$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft File: 1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft (raw, json) Hash identifier: 3SKxynv5IGoQz7Y2cwi5cOUHnWMXS9yIbsEZ0moOYLw= Subject key identifier: 11:AC:11:FD:57:2E:CD:8C:A1:0C:20:27:5A:12:56:24:31:B0:2C:CC Authority key identifier: 1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79 Certificate issuer: /CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79 Certificate serial: 086AA20281C8F1F7F60955D76649D16CFF771E4E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft Manifest number: 97 Signing time: Sat 23 Aug 2025 14:49:31 +0000 Manifest this update: Sat 23 Aug 2025 14:44:31 +0000 Manifest next update: Sun 24 Aug 2025 18:27:31 +0000 Files and hashes: 1: 326131343a373538303a3730303a3a2f34302d3430203d3e20313531313934.roa (hash: omUm+VClsl1esxeSZas8cPGaOt8NK5P0JK8DttORXSQ=) 2: 326131343a373538303a3732313a3a2f34382d3438203d3e20313938303235.roa (hash: F0yheovlhp7K4XimVlJIY2XY5LQ9rO6Lio/g2Fp5WxY=) 3: 326131343a373538303a3737303a3a2f34342d3434203d3e20323133383931.roa (hash: Y5ilvBbE12qO1Ud5YZb+YMRUcGap41Si5541sY2pw8w=) 4: 326131343a373538303a3762303a3a2f34342d3438203d3e20313938303235.roa (hash: JAE7lucu4kiMGAKTCYpftvBPLTlJBVnkXPYkQPr6BDU=) 5: 326131343a373538303a3734303a3a2f34342d3434203d3e20313337393038.roa (hash: 2XHTj/cfAPJdVFHVIH4P55LBG+fLJn82CtSAwFgxMbs=) 6: 326131343a373538303a3733303a3a2f34342d3434203d3e20323038373534.roa (hash: YgvU7sxrMhf4/I0u7F9ePehiaAqP0nrViPzYLyrcqg4=) 7: 326131343a373538303a3761303a3a2f34342d3438203d3e20313531313934.roa (hash: MhfSMgOUdMy7zOQbQ7utCWK4Xb73mUPNGp3jE9+Q0vs=) 8: 326131343a373538303a3730303a3a2f34342d3434203d3e20313938303235.roa (hash: 4L0QSAftYtcw4WDJTyxob29wy6e4AqxikKCoI1U7ltM=) 9: 326131343a373538303a3762313a3a2f34382d3438203d3e20313938303235.roa (hash: sP4ALEuMKP+lcNFLmbhCvhEWaBDvHpOhmiHGC/KNblA=) 10: 326131343a373538303a3731303a3a2f34382d3438203d3e20313938303235.roa (hash: Hxl/WHpFi1Lrr9tPJHprlKCFg1f6KdSpCnh41pb8RUw=) 11: 1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl (hash: BGPUJcGnV6mktV7LlkW2vadF4jfldRc/cbVT4ctvas0=) 12: 326131343a373538303a3730303a3a2f34302d3430203d3e20313938303235.roa (hash: q6g7NvOylKcoMKHIBFZ0Cue6q0bByY4gqgu482bGvYs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:6a:a2:02:81:c8:f1:f7:f6:09:55:d7:66:49:d1:6c:ff:77:1e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79 Validity Not Before: Aug 23 14:44:31 2025 GMT Not After : Aug 24 18:27:31 2025 GMT Subject: CN=11AC11FD572ECD8CA10C20275A12562431B02CCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:47:cf:ec:56:c4:8e:bf:6f:39:cb:27:ca:13: fc:1d:4e:2f:9f:62:f9:e3:2f:84:05:e8:38:b7:a8: 05:f5:32:15:b8:07:3e:e4:de:d8:3e:45:b9:41:51: 99:a8:9a:fb:1b:40:5f:ab:f5:0a:6f:4c:6a:96:57: d4:6e:84:c3:90:4a:7b:f9:93:ae:81:37:27:4c:ac: 1d:f6:ce:ce:21:a3:79:7e:1b:3f:87:a1:7a:f5:33: 50:c0:cf:42:9b:e9:c7:79:50:e2:48:06:b5:76:24: 5c:d2:5c:a8:21:63:d2:c5:c7:68:3b:64:19:6c:1c: 58:96:82:be:7b:eb:c4:e9:40:51:ec:6f:cb:2e:89: c5:d9:8f:62:4e:e8:69:05:0a:e8:97:2f:36:21:26: 9f:ce:78:d5:92:f0:4b:33:d5:d8:98:77:e5:41:3e: 2d:dc:c5:b1:56:2e:3c:f8:4b:6e:b2:91:a9:63:9a: 67:57:41:9c:39:6d:e2:c7:59:fc:e6:56:2c:04:3a: 99:af:7d:b8:ba:9e:8d:4f:e2:31:54:f3:d5:be:c3: c6:19:9a:84:26:c4:63:35:8c:ac:de:dc:1f:de:7c: e6:2c:aa:1f:d5:7f:89:79:37:24:af:ee:ed:5b:2f: bd:20:34:d2:28:10:5a:50:84:7a:d7:0c:1c:ed:44: 53:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AC:11:FD:57:2E:CD:8C:A1:0C:20:27:5A:12:56:24:31:B0:2C:CC X509v3 Authority Key Identifier: keyid:1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:9d:17:0a:3d:c7:63:6c:ac:ce:1b:7c:04:89:c4:ed:fd:d5: 85:83:ad:a5:e1:bd:89:65:b8:59:45:84:83:68:6c:7e:ef:43: e2:c9:ca:fc:59:47:6a:5d:3d:53:66:b3:08:73:43:62:ab:79: eb:a0:98:a0:4e:8b:66:6f:dd:c9:8b:82:4c:c8:a3:5e:71:3d: 5d:02:e9:2b:c1:e9:ea:b0:e9:3f:01:82:66:27:94:48:82:ef: e5:c6:8f:89:cb:c3:1e:90:a6:70:5b:df:7e:9d:cf:28:fb:dc: 7b:ad:de:2e:de:bf:ce:e9:33:6d:0a:1b:73:72:bc:20:b8:65: 20:3b:4a:1d:3b:82:1b:14:e8:01:92:01:9a:57:7e:a4:0b:8c: 6c:7d:26:8f:95:c8:f4:a3:27:87:f9:d7:ae:5f:48:d7:70:69: 0e:39:7d:fa:78:d6:bf:2b:22:56:f5:42:3a:af:bc:6d:14:be: 91:08:c5:e6:19:2d:95:4f:4c:b3:12:e8:c8:a4:2a:48:b7:f0: 65:8f:12:d7:8c:1d:2f:4e:56:7c:64:05:28:cc:2e:52:b1:3e: cd:02:b2:24:17:cc:6d:0e:75:28:a4:39:97:7a:1e:7c:34:54: 4d:95:ac:8b:66:a6:9e:ff:fe:f0:ab:f8:c5:6e:d4:0e:84:8e: 83:ee:2a:37 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCGqiAoHI8ff2CVXXZknRbP93Hk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI4MDQ4NTMxQ0ZFRDI1REVERTRFRjkzQ0JFRUJEMzdB MDA1M0M3OTAeFw0yNTA4MjMxNDQ0MzFaFw0yNTA4MjQxODI3MzFaMDMxMTAvBgNV BAMTKDExQUMxMUZENTcyRUNEOENBMTBDMjAyNzVBMTI1NjI0MzFCMDJDQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFR8/sVsSOv285yyfKE/wdTi+f YvnjL4QF6Di3qAX1MhW4Bz7k3tg+RblBUZmomvsbQF+r9QpvTGqWV9RuhMOQSnv5 k66BNydMrB32zs4ho3l+Gz+HoXr1M1DAz0Kb6cd5UOJIBrV2JFzSXKghY9LFx2g7 ZBlsHFiWgr5768TpQFHsb8suicXZj2JO6GkFCuiXLzYhJp/OeNWS8Esz1diYd+VB Pi3cxbFWLjz4S26ykaljmmdXQZw5beLHWfzmViwEOpmvfbi6no1P4jFU89W+w8YZ moQmxGM1jKze3B/efOYsqh/Vf4l5NySv7u1bL70gNNIoEFpQhHrXDBztRFOFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUEawR/VcuzYyhDCAnWhJWJDGwLMwwHwYDVR0j BBgwFoAUG4BIUxz+0l3t5O+Ty+69N6AFPHkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzZmZDRlYTEtYTI2Ni00ZGVhLWI0OGEtMTVkYTM1NDUy MTA5LzIvMUI4MDQ4NTMxQ0ZFRDI1REVERTRFRjkzQ0JFRUJEMzdBMDA1M0M3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xQjgwNDg1MzFDRkVEMjVERURFNEVGOTND QkVFQkQzN0EwMDUzQzc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M2ZmQ0ZWExLWEyNjYtNGRlYS1iNDhhLTE1ZGEzNTQ1MjEwOS8yLzFCODA0ODUz MUNGRUQyNURFREU0RUY5M0NCRUVCRDM3QTAwNTNDNzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYnRcK PcdjbKzOG3wEicTt/dWFg62l4b2JZbhZRYSDaGx+70Piycr8WUdqXT1TZrMIc0Ni q3nroJigTotmb93Ji4JMyKNecT1dAukrwenqsOk/AYJmJ5RIgu/lxo+Jy8MekKZw W99+nc8o+9x7rd4u3r/O6TNtChtzcrwguGUgO0odO4IbFOgBkgGaV36kC4xsfSaP lcj0oyeH+deuX0jXcGkOOX36eNa/KyJW9UI6r7xtFL6RCMXmGS2VT0yzEujIpCpI t/BljxLXjB0vTlZ8ZAUozC5SsT7NArIkF8xtDnUopDmXeh58NFRNlayLZqae//7w q/jFbtQOhI6D7io3 -----END CERTIFICATE-----Generated at Sat Aug 23 21:49:49 2025 by rpki-client