$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: 79kP8TrC5wQvriZK0l8JHFq/ChpdGbVQ6/3MbE+YlaM= Subject key identifier: 94:5B:89:87:22:50:3D:C8:A5:F8:12:B0:B3:9F:EA:07:5C:56:0E:B9 Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 69A030741A44E6547A1E9BD6F54B029FE049C312 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 0201 Signing time: Sat 23 Aug 2025 12:43:13 +0000 Manifest this update: Sat 23 Aug 2025 12:38:13 +0000 Manifest next update: Sun 24 Aug 2025 16:14:13 +0000 Files and hashes: 1: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: jAqeRW+G0tj75/HjlTu9upVrXQ/2AvwaP0ubMorKA1Q=) 2: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: oAmZ2rSJQgPCHna2yBZAtl4cYFAyAoPgeOe7Bnm0IJU=) 3: 326131343a373538343a373030303a3a2f33362d3434203d3e20323136343532.roa (hash: bjWKUcdJK3JxiL+GqIgQQNiLJnq1CfKPBgs/UuOHrJA=) 4: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: OYFGGb9dMqAtV18cBeD3NbZ0TuwCvJXmn37LZwaW7zg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 16:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a0:30:74:1a:44:e6:54:7a:1e:9b:d6:f5:4b:02:9f:e0:49:c3:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Aug 23 12:38:13 2025 GMT Not After : Aug 24 16:14:13 2025 GMT Subject: CN=945B898722503DC8A5F812B0B39FEA075C560EB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:79:e6:be:f7:5d:dd:ba:fd:c1:99:c1:6b: 40:ca:90:91:6b:64:a0:e6:20:92:bc:8c:3a:e2:a2: 67:6a:aa:25:88:c6:9d:ce:8d:31:43:e5:a0:a0:4c: cb:c9:dd:0e:4d:38:2d:63:b4:2b:8b:8a:1d:ec:ec: 19:2b:47:9e:57:42:a8:9f:86:71:aa:af:17:5d:f8: a3:af:39:44:6a:7c:52:fc:e3:31:98:a3:b5:fb:54: 46:e5:9d:c2:d6:21:6f:d8:24:35:f8:91:f3:8f:c4: 94:d7:7b:6d:da:b4:5e:af:c0:7c:23:28:c1:1a:91: 01:97:4c:12:77:23:59:a3:86:60:c1:af:08:16:c6: b2:ca:13:46:28:07:bb:b6:05:b1:67:a8:36:e4:df: 85:f1:2f:5a:7c:28:64:ff:62:d7:03:a0:7d:34:9b: 90:f7:7a:26:2b:6e:cd:2b:ba:bb:a9:45:63:25:6a: f8:20:a9:e9:3b:6c:f6:1a:b7:15:fc:cb:05:45:7a: 50:59:fd:a9:94:d7:f1:76:53:0c:dc:ec:c5:2d:d0: 9a:ed:e5:83:c1:1f:40:81:5a:c8:81:bb:7d:26:ec: 2c:f4:98:e7:80:dc:9d:ca:d9:74:17:ec:dd:36:90: 77:a9:4a:c8:e7:f5:56:d9:28:ab:df:9b:9f:ee:39: 48:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5B:89:87:22:50:3D:C8:A5:F8:12:B0:B3:9F:EA:07:5C:56:0E:B9 X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:62:b4:cc:18:d8:40:71:b3:a8:13:a4:28:f5:ca:69:2f:28: 61:ef:c6:5c:3c:83:df:e2:90:10:af:86:ef:ed:bc:21:21:84: 04:2d:4d:25:72:f0:83:47:f2:11:7e:63:26:34:b8:8d:4d:53: 2b:79:95:55:f2:9c:95:9a:51:22:06:97:19:c7:18:c3:6f:9b: 07:91:36:d9:17:23:ed:29:5e:e2:9f:c5:a4:fb:e2:21:f8:8c: f1:fb:79:86:83:9a:ec:e6:d2:62:d5:a4:04:f5:4b:4f:63:dd: 07:b3:97:80:72:16:1e:9c:e7:6c:26:77:60:87:a4:bc:86:a1: 52:5b:e0:29:2f:dd:f8:8d:75:b1:c6:48:2a:41:a7:cb:e2:b0: 13:54:7e:da:e1:9b:59:05:f3:a2:c0:01:61:4b:85:94:af:47: 97:1b:c1:3a:e4:b5:c3:06:5a:eb:b3:26:bb:b1:46:27:6c:7d: 4a:61:8d:c1:76:77:c6:39:0c:d7:23:a2:7a:bc:ab:c4:79:5a: 49:22:40:b3:a3:e6:64:e4:f8:b4:01:10:96:86:9f:02:0b:f0: 41:c9:e4:1c:92:8f:1b:b5:63:89:7d:91:99:f6:8f:c7:66:56: 9b:66:60:64:a7:d7:c2:90:9e:94:e5:19:4f:52:68:b4:08:fa: 3f:3e:09:6c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaaAwdBpE5lR6HpvW9UsCn+BJwxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNTA4MjMxMjM4MTNaFw0yNTA4MjQxNjE0MTNaMDMxMTAvBgNV BAMTKDk0NUI4OTg3MjI1MDNEQzhBNUY4MTJCMEIzOUZFQTA3NUM1NjBFQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCHnnmvvdd3br9wZnBa0DKkJFr ZKDmIJK8jDriomdqqiWIxp3OjTFD5aCgTMvJ3Q5NOC1jtCuLih3s7BkrR55XQqif hnGqrxdd+KOvOURqfFL84zGYo7X7VEblncLWIW/YJDX4kfOPxJTXe23atF6vwHwj KMEakQGXTBJ3I1mjhmDBrwgWxrLKE0YoB7u2BbFnqDbk34XxL1p8KGT/YtcDoH00 m5D3eiYrbs0rurupRWMlavggqek7bPYatxX8ywVFelBZ/amU1/F2Uwzc7MUt0Jrt 5YPBH0CBWsiBu30m7Cz0mOeA3J3K2XQX7N02kHepSsjn9VbZKKvfm5/uOUgPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUlFuJhyJQPcil+BKws5/qB1xWDrkwHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBIYrTM GNhAcbOoE6Qo9cppLyhh78ZcPIPf4pAQr4bv7bwhIYQELU0lcvCDR/IRfmMmNLiN TVMreZVV8pyVmlEiBpcZxxjDb5sHkTbZFyPtKV7in8Wk++Ih+Izx+3mGg5rs5tJi 1aQE9UtPY90Hs5eAchYenOdsJndgh6S8hqFSW+ApL934jXWxxkgqQafL4rATVH7a 4ZtZBfOiwAFhS4WUr0eXG8E65LXDBlrrsya7sUYnbH1KYY3BdnfGOQzXI6J6vKvE eVpJIkCzo+Zk5Pi0ARCWhp8CC/BByeQcko8btWOJfZGZ9o/HZlabZmBkp9fCkJ6U 5RlPUmi0CPo/Pgls -----END CERTIFICATE-----Generated at Sun Aug 24 03:48:32 2025 by rpki-client