$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json) Hash identifier: clGZzcITssIj5qnUeE29Cq/Oq+BAWPq7I5VGFqxEfdE= Subject key identifier: 6E:8F:F8:7E:ED:10:E1:42:DB:75:99:63:3C:1F:05:64:58:C3:9B:59 Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 5255BC116C7BE059C0BAAAC428D4264295ECA69F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft Manifest number: 024D Signing time: Sat 23 Aug 2025 23:11:41 +0000 Manifest this update: Sat 23 Aug 2025 23:06:41 +0000 Manifest next update: Sun 24 Aug 2025 23:17:41 +0000 Files and hashes: 1: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: D0tctkJlwudKIthr6DMxIQEPygDtuX+XOSZA/XCuQf8=) 2: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: R4oy1L8+rEt1QdmoGVV7PiYt423B/xK5i6kPhc7W9aI=) 3: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: 9phDdz/jhh9vxdEc5WXHXIl+cdnJzAyh/6SdvyVejiI=) 4: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: OTYsTfrglFs/JKFj7RJtAXdrMe1OUcjbc3WSXqeD0dk=) 5: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: KPVNDBydB4lEOCddQAWiNda/rm6IVb4G2i+sUeOhrYg=) 6: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: DvQHKT6M+fkiG6o9KW4wBm0yNbqCXWjg78L/cu4BiJ0=) 7: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: e+p8+Sw9X8S3Ty3gF9pg+LdvDbV5qMXAYBBthQD4LPE=) 8: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: BL4+PYIdcLs3fiOkkamkg94lgyO9kcRHp6ACoQUQ5y8=) 9: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: M0+yHEN3VX8K+aVDmpusml/7Hx8dbBnadNDMaFbGOzQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 17:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:55:bc:11:6c:7b:e0:59:c0:ba:aa:c4:28:d4:26:42:95:ec:a6:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Aug 23 23:06:41 2025 GMT Not After : Aug 24 23:17:41 2025 GMT Subject: CN=6E8FF87EED10E142DB7599633C1F056458C39B59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:22:44:89:3d:ca:64:b0:fe:02:44:b6:d2:1a: 7b:c8:37:b1:bd:e1:2b:18:d0:9e:86:1c:e7:52:aa: df:1e:63:e3:31:14:b5:05:ea:1b:90:a8:b4:82:f3: 59:44:1c:7c:9f:79:03:cd:6c:2a:a0:ce:0b:fe:e5: 47:f4:80:cd:3b:9a:05:87:f2:a8:3e:4d:df:40:60: f8:cb:c5:f0:63:03:2c:7d:c1:7a:04:5a:20:34:f2: f1:6a:e7:f7:ee:0c:94:e3:d1:e3:15:24:08:13:6d: 56:1b:8b:29:44:fd:69:fa:ae:41:52:06:c0:20:e9: 0d:bc:35:f0:84:ed:7f:ca:ee:9e:b9:eb:2a:06:7f: e1:7b:a8:32:47:43:d9:cf:f1:55:be:6b:92:5a:20: db:dd:77:e2:a7:a5:43:cc:f0:b1:27:5a:f2:4c:3c: d0:11:f5:c6:0b:13:e6:27:3e:b4:97:59:06:29:f3: 0d:5e:f6:b3:72:f8:4d:5b:39:1c:6a:20:eb:fd:3a: 5f:a6:26:c9:ec:c5:27:af:27:60:f0:55:70:83:32: 96:8f:0e:38:ce:45:e1:6b:85:0d:f3:10:5e:b7:ad: 54:0b:b0:a5:bd:f0:bb:64:64:8c:49:24:82:37:e9: 73:d5:f1:e6:4c:57:3c:d3:7c:f6:cc:61:cf:24:5f: e7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8F:F8:7E:ED:10:E1:42:DB:75:99:63:3C:1F:05:64:58:C3:9B:59 X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:16:46:34:60:ce:72:00:a6:a0:84:f4:a9:a7:20:a3:20:e8: 17:a3:fd:d0:c7:94:5d:04:84:ea:ae:02:e0:5b:2a:70:19:79: a5:fb:44:e9:59:e4:d1:10:d4:75:9c:42:da:4f:99:a5:bc:d0: da:cd:3a:89:09:78:a9:e6:bc:7c:f3:53:96:c9:c6:16:1f:fb: 37:de:4a:cd:83:b1:99:d7:7e:10:88:ca:d5:d3:3e:e4:f5:73: 78:a4:5f:84:a6:45:3c:c3:f3:46:8f:60:37:09:f6:8b:f2:f1: 96:8a:4f:a4:4b:bc:40:88:98:92:4f:ae:9f:81:35:44:40:77: 9b:e9:13:bc:21:ee:a6:e8:ea:a4:dd:12:9b:ed:b0:41:21:24: 1d:73:6e:b7:6c:9f:b6:79:b0:d3:69:bb:17:0a:7c:ba:2c:8e: cd:6b:03:df:54:d5:bc:00:f2:ca:23:3f:4e:ff:98:e9:ed:b1: ab:52:4b:b0:fc:09:b2:9e:df:eb:25:7e:b4:80:55:c3:fd:a6: 98:cb:3d:dc:49:48:87:9b:5f:d4:ce:6b:db:ad:e1:fb:28:96: 47:52:e4:6f:ef:ec:a9:4d:0d:39:5b:c2:3d:34:ba:60:ce:3d: 29:31:80:5e:1d:09:ca:37:88:cd:41:92:86:19:82:4f:b7:9e: ed:56:b3:b1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUlW8EWx74FnAuqrEKNQmQpXspp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNTA4MjMyMzA2NDFaFw0yNTA4MjQyMzE3NDFaMDMxMTAvBgNV BAMTKDZFOEZGODdFRUQxMEUxNDJEQjc1OTk2MzNDMUYwNTY0NThDMzlCNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqIkSJPcpksP4CRLbSGnvIN7G9 4SsY0J6GHOdSqt8eY+MxFLUF6huQqLSC81lEHHyfeQPNbCqgzgv+5Uf0gM07mgWH 8qg+Td9AYPjLxfBjAyx9wXoEWiA08vFq5/fuDJTj0eMVJAgTbVYbiylE/Wn6rkFS BsAg6Q28NfCE7X/K7p656yoGf+F7qDJHQ9nP8VW+a5JaINvdd+KnpUPM8LEnWvJM PNAR9cYLE+YnPrSXWQYp8w1e9rNy+E1bORxqIOv9Ol+mJsnsxSevJ2DwVXCDMpaP DjjOReFrhQ3zEF63rVQLsKW98LtkZIxJJII36XPV8eZMVzzTfPbMYc8kX+dXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUbo/4fu0Q4ULbdZljPB8FZFjDm1kwHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCrFkY0 YM5yAKaghPSppyCjIOgXo/3Qx5RdBITqrgLgWypwGXml+0TpWeTRENR1nELaT5ml vNDazTqJCXip5rx881OWycYWH/s33krNg7GZ134QiMrV0z7k9XN4pF+EpkU8w/NG j2A3CfaL8vGWik+kS7xAiJiST66fgTVEQHeb6RO8Ie6m6Oqk3RKb7bBBISQdc263 bJ+2ebDTabsXCny6LI7NawPfVNW8APLKIz9O/5jp7bGrUkuw/Amynt/rJX60gFXD /aaYyz3cSUiHm1/UzmvbreH7KJZHUuRv7+ypTQ05W8I9NLpgzj0pMYBeHQnKN4jN QZKGGYJPt57tVrOx -----END CERTIFICATE-----Generated at Sun Aug 24 02:49:14 2025 by rpki-client