$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft File: A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json) Hash identifier: mdzG8SA9euciDYROLpFcDmtbGkEjVE8dx5XGBMFZ6MA= Subject key identifier: 75:D1:F2:B4:CC:A2:AD:29:FB:6F:DB:6B:9F:BC:AC:A1:A5:A2:A7:2F Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Certificate serial: 5103C1350312C54C9B1892061C175EE0A1D08FBC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft Manifest number: 020C Signing time: Sun 29 Jun 2025 08:27:36 +0000 Manifest this update: Sun 29 Jun 2025 08:22:36 +0000 Manifest next update: Mon 30 Jun 2025 08:46:36 +0000 Files and hashes: 1: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0nNVfH0UNkgevPAH9ITuwY5tE24LlYCDjFx46F3vtM0=) 2: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: g9TWsQZsTWz7mSDp6Y61gNZDSwAn6dADsEyVm1AJtlU=) 3: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: imEjvtvCCz1eqwuI8/eFHCFB+WwTlJEDfPXRombfVNU=) 4: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: MyeYfbLc0//rjwnR8ZJ3TnxqQq4JflTHlrUTLQvk3gU=) 5: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: coziJfcvV7NZzAVbts1JQ6BKxT5yxFwdbwzsra8WCDw=) 6: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: F9b5BNgK8TO7NWcYalz+qyjvcxyYqlq+/TYg6mk1sTI=) 7: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: TejNBoLvDqd6zzS1lptpFez+EdbwzXYJ6yM06vDQ9j0=) 8: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: 34CzDRdWck3x5QdKwY21JLn4ljy5X8PbpWV6VL1UPl8=) 9: 326131343a373538313a6666303a3a2f34382d3438203d3e20323135333634.roa (hash: nCwmmbP9gIjoEy95/v504iaQnyadcB1V8SB+J8/exJE=) 10: 326131343a373538313a393261303a3a2f34382d3438203d3e20323135333634.roa (hash: vpFkcPB4ncBh9VZRsIiAgJdk+akiA1X6oI9yFkMsGRg=) 11: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: JYfFIGSSsdhSc4V2wOJu9QFkSSC76MmCAjKsdTBmtQA=) 12: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: 3AWWfi2qnjov5zxhOU2DNcy+cd/VFtrzeupZeoUMrJA=) 13: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: a41Xyu+1QM63sJBLjRXDXCMByy5FuK1D59e4kuksRCE=) 14: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: 5IFSShC1J1DPKr9fgEjy0DHzTqmR8W17B+sGrWUb29Q=) 15: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 2aDuD/D+lIpzPYcnGpfR3f4GvH7bzD6tXNlt4SzLv7s=) 16: 326131343a373538313a393330303a3a2f34302d3438203d3e20323135333634.roa (hash: HxvdekWDniqUROXJ3YOPd7kMDR81qja1R4es7Rc0gNE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:03:c1:35:03:12:c5:4c:9b:18:92:06:1c:17:5e:e0:a1:d0:8f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Validity Not Before: Jun 29 08:22:36 2025 GMT Not After : Jun 30 08:46:36 2025 GMT Subject: CN=75D1F2B4CCA2AD29FB6FDB6B9FBCACA1A5A2A72F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dc:13:d7:e7:36:e0:cc:13:c8:2e:e4:20:4e: 54:c4:61:61:5c:e3:3e:e3:6f:28:1d:f5:29:ce:20: d3:50:3b:50:6c:97:4c:e1:b0:d5:33:10:7d:c2:18: 32:3c:fa:dc:0d:4b:16:95:ff:e1:9f:e2:7e:a1:8e: 40:af:1b:a6:a2:25:89:15:65:75:51:98:0a:f6:2b: 50:f4:0e:1c:ec:86:d1:6a:95:cb:e8:a8:5a:10:13: 02:de:a3:48:b8:5c:84:14:fa:e3:86:58:2e:ef:62: 9b:ef:0f:48:87:5c:97:0e:81:48:05:0e:90:df:4c: d9:5f:61:e6:f2:1c:dd:10:0e:51:fc:2f:da:72:e4: 7a:33:b9:95:b5:07:ce:0b:13:ec:11:01:4d:83:8a: b3:75:42:3f:e7:6c:3b:2b:2d:81:96:9c:e3:b8:3c: e5:37:1c:30:79:9c:a4:f3:70:fa:38:da:0a:50:27: ae:5b:ff:91:90:ac:9b:f7:08:f2:e7:79:49:8d:9f: 55:b9:23:38:da:a8:0f:0f:ba:0b:21:14:2d:eb:97: 6b:0f:33:80:27:39:06:cb:c7:53:60:25:74:89:98: fc:37:a6:15:ba:18:ad:03:d3:88:80:f2:96:3d:d9: ec:24:36:d8:a7:db:37:2a:19:3b:62:9e:fe:00:e5: 1e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D1:F2:B4:CC:A2:AD:29:FB:6F:DB:6B:9F:BC:AC:A1:A5:A2:A7:2F X509v3 Authority Key Identifier: keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:7e:34:87:1d:03:13:2e:d1:16:3f:b1:c8:43:a4:82:49:ac: 1c:a8:95:cf:9d:cd:c8:cc:59:fe:36:01:44:a2:39:9d:de:f6: 84:50:0f:bf:91:49:ea:36:20:36:20:bd:43:cb:8a:7a:d7:87: 4b:12:84:42:57:db:5f:eb:6c:2b:8a:1a:df:03:4d:a2:61:b7: 54:15:cc:9c:0f:50:22:cd:b8:61:73:34:8d:3d:9b:30:50:12: 16:49:83:b1:fb:26:e5:a3:87:be:0c:02:e8:a8:9d:a3:d1:9b: 08:59:bf:af:be:1b:d8:3c:21:89:65:44:4e:2d:53:4f:da:e8: ab:3c:fb:e2:81:98:d1:08:b9:31:34:21:8c:24:a7:1b:2b:6e: f2:21:92:0c:62:82:69:1f:1a:ec:f3:c2:5d:4a:35:6b:fb:b1: 29:b1:6b:35:4f:40:96:04:bd:52:9c:cf:56:86:f2:47:83:c8: 6c:48:cd:55:b0:f7:40:29:e3:10:10:9e:a7:ea:fa:5a:d6:b9: 7a:ce:0a:2d:79:e5:54:a5:b2:a3:ff:12:8e:a8:6b:6f:fc:56: 1a:e9:54:b1:d9:e3:86:52:e2:93:81:bb:c2:e5:81:38:5c:d4: bc:fe:89:23:e3:15:55:8d:84:b6:54:72:9f:20:91:73:3f:31: 66:03:26:04 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUQPBNQMSxUybGJIGHBde4KHQj7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3 NzdEQTkyNjAeFw0yNTA2MjkwODIyMzZaFw0yNTA2MzAwODQ2MzZaMDMxMTAvBgNV BAMTKDc1RDFGMkI0Q0NBMkFEMjlGQjZGREI2QjlGQkNBQ0ExQTVBMkE3MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3BPX5zbgzBPILuQgTlTEYWFc 4z7jbygd9SnOINNQO1Bsl0zhsNUzEH3CGDI8+twNSxaV/+Gf4n6hjkCvG6aiJYkV ZXVRmAr2K1D0DhzshtFqlcvoqFoQEwLeo0i4XIQU+uOGWC7vYpvvD0iHXJcOgUgF DpDfTNlfYebyHN0QDlH8L9py5HozuZW1B84LE+wRAU2DirN1Qj/nbDsrLYGWnOO4 POU3HDB5nKTzcPo42gpQJ65b/5GQrJv3CPLneUmNn1W5IzjaqA8PugshFC3rl2sP M4AnOQbLx1NgJXSJmPw3phW6GK0D04iA8pY92ewkNtin2zcqGTtinv4A5R5zAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUddHytMyirSn7b9trn7ysoaWipy8wHwYDVR0j BBgwFoAUoe5dCaD10Nh2EQExdcYuNXd9qSYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw NDhjLzAvQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3NzdEQTkyNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BMUVFNUQwOUEwRjVEMEQ4NzYxMTAxMzE3 NUM2MkUzNTc3N0RBOTI2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg1NWM3ZDVhLTE1YzQtNDU4OS04NWZhLWI0OTFhMDcxMDQ4Yy8wL0ExRUU1RDA5 QTBGNUQwRDg3NjExMDEzMTc1QzYyRTM1Nzc3REE5MjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQChfjSH HQMTLtEWP7HIQ6SCSawcqJXPnc3IzFn+NgFEojmd3vaEUA+/kUnqNiA2IL1Dy4p6 14dLEoRCV9tf62wrihrfA02iYbdUFcycD1AizbhhczSNPZswUBIWSYOx+yblo4e+ DALoqJ2j0ZsIWb+vvhvYPCGJZUROLVNP2uirPPvigZjRCLkxNCGMJKcbK27yIZIM YoJpHxrs88JdSjVr+7EpsWs1T0CWBL1SnM9WhvJHg8hsSM1VsPdAKeMQEJ6n6vpa 1rl6zgoteeVUpbKj/xKOqGtv/FYa6VSx2eOGUuKTgbvC5YE4XNS8/okj4xVVjYS2 VHKfIJFzPzFmAyYE -----END CERTIFICATE-----Generated at Sun Jun 29 10:47:45 2025 by rpki-client