$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: OpfP2dR+TnhL5Uu7S46uoTl0srqSB9IOjoXtmvHTDfU= Subject key identifier: 28:00:27:7B:40:29:B7:E3:5F:2E:73:EA:76:48:34:1A:D0:9D:2C:4A Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 17F8A45963A5D9C835AA40739CE682E8C54E1488 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0379 Signing time: Sat 23 Aug 2025 03:18:37 +0000 Manifest this update: Sat 23 Aug 2025 03:13:37 +0000 Manifest next update: Sun 24 Aug 2025 05:52:37 +0000 Files and hashes: 1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: Dcvv1Ul0JGTxvGw2Ps2/e001gxa3ZWx5ttvSXeBWQh0=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: xrYxMPWlm0NFN/UuQmB97S5T+AeBbukKizXkLUfGrf8=) 3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 7iaxKvk/wYOwovr+ggbN35yrYQ9DLFp2Y/AwhSVk71I=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: tM6AOBSdq8t/+b2jwQliXrToX+/NgR89RNEhgmdHZII=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: BTfImX353JFUgcIZ2jDRlZdLmp+KqSbtrCi6ArFxd6k=) 8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: OgJ5IHBdzo8hNNE/hueSPIOCulRspm4s5gp10NbE/v8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f8:a4:59:63:a5:d9:c8:35:aa:40:73:9c:e6:82:e8:c5:4e:14:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Aug 23 03:13:37 2025 GMT Not After : Aug 24 05:52:37 2025 GMT Subject: CN=2800277B4029B7E35F2E73EA7648341AD09D2C4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:67:eb:45:a3:dd:4c:be:6b:fb:b8:1f:2a:95: 38:86:9c:42:5c:e4:11:cf:28:4a:e8:94:cb:20:e7: 9e:98:7e:19:3a:c4:06:b4:3e:20:57:f0:2d:74:21: c4:0b:31:87:de:cf:c6:22:44:c0:c1:93:d9:fa:4e: 7f:a9:88:76:7b:7f:c6:6b:c9:d0:70:33:b8:da:bc: a0:96:fb:2e:30:0f:d4:21:74:e2:8d:c5:99:39:e3: 08:6b:63:62:68:44:6d:83:16:29:70:38:cc:0e:0c: af:29:bc:20:17:22:7d:ec:a7:14:71:87:3d:e4:eb: b1:54:fd:21:f1:8d:b9:e8:fd:98:87:cb:e0:2e:76: 15:51:35:44:5e:32:93:8f:cc:2f:b8:75:27:ef:72: 24:7d:f5:72:56:31:2f:1a:27:c9:ce:93:1f:71:95: 7a:5d:e5:9b:f7:ab:72:10:61:d7:5b:05:73:93:54: 60:cf:82:d9:cb:a3:ca:f8:86:0c:62:82:cf:8a:9d: 77:f5:46:a4:c5:40:2d:a4:8e:56:04:25:41:d5:c4: a8:b3:2a:17:13:9f:16:96:3f:d6:5f:9d:23:62:7f: 34:db:53:a0:6b:07:20:4a:43:f5:40:15:09:3e:64: 5e:d7:1a:ae:22:6e:03:87:14:9d:b9:52:6b:da:96: 4a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:00:27:7B:40:29:B7:E3:5F:2E:73:EA:76:48:34:1A:D0:9D:2C:4A X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:2e:fb:58:a8:b3:d3:a6:0b:82:38:d4:88:cc:bf:fc:e1:56: ae:67:af:63:05:15:c0:7e:1d:c4:5c:fa:8e:86:01:d5:01:80: c0:11:b1:30:66:b1:5c:a5:4f:e9:90:1b:17:62:55:96:b6:d5: 1b:a9:c7:42:51:3b:ab:4e:8c:ea:c3:94:6f:6a:86:96:8e:44: b1:5c:e1:df:1f:df:5c:ff:ce:86:44:16:18:89:ca:25:5a:a6: a7:4f:e8:82:7f:de:44:ac:24:d9:59:f3:28:74:91:f9:36:51: 48:7b:98:cc:9a:5a:44:bd:9f:47:2c:ca:fe:8f:bd:db:78:8e: 6b:e7:b4:fb:c1:e5:ef:9f:f0:90:ad:41:1b:80:b2:27:c5:19: 52:46:f4:3e:5b:69:07:f9:46:82:3f:35:ff:a8:70:65:c6:03: e2:15:0b:57:b7:75:a1:51:80:e5:b8:9e:32:22:aa:f3:65:19: 95:d6:18:a6:34:92:dc:b5:00:ba:9b:7e:dd:1d:99:6a:f3:30: 82:15:26:c6:ae:37:e7:5d:e8:1f:47:43:3d:19:91:21:66:d0: 5a:0c:cb:fa:53:b9:17:65:14:59:97:0e:4e:8f:1c:4b:0c:a4: 1b:1d:b8:2c:eb:ea:ba:8b:79:2f:96:08:2c:88:d9:7d:3c:1c: a4:fd:68:f1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUF/ikWWOl2cg1qkBznOaC6MVOFIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTA4MjMwMzEzMzdaFw0yNTA4MjQwNTUyMzdaMDMxMTAvBgNV BAMTKDI4MDAyNzdCNDAyOUI3RTM1RjJFNzNFQTc2NDgzNDFBRDA5RDJDNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRZ+tFo91Mvmv7uB8qlTiGnEJc 5BHPKErolMsg556Yfhk6xAa0PiBX8C10IcQLMYfez8YiRMDBk9n6Tn+piHZ7f8Zr ydBwM7javKCW+y4wD9QhdOKNxZk54whrY2JoRG2DFilwOMwODK8pvCAXIn3spxRx hz3k67FU/SHxjbno/ZiHy+AudhVRNUReMpOPzC+4dSfvciR99XJWMS8aJ8nOkx9x lXpd5Zv3q3IQYddbBXOTVGDPgtnLo8r4hgxigs+KnXf1RqTFQC2kjlYEJUHVxKiz KhcTnxaWP9ZfnSNifzTbU6BrByBKQ/VAFQk+ZF7XGq4ibgOHFJ25UmvalkqpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUKAAne0Apt+NfLnPqdkg0GtCdLEowHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJi77WKiz06YLgjjUiMy/ /OFWrmevYwUVwH4dxFz6joYB1QGAwBGxMGaxXKVP6ZAbF2JVlrbVG6nHQlE7q06M 6sOUb2qGlo5EsVzh3x/fXP/OhkQWGInKJVqmp0/ogn/eRKwk2VnzKHSR+TZRSHuY zJpaRL2fRyzK/o+923iOa+e0+8Hl75/wkK1BG4CyJ8UZUkb0PltpB/lGgj81/6hw ZcYD4hULV7d1oVGA5bieMiKq82UZldYYpjSS3LUAupt+3R2ZavMwghUmxq43513o H0dDPRmRIWbQWgzL+lO5F2UUWZcOTo8cSwykGx24LOvquot5L5YILIjZfTwcpP1o 8Q== -----END CERTIFICATE-----Generated at Sat Aug 23 10:06:22 2025 by rpki-client