$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json) Hash identifier: km5rjJGqJ4Y7XufKmmaU60vKmy8MtPi+/8i8UoIIgLw= Subject key identifier: E1:4C:8E:91:D8:CD:E6:8C:70:8E:CF:15:A9:62:B2:15:98:93:82:D8 Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 16E85E0AE134B5B031D76FB092667EC96DBFAA68 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft Manifest number: 0203 Signing time: Sun 29 Jun 2025 03:44:32 +0000 Manifest this update: Sun 29 Jun 2025 03:39:32 +0000 Manifest next update: Mon 30 Jun 2025 05:24:32 +0000 Files and hashes: 1: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: BL4+PYIdcLs3fiOkkamkg94lgyO9kcRHp6ACoQUQ5y8=) 2: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: 9phDdz/jhh9vxdEc5WXHXIl+cdnJzAyh/6SdvyVejiI=) 3: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: KPVNDBydB4lEOCddQAWiNda/rm6IVb4G2i+sUeOhrYg=) 4: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: DvQHKT6M+fkiG6o9KW4wBm0yNbqCXWjg78L/cu4BiJ0=) 5: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: BFDaSl0KjbExq675V3yhJ8sgmc44SGvcSBV7lON7V/c=) 6: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: e+p8+Sw9X8S3Ty3gF9pg+LdvDbV5qMXAYBBthQD4LPE=) 7: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: OTYsTfrglFs/JKFj7RJtAXdrMe1OUcjbc3WSXqeD0dk=) 8: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: R4oy1L8+rEt1QdmoGVV7PiYt423B/xK5i6kPhc7W9aI=) 9: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: M0+yHEN3VX8K+aVDmpusml/7Hx8dbBnadNDMaFbGOzQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e8:5e:0a:e1:34:b5:b0:31:d7:6f:b0:92:66:7e:c9:6d:bf:aa:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Jun 29 03:39:32 2025 GMT Not After : Jun 30 05:24:32 2025 GMT Subject: CN=E14C8E91D8CDE68C708ECF15A962B215989382D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1a:e1:18:45:0d:aa:2f:fc:47:c3:b3:55:61: b8:72:ec:64:53:48:6a:4c:da:d1:88:0e:a4:36:51: a4:c2:9e:0b:2a:13:d9:ad:6e:f5:0b:0c:d3:81:d0: 59:33:da:a8:e5:66:c4:46:bf:01:df:7f:4c:97:69: 51:2f:a5:36:c3:ba:05:e9:9b:e9:d3:7c:e0:4f:ca: 52:73:89:e2:2c:1f:85:2a:39:c4:5d:d8:9b:6d:16: f2:05:e8:33:c4:e1:55:c2:55:06:22:b7:a7:cd:9e: 60:a9:d2:87:64:fa:9f:4a:e8:df:34:c8:15:9e:29: c4:8c:97:33:e8:47:75:a4:76:0f:96:1b:ae:47:60: 4f:9e:b1:de:e9:e5:4b:7d:1f:66:7d:0e:15:0d:f8: ea:c4:6e:5d:c9:97:68:e0:37:60:38:ec:92:9f:47: c1:b3:df:c8:2e:dd:6c:16:75:de:d3:ea:ba:a5:6d: 2a:24:93:8a:90:81:4f:a7:21:34:a9:df:c3:c7:30: 47:86:e0:26:ff:ce:ef:28:e0:41:79:7f:a2:4d:04: 87:88:bb:83:90:92:f5:4c:8f:c1:d0:7a:c6:6b:23: 83:0c:76:f7:01:07:19:83:0e:d2:0f:72:ae:45:ca: 2b:a0:fd:f5:4f:8f:72:75:4a:fc:17:6f:d9:be:96: 01:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4C:8E:91:D8:CD:E6:8C:70:8E:CF:15:A9:62:B2:15:98:93:82:D8 X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:3d:57:c0:6f:e5:4c:db:0d:4d:69:41:02:fe:32:73:48:f4: 9d:41:72:4f:7a:4a:09:9f:44:12:28:df:ec:55:0e:2d:66:bd: b3:9b:4b:35:68:ac:4c:31:00:3b:bd:26:18:bd:c3:c5:b4:39: a3:fd:00:68:d7:28:f7:63:25:b6:98:b9:b8:a6:43:6b:6d:12: ac:62:52:d2:3c:ab:ea:47:70:6f:40:05:2c:74:79:ee:46:01: 89:ba:52:7d:17:67:79:54:5d:44:17:ed:0b:40:97:7e:c6:5a: b7:61:a0:f6:7d:b8:82:5c:03:bb:6c:f7:e9:5f:de:72:42:97: 2a:f1:ff:1c:94:05:68:73:07:7c:b5:5c:b8:a9:60:5b:44:95: 22:9f:55:ce:cb:9d:2c:3a:40:6a:bb:db:70:3f:b5:ad:94:2c: ce:c1:ef:3c:8c:d0:04:b2:cb:46:d8:ec:6a:77:01:45:03:62: a6:b1:b9:4b:ad:b7:ea:29:fb:e6:5e:65:83:72:aa:66:ef:53: 18:b7:16:53:0e:7e:14:aa:bf:ee:8d:62:52:6e:7a:3a:27:f1: 1f:aa:ad:de:81:4b:09:5f:37:13:2e:4c:35:e2:e4:67:f6:ef: 40:b2:ab:9e:cd:67:c1:93:ec:44:2f:c2:26:05:7c:5b:98:b9: 5c:32:ca:d2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFuheCuE0tbAx12+wkmZ+yW2/qmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNTA2MjkwMzM5MzJaFw0yNTA2MzAwNTI0MzJaMDMxMTAvBgNV BAMTKEUxNEM4RTkxRDhDREU2OEM3MDhFQ0YxNUE5NjJCMjE1OTg5MzgyRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHGuEYRQ2qL/xHw7NVYbhy7GRT SGpM2tGIDqQ2UaTCngsqE9mtbvULDNOB0Fkz2qjlZsRGvwHff0yXaVEvpTbDugXp m+nTfOBPylJzieIsH4UqOcRd2JttFvIF6DPE4VXCVQYit6fNnmCp0odk+p9K6N80 yBWeKcSMlzPoR3Wkdg+WG65HYE+esd7p5Ut9H2Z9DhUN+OrEbl3Jl2jgN2A47JKf R8Gz38gu3WwWdd7T6rqlbSokk4qQgU+nITSp38PHMEeG4Cb/zu8o4EF5f6JNBIeI u4OQkvVMj8HQesZrI4MMdvcBBxmDDtIPcq5Fyiug/fVPj3J1SvwXb9m+lgHRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU4UyOkdjN5oxwjs8VqWKyFZiTgtgwHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNPVfA b+VM2w1NaUEC/jJzSPSdQXJPekoJn0QSKN/sVQ4tZr2zm0s1aKxMMQA7vSYYvcPF tDmj/QBo1yj3YyW2mLm4pkNrbRKsYlLSPKvqR3BvQAUsdHnuRgGJulJ9F2d5VF1E F+0LQJd+xlq3YaD2fbiCXAO7bPfpX95yQpcq8f8clAVocwd8tVy4qWBbRJUin1XO y50sOkBqu9twP7WtlCzOwe88jNAEsstG2OxqdwFFA2KmsblLrbfqKfvmXmWDcqpm 71MYtxZTDn4Uqr/ujWJSbno6J/Efqq3egUsJXzcTLkw14uRn9u9AsquezWfBk+xE L8ImBXxbmLlcMsrS -----END CERTIFICATE-----Generated at Sun Jun 29 12:11:43 2025 by rpki-client