$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft File: 51917E722DB03952D9056BED2F6BD4BF98B78976.mft (raw, json) Hash identifier: uCYIu3jUx5otlV0u+npj9PycFufd74GYiQflb44P3sk= Subject key identifier: C4:6C:4B:9D:40:08:E4:EF:E1:62:26:AA:35:11:CE:10:EC:CA:7A:54 Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 1A759078CA7B62EDF62E8472169ED38395CFA4CD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft Manifest number: 8B Signing time: Sat 23 Aug 2025 13:51:18 +0000 Manifest this update: Sat 23 Aug 2025 13:46:18 +0000 Manifest next update: Sun 24 Aug 2025 14:42:18 +0000 Files and hashes: 1: 326131343a373538303a666635333a3a2f34382d3438203d3e20323039373130.roa (hash: UpFVw7x1NBf/Uix4G0zJEj+QV4riL3tEIjso5GywhOU=) 2: 326131343a373538303a666635343a3a2f34382d3438203d3e20323039373130.roa (hash: i7VkbN6Rb5CnHlmR8BF2dlC+Uq3PFV4wJTcaolWAu+U=) 3: 326131343a373538303a666635323a3a2f34382d3438203d3e20323039373130.roa (hash: vs66PWFM6L/hirNyhIXTRaz65c001j+IhkCdp8VdfS4=) 4: 51917E722DB03952D9056BED2F6BD4BF98B78976.crl (hash: 40MUhLfZqa169O/mMzcakzBP7MqvSrqp3wG6np9Juk8=) 5: 326131343a373538303a3530303a3a2f34302d3430203d3e20323039373130.roa (hash: UtWLjV2JD6X8emwUC9bu8RyXGCD7bzymrTBVIEkaVv8=) 6: 326131343a373538303a666635313a3a2f34382d3438203d3e20323039373130.roa (hash: KcfiSDiqDvlLOqfaLqph9s6F4NvpySAcmNFiwDriyms=) 7: 326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa (hash: 5weylF9E+kZUqdJn7nMGLccAIkWjUNuo5MqarqyfkO8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:75:90:78:ca:7b:62:ed:f6:2e:84:72:16:9e:d3:83:95:cf:a4:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Aug 23 13:46:18 2025 GMT Not After : Aug 24 14:42:18 2025 GMT Subject: CN=C46C4B9D4008E4EFE16226AA3511CE10ECCA7A54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:59:32:38:72:c6:98:95:20:c6:67:19:de:ee: 91:b8:f6:5c:9f:21:b5:42:b0:5a:db:db:b4:4e:1e: ca:d7:b6:04:2a:dc:ac:40:51:46:e3:87:50:fa:c0: 86:59:34:0e:d6:c6:11:a5:10:79:ee:2f:c6:37:b0: 74:79:79:af:e1:d0:e9:8e:6f:3a:af:d8:9e:cd:42: e8:83:72:88:e9:2a:89:7e:2b:e6:3c:4a:f5:98:21: 01:0c:5a:6e:9f:22:bc:b3:b4:cb:10:2b:c3:70:d7: 18:1f:55:ab:06:0f:1a:cc:4c:97:11:42:79:1d:6b: 8f:b3:1a:a1:03:63:de:cf:83:d6:d9:11:ee:17:3e: e7:15:0c:1b:c6:86:ac:62:0b:8c:5d:40:54:50:e2: 5e:51:d0:96:e9:5d:9f:da:29:f2:ec:1c:38:4c:46: e6:23:9f:7d:21:1e:36:d8:47:20:d3:6c:be:96:07: 9f:e7:6c:2f:29:99:17:98:34:38:e9:81:7d:b7:9c: 7b:9a:c6:d1:42:f2:d2:6c:a1:a2:98:ee:ff:6d:6f: 8a:71:be:23:90:a9:2b:72:d8:db:75:d3:df:cc:38: 5b:b0:b6:84:7f:f3:77:a6:41:3b:4f:ed:b4:7c:40: ea:29:28:ac:7e:af:0a:24:eb:3b:64:52:25:91:aa: cf:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6C:4B:9D:40:08:E4:EF:E1:62:26:AA:35:11:CE:10:EC:CA:7A:54 X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:14:4f:7d:86:ea:f3:cb:15:b7:da:cc:10:ba:bd:e9:7c:6f: 87:d6:98:6a:b8:f0:2f:89:08:98:0c:9c:0c:ff:1e:c9:ab:54: 88:30:24:92:3d:14:5b:d9:1d:c9:dc:54:de:fb:06:45:fa:bc: a4:01:0b:23:8d:39:0d:6d:dc:38:32:25:5d:6f:97:80:79:d2: e9:51:bb:da:88:42:38:e1:21:67:f6:9c:0d:7c:52:6c:74:06: d7:89:b1:b1:1f:d8:87:28:e5:30:35:3c:3b:f3:48:c6:cf:7f: 1a:09:bf:d5:a1:be:c8:52:c4:8f:47:80:6a:c4:38:85:82:a5: 08:0a:dd:98:18:90:d0:2f:0e:0c:71:ea:4e:32:30:a0:50:56: 87:87:ca:68:e9:73:96:3c:75:fa:7c:e2:e4:00:f1:2d:a6:c1: ea:30:80:93:9e:15:29:2d:51:03:c7:3b:36:f5:d3:c0:1c:34: b5:fb:6a:91:fc:bd:12:18:59:e1:ec:51:09:4e:47:16:3f:f6: 60:24:71:4b:00:92:20:a8:8e:5f:2d:c6:0c:cf:62:ab:ff:75: 25:91:da:8a:eb:8a:f8:a4:c9:5f:5c:e2:5c:b2:e8:15:36:59: bd:0c:23:52:dc:0f:9a:8c:52:4c:70:a1:58:24:17:2e:f8:5c: 11:d7:e4:6e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGnWQeMp7Yu32LoRyFp7Tg5XPpM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNTA4MjMxMzQ2MThaFw0yNTA4MjQxNDQyMThaMDMxMTAvBgNV BAMTKEM0NkM0QjlENDAwOEU0RUZFMTYyMjZBQTM1MTFDRTEwRUNDQTdBNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPWTI4csaYlSDGZxne7pG49lyf IbVCsFrb27ROHsrXtgQq3KxAUUbjh1D6wIZZNA7WxhGlEHnuL8Y3sHR5ea/h0OmO bzqv2J7NQuiDcojpKol+K+Y8SvWYIQEMWm6fIryztMsQK8Nw1xgfVasGDxrMTJcR Qnkda4+zGqEDY97Pg9bZEe4XPucVDBvGhqxiC4xdQFRQ4l5R0JbpXZ/aKfLsHDhM RuYjn30hHjbYRyDTbL6WB5/nbC8pmReYNDjpgX23nHuaxtFC8tJsoaKY7v9tb4px viOQqSty2Nt109/MOFuwtoR/83emQTtP7bR8QOopKKx+rwok6ztkUiWRqs8HAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUxGxLnUAI5O/hYiaqNRHOEOzKelQwHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzllY2FjNDEzLTRjZDItNDcyYy1iMDFlLTc0NDU4Y2VhMzg2Yy8wLzUxOTE3RTcy MkRCMDM5NTJEOTA1NkJFRDJGNkJENEJGOThCNzg5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC0FE99 hurzyxW32swQur3pfG+H1phquPAviQiYDJwM/x7Jq1SIMCSSPRRb2R3J3FTe+wZF +rykAQsjjTkNbdw4MiVdb5eAedLpUbvaiEI44SFn9pwNfFJsdAbXibGxH9iHKOUw NTw780jGz38aCb/Vob7IUsSPR4BqxDiFgqUICt2YGJDQLw4McepOMjCgUFaHh8po 6XOWPHX6fOLkAPEtpsHqMICTnhUpLVEDxzs29dPAHDS1+2qR/L0SGFnh7FEJTkcW P/ZgJHFLAJIgqI5fLcYMz2Kr/3UlkdqK64r4pMlfXOJcsugVNlm9DCNS3A+ajFJM cKFYJBcu+FwR1+Ru -----END CERTIFICATE-----Generated at Sat Aug 23 17:56:19 2025 by rpki-client