$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft File: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft (raw, json) Hash identifier: C32tdu4QzKovpkysBc1vKlxfcE/qUNMhBQpC0lloo70= Subject key identifier: 0B:50:49:36:59:AB:47:CE:DE:EE:01:E6:D8:18:6E:31:33:56:90:95 Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Certificate serial: 32D4C9EFF3BF8030CDD77BF37D8BB7306D50EAFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft Manifest number: 0478 Signing time: Sat 23 Aug 2025 03:32:33 +0000 Manifest this update: Sat 23 Aug 2025 03:27:33 +0000 Manifest next update: Sun 24 Aug 2025 07:19:33 +0000 Files and hashes: 1: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (hash: sY/xAuh6Mg68YWt7c8TloEoU7TIBsTXsCx6tRGi7xp4=) 2: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl (hash: p8qGldY54Fb5j1HN8rZNoejTszOgaIBQpp709fr8sNQ=) 3: 3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa (hash: pkJz5L9iLZRF+OIvLDh3t2xUInq31L6An4us+3j1eD0=) 4: 3138382e3136342e3135352e302f32342d3234203d3e203631333137.roa (hash: W1I8woHaqJ6kU4xjFwKm1g6uV7UZ51m6Dv8R/7Dp0Oc=) 5: 3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa (hash: PjHq1CK+fSk+5WuONiKJilG5oXTFh0dZnkKMEZVNP8E=) 6: 3138382e3136342e3135342e302f32342d3234203d3e2039333034.roa (hash: Xrl4k2Y1ZQnjBYts0VWEIYeb2G4oTSJ6MhQs1UM8vvM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 07:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d4:c9:ef:f3:bf:80:30:cd:d7:7b:f3:7d:8b:b7:30:6d:50:ea:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Validity Not Before: Aug 23 03:27:33 2025 GMT Not After : Aug 24 07:19:33 2025 GMT Subject: CN=0B50493659AB47CEDEEE01E6D8186E3133569095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:04:fa:8f:61:38:4f:9b:54:44:16:73:e9:0b: d3:0b:49:e1:b1:c8:01:a1:ea:2e:25:08:72:b9:c7: 69:f1:ee:93:da:79:ec:95:bf:9b:65:71:cd:cc:7b: a8:79:13:70:30:ac:89:37:04:9c:c1:5f:13:e1:6d: 32:ff:e9:23:61:a8:3b:4c:8b:f5:33:c9:69:32:35: 96:94:a4:be:b7:6d:4e:69:45:e9:4b:4c:b5:44:f5: 95:46:40:6c:13:b6:db:34:8b:e6:ad:4c:b1:e8:63: 42:69:05:68:3e:93:31:21:95:ac:c3:fd:a8:3f:a4: f3:7f:a3:7a:62:a1:70:7e:cd:c2:5e:b3:b1:20:98: 55:09:7d:48:00:6d:19:c9:d8:c9:cd:33:7a:d1:ff: a6:ce:f1:e1:e1:bb:d2:12:2a:fc:61:cb:2a:99:74: 48:80:cd:43:9f:06:28:79:cf:c2:43:4c:49:41:0b: c6:ec:80:14:cb:ce:0f:f9:00:3e:be:53:f2:a3:40: ee:9a:1f:0c:83:0d:74:ca:6a:f8:25:21:e5:e7:98: 7f:69:87:51:f8:2c:9c:fe:3a:3e:b4:41:86:33:b0: a5:73:65:d8:e0:78:69:18:45:8d:f0:17:99:aa:c9: 36:3d:ef:fc:47:d9:89:a1:e4:c6:ad:02:8d:09:a1: 3e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:50:49:36:59:AB:47:CE:DE:EE:01:E6:D8:18:6E:31:33:56:90:95 X509v3 Authority Key Identifier: keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:7c:99:dd:33:b7:b5:70:9b:5f:18:f8:66:37:fc:16:59:c9: e0:85:ec:e8:ed:78:e3:7e:ad:e8:05:a9:b8:02:a4:c6:f2:aa: 5a:52:f8:fd:d2:3b:c5:af:1a:2d:12:09:dc:0a:4a:3a:d7:41: 47:4e:31:7b:0c:6c:95:e2:83:34:5e:98:83:62:de:c2:e1:27: a0:54:8b:e7:a4:31:97:bf:6c:37:0a:d1:6e:5b:86:90:d8:cd: be:c1:da:87:19:db:bc:5d:10:27:10:32:36:a5:ac:0c:af:27: ae:2e:a0:f2:73:c0:08:0f:d9:7b:46:26:cf:d8:b9:86:93:3c: 55:28:ef:8a:b5:d0:9e:09:74:c6:90:b6:60:e7:f2:02:fa:08: b9:2b:26:5d:69:4d:16:72:b8:a1:12:a8:e7:d5:dd:79:38:74: 8e:45:b8:bf:4d:7a:61:f4:83:c6:b7:bf:42:24:e5:04:db:ec: 69:4c:ab:68:ec:5f:8b:ee:a0:ce:14:a8:b2:fd:09:70:bb:2f: 45:15:77:63:21:dd:9c:22:4e:6e:f1:95:72:c1:ea:86:a3:d7: 49:a9:17:56:05:12:b1:b6:85:fb:70:6c:c0:cd:83:ed:30:e1: 33:5c:c0:b0:68:0a:c8:4a:39:8f:6b:23:8f:0b:e2:d9:8a:98: ce:d2:23:9e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMtTJ7/O/gDDN13vzfYu3MG1Q6vswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz MGY3YzRjYTAeFw0yNTA4MjMwMzI3MzNaFw0yNTA4MjQwNzE5MzNaMDMxMTAvBgNV BAMTKDBCNTA0OTM2NTlBQjQ3Q0VERUVFMDFFNkQ4MTg2RTMxMzM1NjkwOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbBPqPYThPm1REFnPpC9MLSeGx yAGh6i4lCHK5x2nx7pPaeeyVv5tlcc3Me6h5E3AwrIk3BJzBXxPhbTL/6SNhqDtM i/UzyWkyNZaUpL63bU5pRelLTLVE9ZVGQGwTtts0i+atTLHoY0JpBWg+kzEhlazD /ag/pPN/o3pioXB+zcJes7EgmFUJfUgAbRnJ2MnNM3rR/6bO8eHhu9ISKvxhyyqZ dEiAzUOfBih5z8JDTElBC8bsgBTLzg/5AD6+U/KjQO6aHwyDDXTKavglIeXnmH9p h1H4LJz+Oj60QYYzsKVzZdjgeGkYRY3wF5mqyTY97/xH2Ymh5MatAo0JoT4vAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUC1BJNlmrR87e7gHm2BhuMTNWkJUwHwYDVR0j BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE M3hNby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzAzMDg5MC1m NmUwLTQxMGMtYmM5OS1hZjA5MjFkMWMzYTQvMC84QjlCQTlBRERFOTYzNTc3N0JG NTg2RkQ0OTNFMTRDRDMwRjdDNENBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXyZ3TO3tXCbXxj4Zjf8 FlnJ4IXs6O14436t6AWpuAKkxvKqWlL4/dI7xa8aLRIJ3ApKOtdBR04xewxsleKD NF6Yg2LewuEnoFSL56Qxl79sNwrRbluGkNjNvsHahxnbvF0QJxAyNqWsDK8nri6g 8nPACA/Ze0Ymz9i5hpM8VSjvirXQngl0xpC2YOfyAvoIuSsmXWlNFnK4oRKo59Xd eTh0jkW4v016YfSDxre/QiTlBNvsaUyraOxfi+6gzhSosv0JcLsvRRV3YyHdnCJO bvGVcsHqhqPXSakXVgUSsbaF+3BswM2D7TDhM1zAsGgKyEo5j2sjjwvi2YqYztIj ng== -----END CERTIFICATE-----Generated at Sat Aug 23 16:55:22 2025 by rpki-client