwFoAUqRIJLPoR83iFL1ImbHk6tngjMgUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzUvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIzMzIwNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3ODIz MzIwNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1m MDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNS9BOTEyMDkyQ0ZBMTFGMzc4ODUy RjUyMjY2Qzc5M0FCNjc4MjMzMjA1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfQhaEhAx249UaTwM/zH trtwgUqweQ4h5FrL6mExl989EsMLQEHwEwiBB9Hq7X7MPzZdMNdo1n6XFCR+ipc5 Feenr4SfynT0n7P0FesaMVtuso5T3h+ww7PaaQjx/iCJQtFp4q+USnWjhtHCkoW4 JBw3zHCuCdSMm2C+EKwCHohShVcucOK+G8tGrr2mYOiT4CaHQ2ZtE1h15/Fv9qzW 4m4cCMMzVlZWSi1ykwatnXsbK+urOE+e8/T5wI0+32L4uqX1Qu4CEWKeRnDElapA hvvyDRmUqJVNLc7LS+6Stqpiocq1mLA8Wfk8ugxlxZHiSqJJrDa7v9JgqJg2kaoa MA== -----END CERTIFICATE-----Generated at Sun Aug 24 02:25:30 2025 by rpki-client