$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: 8Cp6xZyc5OFIKrknxDpC3O4n/F9vkg0zvAtrmg9XMhM= Subject key identifier: 8A:54:24:07:3E:89:86:49:2B:96:7F:4C:12:E4:A6:05:22:38:9E:CA Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 52861697A6506F9504509EDA332AF5F0187CDC71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 0185 Signing time: Sat 23 Aug 2025 09:17:33 +0000 Manifest this update: Sat 23 Aug 2025 09:12:33 +0000 Manifest next update: Sun 24 Aug 2025 10:06:33 +0000 Files and hashes: 1: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: TDSLNd9plHJwOulPeBHo1vNBDKxJTlWmh9i0dzSd4do=) 2: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: pf6VVgR69xinh6/ndsISPfZ9hO+NZfbcj/z0hL8XiIg=) 3: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: aWzsWkNz9PJPPmM8i0/IefYTbT3Y07R53lZGD0EHqrg=) 4: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: gjwDheXZBS8eOtwo7Ja5xPFcujfV7TC07EH1z972oQ4=) 5: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: 0b6sszxsKulqMcqV3D3Yqcg5IxC3pSU5gc82mTsDYlA=) 6: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: DDeP4uYwqP8b0ON0e+nML7HE4UFDik7BChJ/x0EHl9Q=) 7: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (hash: WVXkrZeMKS19WGWwMJQfqNOjJpC3bIU6zT5pImMreVs=) 8: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: p1kuPenqcy6Et0XPjwxcCLB+vpEy3ekHhe4EodnqolI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:86:16:97:a6:50:6f:95:04:50:9e:da:33:2a:f5:f0:18:7c:dc:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Aug 23 09:12:33 2025 GMT Not After : Aug 24 10:06:33 2025 GMT Subject: CN=8A5424073E8986492B967F4C12E4A60522389ECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:64:d9:d3:38:af:0f:93:25:d5:c5:d6:bc:33: 9c:d3:0d:b3:0e:1a:96:cf:ea:61:8e:d4:d4:18:c6: f9:4c:54:33:de:62:5c:f2:ef:c1:7b:b5:27:bf:1b: ce:13:34:4a:0f:c0:e3:79:68:72:9a:1a:23:9f:2c: ae:70:84:01:5b:42:91:79:94:de:85:35:06:2d:bc: 78:08:db:f5:fa:c8:a5:20:83:01:80:b2:93:1f:af: 9d:46:d6:94:d1:e9:55:75:c1:30:28:d0:8f:5b:7f: 7a:b5:9e:5a:a4:29:2d:e5:3e:89:97:e4:9e:03:9a: 81:27:72:73:ad:94:ea:2e:b5:f5:c8:17:68:ee:05: 1c:06:57:ac:03:ca:23:f0:4c:e5:7c:88:9d:fd:2e: 6c:e6:c9:bb:b9:a9:55:c1:51:45:47:74:f9:b3:65: 43:cd:1e:67:64:5b:f0:c4:8a:9a:63:c7:10:6f:09: ed:58:6d:8b:eb:31:9e:79:40:b9:95:2a:5d:ae:52: 80:ba:0d:49:24:90:8b:84:ab:ba:d7:27:3e:33:6b: cc:27:68:a8:b2:d1:f4:e1:1b:ca:f6:ba:bf:80:c4: ad:a6:d2:c3:e4:a1:42:9f:c1:72:be:67:af:28:c4: 71:35:18:e9:8b:7c:6b:40:6d:fe:83:a8:d5:75:e5: 09:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:54:24:07:3E:89:86:49:2B:96:7F:4C:12:E4:A6:05:22:38:9E:CA X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:8b:e6:77:4b:84:a7:00:a6:f9:7a:5c:58:98:c3:0a:bb:7a: 98:84:7c:66:20:80:5e:ab:5b:8d:95:6e:bc:d5:e9:42:c8:0a: 2b:33:29:5d:a4:fd:c7:e2:f4:e2:64:0c:41:7c:ce:a9:b7:10: 78:83:a3:50:33:ec:01:9f:33:fe:14:66:40:6f:fe:da:21:15: bf:92:fd:8e:c8:2e:93:08:76:b2:44:99:3c:da:42:0c:26:0e: de:9c:bf:76:5d:a1:a8:ee:47:41:bf:be:0c:08:d2:9f:d3:1a: 0c:39:a4:c6:d0:40:76:d7:f9:05:16:a4:4a:01:95:51:2f:b4: 82:78:c9:b2:a1:c8:af:d7:4c:f1:e9:8a:0c:da:77:6f:c2:0f: 7c:2f:26:8e:92:30:5c:5d:5e:ca:f1:b9:80:f9:3a:f1:0a:97: 4c:c3:c5:3c:e2:0d:e8:be:53:ef:f2:34:aa:dd:3c:0f:96:34: f7:29:ea:ed:01:71:75:24:33:c6:3e:e5:ab:5a:0b:79:57:49: a8:25:1b:6c:76:42:9c:41:f2:70:9c:73:51:0b:41:4d:94:33: 9f:ec:ac:3b:35:6d:a4:ca:14:4d:f3:51:72:05:cc:60:ef:6f: 5d:5f:b2:55:32:20:58:cb:1e:5f:4f:bf:5a:ee:97:1b:86:07: 68:01:d4:a3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUoYWl6ZQb5UEUJ7aMyr18Bh83HEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNTA4MjMwOTEyMzNaFw0yNTA4MjQxMDA2MzNaMDMxMTAvBgNV BAMTKDhBNTQyNDA3M0U4OTg2NDkyQjk2N0Y0QzEyRTRBNjA1MjIzODlFQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ZNnTOK8PkyXVxda8M5zTDbMO GpbP6mGO1NQYxvlMVDPeYlzy78F7tSe/G84TNEoPwON5aHKaGiOfLK5whAFbQpF5 lN6FNQYtvHgI2/X6yKUggwGAspMfr51G1pTR6VV1wTAo0I9bf3q1nlqkKS3lPomX 5J4DmoEncnOtlOoutfXIF2juBRwGV6wDyiPwTOV8iJ39Lmzmybu5qVXBUUVHdPmz ZUPNHmdkW/DEippjxxBvCe1YbYvrMZ55QLmVKl2uUoC6DUkkkIuEq7rXJz4za8wn aKiy0fThG8r2ur+AxK2m0sPkoUKfwXK+Z68oxHE1GOmLfGtAbf6DqNV15QmrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUilQkBz6Jhkkrln9MEuSmBSI4nsowHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIvmd0uEpwCm+XpcWJjD Crt6mIR8ZiCAXqtbjZVuvNXpQsgKKzMpXaT9x+L04mQMQXzOqbcQeIOjUDPsAZ8z /hRmQG/+2iEVv5L9jsgukwh2skSZPNpCDCYO3py/dl2hqO5HQb++DAjSn9MaDDmk xtBAdtf5BRakSgGVUS+0gnjJsqHIr9dM8emKDNp3b8IPfC8mjpIwXF1eyvG5gPk6 8QqXTMPFPOIN6L5T7/I0qt08D5Y09ynq7QFxdSQzxj7lq1oLeVdJqCUbbHZCnEHy cJxzUQtBTZQzn+ysOzVtpMoUTfNRcgXMYO9vXV+yVTIgWMseX0+/Wu6XG4YHaAHU ow== -----END CERTIFICATE-----Generated at Sat Aug 23 12:09:58 2025 by rpki-client