$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft File: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft (raw, json) Hash identifier: AjNJatVcsF1FWolHpOCXaS0PfAmU/JzFVqLIYPNNtR0= Subject key identifier: EE:4D:19:46:33:9D:60:B2:34:44:6D:FB:51:FB:EE:6B:E4:5E:E9:37 Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Certificate serial: 0C809006AA668A67342FB3ABE4B4B3402D9A0633 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft Manifest number: 042C Signing time: Sat 28 Jun 2025 12:29:10 +0000 Manifest this update: Sat 28 Jun 2025 12:24:10 +0000 Manifest next update: Sun 29 Jun 2025 13:04:10 +0000 Files and hashes: 1: 3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa (hash: pkJz5L9iLZRF+OIvLDh3t2xUInq31L6An4us+3j1eD0=) 2: 3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa (hash: PjHq1CK+fSk+5WuONiKJilG5oXTFh0dZnkKMEZVNP8E=) 3: 3138382e3136342e3135352e302f32342d3234203d3e203631333137.roa (hash: W1I8woHaqJ6kU4xjFwKm1g6uV7UZ51m6Dv8R/7Dp0Oc=) 4: 3138382e3136342e3135342e302f32342d3234203d3e20383334.roa (hash: 7YK9BjVSnfe505W37DxY1ZZyrFLgClau3xqcJepnDzM=) 5: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl (hash: rlmbhW1niFDxpuYpAhTB3em8Un8CYkQZunf5u1vVkqE=) 6: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (hash: sY/xAuh6Mg68YWt7c8TloEoU7TIBsTXsCx6tRGi7xp4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:80:90:06:aa:66:8a:67:34:2f:b3:ab:e4:b4:b3:40:2d:9a:06:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Validity Not Before: Jun 28 12:24:10 2025 GMT Not After : Jun 29 13:04:10 2025 GMT Subject: CN=EE4D1946339D60B234446DFB51FBEE6BE45EE937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e7:bc:6b:5e:3a:e7:d7:b4:65:a6:fc:e0:97: 12:f5:bd:65:7d:89:b7:85:5f:81:e1:b7:e9:ed:55: c5:3d:17:54:54:d3:cb:73:94:a3:d1:47:c6:98:67: be:af:05:eb:6f:ad:16:5b:96:db:cf:0e:49:a3:bc: 3d:93:52:ac:97:81:af:8c:8f:a5:a8:88:f7:22:fe: 3f:a7:0a:57:af:a1:d0:fa:34:05:9f:2b:51:39:34: ec:97:52:76:b1:97:f6:c0:5c:fd:6d:fb:45:84:13: 7f:a1:5d:82:27:e2:c4:77:e7:fd:ce:d3:ef:03:53: b2:30:11:6e:56:1c:77:49:1d:b2:c2:6d:2b:64:64: fd:46:2f:f0:a9:0c:6f:d2:d2:76:e2:01:50:15:15: da:e6:e5:39:ed:d0:b2:24:c4:f6:91:01:dc:d3:02: bd:b3:ab:a3:87:43:a4:44:af:cb:89:d9:de:fb:48: 36:81:4f:b8:7b:bf:e2:d3:fc:e6:d6:eb:83:09:b0: bb:ef:ba:ca:1e:d3:c1:07:35:dc:9a:12:e8:80:81: 40:82:79:bb:1a:fc:cc:9f:8d:81:c0:29:da:0c:13: f9:74:81:8e:18:f9:fe:55:c2:1d:11:29:30:4a:a0: 67:99:5d:0a:c5:66:ce:ab:aa:98:c1:18:5e:f5:68: 25:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4D:19:46:33:9D:60:B2:34:44:6D:FB:51:FB:EE:6B:E4:5E:E9:37 X509v3 Authority Key Identifier: keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:9a:59:57:e5:b5:d0:32:5d:fe:cb:c3:ef:74:22:54:2d:ec: a7:e5:95:d1:98:2b:17:d4:1e:ec:d3:89:d6:66:56:62:d7:de: a0:32:0e:a4:54:b9:c0:40:a5:df:41:d0:43:61:55:1f:3c:a9: d1:93:1b:af:55:08:dc:28:a9:42:be:c1:79:d6:ca:23:75:70: 32:fe:10:c8:9a:90:96:47:b7:56:57:a8:78:0c:f7:89:f0:5f: 9a:6e:7b:ec:f2:d2:e3:9e:8b:dc:d6:90:61:6d:b8:c0:de:00: f0:88:53:7e:c6:c2:14:cb:48:b5:e3:31:52:42:60:e1:53:d4: e5:31:73:9e:aa:55:d3:10:bc:b6:56:83:07:25:5e:8b:5f:bf: d1:14:7c:64:fe:28:6a:71:1b:d6:32:1b:43:61:16:5f:7e:dc: db:d7:d3:fb:8c:2e:ad:91:13:58:92:32:36:ae:b6:74:cf:04: 39:73:c1:80:27:61:50:fe:f0:6f:cd:b6:e5:b2:0a:cd:9e:1f: 73:a8:90:11:f1:b9:f9:06:12:4a:ac:12:b4:59:68:99:0e:6d: 86:7d:c7:42:ad:ad:6c:b1:85:8e:c9:86:ee:c7:48:08:42:5b: 44:c2:87:dd:c5:1c:78:73:85:c9:5e:bf:12:06:1d:8b:10:e0: 05:52:f9:a5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDICQBqpmimc0L7Or5LSzQC2aBjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz MGY3YzRjYTAeFw0yNTA2MjgxMjI0MTBaFw0yNTA2MjkxMzA0MTBaMDMxMTAvBgNV BAMTKEVFNEQxOTQ2MzM5RDYwQjIzNDQ0NkRGQjUxRkJFRTZCRTQ1RUU5MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo57xrXjrn17RlpvzglxL1vWV9 ibeFX4Hht+ntVcU9F1RU08tzlKPRR8aYZ76vBetvrRZbltvPDkmjvD2TUqyXga+M j6WoiPci/j+nClevodD6NAWfK1E5NOyXUnaxl/bAXP1t+0WEE3+hXYIn4sR35/3O 0+8DU7IwEW5WHHdJHbLCbStkZP1GL/CpDG/S0nbiAVAVFdrm5Tnt0LIkxPaRAdzT Ar2zq6OHQ6REr8uJ2d77SDaBT7h7v+LT/ObW64MJsLvvusoe08EHNdyaEuiAgUCC ebsa/MyfjYHAKdoME/l0gY4Y+f5Vwh0RKTBKoGeZXQrFZs6rqpjBGF71aCVdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7k0ZRjOdYLI0RG37Ufvua+Re6TcwHwYDVR0j BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE M3hNby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzAzMDg5MC1m NmUwLTQxMGMtYmM5OS1hZjA5MjFkMWMzYTQvMC84QjlCQTlBRERFOTYzNTc3N0JG NTg2RkQ0OTNFMTRDRDMwRjdDNENBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVppZV+W10DJd/svD73Qi VC3sp+WV0ZgrF9Qe7NOJ1mZWYtfeoDIOpFS5wECl30HQQ2FVHzyp0ZMbr1UI3Cip Qr7BedbKI3VwMv4QyJqQlke3VleoeAz3ifBfmm577PLS456L3NaQYW24wN4A8IhT fsbCFMtIteMxUkJg4VPU5TFznqpV0xC8tlaDByVei1+/0RR8ZP4oanEb1jIbQ2EW X37c29fT+4wurZETWJIyNq62dM8EOXPBgCdhUP7wb8225bIKzZ4fc6iQEfG5+QYS SqwStFlomQ5thn3HQq2tbLGFjsmG7sdICEJbRMKH3cUceHOFyV6/EgYdixDgBVL5 pQ== -----END CERTIFICATE-----Generated at Sun Jun 29 06:28:33 2025 by rpki-client