$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft File: 893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft (raw, json) Hash identifier: 7z3NlVhtKCqo7Do5gjRApaI8kAukb6l0rdPfxtT+srk= Subject key identifier: 96:B7:33:2E:42:CC:26:8F:89:FC:B5:2E:94:BB:3F:E9:56:E6:D8:F9 Authority key identifier: 89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B Certificate issuer: /CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B Certificate serial: 305B3C8EE5B4294FDA1A139D32E23B380B7E2609 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft Manifest number: B9 Signing time: Sat 23 Aug 2025 16:53:56 +0000 Manifest this update: Sat 23 Aug 2025 16:48:56 +0000 Manifest next update: Sun 24 Aug 2025 18:49:56 +0000 Files and hashes: 1: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: Vs7Q5KU9koM9GeO4e0pzIZd/B9BJX1MGwWzBfnT0lFM=) 2: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: CPLOajH+w286G+wKIl8yAgvbHEMrq4vLK7hbXUBSbrM=) 3: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: P72fY8g2wKghQonr1ZCiQ1/0HQ3pwy8QphUMcE76MXQ=) 4: 893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl (hash: zXnIZQ7ib6L2nV0xGSrectVc2/AWoFYQC103viqlark=) 5: 326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa (hash: bkcmt94VX2qT5AatBWPB20wqy19gXukXDxeJ3DXH2P8=) 6: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: hrByc0YcQ234/x8UEtDNAf8Sm6LTul06kkE34/Fodlo=) 7: 326131343a373538313a366664303a3a2f34342d3434203d3e20323135393334.roa (hash: vaAEu3pMRFdmKcI/nWa8WyzQWeHMb/mh9I6YRbEX9FY=) 8: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: v+wGdsPoD53cB+FPJFplibwWU1IDMTKf0BLLWvOrDJw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:5b:3c:8e:e5:b4:29:4f:da:1a:13:9d:32:e2:3b:38:0b:7e:26:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B Validity Not Before: Aug 23 16:48:56 2025 GMT Not After : Aug 24 18:49:56 2025 GMT Subject: CN=96B7332E42CC268F89FCB52E94BB3FE956E6D8F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a7:9e:bc:2b:3a:8c:99:e4:69:d3:9c:db:c4: 69:c5:3f:a3:02:4e:f5:61:8d:2e:b9:6a:72:ae:05: c8:60:d7:cd:75:34:f4:8e:ca:5c:6c:4f:a4:49:89: 0a:84:92:f8:97:17:c3:7b:c2:db:ff:ef:12:65:3f: 1a:09:32:00:6c:be:05:f3:ae:28:f8:d9:b7:e9:9b: c9:64:1b:27:cd:10:79:4e:1c:4b:04:94:04:2d:27: 46:47:fd:4b:d1:7a:d5:0c:ad:5b:28:4c:48:c6:4e: 93:f8:e6:98:3b:f0:cd:0b:e3:3e:11:ed:24:66:0e: 62:70:b6:77:8a:f2:d4:47:e8:ca:e3:ac:66:fb:1b: 03:15:f5:2d:c1:69:fa:e2:2d:ec:10:05:75:1a:91: 77:35:1b:d7:58:45:67:26:17:43:33:2a:20:76:36: a4:83:e8:65:c3:84:09:6b:e9:34:ef:f1:7b:b5:22: ce:a9:91:12:1c:ee:04:c9:cc:64:d5:6f:eb:3f:d3: 7a:58:6b:1d:15:60:aa:96:f8:11:db:56:4e:1b:5b: 3e:6b:02:9d:42:7c:4d:67:08:2e:8d:cb:c9:ee:e2: 7f:0d:1d:ca:b9:08:4f:08:b6:48:63:f3:36:68:e9: 6a:9d:e1:bf:77:50:3f:50:09:f5:65:2a:6c:df:1d: 64:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B7:33:2E:42:CC:26:8F:89:FC:B5:2E:94:BB:3F:E9:56:E6:D8:F9 X509v3 Authority Key Identifier: keyid:89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:22:aa:05:ff:45:a7:bf:45:fd:c1:90:b9:dd:fa:11:55:6c: 10:41:e7:31:3f:3d:47:1e:6f:97:30:b7:3f:2d:58:95:19:01: b6:e6:1c:5b:df:aa:cb:22:a8:3e:60:69:8f:4a:83:13:03:05: 39:4c:5e:01:a0:aa:31:e5:29:cb:54:f6:b0:6f:d6:39:ca:2b: 1c:72:53:a8:c4:4d:46:7b:f2:45:fe:14:3d:70:ee:f7:64:9c: 0f:a6:ec:ed:a8:00:00:ec:30:19:ae:1d:22:69:3f:41:66:0f: 83:f6:24:ed:bd:f2:fc:92:51:02:be:28:be:5d:df:1d:4a:c2: d8:ef:19:e6:d2:ab:00:59:7a:31:70:d4:be:dc:67:b9:5a:ea: f6:b7:48:71:61:dd:8f:21:b3:8f:fc:18:21:20:37:77:3e:76: f2:83:68:f6:d4:29:d8:54:5d:ca:ef:e0:18:aa:30:a3:11:e2: 59:0b:91:fe:86:4d:3b:2c:88:b3:49:b3:8f:bc:7e:b7:76:ea: da:ff:b1:af:84:d0:67:d4:55:48:60:61:3c:6a:8c:cd:00:4b: 2c:6e:d0:58:78:17:38:b1:a3:79:98:1b:c4:18:a1:58:28:14: 23:e3:f5:c7:17:06:33:5a:29:69:a4:da:36:23:75:04:14:26: ce:df:7b:da -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMFs8juW0KU/aGhOdMuI7OAt+JgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBC OEYxMjA2QjAeFw0yNTA4MjMxNjQ4NTZaFw0yNTA4MjQxODQ5NTZaMDMxMTAvBgNV BAMTKDk2QjczMzJFNDJDQzI2OEY4OUZDQjUyRTk0QkIzRkU5NTZFNkQ4RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjp568KzqMmeRp05zbxGnFP6MC TvVhjS65anKuBchg1811NPSOylxsT6RJiQqEkviXF8N7wtv/7xJlPxoJMgBsvgXz rij42bfpm8lkGyfNEHlOHEsElAQtJ0ZH/UvRetUMrVsoTEjGTpP45pg78M0L4z4R 7SRmDmJwtneK8tRH6MrjrGb7GwMV9S3BafriLewQBXUakXc1G9dYRWcmF0MzKiB2 NqSD6GXDhAlr6TTv8Xu1Is6pkRIc7gTJzGTVb+s/03pYax0VYKqW+BHbVk4bWz5r Ap1CfE1nCC6Ny8nu4n8NHcq5CE8Itkhj8zZo6Wqd4b93UD9QCfVlKmzfHWRZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUlrczLkLMJo+J/LUulLs/6Vbm2PkwHwYDVR0j BBgwFoAUiT/UG94ibFTyrSs92hnBoLjxIGswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFjZmEzMTgtMmE1Yy00MjQxLWFmYmItMzg3ZDcxZThj NTk2LzEvODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBCOEYxMjA2Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTNGRDQxQkRFMjI2QzU0RjJBRDJCM0RE QTE5QzFBMEI4RjEyMDZCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhY2ZhMzE4LTJhNWMtNDI0MS1hZmJiLTM4N2Q3MWU4YzU5Ni8xLzg5M0ZENDFC REUyMjZDNTRGMkFEMkIzRERBMTlDMUEwQjhGMTIwNkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYIqoF /0Wnv0X9wZC53foRVWwQQecxPz1HHm+XMLc/LViVGQG25hxb36rLIqg+YGmPSoMT AwU5TF4BoKox5SnLVPawb9Y5yiscclOoxE1Ge/JF/hQ9cO73ZJwPpuztqAAA7DAZ rh0iaT9BZg+D9iTtvfL8klECvii+Xd8dSsLY7xnm0qsAWXoxcNS+3Ge5Wur2t0hx Yd2PIbOP/BghIDd3Pnbyg2j21CnYVF3K7+AYqjCjEeJZC5H+hk07LIizSbOPvH63 dura/7GvhNBn1FVIYGE8aozNAEssbtBYeBc4saN5mBvEGKFYKBQj4/XHFwYzWilp pNo2I3UEFCbO33va -----END CERTIFICATE-----Generated at Sat Aug 23 19:52:04 2025 by rpki-client