$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft File: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft (raw, json) Hash identifier: voOBWHxdq6+mqZc9f35F1Hpm3u09HH0SnVMWRfoToo0= Subject key identifier: B7:34:4F:2C:4B:E3:3A:A6:11:E4:68:AC:1C:D6:9C:ED:83:E1:26:3B Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 Certificate issuer: /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Certificate serial: 0EC78445E6A19EACCB4968EAF43594B3AA2E92F1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft Manifest number: 67 Signing time: Sun 29 Jun 2025 05:16:14 +0000 Manifest this update: Sun 29 Jun 2025 05:11:14 +0000 Manifest next update: Mon 30 Jun 2025 07:44:14 +0000 Files and hashes: 1: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: i94AFUzw6e810fYgj7x6pZ8Yx8k5H6Glrkwkeys08UU=) 2: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: /zrjZ0ZqEzRDQ5mOWK+S06L45z9UxNhwijRkpqGoHX0=) 3: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: 3uRQGY7O+ZvtbHNtgC5MF4VJ4PR1W0vGtZuXeGQdfrI=) 4: 326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa (hash: apRB5OfhlgNP9CjlOyLXHwJtDJcG7Ul2o20dXFYOVFQ=) 5: 326131343a373538303a666634323a3a2f34382d3438203d3e20323134333434.roa (hash: 9k9VorkprwzOj4hWnDvwpKS020LK9HlBFwzRrzgLjKw=) 6: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl (hash: itp46+qR7CEcE/hYU10LBVaCHQ/3vSZQDIH7djI1OGU=) 7: 326131343a373538303a666634663a3a2f34382d3438203d3e20323134333434.roa (hash: 6pA9NNrKrI4+zxZxo4gukhaJn6WiNbtje4w/VFUeaKs=) 8: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: Kr++/O1eWk2rhooTEwkNaOpIKHaAHhcWSp5UY9Du6eM=) 9: 326131343a373538303a356666663a3a2f34382d3438203d3e20323134333434.roa (hash: pH1DpsNoBXAL0l4o2dyKb1VUo6J4k0AUCBSFbohk97k=) 10: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: 0tk68iktR4A+Tmx1ow+QCPfURRQdgNg7+hqUgrcV4SU=) 11: 326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa (hash: gWNOGizaCWeT+eChfA6O1CcYgC4CppF3JVd8ZgY0qsY=) 12: 326131343a373538303a666634353a3a2f34382d3438203d3e20323134333434.roa (hash: 8IkTFY6NhSlGUxhiOR1gV0K8W7L2BzrfJSsZgSDz+CM=) 13: 326131343a373538303a666634303a3a2f34382d3438203d3e20323134333434.roa (hash: dPCGiKkWz0E9rMprVOstBFLQuVK9OG6CBSKX+fk7UXw=) 14: 326131343a373538303a666634313a3a2f34382d3438203d3e20323134333434.roa (hash: pdCqfiQKAk5mpE38Sur9HB4NVG9NXvRtOzzMMORY0Ss=) 15: 326131343a373538303a666634343a3a2f34382d3438203d3e20323134333434.roa (hash: wAwmvjP2Xs/JgKfPKl1DdsDpWK9Z2qkOeMDP05em2JQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c7:84:45:e6:a1:9e:ac:cb:49:68:ea:f4:35:94:b3:aa:2e:92:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Validity Not Before: Jun 29 05:11:14 2025 GMT Not After : Jun 30 07:44:14 2025 GMT Subject: CN=B7344F2C4BE33AA611E468AC1CD69CED83E1263B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:d6:d5:96:cc:91:ac:b6:95:86:c1:71:fe:d9: a6:d2:9e:7a:3b:62:0b:f6:3c:2f:5a:f9:af:7a:30: 70:58:ec:43:6e:b3:e9:2d:71:b5:57:92:24:6e:4e: ee:ff:5b:4b:d8:a2:f4:45:be:2e:0f:0e:85:71:96: f1:c5:4b:8f:01:5f:57:7d:55:49:aa:d5:64:9b:67: 73:31:46:a9:6c:ea:96:de:17:ed:45:b9:c6:2a:e7: 44:52:56:c6:8d:f5:61:9b:ce:ce:67:88:49:e0:93: 20:0c:f2:1a:8d:c9:ed:bd:cb:6a:e0:14:1c:72:9c: d7:5d:26:3c:48:12:69:82:16:a2:f4:2a:cd:70:e8: 87:13:69:4b:f7:9f:cf:13:1d:df:11:0c:54:b5:55: 68:49:ac:33:ff:c7:fe:a5:78:ce:9a:37:cf:88:cb: 6b:59:2f:7d:ef:b5:22:a7:43:9f:47:06:07:d9:03: 44:fa:66:50:48:a7:d8:60:39:c4:0f:42:0b:84:92: e5:e5:00:81:1c:aa:3d:ff:77:72:06:fc:fc:66:3b: fd:47:b0:6b:86:a9:d7:88:72:bd:77:c7:c1:e7:c3: cc:7b:84:57:ab:c5:62:f0:39:63:a1:09:d8:02:d2: aa:b5:61:be:5b:fc:0e:a0:13:e5:ae:15:5a:d4:a3: 35:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:34:4F:2C:4B:E3:3A:A6:11:E4:68:AC:1C:D6:9C:ED:83:E1:26:3B X509v3 Authority Key Identifier: keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a7:f2:cc:69:73:e4:a1:42:3d:33:9f:48:95:ec:c3:86:18: bd:4b:cf:5d:1f:94:ca:f3:02:95:f1:00:41:ac:0f:d8:67:d2: a8:c0:87:06:2a:2a:89:c5:5a:b8:a0:12:b4:06:f5:77:e6:01: 02:e8:af:0d:f9:94:f6:a5:05:f9:9b:7c:c1:be:f1:22:c1:9e: 84:47:3c:76:de:7a:04:3d:cd:ed:5c:05:e0:0a:7d:63:b9:05: 40:ab:e5:29:10:01:cd:ba:31:ed:e8:65:96:be:1e:10:63:72: 25:55:39:cf:e9:04:40:07:e2:7d:f2:f5:90:ae:ec:6b:f4:f1: 01:e2:a7:d0:fa:4c:5b:c8:8c:1b:98:2f:27:05:da:a1:04:7d: f2:22:11:1c:13:d1:0c:66:47:fc:61:2f:be:1f:17:9c:79:55: ad:fc:7d:c1:04:13:45:ed:86:4e:01:9e:4c:a2:f2:09:f7:fe: 62:d7:f7:7c:bf:76:29:70:cc:47:4e:1c:ac:6e:ed:95:ca:53: 59:e0:23:23:35:39:11:4b:96:4d:3f:5b:d4:d8:f6:cc:05:14: 66:ef:54:47:f7:31:87:f1:61:b4:bc:de:cd:9e:b6:23:5e:be: a2:50:80:66:d2:b7:9f:56:2f:49:07:61:5d:b7:30:d1:b0:75: 31:87:84:60 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDseEReahnqzLSWjq9DWUs6oukvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJB ODcyMzk0NTAeFw0yNTA2MjkwNTExMTRaFw0yNTA2MzAwNzQ0MTRaMDMxMTAvBgNV BAMTKEI3MzQ0RjJDNEJFMzNBQTYxMUU0NjhBQzFDRDY5Q0VEODNFMTI2M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD31tWWzJGstpWGwXH+2abSnno7 Ygv2PC9a+a96MHBY7ENus+ktcbVXkiRuTu7/W0vYovRFvi4PDoVxlvHFS48BX1d9 VUmq1WSbZ3MxRqls6pbeF+1FucYq50RSVsaN9WGbzs5niEngkyAM8hqNye29y2rg FBxynNddJjxIEmmCFqL0Ks1w6IcTaUv3n88THd8RDFS1VWhJrDP/x/6leM6aN8+I y2tZL33vtSKnQ59HBgfZA0T6ZlBIp9hgOcQPQguEkuXlAIEcqj3/d3IG/PxmO/1H sGuGqdeIcr13x8Hnw8x7hFerxWLwOWOhCdgC0qq1Yb5b/A6gE+WuFVrUozVJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUtzRPLEvjOqYR5GisHNac7YPhJjswHwYDVR0j BBgwFoAUh6TITUNm27FakJClWqLc66hyOUUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMw MWRhLzEvODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJBODcyMzk0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84N0E0Qzg0RDQzNjZEQkIxNUE5MDkwQTU1 QUEyRENFQkE4NzIzOTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2E1ZDRjMDBiLWQxMDUtNDkwNi1iOTgxLTFkMDM0M2UzMDFkYS8xLzg3QTRDODRE NDM2NkRCQjE1QTkwOTBBNTVBQTJEQ0VCQTg3MjM5NDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBOp/LM aXPkoUI9M59IlezDhhi9S89dH5TK8wKV8QBBrA/YZ9KowIcGKiqJxVq4oBK0BvV3 5gEC6K8N+ZT2pQX5m3zBvvEiwZ6ERzx23noEPc3tXAXgCn1juQVAq+UpEAHNujHt 6GWWvh4QY3IlVTnP6QRAB+J98vWQruxr9PEB4qfQ+kxbyIwbmC8nBdqhBH3yIhEc E9EMZkf8YS++HxeceVWt/H3BBBNF7YZOAZ5MovIJ9/5i1/d8v3YpcMxHThysbu2V ylNZ4CMjNTkRS5ZNP1vU2PbMBRRm71RH9zGH8WG0vN7NnrYjXr6iUIBm0refVi9J B2FdtzDRsHUxh4Rg -----END CERTIFICATE-----Generated at Sun Jun 29 10:21:38 2025 by rpki-client