$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: Gq75njM6TUWedR2m+4Ni7Tw+/cs4ULqqVa2ayh65O8w= Subject key identifier: 9C:9E:67:68:08:46:D6:4F:72:98:84:21:96:A6:B8:D4:56:7F:87:55 Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 5E63B4BFA49CEC15B9118483489BEF217E12198F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: C6 Signing time: Sat 23 Aug 2025 06:27:33 +0000 Manifest this update: Sat 23 Aug 2025 06:22:33 +0000 Manifest next update: Sun 24 Aug 2025 06:48:33 +0000 Files and hashes: 1: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: obPbW0ZKO9rq4yp7c5UqzqijavPW0CV78gaYhHaBReI=) 2: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: oXC9Asr9SJ7DSslxSZaWUX9xWnSBbY5iUxbxwvvcFUI=) 3: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: oF6emru8WxgvVXqkaR8fcBjBYtW3k6QlkoqbWvqkB2U=) 4: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: cK22q6rO6KtktflqsQYlSr1z73xEpoVM/WNGnd6YIEI=) 5: 3231332e3135372e3132312e302f32342d3234203d3e2039333034.roa (hash: ZHfI2bxkV7hnGY31X0QEko4MmgUYJCvh7a/XuZiRsPg=) 6: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: u6D0nQIamyf1rwT6EphlkmgpGmdsHhrROhbEzSFSSxQ=) 7: 3231332e3135372e3132332e302f32342d3234203d3e20383334.roa (hash: AFtivI61gfbdC46y0xOZPBtrdddcwvL1pKOVKApf6R4=) 8: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: aUvc4UTsIU7R0m9dsnmxWesOTPr9WQo6/RshJ5X0hb4=) 9: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: U2rsj2GmpPBYV9RPLITNHzbaDI2Gxelnlov5msxX9eI=) 10: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: fkThFrWbc2SNg5nWL/DjCmp7efO9LKVSLfyHO63Odeo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:63:b4:bf:a4:9c:ec:15:b9:11:84:83:48:9b:ef:21:7e:12:19:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Aug 23 06:22:33 2025 GMT Not After : Aug 24 06:48:33 2025 GMT Subject: CN=9C9E67680846D64F7298842196A6B8D4567F8755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:12:a9:b3:6a:f4:32:28:d1:2e:69:ec:36:52: 74:34:51:66:42:19:4c:95:96:ad:64:cd:51:af:69: 21:6a:77:36:ba:e2:1c:89:0a:03:a4:74:4d:91:43: d9:c2:cd:6c:53:63:1b:bc:c8:5d:9d:2b:cc:a5:08: 8d:40:60:88:77:18:52:bd:a6:2a:9d:3a:4b:35:c4: 6b:f9:22:ea:f7:f5:2a:5b:a4:ab:5e:b1:4a:11:d4: 3b:7d:be:d2:7f:e0:fc:59:9b:e1:f9:aa:69:02:9e: 11:07:58:bf:b0:d6:b7:1d:ee:a5:b8:d1:07:5b:ab: ea:d4:27:2d:39:4f:d6:91:96:25:b8:6f:8d:f3:2f: 29:57:ab:e1:80:23:13:5b:cf:ce:00:94:43:3b:46: 5b:16:2a:3b:63:af:1b:7a:91:c2:ca:62:c3:3a:9e: 3e:7a:6c:2f:af:34:1e:6b:90:97:41:7c:8f:3d:45: 0b:76:ce:bd:f8:37:3b:13:03:4b:65:17:6a:cc:8d: 5d:0b:46:e8:54:72:6c:21:bd:7c:e6:fa:78:20:b9: a8:f0:ab:9e:1d:4c:53:81:5c:74:c7:cc:ca:42:d4: 9b:a2:56:2c:0b:19:78:bb:6d:80:49:2c:81:98:cb: 22:40:44:e4:6c:d3:0f:6b:f4:48:59:63:a7:ea:49: d8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9E:67:68:08:46:D6:4F:72:98:84:21:96:A6:B8:D4:56:7F:87:55 X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:db:8e:8a:b2:2c:a7:70:b9:3d:f9:eb:ab:80:c6:90:56:1d: 89:89:64:cb:0b:95:48:bb:12:64:57:bd:20:79:13:5e:88:48: 00:dc:de:96:2e:ce:a5:52:2e:a9:da:4d:ab:55:54:8c:50:18: 87:e8:23:49:c2:89:2b:9b:9d:75:96:6c:7d:b6:74:30:67:3f: 09:44:1a:9c:3f:e1:12:6d:44:1f:af:d1:0c:e4:3f:e8:16:1c: 11:a8:3d:71:29:ad:34:f7:a9:b6:58:65:09:2e:c5:8e:e0:bb: be:9f:0c:43:1f:31:e7:00:20:86:95:31:88:42:1e:3b:77:0f: bb:bb:42:df:87:80:1e:56:09:7f:83:69:1d:8e:79:49:b8:08: c6:31:de:4f:0a:d3:e1:8d:30:7c:8c:83:51:58:aa:87:b9:21: 14:f0:ac:c9:9c:5f:06:07:f1:8c:5f:9e:c8:ab:46:db:e5:c6: f2:b0:03:fc:16:f4:7a:50:f3:21:84:a0:b8:2b:e0:6e:d4:6e: 84:2a:1b:c9:01:03:6c:4c:05:f4:9b:46:a0:37:6c:fb:c9:46: 56:0c:b3:07:25:34:3f:e5:e9:01:74:80:89:20:c0:b3:d7:c3: 8a:8a:69:39:89:bb:87:78:90:5f:11:b1:c9:4b:d8:06:79:82: 82:19:cb:08 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXmO0v6Sc7BW5EYSDSJvvIX4SGY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNTA4MjMwNjIyMzNaFw0yNTA4MjQwNjQ4MzNaMDMxMTAvBgNV BAMTKDlDOUU2NzY4MDg0NkQ2NEY3Mjk4ODQyMTk2QTZCOEQ0NTY3Rjg3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaEqmzavQyKNEuaew2UnQ0UWZC GUyVlq1kzVGvaSFqdza64hyJCgOkdE2RQ9nCzWxTYxu8yF2dK8ylCI1AYIh3GFK9 piqdOks1xGv5Iur39SpbpKtesUoR1Dt9vtJ/4PxZm+H5qmkCnhEHWL+w1rcd7qW4 0Qdbq+rUJy05T9aRliW4b43zLylXq+GAIxNbz84AlEM7RlsWKjtjrxt6kcLKYsM6 nj56bC+vNB5rkJdBfI89RQt2zr34NzsTA0tlF2rMjV0LRuhUcmwhvXzm+ngguajw q54dTFOBXHTHzMpC1JuiViwLGXi7bYBJLIGYyyJARORs0w9r9EhZY6fqSdi3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUnJ5naAhG1k9ymIQhlqa41FZ/h1UwHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq9uOirIsp3C5Pfnrq4DG kFYdiYlkywuVSLsSZFe9IHkTXohIANzeli7OpVIuqdpNq1VUjFAYh+gjScKJK5ud dZZsfbZ0MGc/CUQanD/hEm1EH6/RDOQ/6BYcEag9cSmtNPeptlhlCS7FjuC7vp8M Qx8x5wAghpUxiEIeO3cPu7tC34eAHlYJf4NpHY55SbgIxjHeTwrT4Y0wfIyDUViq h7khFPCsyZxfBgfxjF+eyKtG2+XG8rAD/Bb0elDzIYSguCvgbtRuhCobyQEDbEwF 9JtGoDds+8lGVgyzByU0P+XpAXSAiSDAs9fDioppOYm7h3iQXxGxyUvYBnmCghnL CA== -----END CERTIFICATE-----Generated at Sat Aug 23 13:32:38 2025 by rpki-client