$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: GZ4pfi135Q7588aHM6prYBIuXr20Ct3YC84h9ABsTwU= Subject key identifier: 6C:C2:C2:2C:79:E3:0C:02:B8:2F:B0:D3:0D:75:0F:6C:B7:70:D0:EF Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 4B728C59984B0709E8FBC054755EFB8E4C38D1B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 0406 Signing time: Sat 28 Jun 2025 10:14:09 +0000 Manifest this update: Sat 28 Jun 2025 10:09:09 +0000 Manifest next update: Sun 29 Jun 2025 13:48:09 +0000 Files and hashes: 1: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: JWOW+sKSXwWkLnkpeo8IjuJTBeq+ZbIIUn80g07aERU=) 2: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: DuCHe81tO8TVOKBTNFQCS5fRuYDjbGZfxshPpJZXNzc=) 3: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: oQj2no095+LyjZGzWOfw+sSJOW/7fRxpgUOPswu5nqM=) 4: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: dPumV3w+l5K00Z5figZidyPpD2Xj/WObq95u77jhIK4=) 5: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: hY/iIpaGanxmxatebFYi3ijTkZjHjUc/Iwjsijc0S+E=) 6: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: W95e9h2ypKBcN51G9gRI82wozQL8rXCLvGb2mHpv6bk=) 7: 3138352e322e3136322e302f32332d3234203d3e20323135323639.roa (hash: sEO5Q+LtE+juFIMx1yqrmSkIjuvpVFxY8R1aiQqtGzs=) 8: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: GCjCQc0vdu8E+NZi5emgx2vW0PKbTzGL5UYc+2R4voE=) 9: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: qxlkfW/nLMV9I5WoI6HQ89q00naILT20Rguml63Zf0A=) 10: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: qGNft1uCzkGwuPJH7iDQ4xUhWrhNnduWexIhT+DgvI8=) 11: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: X+PLwzsRRQMgaM/TWKrSkseThdECGWKV7QbjrMlPn80=) 12: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: OKc3uZvr3kmY38TGv/j5cCd/d8TD6IBU2hGWJY9u+K0=) 13: 36322e3131322e3134342e302f32302d3230203d3e203539363432.roa (hash: hNXCqst3dZC+Dp3skkO26cOwh1zWEwx2n+JeuoU1IgU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:72:8c:59:98:4b:07:09:e8:fb:c0:54:75:5e:fb:8e:4c:38:d1:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Jun 28 10:09:09 2025 GMT Not After : Jun 29 13:48:09 2025 GMT Subject: CN=6CC2C22C79E30C02B82FB0D30D750F6CB770D0EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:3a:8d:7d:3d:d5:1c:32:ca:bb:88:be:b8: 56:01:4d:dd:9b:44:7a:b3:a0:66:9c:e7:47:c3:e7: e1:4a:90:c6:86:95:1c:78:60:26:5b:9f:7c:7e:a1: 49:67:7b:79:13:b8:fd:cd:b2:cf:2b:d2:91:eb:ec: ab:37:f3:eb:03:99:24:05:e7:d2:88:d9:0b:8d:4e: ba:76:43:5b:08:36:ba:5d:01:5f:9b:20:b6:ee:1a: 34:f5:28:d3:05:15:13:9a:a2:5c:f2:d7:ea:93:cf: b0:eb:53:d8:c6:a7:54:78:59:a9:dd:96:41:47:f8: 46:5e:28:6f:65:67:fd:48:53:f5:63:90:7a:32:86: db:1d:79:47:b1:cf:98:34:53:34:7f:ca:7b:32:2a: 20:9f:db:9c:01:d2:7c:c1:b1:bd:de:c5:0b:65:1a: 4a:ad:54:1e:f8:3c:6f:bc:7c:70:85:c3:63:cc:84: d8:58:5d:37:de:35:2f:9b:26:bf:56:fb:20:37:f4: 18:ba:51:07:79:69:d1:ce:6a:29:77:42:1f:45:80: f0:76:b2:74:76:ff:ac:23:3f:fd:6b:81:28:11:3a: d6:dd:3a:0f:e3:07:8d:bc:46:65:21:e4:d4:c1:75: 45:33:5c:56:2f:7a:01:4c:2d:87:13:e6:e4:9c:13: d4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C2:C2:2C:79:E3:0C:02:B8:2F:B0:D3:0D:75:0F:6C:B7:70:D0:EF X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:83:45:dc:45:b9:90:e5:aa:df:cc:76:11:2f:ed:01:d1:09: d6:39:28:b5:e5:2a:43:53:7c:e6:51:30:06:d6:9e:53:86:6d: 65:50:f4:e4:2f:31:79:08:7c:b6:a6:bf:57:61:5a:d0:b3:15: 91:aa:a4:f3:77:4b:6e:71:a1:b1:16:52:a2:e9:85:ce:f0:8d: 42:ff:fb:c3:f6:ec:81:86:19:d1:a8:57:32:3d:06:ed:3f:85: 87:04:19:7d:5e:f8:cb:ec:fe:cd:f1:4f:df:44:cd:65:f2:92: d8:b4:94:ab:36:ea:f3:2f:5b:95:c7:6f:b9:6e:b5:cf:ce:77: fc:75:54:df:8b:5f:69:48:6b:3d:83:dc:ed:04:55:b7:35:6d: ee:91:65:a4:65:04:db:74:74:c0:67:52:aa:f6:25:48:85:0b: 69:b6:9d:27:16:95:91:2d:9a:15:d4:ba:bc:8c:46:4c:ca:fc: c6:45:9f:60:e4:3d:f6:0d:36:0c:6f:08:98:75:2b:36:b9:cb: 2c:cb:7e:77:b2:05:35:57:91:d7:f3:7f:ec:01:21:4c:f5:a6: ef:87:6f:c8:e6:93:a2:d1:1e:af:84:e4:a1:65:90:e9:56:41: 0a:d3:f1:d0:6f:93:a0:3c:7c:8a:68:df:03:98:fb:a1:ee:05: 14:85:be:49 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUS3KMWZhLBwno+8BUdV77jkw40bEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNTA2MjgxMDA5MDlaFw0yNTA2MjkxMzQ4MDlaMDMxMTAvBgNV BAMTKDZDQzJDMjJDNzlFMzBDMDJCODJGQjBEMzBENzUwRjZDQjc3MEQwRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4TTqNfT3VHDLKu4i+uFYBTd2b RHqzoGac50fD5+FKkMaGlRx4YCZbn3x+oUlne3kTuP3Nss8r0pHr7Ks38+sDmSQF 59KI2QuNTrp2Q1sINrpdAV+bILbuGjT1KNMFFROaolzy1+qTz7DrU9jGp1R4Wand lkFH+EZeKG9lZ/1IU/VjkHoyhtsdeUexz5g0UzR/ynsyKiCf25wB0nzBsb3exQtl GkqtVB74PG+8fHCFw2PMhNhYXTfeNS+bJr9W+yA39Bi6UQd5adHOail3Qh9FgPB2 snR2/6wjP/1rgSgROtbdOg/jB428RmUh5NTBdUUzXFYvegFMLYcT5uScE9QfAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUbMLCLHnjDAK4L7DTDXUPbLdw0O8wHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYNF3EW5kOWq38x2ES/t AdEJ1jkoteUqQ1N85lEwBtaeU4ZtZVD05C8xeQh8tqa/V2Fa0LMVkaqk83dLbnGh sRZSoumFzvCNQv/7w/bsgYYZ0ahXMj0G7T+FhwQZfV74y+z+zfFP30TNZfKS2LSU qzbq8y9blcdvuW61z853/HVU34tfaUhrPYPc7QRVtzVt7pFlpGUE23R0wGdSqvYl SIULabadJxaVkS2aFdS6vIxGTMr8xkWfYOQ99g02DG8ImHUrNrnLLMt+d7IFNVeR 1/N/7AEhTPWm74dvyOaTotEer4TkoWWQ6VZBCtPx0G+ToDx8imjfA5j7oe4FFIW+ SQ== -----END CERTIFICATE-----Generated at Sun Jun 29 05:10:24 2025 by rpki-client