$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft File: A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json) Hash identifier: R8buHqQGGXECSa8SQ+f/Mp70bjSYQd4py6aG1EG/DXM= Subject key identifier: EA:1F:5C:9C:82:53:6D:5A:B4:10:E5:C6:17:32:32:97:78:CE:B1:FD Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Certificate serial: 04E372EB8B671799F1EE33AC7A6E4A802162E980 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft Manifest number: 023B Signing time: Fri 22 Aug 2025 22:27:26 +0000 Manifest this update: Fri 22 Aug 2025 22:22:26 +0000 Manifest next update: Sun 24 Aug 2025 00:44:26 +0000 Files and hashes: 1: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: JYfFIGSSsdhSc4V2wOJu9QFkSSC76MmCAjKsdTBmtQA=) 2: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: coziJfcvV7NZzAVbts1JQ6BKxT5yxFwdbwzsra8WCDw=) 3: 326131343a373538313a393230303a3a2f34302d3438203d3e20323039313039.roa (hash: pMn1lmNiSpZ9TgFB+IRiwlTd7+lbxKBF0vBWWTkkXYs=) 4: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: 34CzDRdWck3x5QdKwY21JLn4ljy5X8PbpWV6VL1UPl8=) 5: 326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa (hash: jsviVwthOZBlV5+oRRFYDUvQF+OHc4iDYR8PVPHLwkA=) 6: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: TejNBoLvDqd6zzS1lptpFez+EdbwzXYJ6yM06vDQ9j0=) 7: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: 5IFSShC1J1DPKr9fgEjy0DHzTqmR8W17B+sGrWUb29Q=) 8: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: a41Xyu+1QM63sJBLjRXDXCMByy5FuK1D59e4kuksRCE=) 9: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0nNVfH0UNkgevPAH9ITuwY5tE24LlYCDjFx46F3vtM0=) 10: 326131343a373538313a6666303a3a2f34382d3438203d3e20323135333634.roa (hash: nCwmmbP9gIjoEy95/v504iaQnyadcB1V8SB+J8/exJE=) 11: 326131343a373538313a393330303a3a2f34302d3438203d3e20323039313039.roa (hash: TWxboGw6/lxhoMiWiDnyOg4O9SxsEOXusyizWuah2wo=) 12: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: imEjvtvCCz1eqwuI8/eFHCFB+WwTlJEDfPXRombfVNU=) 13: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: g9TWsQZsTWz7mSDp6Y61gNZDSwAn6dADsEyVm1AJtlU=) 14: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: MyeYfbLc0//rjwnR8ZJ3TnxqQq4JflTHlrUTLQvk3gU=) 15: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: jxrIwJaOyaokVUXyqkcQ1LdBheU0po+m7AaMZNr1ho8=) 16: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: F9b5BNgK8TO7NWcYalz+qyjvcxyYqlq+/TYg6mk1sTI=) 17: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 2aDuD/D+lIpzPYcnGpfR3f4GvH7bzD6tXNlt4SzLv7s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e3:72:eb:8b:67:17:99:f1:ee:33:ac:7a:6e:4a:80:21:62:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Validity Not Before: Aug 22 22:22:26 2025 GMT Not After : Aug 24 00:44:26 2025 GMT Subject: CN=EA1F5C9C82536D5AB410E5C61732329778CEB1FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:12:a9:d2:a5:90:5c:ab:a0:6a:5e:4f:00:1e: 1c:c8:36:c5:4f:30:c9:4d:18:97:7d:f5:e7:20:80: 1b:6f:02:b3:73:ba:4c:49:fa:b2:8c:04:44:71:a5: d0:3b:89:ae:7d:cc:80:93:30:5f:06:a2:41:21:08: a6:85:af:d9:c5:f0:d0:7f:ec:ce:95:e5:76:ad:96: d2:6a:95:b2:c6:66:24:1b:47:40:9b:c2:2a:59:74: f7:3d:7a:ba:07:76:88:a6:f1:95:20:91:f5:fe:11: dc:bc:24:dd:82:61:42:4a:0b:d0:50:1f:b9:d0:66: 43:0a:2e:ce:88:e6:c3:52:38:f5:d6:75:2f:85:c1: 58:66:5f:94:32:4f:41:e3:d6:d9:c1:b0:d0:0f:f7: 5e:a8:c3:d8:5a:1e:f8:3b:86:28:24:3a:37:b6:99: a1:5b:b7:28:ae:4e:be:74:65:2a:8f:84:fa:99:88: 04:a5:3f:9a:07:44:59:56:2e:93:12:cf:f4:c2:61: b6:71:f1:91:bf:f2:06:f9:82:e7:1d:91:11:7c:18: 1a:19:49:26:46:8f:fd:be:71:d2:fc:f0:5a:1e:21: c1:bb:08:c8:99:fb:f8:72:6a:a1:84:1c:38:cc:ed: d2:5f:4a:28:6e:29:de:6d:10:8f:09:72:20:d5:76: c2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1F:5C:9C:82:53:6D:5A:B4:10:E5:C6:17:32:32:97:78:CE:B1:FD X509v3 Authority Key Identifier: keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:4d:3e:cb:3b:5f:5e:5f:d3:f1:1b:3f:74:1c:bd:fe:c4:fb: 8b:7e:14:2b:21:2e:ee:76:e9:60:25:f3:85:03:31:50:f0:2f: ba:9c:79:90:9a:77:c0:44:e3:44:af:eb:0a:90:9c:72:a8:da: 22:97:26:a5:5b:7d:80:34:2c:a9:3c:25:75:2a:1c:b2:57:26: 3c:2d:e6:c5:65:5b:6c:2c:63:19:ea:6b:55:c4:7c:c9:ed:8c: 19:0b:82:6b:8c:b5:57:48:de:56:c8:6d:7e:1a:5b:d3:67:ff: 77:34:cc:06:68:97:a3:d3:f6:e5:fc:8e:e0:32:08:fa:98:c3: 70:6c:e3:eb:cb:b3:ff:f9:6f:84:21:a0:fd:8a:de:62:10:a7: 50:ea:c3:9f:db:64:9e:94:f1:a0:92:ab:b5:90:bf:03:c8:c4: 86:51:a3:e8:3c:20:7c:6d:f5:98:22:7b:6c:76:4e:a6:4b:fd: d6:4e:3d:e7:f6:9b:c1:a6:e3:7f:9a:80:c5:e9:0a:cd:06:ff: dd:5b:50:73:69:bd:e6:c5:3a:f1:81:c0:1d:02:76:fd:ea:c1: d2:ee:49:01:cc:d7:8b:db:ce:02:5f:c3:e0:8f:a4:ad:8b:a5: 4a:3c:f4:40:8f:d5:9d:c9:29:9d:ad:e4:9b:25:2e:cd:bb:57: 74:93:3c:26 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBONy64tnF5nx7jOsem5KgCFi6YAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3 NzdEQTkyNjAeFw0yNTA4MjIyMjIyMjZaFw0yNTA4MjQwMDQ0MjZaMDMxMTAvBgNV BAMTKEVBMUY1QzlDODI1MzZENUFCNDEwRTVDNjE3MzIzMjk3NzhDRUIxRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7EqnSpZBcq6BqXk8AHhzINsVP MMlNGJd99ecggBtvArNzukxJ+rKMBERxpdA7ia59zICTMF8GokEhCKaFr9nF8NB/ 7M6V5XatltJqlbLGZiQbR0CbwipZdPc9eroHdoim8ZUgkfX+Edy8JN2CYUJKC9BQ H7nQZkMKLs6I5sNSOPXWdS+FwVhmX5QyT0Hj1tnBsNAP916ow9haHvg7higkOje2 maFbtyiuTr50ZSqPhPqZiASlP5oHRFlWLpMSz/TCYbZx8ZG/8gb5gucdkRF8GBoZ SSZGj/2+cdL88FoeIcG7CMiZ+/hyaqGEHDjM7dJfSihuKd5tEI8JciDVdsI1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU6h9cnIJTbVq0EOXGFzIyl3jOsf0wHwYDVR0j BBgwFoAUoe5dCaD10Nh2EQExdcYuNXd9qSYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw NDhjLzAvQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3NzdEQTkyNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BMUVFNUQwOUEwRjVEMEQ4NzYxMTAxMzE3 NUM2MkUzNTc3N0RBOTI2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg1NWM3ZDVhLTE1YzQtNDU4OS04NWZhLWI0OTFhMDcxMDQ4Yy8wL0ExRUU1RDA5 QTBGNUQwRDg3NjExMDEzMTc1QzYyRTM1Nzc3REE5MjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDBTT7L O19eX9PxGz90HL3+xPuLfhQrIS7udulgJfOFAzFQ8C+6nHmQmnfARONEr+sKkJxy qNoilyalW32ANCypPCV1KhyyVyY8LebFZVtsLGMZ6mtVxHzJ7YwZC4JrjLVXSN5W yG1+GlvTZ/93NMwGaJej0/bl/I7gMgj6mMNwbOPry7P/+W+EIaD9it5iEKdQ6sOf 22SelPGgkqu1kL8DyMSGUaPoPCB8bfWYIntsdk6mS/3WTj3n9pvBpuN/moDF6QrN Bv/dW1Bzab3mxTrxgcAdAnb96sHS7kkBzNeL284CX8Pgj6Sti6VKPPRAj9WdySmd reSbJS7Nu1d0kzwm -----END CERTIFICATE-----Generated at Sat Aug 23 17:29:33 2025 by rpki-client