$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: 2wa3FRd6DBeouo7J4f3Rj/qfcVBsXrE7+A2yoCOwNqg= Subject key identifier: 6A:F0:FD:C9:5F:2B:38:43:14:55:B0:22:D0:C4:38:13:43:9C:EF:CD Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 074919F35680768A064AC73AF5C7FC5A20646C9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: 7A Signing time: Sat 28 Jun 2025 15:24:10 +0000 Manifest this update: Sat 28 Jun 2025 15:19:10 +0000 Manifest next update: Sun 29 Jun 2025 18:48:10 +0000 Files and hashes: 1: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: u6D0nQIamyf1rwT6EphlkmgpGmdsHhrROhbEzSFSSxQ=) 2: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: fkThFrWbc2SNg5nWL/DjCmp7efO9LKVSLfyHO63Odeo=) 3: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: U2rsj2GmpPBYV9RPLITNHzbaDI2Gxelnlov5msxX9eI=) 4: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: obPbW0ZKO9rq4yp7c5UqzqijavPW0CV78gaYhHaBReI=) 5: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: aUvc4UTsIU7R0m9dsnmxWesOTPr9WQo6/RshJ5X0hb4=) 6: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: oXC9Asr9SJ7DSslxSZaWUX9xWnSBbY5iUxbxwvvcFUI=) 7: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: cK22q6rO6KtktflqsQYlSr1z73xEpoVM/WNGnd6YIEI=) 8: 3231332e3135372e3132332e302f32342d3234203d3e20313337353137.roa (hash: 101KeXXnBE7X7QLTvc7Gr7DVuO0YIAuTdg47tJ4yQUU=) 9: 3231332e3135372e3132312e302f32342d3234203d3e20383334.roa (hash: KzRDONoUEdWtAmYoE3nM54cz2mZ3OTHGtsETHEM2i5I=) 10: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: iBCsLop385VYt08xnJTucZ/5kodcralI1flo0bKdpUM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:49:19:f3:56:80:76:8a:06:4a:c7:3a:f5:c7:fc:5a:20:64:6c:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Jun 28 15:19:10 2025 GMT Not After : Jun 29 18:48:10 2025 GMT Subject: CN=6AF0FDC95F2B38431455B022D0C43813439CEFCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:54:5a:5e:0b:2a:c4:c5:87:38:1a:23:73: 54:7d:a7:91:bb:e2:9c:f6:44:06:0a:e7:2a:5f:36: f9:ab:3a:a8:0b:1a:ad:ac:e7:d2:8d:49:49:7e:b8: 38:eb:90:7c:2a:c0:ca:18:50:1d:9d:1d:54:b9:85: 5a:3a:d1:67:55:98:b9:52:2a:61:23:c2:57:21:f4: 78:e1:3c:16:ef:e3:89:d9:66:e5:de:75:35:d2:35: 7a:52:4a:c6:d3:2b:f2:9e:66:8d:b5:ee:f7:ae:ce: e5:0a:0a:10:9c:49:79:a9:cc:a1:d0:cc:91:19:53: ab:b6:a6:e9:d2:f4:f2:b3:c2:59:3f:71:1d:53:97: ea:00:57:47:f4:08:b7:56:2a:bf:bb:0c:f0:bb:f8: 36:e4:0a:73:53:4f:98:c2:d5:12:3d:9f:fa:be:f8: 8d:4e:02:48:88:b9:11:8b:4a:c5:af:16:d3:f0:a9: bd:5b:b8:12:d8:44:c5:3e:91:b4:15:31:3a:af:5e: 8a:54:86:25:8e:5b:b8:ca:6f:42:e7:28:92:96:14: e2:a6:15:83:0b:27:4d:b7:8c:f2:48:cf:72:28:6f: 02:71:83:78:ef:2e:6c:21:94:4b:96:d3:ff:f9:24: 97:13:57:ef:f9:09:b4:bc:d0:85:d8:7a:2b:61:e3: 8e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F0:FD:C9:5F:2B:38:43:14:55:B0:22:D0:C4:38:13:43:9C:EF:CD X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:05:3f:04:8f:08:b5:e4:75:ec:16:35:f6:fd:d0:88:b6:3a: 3d:7f:42:c9:31:9a:88:7c:0f:9a:93:f3:3b:7d:a6:b1:d6:68: 71:46:3f:d3:75:f2:75:47:e8:87:24:fd:6c:69:1c:8c:70:46: 16:c4:6d:ab:ce:8e:fb:04:d4:5b:c7:25:74:e4:a3:35:30:47: 3c:b6:f3:ec:bc:d0:56:d2:57:e8:b0:68:7a:cf:d1:13:11:d6: 7d:dc:5c:61:67:ad:05:8b:1b:62:c5:c4:50:2d:96:78:e4:84: ea:12:84:2f:e4:7e:86:5f:94:3f:aa:82:6e:c7:5a:01:fc:3a: 16:52:88:2f:b2:6f:17:3f:90:8c:d2:27:1b:d3:2d:13:fb:7f: 33:25:8d:aa:2b:37:a6:59:a4:c4:e5:d0:91:02:5c:03:00:03: dc:c8:94:c4:f1:b6:91:3f:18:d8:0d:87:91:50:c0:20:3c:9b: d9:3a:36:7e:c1:d4:b5:3a:f8:75:70:29:8f:a6:56:d2:50:59: 48:27:7a:2c:41:0f:1f:5e:3d:43:cc:d1:36:a9:ac:ac:05:b1: 2d:93:5a:01:5c:5c:1a:22:99:68:cc:bc:c2:db:a3:b8:e1:84: ed:bf:6a:d0:7d:19:91:f1:39:34:47:d2:58:72:5b:34:64:1f: 26:90:4e:25 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUB0kZ81aAdooGSsc69cf8WiBkbJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNTA2MjgxNTE5MTBaFw0yNTA2MjkxODQ4MTBaMDMxMTAvBgNV BAMTKDZBRjBGREM5NUYyQjM4NDMxNDU1QjAyMkQwQzQzODEzNDM5Q0VGQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC921RaXgsqxMWHOBojc1R9p5G7 4pz2RAYK5ypfNvmrOqgLGq2s59KNSUl+uDjrkHwqwMoYUB2dHVS5hVo60WdVmLlS KmEjwlch9HjhPBbv44nZZuXedTXSNXpSSsbTK/KeZo217veuzuUKChCcSXmpzKHQ zJEZU6u2punS9PKzwlk/cR1Tl+oAV0f0CLdWKr+7DPC7+DbkCnNTT5jC1RI9n/q+ +I1OAkiIuRGLSsWvFtPwqb1buBLYRMU+kbQVMTqvXopUhiWOW7jKb0LnKJKWFOKm FYMLJ023jPJIz3IobwJxg3jvLmwhlEuW0//5JJcTV+/5CbS80IXYeith445/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUavD9yV8rOEMUVbAi0MQ4E0Oc780wHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgU/BI8IteR17BY19v3Q iLY6PX9CyTGaiHwPmpPzO32msdZocUY/03XydUfohyT9bGkcjHBGFsRtq86O+wTU W8cldOSjNTBHPLbz7LzQVtJX6LBoes/RExHWfdxcYWetBYsbYsXEUC2WeOSE6hKE L+R+hl+UP6qCbsdaAfw6FlKIL7JvFz+QjNInG9MtE/t/MyWNqis3plmkxOXQkQJc AwAD3MiUxPG2kT8Y2A2HkVDAIDyb2To2fsHUtTr4dXApj6ZW0lBZSCd6LEEPH149 Q8zRNqmsrAWxLZNaAVxcGiKZaMy8wtujuOGE7b9q0H0ZkfE5NEfSWHJbNGQfJpBO JQ== -----END CERTIFICATE-----Generated at Sat Jun 28 22:04:28 2025 by rpki-client