$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: nrAUIVwkoSPC/ODX2+3jvz3sE41QgbP1CWTqt4ugrWA= Subject key identifier: 59:97:E7:62:E7:89:2F:84:AD:33:54:29:FF:CF:85:37:32:31:2B:2F Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 3245180C7751663993CC414F9093CCEB04B0C3DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 039F Signing time: Fri 22 Aug 2025 21:42:33 +0000 Manifest this update: Fri 22 Aug 2025 21:37:33 +0000 Manifest next update: Sun 24 Aug 2025 00:32:33 +0000 Files and hashes: 1: 39332e39352e3131332e302f32342d3234203d3e203136323736.roa (hash: cS6LWz+NEHJoa0EQVb5z92UR8C9jaztUFOxHHwpRPsY=) 2: 39332e39352e3131322e302f32342d3234203d3e2039333034.roa (hash: ogcbgRhECNKG4+F/6zpdBOh/u0edVYhkw7e/c907t3Y=) 3: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: qqVPSWZLREddEW4nL5NY3Bls+ZrG5ASHmT6xiutXttk=) 4: 39332e39352e3131372e302f32342d3234203d3e203231383539.roa (hash: Un+iljfa6BQzZnEghHopYhiwkN2j6KkmFMitjF4eFLQ=) 5: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: iuam+Y72SFbVuzZ6DMbPvd9+i2O4uNgJ9aW8l1vNV9U=) 6: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: 3kBYUtSzYFmkNnDZDotcJF4IAbON+r6PDKK/tGvSrYg=) 7: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: bvqtExc4o5GUJzraVc9CM0CC2GO3x6c+ohx4q9G/dgk=) 8: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: 8ja7Z+swVGTraKxezjgHzXG2GlS/dFRID6jPUC87mFI=) 9: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: oaLDq7aS5NFaYNW1gUs7MDdZL5P0TUUEDkjRyQGla3w=) 10: 39332e39352e3131342e302f32342d3234203d3e2039333034.roa (hash: AmPh9mqd0gwKu0juVvtCR9BPch+T6TfO2inFFXmyRM4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:45:18:0c:77:51:66:39:93:cc:41:4f:90:93:cc:eb:04:b0:c3:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Aug 22 21:37:33 2025 GMT Not After : Aug 24 00:32:33 2025 GMT Subject: CN=5997E762E7892F84AD335429FFCF853732312B2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b6:46:b7:c5:4a:6a:a1:8e:b7:72:79:8d:b5: 93:8a:d5:bc:77:42:ae:99:d5:c0:34:e4:14:5f:db: b2:04:b4:bd:d7:99:43:b7:42:f5:4e:d3:e4:e3:81: 5a:f7:de:de:e4:48:63:66:b2:6b:ba:4c:2a:98:01: 7c:b7:d6:af:95:32:7c:ef:cc:13:bd:64:81:d1:22: e0:f8:41:15:e5:84:d2:43:c0:24:d2:a5:6e:75:20: b1:8a:bf:8f:86:7e:c5:fe:8c:37:66:ea:fd:46:16: 65:32:57:16:d2:c7:e2:04:81:07:61:f4:6c:b0:67: 7f:c5:3a:19:f6:fb:ed:6d:a7:f6:3c:73:6c:0e:88: 35:40:ca:56:87:d5:21:02:ce:36:45:9d:ec:d6:f7: f4:fb:15:7f:7b:3d:51:c5:cf:d4:0a:ab:b8:2a:25: 8f:cd:49:8a:60:24:fb:7a:6f:24:60:ff:bb:34:2c: 1c:a8:cc:55:07:43:ff:76:bf:e0:92:a6:21:03:5a: fc:f4:e1:4b:21:a2:8e:6d:be:a9:c8:1a:e9:09:32: 3f:c0:cf:fb:ed:bb:01:8c:1e:a3:84:fb:82:5e:ab: 2d:81:ae:29:4d:d9:6c:8f:84:c4:11:f6:b0:96:54: fe:dc:57:36:e5:cc:2f:3c:45:71:e8:8e:f8:1d:a1: 5b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:97:E7:62:E7:89:2F:84:AD:33:54:29:FF:CF:85:37:32:31:2B:2F X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:8b:aa:50:1e:7f:52:28:db:7f:0b:32:6e:a8:04:0f:40:7b: 4b:b2:ef:a7:0a:6a:4d:89:52:12:cc:c4:9d:d5:c3:6e:93:14: 3a:ea:d4:a9:01:a1:1f:f2:5a:18:5a:e0:8d:65:d6:f5:bc:40: 57:c3:7e:3e:10:5d:c6:03:48:94:4a:4d:f7:ae:94:f6:a1:d0: 8a:51:24:ad:78:79:fe:13:45:ad:3b:14:05:6a:2b:bb:3d:80: de:17:10:7a:56:e2:51:5e:90:a9:76:d5:09:c8:8a:11:b6:5d: 4a:02:d4:12:b4:eb:b5:fb:cc:50:22:5b:22:16:06:b3:07:0e: 43:84:0a:85:c7:5a:c4:6c:2b:3b:90:0a:c4:6a:28:3c:f5:82: 3f:81:f2:db:b1:bc:66:4a:6e:12:e4:5b:96:66:36:50:19:e5: fc:f8:17:e6:e9:fd:e5:44:47:46:d8:77:63:2a:73:a6:2e:72: be:9f:41:f7:a9:15:1d:84:7d:4b:34:7f:6a:d0:5c:3f:85:49: ae:fe:61:e9:70:73:7b:aa:44:43:ea:f6:dc:e5:af:8c:9a:20: 71:d6:ed:31:ab:88:cc:79:e2:e3:04:d7:3a:17:3e:3c:2d:48: 09:60:37:c7:a6:09:91:2a:00:db:ff:df:e6:2a:7a:96:ea:89: b7:ae:85:3c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMkUYDHdRZjmTzEFPkJPM6wSww94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNTA4MjIyMTM3MzNaFw0yNTA4MjQwMDMyMzNaMDMxMTAvBgNV BAMTKDU5OTdFNzYyRTc4OTJGODRBRDMzNTQyOUZGQ0Y4NTM3MzIzMTJCMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHtka3xUpqoY63cnmNtZOK1bx3 Qq6Z1cA05BRf27IEtL3XmUO3QvVO0+TjgVr33t7kSGNmsmu6TCqYAXy31q+VMnzv zBO9ZIHRIuD4QRXlhNJDwCTSpW51ILGKv4+GfsX+jDdm6v1GFmUyVxbSx+IEgQdh 9GywZ3/FOhn2++1tp/Y8c2wOiDVAylaH1SECzjZFnezW9/T7FX97PVHFz9QKq7gq JY/NSYpgJPt6byRg/7s0LByozFUHQ/92v+CSpiEDWvz04Ushoo5tvqnIGukJMj/A z/vtuwGMHqOE+4Jeqy2BrilN2WyPhMQR9rCWVP7cVzblzC88RXHojvgdoVujAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUWZfnYueJL4StM1Qp/8+FNzIxKy8wHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4uqUB5/UijbfwsybqgE D0B7S7LvpwpqTYlSEszEndXDbpMUOurUqQGhH/JaGFrgjWXW9bxAV8N+PhBdxgNI lEpN966U9qHQilEkrXh5/hNFrTsUBWoruz2A3hcQelbiUV6QqXbVCciKEbZdSgLU ErTrtfvMUCJbIhYGswcOQ4QKhcdaxGwrO5AKxGooPPWCP4Hy27G8ZkpuEuRblmY2 UBnl/PgX5un95URHRth3Yypzpi5yvp9B96kVHYR9SzR/atBcP4VJrv5h6XBze6pE Q+r23OWvjJogcdbtMauIzHni4wTXOhc+PC1ICWA3x6YJkSoA2//f5ip6luqJt66F PA== -----END CERTIFICATE-----Generated at Sat Aug 23 12:08:00 2025 by rpki-client