$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: BtA9tbWRGt8g7eOJ5jNdof+ya62PorQv+Ceq7+HTKHQ= Subject key identifier: 8F:2B:3D:6E:81:26:83:73:25:12:70:F1:5D:29:55:C3:F7:3A:F3:2D Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 0FD15D94CF5B0B0EE5C996A30FC8825FA531BA30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 0451 Signing time: Sat 23 Aug 2025 02:12:33 +0000 Manifest this update: Sat 23 Aug 2025 02:07:33 +0000 Manifest next update: Sun 24 Aug 2025 03:08:33 +0000 Files and hashes: 1: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: l40aThNCRk3yT6g+wpFsXt4ZVeMrKOO8wRiolghvMOg=) 2: 3138352e322e3136322e302f32332d3234203d3e20323135323639.roa (hash: sEO5Q+LtE+juFIMx1yqrmSkIjuvpVFxY8R1aiQqtGzs=) 3: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: OKc3uZvr3kmY38TGv/j5cCd/d8TD6IBU2hGWJY9u+K0=) 4: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: hY/iIpaGanxmxatebFYi3ijTkZjHjUc/Iwjsijc0S+E=) 5: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: oQj2no095+LyjZGzWOfw+sSJOW/7fRxpgUOPswu5nqM=) 6: 3138352e322e3136302e302f32332d3234203d3e2039333034.roa (hash: vl2Nht2rNjTXwCm1D2P9y8kdqhZOwgeZgf4gpkMvcp8=) 7: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: DuCHe81tO8TVOKBTNFQCS5fRuYDjbGZfxshPpJZXNzc=) 8: 36322e3131322e3134342e302f32302d3230203d3e203539363432.roa (hash: hNXCqst3dZC+Dp3skkO26cOwh1zWEwx2n+JeuoU1IgU=) 9: 36322e3131322e3134342e302f32302d3234203d3e203230333236.roa (hash: PvFG9BZ+YdbKPRfUC/0dM3w7V209DRWmI/bk8VoBnFU=) 10: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: qGNft1uCzkGwuPJH7iDQ4xUhWrhNnduWexIhT+DgvI8=) 11: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: GCjCQc0vdu8E+NZi5emgx2vW0PKbTzGL5UYc+2R4voE=) 12: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: W95e9h2ypKBcN51G9gRI82wozQL8rXCLvGb2mHpv6bk=) 13: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: qxlkfW/nLMV9I5WoI6HQ89q00naILT20Rguml63Zf0A=) 14: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: X+PLwzsRRQMgaM/TWKrSkseThdECGWKV7QbjrMlPn80=) 15: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: dPumV3w+l5K00Z5figZidyPpD2Xj/WObq95u77jhIK4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d1:5d:94:cf:5b:0b:0e:e5:c9:96:a3:0f:c8:82:5f:a5:31:ba:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Aug 23 02:07:33 2025 GMT Not After : Aug 24 03:08:33 2025 GMT Subject: CN=8F2B3D6E81268373251270F15D2955C3F73AF32D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:5f:29:bb:7d:c8:e6:8d:44:cb:aa:1a:04: 7a:84:79:e7:d0:92:53:82:42:8a:0b:85:28:87:54: 61:06:78:18:0f:1a:d1:c8:63:51:3c:ff:a9:d2:e0: e4:3f:0b:ca:ef:8f:67:3f:f7:00:fe:8d:55:2f:9e: fb:1d:55:6d:ba:a1:f7:5f:01:29:88:1b:0c:f7:2c: 56:1a:69:c3:e9:8a:e4:0f:b5:d3:9c:d4:76:10:69: 1c:e8:a6:0c:b1:88:79:a2:dc:6c:68:1e:8e:82:9a: 6e:c9:6f:cb:35:af:8a:0c:b5:d2:b5:2a:fa:a4:dc: a2:e6:e7:c2:43:b4:f1:36:c1:9c:d6:7d:4c:34:3c: 39:f9:91:c3:53:0d:cc:57:64:72:7c:3d:e2:b8:0d: 60:7d:83:f5:9f:4d:52:b5:e1:fd:7d:7f:cd:cd:3c: 13:28:17:83:af:3b:9f:14:0b:b5:76:aa:9f:2b:a8: 10:e8:37:ac:df:13:a8:72:7c:4c:de:90:65:55:bb: 9d:bb:8d:de:cc:14:7c:79:93:db:f5:a3:d8:11:39: c5:3a:1c:ca:e2:27:60:ea:80:d0:09:86:ea:33:f0: 74:30:72:48:30:17:14:ae:f3:ed:8d:79:2c:a6:8c: ef:d0:bd:d4:df:35:d1:6e:a6:99:ff:57:c2:fa:7a: dc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2B:3D:6E:81:26:83:73:25:12:70:F1:5D:29:55:C3:F7:3A:F3:2D X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:d9:06:de:01:c2:4f:03:76:eb:fd:ab:80:d8:ec:c2:f2:ae: 22:f8:a3:2b:06:14:e0:cf:07:da:52:35:13:09:de:be:6e:99: e7:0b:62:5a:ef:ae:a7:e2:fe:41:aa:0b:6d:b0:d5:2e:8c:2c: 48:68:97:ec:77:53:1b:78:dc:21:7a:95:26:8a:ed:1f:c3:80: 00:e5:30:c0:51:3b:bf:fe:55:5a:b9:1d:f8:4d:c7:e0:5d:89: f8:09:b5:e2:b6:15:22:72:2f:0c:ae:36:39:3a:eb:9e:0f:c2: 7d:61:92:d3:d4:cf:0b:6e:68:51:51:76:b7:a4:ce:d8:ef:ff: 33:40:c9:1d:c3:17:e3:a3:b4:5e:53:26:dd:fa:4e:cf:26:07: e6:8b:46:ab:c6:9f:3f:8d:69:89:7f:c9:b9:db:75:ad:96:e5: 1a:38:4a:d8:10:9c:8c:ae:81:6b:05:64:2e:d6:ed:74:e6:a9: 47:9e:ff:61:95:36:35:13:e1:7d:97:ff:f3:47:62:6a:80:85: 59:79:0d:a1:3d:86:c4:ac:42:2a:dc:34:df:d0:fa:55:64:bc: 36:de:41:3e:48:a7:e5:3e:5f:0e:83:a5:44:fa:6f:41:46:70: 15:4e:90:b6:ef:51:a2:09:01:cf:64:06:22:99:13:f9:6e:eb: 07:73:8a:dd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUD9FdlM9bCw7lyZajD8iCX6UxujAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNTA4MjMwMjA3MzNaFw0yNTA4MjQwMzA4MzNaMDMxMTAvBgNV BAMTKDhGMkIzRDZFODEyNjgzNzMyNTEyNzBGMTVEMjk1NUMzRjczQUYzMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvOl8pu33I5o1Ey6oaBHqEeefQ klOCQooLhSiHVGEGeBgPGtHIY1E8/6nS4OQ/C8rvj2c/9wD+jVUvnvsdVW26ofdf ASmIGwz3LFYaacPpiuQPtdOc1HYQaRzopgyxiHmi3GxoHo6Cmm7Jb8s1r4oMtdK1 Kvqk3KLm58JDtPE2wZzWfUw0PDn5kcNTDcxXZHJ8PeK4DWB9g/WfTVK14f19f83N PBMoF4OvO58UC7V2qp8rqBDoN6zfE6hyfEzekGVVu527jd7MFHx5k9v1o9gROcU6 HMriJ2DqgNAJhuoz8HQwckgwFxSu8+2NeSymjO/QvdTfNdFuppn/V8L6etzbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUjys9boEmg3MlEnDxXSlVw/c68y0wHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtkG3gHCTwN26/2rgNjs wvKuIvijKwYU4M8H2lI1Ewnevm6Z5wtiWu+up+L+QaoLbbDVLowsSGiX7HdTG3jc IXqVJortH8OAAOUwwFE7v/5VWrkd+E3H4F2J+Am14rYVInIvDK42OTrrng/CfWGS 09TPC25oUVF2t6TO2O//M0DJHcMX46O0XlMm3fpOzyYH5otGq8afP41piX/Judt1 rZblGjhK2BCcjK6BawVkLtbtdOapR57/YZU2NRPhfZf/80diaoCFWXkNoT2GxKxC Ktw039D6VWS8Nt5BPkin5T5fDoOlRPpvQUZwFU6Qtu9RogkBz2QGIpkT+W7rB3OK 3Q== -----END CERTIFICATE-----Generated at Sat Aug 23 10:07:05 2025 by rpki-client