$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft File: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json) Hash identifier: LntKa09WY4HqOchLxZ+u4/AZmk6ZH0+wUPkrNChTXFQ= Subject key identifier: 8E:9E:86:B9:83:73:D2:22:12:EA:0E:FB:D5:AB:23:E1:C3:05:ED:3E Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 5FA480D089E931B90A9027107CBB721B87CD438D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft Manifest number: 0169 Signing time: Fri 22 Aug 2025 20:32:33 +0000 Manifest this update: Fri 22 Aug 2025 20:27:33 +0000 Manifest next update: Sat 23 Aug 2025 21:05:33 +0000 Files and hashes: 1: 3138352e3231332e3235302e302f32342d3234203d3e20323132323338.roa (hash: ygSJr7gJnzCgddZdASy6lFYbTZobnImgktqUZvda03k=) 2: 3139342e33342e3235342e302f32342d3234203d3e20313532363732.roa (hash: hKPfS0qlA4vPTLhw9nwXVGJzFe2/vcx6+01rQ/Eesqo=) 3: 3138352e3231332e3235312e302f32342d3234203d3e20313338313630.roa (hash: fygAQSb+QwiyUnesqK4IcvvWfRduHnIesYUaMnTC6go=) 4: 3139342e33342e3235352e302f32342d3234203d3e20383334.roa (hash: 9Nay8jCVOB7MKBbd6t/oX++dJQIYhzLuqo54ZgkMc3E=) 5: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: 4O3foUV7f18NUYJQaeBYgK+aW1lr+7o+ea8CcQjVzCw=) 6: 3138352e3231332e3234382e302f32342d3234203d3e203136323736.roa (hash: YVFopn7jbA0T8pFEsoI9hYTL9xS+8ZrOGuFkjL/rBgk=) 7: 3138352e3231332e3235312e302f32342d3234203d3e20313337353537.roa (hash: eYILiT2JPXpEDLdM1mRS7Zrw3uThCrbSVHgyCN3lFo4=) 8: 3139342e33342e3235322e302f32342d3234203d3e20313335343032.roa (hash: PzY2ZjUPUkaqIDtZu9fHD0rPK6Exx+TMbdxcEJS1upA=) 9: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: 8/mMTd8OI6hx+rEazKaA5i9flVTt9So8wwSfFF6xpVo=) 10: 38352e3131372e3232382e302f32342d3234203d3e20323135303236.roa (hash: WUrbTcKV2+qO0uflme+Vda37GmhrcRAgBhkN6Ok9SGQ=) 11: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (hash: ohyXGo6Fwg3029u2hdROae+jQf4VI2skgvLUXH3jI8w=) 12: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: lfRQ2mWorwYWHpDx10mPmeXqkNCw3SL3xSI9sYmOxTI=) 13: 38352e3131372e3232392e302f32342d3234203d3e20323132323338.roa (hash: qWG9h0hKE/+rc67V6b0QtNqJKNBV/dmrN+3owun/5GY=) 14: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: tD+eYvXQsGkCcpnz6s7EBRYpOf8Iu4vdb3Qy27wUI6g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 21:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a4:80:d0:89:e9:31:b9:0a:90:27:10:7c:bb:72:1b:87:cd:43:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Aug 22 20:27:33 2025 GMT Not After : Aug 23 21:05:33 2025 GMT Subject: CN=8E9E86B98373D22212EA0EFBD5AB23E1C305ED3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:82:90:49:21:91:0d:90:98:26:18:1f:61:bd: 79:78:66:85:6c:f3:03:a2:1f:a2:e3:5d:cd:5f:bc: fd:6f:d9:8d:b5:7b:42:75:ff:c4:9a:92:22:0a:9c: 98:f5:58:b9:9b:82:44:81:49:e8:6a:d4:ed:1a:21: f1:2d:a4:ac:4d:15:ea:5b:e9:a9:ad:31:50:47:a1: 0a:71:d7:0f:00:a1:6a:04:c9:62:18:41:60:db:ef: 7e:de:73:51:78:bd:95:89:43:d6:ea:e3:59:b5:f3: 46:30:df:8c:00:ef:bd:19:4a:e2:48:1c:b5:a3:8c: 6a:86:0a:b9:59:e4:ef:98:3d:63:c2:8e:9e:d8:82: 3e:0e:bf:4f:17:4d:b8:df:d3:50:ac:00:f8:33:92: 55:2a:52:9e:3d:4f:26:92:82:f4:47:55:d1:04:ef: 68:0f:02:76:cb:b2:5f:75:0a:97:15:17:f4:72:4b: cb:a3:e4:13:cc:38:0f:c6:7f:42:e1:c8:90:15:7b: e2:1d:e0:0d:ed:c7:58:05:81:f6:2f:63:20:c6:f7: 8b:69:8d:1d:46:e0:0b:cb:f9:10:08:c8:0a:66:e4: 89:4b:52:cf:81:6e:e1:c4:1e:bb:e4:c1:1f:90:4c: 5d:40:a9:5b:ce:0b:32:ca:58:b9:54:fc:ef:9e:41: a2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9E:86:B9:83:73:D2:22:12:EA:0E:FB:D5:AB:23:E1:C3:05:ED:3E X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:5f:13:dd:c1:6b:95:30:d2:ca:d6:47:fb:87:27:d0:36:3f: 1c:28:bb:fe:6d:7a:e9:60:ee:0e:d5:00:0c:91:7f:34:4b:38: 12:df:f0:e6:a5:ff:13:5b:10:86:43:21:a4:23:d7:81:93:af: f1:0f:c8:4c:f4:9e:84:87:5c:32:61:cb:3d:7c:c4:d2:96:25: 25:34:cc:19:d8:1e:19:3a:72:6a:1a:64:40:7d:73:27:be:39: dc:94:13:47:3f:da:23:5c:4f:7b:d2:17:d4:d8:80:01:31:c7: be:4f:66:be:64:b8:04:e2:30:3b:6d:35:fb:19:5b:de:80:d1: 25:22:b7:cc:d6:83:91:6d:6a:0d:86:7f:2f:53:65:0e:c8:41: 41:44:16:31:62:e8:df:68:a9:4a:33:6c:da:71:62:11:e7:33: 35:46:06:22:f4:9d:41:45:c5:37:59:aa:71:c6:05:8f:57:93: 7a:db:c9:30:e5:f0:e3:09:2c:11:ef:76:b5:30:1f:cb:d0:f5: 64:1f:bc:31:40:9b:a8:b4:f0:31:2f:b0:39:3b:7f:d6:08:2c: 44:7e:c2:37:fd:4a:f1:3b:71:be:de:82:f8:4c:8e:5e:a3:28: 64:0b:c2:9f:31:bd:24:4c:24:e8:88:5d:85:1c:25:c1:cd:75: a5:15:6c:fd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUX6SA0InpMbkKkCcQfLtyG4fNQ40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNTA4MjIyMDI3MzNaFw0yNTA4MjMyMTA1MzNaMDMxMTAvBgNV BAMTKDhFOUU4NkI5ODM3M0QyMjIxMkVBMEVGQkQ1QUIyM0UxQzMwNUVEM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmgpBJIZENkJgmGB9hvXl4ZoVs 8wOiH6LjXc1fvP1v2Y21e0J1/8SakiIKnJj1WLmbgkSBSehq1O0aIfEtpKxNFepb 6amtMVBHoQpx1w8AoWoEyWIYQWDb737ec1F4vZWJQ9bq41m180Yw34wA770ZSuJI HLWjjGqGCrlZ5O+YPWPCjp7Ygj4Ov08XTbjf01CsAPgzklUqUp49TyaSgvRHVdEE 72gPAnbLsl91CpcVF/RyS8uj5BPMOA/Gf0LhyJAVe+Id4A3tx1gFgfYvYyDG94tp jR1G4AvL+RAIyApm5IlLUs+BbuHEHrvkwR+QTF1AqVvOCzLKWLlU/O+eQaLpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUjp6GuYNz0iIS6g771asj4cMF7T4wHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTEzZGRhNi03 YWRlLTQ0NWQtOGM2ZS00NDhhNzhlNDhjYTEvMS8wRDdGRkFFMzAwREVGMDg3NkJG ODQ4OTBGQjZFQTE3QkU4NDFBNEQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACV8T3cFrlTDSytZH+4cn 0DY/HCi7/m166WDuDtUADJF/NEs4Et/w5qX/E1sQhkMhpCPXgZOv8Q/ITPSehIdc MmHLPXzE0pYlJTTMGdgeGTpyahpkQH1zJ7453JQTRz/aI1xPe9IX1NiAATHHvk9m vmS4BOIwO201+xlb3oDRJSK3zNaDkW1qDYZ/L1NlDshBQUQWMWLo32ipSjNs2nFi EeczNUYGIvSdQUXFN1mqccYFj1eTetvJMOXw4wksEe92tTAfy9D1ZB+8MUCbqLTw MS+wOTt/1ggsRH7CN/1K8Ttxvt6C+EyOXqMoZAvCnzG9JEwk6IhdhRwlwc11pRVs /Q== -----END CERTIFICATE-----Generated at Sat Aug 23 10:13:57 2025 by rpki-client