$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: axzwnru9jvlgpLR23flUp+cNxB9r6vEkOPlprom7YrU= Subject key identifier: 22:3B:52:79:64:6E:CC:58:83:1C:C8:92:90:32:82:10:D9:60:9A:0F Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 5FB0AB04BD991A689DD70259EC8D303788FA2FC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 0346 Signing time: Sat 23 Aug 2025 01:22:33 +0000 Manifest this update: Sat 23 Aug 2025 01:17:33 +0000 Manifest next update: Sun 24 Aug 2025 02:03:33 +0000 Files and hashes: 1: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: 6ZK3jTXrCCpbEO3Fmtp7829syCPZGJWyKbSuj5gURHs=) 2: 3231372e32382e3133382e302f32342d3234203d3e20323039393736.roa (hash: oyOFvRhi/TPEOopsZuEaDpEux2304igP8lMcDVdyDmE=) 3: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: JO9eMRAwPS+hZf1UF8eYFlm1nYrsRkC7Oj1Lhed/bAU=) 4: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: 9QDAlicDZU2dKA/slyHao02LhaPY7/2iCnESN6BbiqA=) 5: 3135392e3235332e312e302f32342d3234203d3e2039333034.roa (hash: dcYXeL7R4SgGVjoaZN9OWp91BkdwHsg557vymFY3FPQ=) 6: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (hash: ium02BtB+GfbIHn2YGUt7i7of/NJnXnez2EEtYL+duE=) 7: 3138352e31332e3232352e302f32342d3234203d3e203631333137.roa (hash: 8TzKoFnFzYaSWN5mBXGHVTu7YevWpqGi2XUkHCPKssM=) 8: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: 8/3XzRXXjmYpSthB/PqRmvioB+R4a98BuFhtWRNYmtk=) 9: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: uV5gP669aq0NtuCXuZBm6wWsNYwP/024H/522nPjCx8=) 10: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: cKnNLC66X19KWTLeS9BLlyG6jkzxqkdJwZjUWCrZPHc=) 11: 3138352e31332e3232362e302f32342d3234203d3e20313532313739.roa (hash: kbUfx2g7/W6xr6BcRBqigrahrWSKqlZaZ80tT5+SQUk=) 12: 3138352e31332e3232372e302f32342d3234203d3e203533333536.roa (hash: fyjNZl2BnH5gWmJXj7IkwC9hLUY6iDMpaWQ6H8Zs07M=) 13: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (hash: Y4VGjNKxdM1kt8f9/kG9Dub6HzXbG7OXpVqySki/RW4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 02:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:b0:ab:04:bd:99:1a:68:9d:d7:02:59:ec:8d:30:37:88:fa:2f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Aug 23 01:17:33 2025 GMT Not After : Aug 24 02:03:33 2025 GMT Subject: CN=223B5279646ECC58831CC89290328210D9609A0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bf:9a:2a:6d:76:ac:c8:5b:a6:48:9b:42:22: 3c:47:03:a2:aa:2f:84:42:14:29:05:27:a0:8d:32: 1d:3e:6d:b6:c7:17:41:54:2f:2d:59:92:99:eb:21: ea:44:c4:14:43:9b:14:00:51:aa:45:07:fa:74:e0: 0e:84:82:37:6d:1d:26:b8:f3:b0:11:9d:3b:92:08: f3:9a:ab:2c:54:06:c0:e5:fd:97:2c:84:4a:c1:0d: 79:9a:60:5e:59:0d:d0:a2:2b:3f:75:89:70:70:e3: 88:a7:4e:22:c0:53:a9:f6:8d:1e:eb:79:3b:37:d0: 15:07:d5:b0:91:0f:a7:b2:02:1e:e1:b2:e1:4d:ac: a9:6d:99:2f:6d:ee:11:4c:c9:32:7a:c3:59:48:ca: d0:f3:9b:19:0b:8b:80:38:e8:88:7b:76:d5:5c:c3: 93:fc:95:5f:7a:2a:75:c5:fe:ec:61:a2:36:8a:61: 58:52:b1:0d:95:5f:15:74:80:ec:92:07:92:da:4b: 1b:7e:2b:66:9d:98:58:16:d7:70:f5:73:3e:8e:9e: 09:6e:18:65:05:96:2b:21:57:cd:8b:01:d0:a6:e4: 42:b8:2e:fa:64:f0:97:38:bc:74:9c:9a:84:1e:f4: 48:2a:63:67:29:c1:ad:09:55:ff:42:10:36:09:87: be:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3B:52:79:64:6E:CC:58:83:1C:C8:92:90:32:82:10:D9:60:9A:0F X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:bb:98:ca:04:fa:88:5e:f9:6c:d4:a7:fc:53:eb:78:d3:c1: c0:73:c4:6b:79:cb:83:53:38:d5:2e:a4:5a:a4:92:28:38:df: ef:65:ec:9f:00:24:1e:69:56:41:27:e0:77:07:22:e6:8b:a6: 9a:4d:7d:53:16:3a:a1:11:44:6c:fb:16:ae:81:92:64:68:27: 2d:72:d1:af:69:18:7e:de:27:09:77:99:14:70:c4:46:20:ca: c8:ca:a2:14:31:b1:15:13:c4:a1:0f:ec:ec:7f:9f:f8:f9:00: d6:5e:dc:75:4c:33:80:c1:61:68:7e:2c:71:17:f0:30:e6:a7: 48:ce:f6:c0:84:c3:02:40:41:e2:f5:ac:d0:f9:c1:0c:7d:94: 03:8e:31:c4:be:47:e4:4d:36:d2:1e:b3:13:6b:d8:58:97:ef: 65:c0:7b:ad:4d:1b:c3:d6:0f:77:f5:fd:40:53:b7:72:fd:83: a9:16:71:d5:08:49:67:8e:c5:54:7f:5c:ba:74:b6:dd:46:fb: d0:a2:bf:ca:e0:6a:86:b4:44:0c:14:9c:b3:f0:67:52:28:69: 95:ae:e3:0e:97:ce:2b:fa:5e:12:0c:58:60:a3:c4:06:6a:53: ad:0d:90:1c:dc:a6:53:ac:cf:1d:11:19:da:42:83:28:b2:06: 20:e3:a8:08 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUX7CrBL2ZGmid1wJZ7I0wN4j6L8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNTA4MjMwMTE3MzNaFw0yNTA4MjQwMjAzMzNaMDMxMTAvBgNV BAMTKDIyM0I1Mjc5NjQ2RUNDNTg4MzFDQzg5MjkwMzI4MjEwRDk2MDlBMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIv5oqbXasyFumSJtCIjxHA6Kq L4RCFCkFJ6CNMh0+bbbHF0FULy1ZkpnrIepExBRDmxQAUapFB/p04A6EgjdtHSa4 87ARnTuSCPOaqyxUBsDl/ZcshErBDXmaYF5ZDdCiKz91iXBw44inTiLAU6n2jR7r eTs30BUH1bCRD6eyAh7hsuFNrKltmS9t7hFMyTJ6w1lIytDzmxkLi4A46Ih7dtVc w5P8lV96KnXF/uxhojaKYVhSsQ2VXxV0gOySB5LaSxt+K2admFgW13D1cz6Onglu GGUFlishV82LAdCm5EK4Lvpk8Jc4vHScmoQe9EgqY2cpwa0JVf9CEDYJh77DAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUIjtSeWRuzFiDHMiSkDKCENlgmg8wHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7uYygT6iF75bNSn/FPr eNPBwHPEa3nLg1M41S6kWqSSKDjf72XsnwAkHmlWQSfgdwci5oummk19UxY6oRFE bPsWroGSZGgnLXLRr2kYft4nCXeZFHDERiDKyMqiFDGxFRPEoQ/s7H+f+PkA1l7c dUwzgMFhaH4scRfwMOanSM72wITDAkBB4vWs0PnBDH2UA44xxL5H5E020h6zE2vY WJfvZcB7rU0bw9YPd/X9QFO3cv2DqRZx1QhJZ47FVH9cunS23Ub70KK/yuBqhrRE DBScs/BnUihpla7jDpfOK/peEgxYYKPEBmpTrQ2QHNymU6zPHREZ2kKDKLIGIOOo CA== -----END CERTIFICATE-----Generated at Sat Aug 23 15:31:50 2025 by rpki-client