$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft File: 893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft (raw, json) Hash identifier: VzUIUM28Cwy3+DxvlWZDGSPzhh29/GsVJT9ctGcq2Ug= Subject key identifier: DD:C3:CD:22:20:9D:56:45:62:6F:AC:23:38:DC:87:AA:A7:A6:2F:3C Authority key identifier: 89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B Certificate issuer: /CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B Certificate serial: 14C315765C36090F96EBEC1834D6089BBE3AB0E0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft Manifest number: 6C Signing time: Sun 29 Jun 2025 13:16:50 +0000 Manifest this update: Sun 29 Jun 2025 13:11:50 +0000 Manifest next update: Mon 30 Jun 2025 13:30:50 +0000 Files and hashes: 1: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: Vs7Q5KU9koM9GeO4e0pzIZd/B9BJX1MGwWzBfnT0lFM=) 2: 326131343a373538313a366664303a3a2f34342d3434203d3e20323135393334.roa (hash: vaAEu3pMRFdmKcI/nWa8WyzQWeHMb/mh9I6YRbEX9FY=) 3: 893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl (hash: jDrQbHb3lH2R0vTsRjrH2g+K9tW1oCsJjW5vnb7AtnA=) 4: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: v+wGdsPoD53cB+FPJFplibwWU1IDMTKf0BLLWvOrDJw=) 5: 326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa (hash: bkcmt94VX2qT5AatBWPB20wqy19gXukXDxeJ3DXH2P8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 13:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:c3:15:76:5c:36:09:0f:96:eb:ec:18:34:d6:08:9b:be:3a:b0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B Validity Not Before: Jun 29 13:11:50 2025 GMT Not After : Jun 30 13:30:50 2025 GMT Subject: CN=DDC3CD22209D5645626FAC2338DC87AAA7A62F3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dd:a5:20:8c:7d:04:5e:f2:c5:b1:10:8e:ca: dd:7f:73:32:a0:19:c5:ed:49:0d:84:05:e5:e1:c5: 95:6d:01:c6:f6:bd:be:24:e3:85:30:7b:7d:5a:af: ca:41:97:c3:12:66:c8:63:31:e0:d3:16:2b:2f:10: 3a:2d:eb:66:86:f6:fa:1d:b3:2a:2e:03:02:bc:0c: ca:78:66:0e:8e:ee:25:a0:f4:14:40:a8:62:ac:d2: 0d:b5:34:8e:8f:b8:16:e9:9b:ac:38:ab:8b:cf:b0: 5a:c4:0b:e9:4a:46:67:5d:00:9a:5f:b4:e9:98:c9: 56:53:4f:e4:b0:3a:a5:08:7e:6b:8c:cc:9f:ad:f7: d4:f8:1c:96:f9:e6:b3:e2:87:19:e4:ee:fc:1a:29: f5:fe:de:51:c4:9a:a8:d2:4f:e0:3a:5e:7b:8c:81: 74:a4:10:d5:69:b9:c2:a3:04:cc:fb:3c:a7:86:98: 21:42:88:b2:ba:b2:06:dc:ad:8b:8b:94:4b:b4:72: 58:28:6b:fc:80:09:69:77:e8:bc:49:da:b5:87:e5: 47:ab:99:59:cb:83:8b:4b:46:b9:4f:8e:3e:96:0e: 24:a8:77:ab:cb:14:3c:fd:58:a2:12:d8:6b:d8:b5: df:bc:4d:35:b0:66:67:b3:c4:a1:dd:3d:da:84:e8: 66:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C3:CD:22:20:9D:56:45:62:6F:AC:23:38:DC:87:AA:A7:A6:2F:3C X509v3 Authority Key Identifier: keyid:89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:df:d7:2c:45:1c:df:77:b9:31:64:36:8f:96:69:10:c3:09: 6f:96:1c:c4:89:d0:ad:de:d3:fb:f4:b4:7f:81:7c:e8:63:b6: 5a:de:a7:1d:ad:6c:fc:e7:10:d8:2c:3f:19:ac:e2:eb:2d:89: 94:83:4b:96:fc:a2:84:6d:37:0b:84:e6:fc:58:52:58:39:56: 6b:67:9b:ed:e0:27:36:3e:23:19:11:84:bf:f6:bf:f6:a1:02: e0:37:a5:f1:f9:0c:77:31:f0:63:77:ff:12:94:99:a6:f7:41: c3:71:c8:85:83:0c:f7:70:d1:e1:b5:49:04:a6:02:42:e8:b5: ba:2f:11:18:38:0a:a5:61:fc:59:bd:8d:54:6e:81:3d:0f:ba: 06:b1:b1:ba:3a:ec:2a:02:42:9b:e3:3c:2b:7d:ca:dd:ab:9a: 5e:4b:5d:6e:c1:74:29:02:37:bf:d0:d7:a5:d3:55:08:de:ba: 2c:48:3b:73:16:ba:97:da:c6:00:0d:7f:12:d1:a1:8b:83:79: 0e:13:f4:f5:b3:11:3a:6a:88:6a:f2:f4:35:5d:62:6d:a8:e3: 23:1e:10:70:86:7f:d4:fe:62:eb:30:89:62:88:7f:9b:7c:5e: c1:0f:5c:2c:e7:6d:d0:ca:9e:fb:de:3d:81:dc:6a:23:cd:42: 93:2b:39:a8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFMMVdlw2CQ+W6+wYNNYIm746sOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBC OEYxMjA2QjAeFw0yNTA2MjkxMzExNTBaFw0yNTA2MzAxMzMwNTBaMDMxMTAvBgNV BAMTKEREQzNDRDIyMjA5RDU2NDU2MjZGQUMyMzM4REM4N0FBQTdBNjJGM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ3aUgjH0EXvLFsRCOyt1/czKg GcXtSQ2EBeXhxZVtAcb2vb4k44Uwe31ar8pBl8MSZshjMeDTFisvEDot62aG9vod syouAwK8DMp4Zg6O7iWg9BRAqGKs0g21NI6PuBbpm6w4q4vPsFrEC+lKRmddAJpf tOmYyVZTT+SwOqUIfmuMzJ+t99T4HJb55rPihxnk7vwaKfX+3lHEmqjST+A6XnuM gXSkENVpucKjBMz7PKeGmCFCiLK6sgbcrYuLlEu0clgoa/yACWl36LxJ2rWH5Uer mVnLg4tLRrlPjj6WDiSod6vLFDz9WKIS2GvYtd+8TTWwZmezxKHdPdqE6GajAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU3cPNIiCdVkVib6wjONyHqqemLzwwHwYDVR0j BBgwFoAUiT/UG94ibFTyrSs92hnBoLjxIGswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFjZmEzMTgtMmE1Yy00MjQxLWFmYmItMzg3ZDcxZThj NTk2LzEvODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBCOEYxMjA2Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTNGRDQxQkRFMjI2QzU0RjJBRDJCM0RE QTE5QzFBMEI4RjEyMDZCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhY2ZhMzE4LTJhNWMtNDI0MS1hZmJiLTM4N2Q3MWU4YzU5Ni8xLzg5M0ZENDFC REUyMjZDNTRGMkFEMkIzRERBMTlDMUEwQjhGMTIwNkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCN39cs RRzfd7kxZDaPlmkQwwlvlhzEidCt3tP79LR/gXzoY7Za3qcdrWz85xDYLD8ZrOLr LYmUg0uW/KKEbTcLhOb8WFJYOVZrZ5vt4Cc2PiMZEYS/9r/2oQLgN6Xx+Qx3MfBj d/8SlJmm90HDcciFgwz3cNHhtUkEpgJC6LW6LxEYOAqlYfxZvY1UboE9D7oGsbG6 OuwqAkKb4zwrfcrdq5peS11uwXQpAje/0Nel01UI3rosSDtzFrqX2sYADX8S0aGL g3kOE/T1sxE6aohq8vQ1XWJtqOMjHhBwhn/U/mLrMIliiH+bfF7BD1ws523Qyp77 3j2B3GojzUKTKzmo -----END CERTIFICATE-----Generated at Mon Jun 30 06:12:12 2025 by rpki-client