$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft File: D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft (raw, json) Hash identifier: TM6Oy/5wJ9TxORuVV4YaJQmYOAWgknJMpTu6x6YQp8g= Subject key identifier: 42:C6:2B:F2:E6:F3:90:62:BB:6F:0B:72:14:9E:86:A4:44:1F:A4:B5 Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44 Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444 Certificate serial: 7D77DC05E75FFE2C1B5779AF63E646D826C36F47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft Manifest number: 04A8 Signing time: Fri 22 Aug 2025 18:37:33 +0000 Manifest this update: Fri 22 Aug 2025 18:32:33 +0000 Manifest next update: Sat 23 Aug 2025 22:35:33 +0000 Files and hashes: 1: 37382e32342e3132332e302f32342d3234203d3e20343031383338.roa (hash: XbX1Gid500oTFj6vAef29FZUEz5FTkMATGNQOQiD6pY=) 2: 37382e32342e3132352e302f32342d3234203d3e20343031383338.roa (hash: qgaqtIbvWlmZK0f99yeifoHSkIPhxGYhski+5gJ4Rv4=) 3: 37382e32342e3132312e302f32342d3234203d3e203631333137.roa (hash: PNy4BBOReJ4B4LRwKHBjnzscIyK0n1F3JT7zrSI8uHw=) 4: 37382e32342e3132352e302f32342d3234203d3e203534333339.roa (hash: 8J7vWDZA6CwD0N0heCZfxarZkaHc987rZNDTEoRqJuw=) 5: 37382e32342e3132332e302f32342d3234203d3e2037303138.roa (hash: yLm71OTqDFRdyl2jt+hmsZQmui0MjgACYd0QbV3wZ9U=) 6: 39332e39322e32312e302f32342d3234203d3e203631333137.roa (hash: fW+zXQmtdqPL01ivRHM0ry5dwDotUJmdzQHE3ZemyUE=) 7: 37382e32342e3132342e302f32342d3234203d3e203534333339.roa (hash: Jmas5KP8U8YtPnq0n93kzfbv6wwue5du0IC/hUNUQy4=) 8: 39332e39322e31382e302f32342d3234203d3e203534333339.roa (hash: WMxtcl2Ju6TLrgTtLUBAyAfGF8Gn9pZV9umXAbbzoJo=) 9: 39332e39322e32302e302f32342d3234203d3e2035353131.roa (hash: Anw+Ot0jzMET4Sk6hQNdmMLNf7QzBxX2vhTMbwb0Hp4=) 10: 39332e39322e32322e302f32332d3234203d3e203534333339.roa (hash: MlVhq9YMUDch69apYFS1riPDRY/vCEBSVcnZ0AXUbzA=) 11: 34352e38362e39322e302f32342d3234203d3e20323039313831.roa (hash: gFPXsCrn7VghMZpPQmlNius+Qe9koRj6iqpgIDQpOY8=) 12: 39332e39322e31382e302f32342d3234203d3e20343031383338.roa (hash: UH0UP25o3U70TKOGCO5ZzwtVViIjPRoBTmf/0ZejDTc=) 13: D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl (hash: pv2d003zQqfYQ+fbLU/7XV+9KLd9t/S+4IkJeLfZe7Q=) 14: 39332e39322e31392e302f32342d3234203d3e203631333137.roa (hash: bCly8plczaq5qd0H9MlQ1Z8xZKSunOI/jFWKgR1UqBg=) 15: 39332e39322e32322e302f32332d3234203d3e20343031383338.roa (hash: ZR3NimLfDuSVrHX3TIHZtfUL9Oft/y6YDT0lI8Ay4iU=) 16: 37382e32342e3132342e302f32342d3234203d3e20343031383338.roa (hash: VrnH5tIT+SOLQ0xUmgz8lDea4v1K04gWY5bP4L4H/fY=) 17: 37382e32342e3132322e302f32342d3234203d3e2037303138.roa (hash: RiGLyTpjx/lhYnZMR/g3INSwpo5JHGzbqqOnRRhQZa8=) 18: 34352e38362e39342e302f32342d3234203d3e2039303039.roa (hash: gq03q2PZTenb5MfLZJOhv7nheUzD9xSGdvhncjMBFfc=) 19: 37382e32342e3132322e302f32342d3234203d3e20343031383338.roa (hash: QSDJ1+8SgpwSggscxtnEW0fE8nG/Mt5ZyXJ/C5BJhqQ=) 20: 37382e32342e3132362e302f32332d3234203d3e203131343236.roa (hash: daBRkHJPjnP4DyHn4IivnK1qaHgtIwZJtESS0iOn6Xk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 22:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:77:dc:05:e7:5f:fe:2c:1b:57:79:af:63:e6:46:d8:26:c3:6f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444 Validity Not Before: Aug 22 18:32:33 2025 GMT Not After : Aug 23 22:35:33 2025 GMT Subject: CN=42C62BF2E6F39062BB6F0B72149E86A4441FA4B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:28:8e:b8:a7:64:8a:f7:a2:11:95:e6:72:43: 22:d9:32:57:80:35:75:79:0b:62:e4:7c:57:58:e4: 83:b7:e0:56:49:97:0a:2f:da:ab:1b:1f:34:37:17: f5:d8:90:cb:b6:59:54:4b:c3:e6:8e:92:5a:7d:87: 71:fc:b3:e9:9b:64:11:68:cb:d2:a8:b9:3f:ac:10: 03:f4:f0:81:03:51:d2:a7:ad:2a:61:b3:8f:a2:9a: 2e:c3:57:77:cb:3b:c9:89:c3:67:f5:b9:8c:d9:41: e4:fc:16:41:4c:c2:28:65:20:b4:d6:7a:a9:13:bc: 1a:39:ba:23:d2:3d:56:33:d3:d9:24:13:91:92:27: f3:9d:b5:8b:6f:f1:f5:e9:e4:34:7b:cb:7a:56:ca: b8:8a:2e:95:57:a4:ec:04:79:25:c0:b2:de:7d:37: 31:c4:0d:38:24:57:b1:5b:ba:6c:0e:78:c3:46:35: c6:3e:73:d0:9e:77:99:55:b9:90:e7:6d:28:bb:53: 19:5f:b7:1f:8d:2c:b2:e6:31:10:86:b8:97:bb:78: de:7a:a7:49:1b:d9:27:c5:e6:91:c3:13:af:4a:53: 18:69:4b:40:5e:e0:e0:6e:b2:3a:22:cf:12:5f:c8: d7:98:d2:dd:8d:25:b2:1f:cd:97:67:40:ff:08:34: 3c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C6:2B:F2:E6:F3:90:62:BB:6F:0B:72:14:9E:86:A4:44:1F:A4:B5 X509v3 Authority Key Identifier: keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d2:0d:29:ca:9a:35:62:58:2a:5d:48:f0:92:84:b7:6b:72: 53:b5:49:ba:5d:34:39:67:b3:5b:f6:47:d1:b2:fb:9f:6a:be: 4f:c2:0a:e7:b0:8d:9b:72:c9:ea:aa:10:fd:29:dd:ed:83:f8: eb:01:1d:87:1e:4c:2f:d3:47:5e:0e:02:7e:8c:70:26:ef:09: d9:5f:b8:e0:e9:ae:b6:b4:17:b7:2e:23:f3:54:92:fb:62:cd: 6d:dd:96:b6:66:90:74:22:66:11:42:5f:f8:40:98:67:64:56: 50:2a:79:2f:8f:af:03:99:8b:ef:67:58:49:3e:8e:66:80:20: 2b:52:8d:00:1f:8b:73:85:03:1a:86:a5:3f:e9:35:3b:55:57: f9:72:93:87:7e:f1:f1:77:66:5d:9c:96:d8:a3:c8:8e:d7:44: 41:83:fc:47:5b:e8:65:da:5d:b8:9c:e8:b8:f9:7c:7b:66:cc: 06:23:0f:52:36:8e:62:70:c3:35:40:a5:0a:5c:4e:7a:a0:f8: 9e:12:41:88:fe:44:69:d7:13:09:89:06:62:0f:2f:cb:62:f7: 02:72:d7:ea:9c:dc:7e:3b:9a:13:c2:b7:56:85:9a:0a:ea:d3: 46:fe:18:66:a1:d9:78:14:b0:8f:c8:b4:5d:7c:32:8c:94:2c: 15:6e:30:48 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfXfcBedf/iwbV3mvY+ZG2CbDb0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDAxYmEwMTNiYzFlNmQ4NmYwZDZkNThlYWZhNTRlMjdm YWRhMzQ0NDAeFw0yNTA4MjIxODMyMzNaFw0yNTA4MjMyMjM1MzNaMDMxMTAvBgNV BAMTKDQyQzYyQkYyRTZGMzkwNjJCQjZGMEI3MjE0OUU4NkE0NDQxRkE0QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvKI64p2SK96IRleZyQyLZMleA NXV5C2LkfFdY5IO34FZJlwov2qsbHzQ3F/XYkMu2WVRLw+aOklp9h3H8s+mbZBFo y9KouT+sEAP08IEDUdKnrSphs4+imi7DV3fLO8mJw2f1uYzZQeT8FkFMwihlILTW eqkTvBo5uiPSPVYz09kkE5GSJ/OdtYtv8fXp5DR7y3pWyriKLpVXpOwEeSXAst59 NzHEDTgkV7FbumwOeMNGNcY+c9Ced5lVuZDnbSi7Uxlftx+NLLLmMRCGuJe7eN56 p0kb2SfF5pHDE69KUxhpS0Be4OBusjoizxJfyNeY0t2NJbIfzZdnQP8INDw/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQsYr8ubzkGK7bwtyFJ6GpEQfpLUwHwYDVR0j BBgwFoAU0BugE7webYbw1tWOr6VOJ/raNEQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYtNjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5 NDMxLzEvRDAxQkEwMTNCQzFFNkQ4NkYwRDZENThFQUZBNTRFMjdGQURBMzQ0NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBCdWdFN3dlYllidzF0V09yNlZPSl9y YU5FUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNTIyYTUyZi02 NTM0LTQxNjUtYTZhNy1lZjlmNzRlZjk0MzEvMS9EMDFCQTAxM0JDMUU2RDg2RjBE NkQ1OEVBRkE1NEUyN0ZBREEzNDQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtINKcqaNWJYKl1I8JKE t2tyU7VJul00OWezW/ZH0bL7n2q+T8IK57CNm3LJ6qoQ/Snd7YP46wEdhx5ML9NH Xg4CfoxwJu8J2V+44OmutrQXty4j81SS+2LNbd2WtmaQdCJmEUJf+ECYZ2RWUCp5 L4+vA5mL72dYST6OZoAgK1KNAB+Lc4UDGoalP+k1O1VX+XKTh37x8XdmXZyW2KPI jtdEQYP8R1voZdpduJzouPl8e2bMBiMPUjaOYnDDNUClClxOeqD4nhJBiP5EadcT CYkGYg8vy2L3AnLX6pzcfjuaE8K3VoWaCurTRv4YZqHZeBSwj8i0XXwyjJQsFW4w SA== -----END CERTIFICATE-----Generated at Sat Aug 23 14:08:07 2025 by rpki-client