$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json) Hash identifier: QYBMw4DCwFiPhLSGymwECrKHkQmzNLQr3Hvjpz3UXt4= Subject key identifier: 87:F5:17:93:FB:E0:F2:A6:5F:31:9A:E8:02:A4:D7:CB:DA:76:E2:1F Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Certificate serial: 03F927F5354A3FF4873CDD181A135E393D0279A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft Manifest number: 012C Signing time: Fri 22 Aug 2025 19:24:20 +0000 Manifest this update: Fri 22 Aug 2025 19:19:20 +0000 Manifest next update: Sat 23 Aug 2025 21:29:20 +0000 Files and hashes: 1: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: +yFHbjFdcl3OkH9bM82B/wbQvRBlEBGqJ0LTOyulC0Q=) 2: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: M972A2zux5bp2vtM/yV/ifXNBlJMRB7g6qDIDzpgNsU=) 3: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: hT2vS1KxZCIrrbIeX36lXo5PB7z3bFiXrMszQcpSghE=) 4: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: b3AvMY9Sl1B0jVsJOJivHhqGlksNlQ/JV9muHKrGSGQ=) 5: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: aQBGW4UwEpZw1viUGTiicR7R7bF3eHxKluau3FSxHVQ=) 6: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: izH2bRAdoHB65ZOfP1RgM/881EkkTABDPPywFSiQ9f4=) 7: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: hYvWm7RFlZS1l2LX8NsvpkNf0MsxvPiQn7slmgwssck=) 8: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: RQOZ0GeuB2hc8N96mezhBhXKeCrh7X17R4TSsdmASyE=) 9: AS215248.asa (hash: pTUqZS2x9dQUc74NpwgDLC9vX7t70r7B83USY00u86o=) 10: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: e6DNGKmUmYh4KhA4h67tF7nM55oym+8oQ84yYdEmy64=) 11: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: RPFyh+9f4VeLKwhSKFsibkww2V1WrimAJUdSq1OTL10=) 12: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: rQvL6z8yuqUS7v24/Ra9en3S8KmIgkMtv1rcn8o1sfA=) 13: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: lO968dvrqTvUxcchKS/BvcOTMSKoNem2qKYsl/f4Vxk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 21:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f9:27:f5:35:4a:3f:f4:87:3c:dd:18:1a:13:5e:39:3d:02:79:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Validity Not Before: Aug 22 19:19:20 2025 GMT Not After : Aug 23 21:29:20 2025 GMT Subject: CN=87F51793FBE0F2A65F319AE802A4D7CBDA76E21F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:70:d9:09:dc:f9:ed:51:98:ce:b5:87:ac:9f: b3:9a:4f:0f:2b:af:dc:67:fa:4e:39:e1:51:4c:40: cf:18:e6:58:d0:d4:79:8b:61:15:ec:a1:39:63:e7: ac:ed:8b:49:36:0b:d0:bb:61:14:39:cf:f6:46:ed: 50:fa:d4:2c:08:af:79:9f:85:4a:5a:b2:6f:5a:70: 16:78:63:30:5b:0f:b7:53:af:4e:46:b7:c5:03:ef: 09:ff:e3:3c:5a:2f:36:97:34:cc:c4:72:04:39:cb: 83:db:77:cc:1b:41:a5:58:bf:e0:73:a4:1c:4f:c9: 4b:40:b0:29:a0:1a:52:86:05:81:db:23:03:fd:02: c5:8c:9d:a0:f0:4d:01:f7:9f:e2:71:50:f5:1c:23: e7:fd:81:99:18:40:4b:9b:27:fa:b3:ef:28:48:88: d1:da:f9:e6:7e:35:0a:60:10:b4:53:06:0e:41:ff: 3f:68:58:ee:2f:c1:16:fe:ad:2f:3d:65:1a:b8:21: ce:88:ef:bb:b7:6f:3c:b2:c7:87:4d:6a:75:d4:e5: 6d:25:90:4f:f8:cf:c4:04:5d:11:f4:99:ca:7e:44: 37:16:de:00:82:5a:bf:8c:57:a7:98:93:6e:25:76: 52:c7:0f:97:43:29:44:aa:41:80:bf:1f:97:4f:b9: 8a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F5:17:93:FB:E0:F2:A6:5F:31:9A:E8:02:A4:D7:CB:DA:76:E2:1F X509v3 Authority Key Identifier: keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:32:8f:46:6d:65:cf:04:ac:62:0a:e9:13:bb:b0:37:2d:97: a8:a7:34:bd:72:4f:b7:a2:a5:5f:7a:88:26:3c:57:92:03:2d: c2:f1:14:ed:0d:09:33:67:a5:09:94:f1:76:d1:6e:8f:58:94: d0:78:7d:b8:a4:e0:a6:4a:7d:09:ac:0d:cf:bc:56:59:1d:4a: 73:00:94:9d:10:ab:36:02:de:f9:44:65:28:28:79:c3:ce:0c: b7:9f:1a:3c:dd:15:10:37:d2:75:96:57:e5:74:af:dc:d2:71: 6d:23:72:56:3a:bc:3b:64:28:67:1b:e5:8d:63:52:90:18:76: 55:06:a5:8c:5d:15:a0:df:ba:88:e7:ca:f0:40:81:af:1e:78: 18:51:e6:36:3c:43:90:d0:4c:cc:a6:3d:12:12:c2:f6:9c:9a: ba:1f:d9:ff:36:44:02:bd:51:f4:bc:9f:06:00:61:20:95:08: e9:33:bc:e0:a6:9d:01:ca:6d:d2:9a:47:c0:d3:5d:e8:77:ff: 4d:f0:8c:8a:e1:37:b7:cf:af:b7:f6:86:ff:29:a7:5a:c1:6c: e4:0a:8a:47:59:68:01:bb:bb:3d:81:3c:62:fb:08:33:0d:29: d5:8e:31:f9:fd:af:cb:aa:3b:df:d8:f4:7d:c2:6b:4c:2e:87: eb:9c:0c:bc -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUA/kn9TVKP/SHPN0YGhNeOT0CeakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3 ZTc5N2I2ODAeFw0yNTA4MjIxOTE5MjBaFw0yNTA4MjMyMTI5MjBaMDMxMTAvBgNV BAMTKDg3RjUxNzkzRkJFMEYyQTY1RjMxOUFFODAyQTREN0NCREE3NkUyMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOcNkJ3PntUZjOtYesn7OaTw8r r9xn+k454VFMQM8Y5ljQ1HmLYRXsoTlj56zti0k2C9C7YRQ5z/ZG7VD61CwIr3mf hUpasm9acBZ4YzBbD7dTr05Gt8UD7wn/4zxaLzaXNMzEcgQ5y4Pbd8wbQaVYv+Bz pBxPyUtAsCmgGlKGBYHbIwP9AsWMnaDwTQH3n+JxUPUcI+f9gZkYQEubJ/qz7yhI iNHa+eZ+NQpgELRTBg5B/z9oWO4vwRb+rS89ZRq4Ic6I77u3bzyyx4dNanXU5W0l kE/4z8QEXRH0mcp+RDcW3gCCWr+MV6eYk24ldlLHD5dDKUSqQYC/H5dPuYpXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUh/UXk/vg8qZfMZroAqTXy9p24h8wHwYDVR0j BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1 NWUyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZDE5ZGIyMC00 NjUzLTQ4ZDQtOGZjNC01ODBkMTM2OWI3YzQvMC81Q0RDMDRCQjIzRUFBNENFQ0M3 OTFERkUwNEJCMDI4QjdFNzk3QjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDKPRm1lzwSsYgrpE7uw Ny2XqKc0vXJPt6KlX3qIJjxXkgMtwvEU7Q0JM2elCZTxdtFuj1iU0Hh9uKTgpkp9 CawNz7xWWR1KcwCUnRCrNgLe+URlKCh5w84Mt58aPN0VEDfSdZZX5XSv3NJxbSNy Vjq8O2QoZxvljWNSkBh2VQaljF0VoN+6iOfK8ECBrx54GFHmNjxDkNBMzKY9EhLC 9pyauh/Z/zZEAr1R9LyfBgBhIJUI6TO84KadAcpt0ppHwNNd6Hf/TfCMiuE3t8+v t/aG/ymnWsFs5AqKR1loAbu7PYE8YvsIMw0p1Y4x+f2vy6o739j0fcJrTC6H65wM vA== -----END CERTIFICATE-----Generated at Sat Aug 23 13:03:47 2025 by rpki-client