$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft File: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft (raw, json) Hash identifier: mcBcMb0vNkIt3AfGR6l8OR35p4gfNCDk0muDgcOLZ1s= Subject key identifier: 07:68:56:74:11:34:23:53:AB:BA:F8:32:C5:F6:FF:09:03:BF:B0:67 Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 Certificate issuer: /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Certificate serial: 71C161165C6929ED2B23B4DACF1A8AF83161E234 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft Manifest number: B5 Signing time: Sat 23 Aug 2025 13:13:05 +0000 Manifest this update: Sat 23 Aug 2025 13:08:05 +0000 Manifest next update: Sun 24 Aug 2025 15:01:05 +0000 Files and hashes: 1: 326131343a373538303a666634343a3a2f34382d3438203d3e20323134333434.roa (hash: wAwmvjP2Xs/JgKfPKl1DdsDpWK9Z2qkOeMDP05em2JQ=) 2: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: /zrjZ0ZqEzRDQ5mOWK+S06L45z9UxNhwijRkpqGoHX0=) 3: 326131343a373538303a666634303a3a2f34382d3438203d3e20323134333434.roa (hash: dPCGiKkWz0E9rMprVOstBFLQuVK9OG6CBSKX+fk7UXw=) 4: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl (hash: qEuhGMat96UYDOElITzp86hVSL69LAYjdHD4CSGdx0M=) 5: 326131343a373538303a666634323a3a2f34382d3438203d3e20323134333434.roa (hash: 9k9VorkprwzOj4hWnDvwpKS020LK9HlBFwzRrzgLjKw=) 6: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: 0tk68iktR4A+Tmx1ow+QCPfURRQdgNg7+hqUgrcV4SU=) 7: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: i94AFUzw6e810fYgj7x6pZ8Yx8k5H6Glrkwkeys08UU=) 8: 326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa (hash: GgRgpO0cir6J2JIvLpFaBWDg0/fcSkJg//f6BlSBDCY=) 9: 326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa (hash: CfKfKnWr6AMoLiLfBVlrhneodY9KAu+Y1wDjsvoRWPk=) 10: 326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa (hash: eBRv+uDGLUqSp7a6GG/a9BPTN3/sPy8oPhg1ivi/5ik=) 11: 326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa (hash: apRB5OfhlgNP9CjlOyLXHwJtDJcG7Ul2o20dXFYOVFQ=) 12: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: Kr++/O1eWk2rhooTEwkNaOpIKHaAHhcWSp5UY9Du6eM=) 13: 326131343a373538303a666634313a3a2f34382d3438203d3e20323134333434.roa (hash: pdCqfiQKAk5mpE38Sur9HB4NVG9NXvRtOzzMMORY0Ss=) 14: 326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa (hash: gWNOGizaCWeT+eChfA6O1CcYgC4CppF3JVd8ZgY0qsY=) 15: 326131343a373538303a666634353a3a2f34382d3438203d3e20323134333434.roa (hash: 5PYc1rYfh5soL/5eOkdLi7LFwnLpj6iEncugTNMnU6k=) 16: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: 3uRQGY7O+ZvtbHNtgC5MF4VJ4PR1W0vGtZuXeGQdfrI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c1:61:16:5c:69:29:ed:2b:23:b4:da:cf:1a:8a:f8:31:61:e2:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Validity Not Before: Aug 23 13:08:05 2025 GMT Not After : Aug 24 15:01:05 2025 GMT Subject: CN=0768567411342353ABBAF832C5F6FF0903BFB067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a1:8e:b5:12:aa:7e:0e:ba:70:c3:fa:c3:8e: 9b:3a:c7:3a:cc:d5:15:1d:33:80:c1:af:ce:22:e3: 7e:7a:ff:6d:45:1d:d3:bd:a8:15:54:f5:ac:c6:4f: 2d:2d:0d:57:9b:3c:95:55:e1:9f:e3:15:77:67:e7: fe:a5:80:c2:f8:c1:55:62:5f:aa:1f:5f:61:49:29: b8:b9:27:aa:95:71:23:06:13:f7:f4:3f:a3:44:a1: 2a:01:9a:56:fc:3f:c0:08:ca:ec:9a:a8:0f:7d:56: d2:91:26:70:7c:71:3e:ca:9f:bf:18:30:50:53:a5: 10:44:2a:8b:c9:78:46:55:63:6c:d5:cb:37:b5:ef: 6b:b6:03:7c:57:53:00:17:b5:11:26:be:3d:13:6b: f7:96:f1:1e:b3:d3:a2:bb:4e:d0:04:e7:e1:ec:ec: b1:22:36:bf:36:e9:cd:40:c3:23:d3:1e:40:88:41: 72:a1:fc:7a:d5:cc:7c:ff:9a:01:d0:05:c0:26:89: de:06:46:71:d6:6d:36:4b:26:3d:e0:b2:4e:ee:a3: 2c:48:34:da:8f:5c:e9:50:06:2e:62:61:0c:8f:99: 4d:6f:ff:c7:81:21:18:46:97:a8:1e:75:1c:50:3e: b4:87:3e:32:44:9f:1c:e7:dd:7b:cd:b4:53:b3:de: 50:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:68:56:74:11:34:23:53:AB:BA:F8:32:C5:F6:FF:09:03:BF:B0:67 X509v3 Authority Key Identifier: keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:9e:d6:5e:e4:d8:44:d8:46:52:d4:e9:09:7d:e9:a8:49:24: 1e:ba:a1:90:e6:0e:d7:76:d1:fe:ed:e3:a5:00:b0:58:13:65: 8c:63:19:b5:aa:a0:f3:5e:6a:41:45:49:20:d1:20:02:0d:8f: 0a:19:48:77:6b:d3:24:76:fe:c3:d2:2b:31:1e:a5:b1:78:68: ae:49:b0:d9:be:46:17:60:f5:d3:ad:97:20:12:cb:cf:14:15: a9:c2:36:be:1d:1e:70:e0:8d:0f:c2:2e:89:7e:cd:5f:4e:b8: 4c:16:62:e6:c9:b5:f3:61:ed:2b:2e:3f:14:b1:2b:ea:c5:67: 84:61:c1:c7:15:d2:97:f3:b6:f7:44:ea:d5:64:52:6c:f4:ea: cf:58:2d:94:be:88:85:27:46:ba:0c:d1:35:d0:55:af:31:52: 98:67:12:bb:1a:16:a7:44:04:2d:f7:c6:ac:33:cc:93:74:22: 30:b0:8a:ca:44:57:73:b9:b2:b7:e2:f0:ff:59:08:9a:85:03: 66:e1:d1:fe:c9:43:c1:6a:95:a4:4e:40:06:fa:94:d2:b7:b0: e8:90:0b:d4:3e:fb:af:ed:9c:c1:e8:e1:ff:5c:86:ac:5c:58: 5e:44:0e:9e:2e:43:67:e5:a6:29:58:eb:65:73:37:92:1c:16: bd:f0:19:40 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUccFhFlxpKe0rI7TazxqK+DFh4jQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJB ODcyMzk0NTAeFw0yNTA4MjMxMzA4MDVaFw0yNTA4MjQxNTAxMDVaMDMxMTAvBgNV BAMTKDA3Njg1Njc0MTEzNDIzNTNBQkJBRjgzMkM1RjZGRjA5MDNCRkIwNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3oY61Eqp+Drpww/rDjps6xzrM 1RUdM4DBr84i4356/21FHdO9qBVU9azGTy0tDVebPJVV4Z/jFXdn5/6lgML4wVVi X6ofX2FJKbi5J6qVcSMGE/f0P6NEoSoBmlb8P8AIyuyaqA99VtKRJnB8cT7Kn78Y MFBTpRBEKovJeEZVY2zVyze172u2A3xXUwAXtREmvj0Ta/eW8R6z06K7TtAE5+Hs 7LEiNr826c1AwyPTHkCIQXKh/HrVzHz/mgHQBcAmid4GRnHWbTZLJj3gsk7uoyxI NNqPXOlQBi5iYQyPmU1v/8eBIRhGl6gedRxQPrSHPjJEnxzn3XvNtFOz3lBHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUB2hWdBE0I1Oruvgyxfb/CQO/sGcwHwYDVR0j BBgwFoAUh6TITUNm27FakJClWqLc66hyOUUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMw MWRhLzEvODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJBODcyMzk0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84N0E0Qzg0RDQzNjZEQkIxNUE5MDkwQTU1 QUEyRENFQkE4NzIzOTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2E1ZDRjMDBiLWQxMDUtNDkwNi1iOTgxLTFkMDM0M2UzMDFkYS8xLzg3QTRDODRE NDM2NkRCQjE1QTkwOTBBNTVBQTJEQ0VCQTg3MjM5NDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAGntZe 5NhE2EZS1OkJfemoSSQeuqGQ5g7XdtH+7eOlALBYE2WMYxm1qqDzXmpBRUkg0SAC DY8KGUh3a9Mkdv7D0isxHqWxeGiuSbDZvkYXYPXTrZcgEsvPFBWpwja+HR5w4I0P wi6Jfs1fTrhMFmLmybXzYe0rLj8UsSvqxWeEYcHHFdKX87b3ROrVZFJs9OrPWC2U voiFJ0a6DNE10FWvMVKYZxK7GhanRAQt98asM8yTdCIwsIrKRFdzubK34vD/WQia hQNm4dH+yUPBapWkTkAG+pTSt7DokAvUPvuv7ZzB6OH/XIasXFheRA6eLkNn5aYp WOtlczeSHBa98BlA -----END CERTIFICATE-----Generated at Sun Aug 24 04:10:14 2025 by rpki-client