$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: ANRTsgQ05aFkZsSNAzs24lSyaJd4Vr95vrDP0JLlIBo= Subject key identifier: E8:D8:57:E2:15:ED:94:AB:2C:91:2D:A5:D0:A7:97:18:71:6E:D4:78 Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 325C258B886DE965C16D790286A9CD08337E5F4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 01B5 Signing time: Sat 28 Jun 2025 19:01:28 +0000 Manifest this update: Sat 28 Jun 2025 18:56:28 +0000 Manifest next update: Sun 29 Jun 2025 19:34:28 +0000 Files and hashes: 1: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: bjWKUcdJK3JxiL+GqIgQQNiLJnq1CfKPBgs/UuOHrJA=) 2: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: WAEDCXUcEyZrm+AiMC7S/4c05J5m88q64rRSqxpIjho=) 3: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: DWfLnexp3cfW7ygmBH0nz9w8tKbrk1k7wlW2YDLqJMw=) 4: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: GOSro5bSH04/LhFcp3jWcxc9uL2by5TiBmqbWGnAjdA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 19:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:5c:25:8b:88:6d:e9:65:c1:6d:79:02:86:a9:cd:08:33:7e:5f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Jun 28 18:56:28 2025 GMT Not After : Jun 29 19:34:28 2025 GMT Subject: CN=E8D857E215ED94AB2C912DA5D0A79718716ED478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:de:01:13:b2:83:96:e4:6e:bf:18:07:9b:00: 81:b6:db:81:33:fb:7e:9c:b3:a4:b6:12:33:b0:4f: 8b:60:a2:25:aa:4a:e6:b2:a5:5d:49:da:6b:e0:66: 17:c5:36:00:41:74:8e:15:ae:61:27:d1:a8:cc:56: e3:4b:fd:37:d8:8d:ed:db:ca:22:0e:a0:36:b7:90: d6:45:64:ab:8d:13:bb:5b:04:42:45:c0:75:fb:4d: b8:54:5b:38:46:52:c9:95:ef:9e:0a:d4:48:0e:60: 39:9d:0f:93:32:3b:1b:99:61:8c:88:4f:e8:41:ec: a9:3d:e8:fb:7a:a0:13:c2:d3:a4:96:98:78:88:77: bc:b3:e6:2f:c4:d5:b8:63:36:f8:38:17:3a:9d:b5: 0b:25:92:6d:bb:7e:a3:5e:68:46:2c:85:1b:f0:a2: a2:fb:75:86:4b:69:57:d8:eb:c8:64:87:f8:0d:a1: 9b:ca:17:5c:77:fc:9c:2f:10:e2:3d:97:dc:7f:f3: 43:62:3d:05:e9:1d:b1:bf:28:26:13:66:77:62:af: 1a:8e:fa:d0:41:a9:01:4a:db:78:63:1f:e8:2c:80: 66:4d:dc:c6:39:d4:c2:aa:6f:98:98:85:64:4a:57: 25:6c:5d:9e:3c:d3:fa:03:d7:b1:bf:a7:25:d5:57: 0f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D8:57:E2:15:ED:94:AB:2C:91:2D:A5:D0:A7:97:18:71:6E:D4:78 X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:1a:e5:48:07:60:ca:27:00:1c:f5:58:b5:52:9d:ca:4a:e8: d3:9b:e9:54:5c:3c:64:7c:d7:74:b9:13:d0:50:bb:fa:62:69: 85:78:3a:30:13:72:9e:fc:13:64:c5:3b:0e:21:d0:d0:49:d2: 15:c6:32:86:2c:71:3f:64:c3:ed:f2:a0:48:8f:43:23:86:03: ea:2f:cc:a7:fd:13:c9:6a:51:aa:ff:fd:3a:00:6f:6c:54:14: 38:da:8c:f3:9d:d0:8b:9a:86:4f:d9:a2:6d:de:df:3d:35:5d: 2c:17:af:85:a1:3d:7d:00:92:a8:33:1f:cd:cc:ac:13:93:70: eb:88:35:ba:36:db:d4:48:03:de:0f:e5:32:16:13:4f:db:6e: 60:a3:32:c5:41:d2:1c:f5:2b:33:7d:75:78:b5:97:bc:ad:83: 41:5b:2c:ab:36:72:79:17:e6:79:38:ca:0f:01:64:d1:02:aa: ae:c5:54:b6:dd:5f:f0:af:c7:1a:62:21:c3:27:9b:b8:c6:3b: 77:d2:3d:4c:07:7c:0a:22:0c:3b:86:6b:7a:f9:1e:8c:f6:8c: 4b:63:dd:55:c1:fc:5d:10:25:ee:6e:da:11:7d:36:f7:dd:53: c4:34:ae:25:8a:f6:01:1d:e7:fd:d8:63:53:4c:ac:24:5c:15: e3:9f:92:6e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMlwli4ht6WXBbXkChqnNCDN+X0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNTA2MjgxODU2MjhaFw0yNTA2MjkxOTM0MjhaMDMxMTAvBgNV BAMTKEU4RDg1N0UyMTVFRDk0QUIyQzkxMkRBNUQwQTc5NzE4NzE2RUQ0NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT3gETsoOW5G6/GAebAIG224Ez +36cs6S2EjOwT4tgoiWqSuaypV1J2mvgZhfFNgBBdI4VrmEn0ajMVuNL/TfYje3b yiIOoDa3kNZFZKuNE7tbBEJFwHX7TbhUWzhGUsmV754K1EgOYDmdD5MyOxuZYYyI T+hB7Kk96Pt6oBPC06SWmHiId7yz5i/E1bhjNvg4FzqdtQslkm27fqNeaEYshRvw oqL7dYZLaVfY68hkh/gNoZvKF1x3/JwvEOI9l9x/80NiPQXpHbG/KCYTZndirxqO +tBBqQFK23hjH+gsgGZN3MY51MKqb5iYhWRKVyVsXZ480/oD17G/pyXVVw9dAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU6NhX4hXtlKsskS2l0KeXGHFu1HgwHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCRGuVI B2DKJwAc9Vi1Up3KSujTm+lUXDxkfNd0uRPQULv6YmmFeDowE3Ke/BNkxTsOIdDQ SdIVxjKGLHE/ZMPt8qBIj0MjhgPqL8yn/RPJalGq//06AG9sVBQ42ozzndCLmoZP 2aJt3t89NV0sF6+FoT19AJKoMx/NzKwTk3DriDW6NtvUSAPeD+UyFhNP225gozLF QdIc9SszfXV4tZe8rYNBWyyrNnJ5F+Z5OMoPAWTRAqquxVS23V/wr8caYiHDJ5u4 xjt30j1MB3wKIgw7hmt6+R6M9oxLY91VwfxdECXubtoRfTb33VPENK4livYBHef9 2GNTTKwkXBXjn5Ju -----END CERTIFICATE-----Generated at Sun Jun 29 10:39:24 2025 by rpki-client