$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: mSPl6IBQ5QOG3GyC1maSbOkmGzAzkvNI7R4SjnUwBZk= Subject key identifier: C8:B9:48:29:F4:9C:AA:08:99:99:6E:1B:38:7A:29:7C:14:4B:59:E6 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 27400802100B82B1D18736F51E69670501591235 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 02F9 Signing time: Sat 28 Jun 2025 15:59:10 +0000 Manifest this update: Sat 28 Jun 2025 15:54:10 +0000 Manifest next update: Sun 29 Jun 2025 16:17:10 +0000 Files and hashes: 1: 3135392e3235332e362e302f32342d3234203d3e20383334.roa (hash: 5NdQ//spLweNzxs8zHAGi1gJMib8lPFrPng4LsW41ME=) 2: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (hash: 8/3XzRXXjmYpSthB/PqRmvioB+R4a98BuFhtWRNYmtk=) 3: 3138352e31332e3232372e302f32342d3234203d3e203533333536.roa (hash: fyjNZl2BnH5gWmJXj7IkwC9hLUY6iDMpaWQ6H8Zs07M=) 4: 3138352e31332e3232352e302f32342d3234203d3e203631333137.roa (hash: 8TzKoFnFzYaSWN5mBXGHVTu7YevWpqGi2XUkHCPKssM=) 5: 3231372e32382e3133382e302f32342d3234203d3e20323039393736.roa (hash: oyOFvRhi/TPEOopsZuEaDpEux2304igP8lMcDVdyDmE=) 6: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (hash: k6qvY6qYLtrsDEyi8J+SScxT9enfuaIRYNZH2IHqC8o=) 7: 3135392e3235332e322e302f32342d3234203d3e20383334.roa (hash: Io0uqsNFWMRzWK0hBxO5SHV2H5/pOpKQHlMKDuh/MnA=) 8: 3135392e3235332e342e302f32342d3234203d3e20323134313433.roa (hash: JO9eMRAwPS+hZf1UF8eYFlm1nYrsRkC7Oj1Lhed/bAU=) 9: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: 9QDAlicDZU2dKA/slyHao02LhaPY7/2iCnESN6BbiqA=) 10: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: cKnNLC66X19KWTLeS9BLlyG6jkzxqkdJwZjUWCrZPHc=) 11: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: uV5gP669aq0NtuCXuZBm6wWsNYwP/024H/522nPjCx8=) 12: 3135392e3235332e312e302f32342d3234203d3e20383334.roa (hash: +Cgri0dz3lCclo0MuT04LNn4FtNZlpiIq1+Gu2V5CA8=) 13: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: ygEew93GvoiS1HJYCWd5AbGtS7ylOoVrtq1l896W3hA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 16:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:40:08:02:10:0b:82:b1:d1:87:36:f5:1e:69:67:05:01:59:12:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Jun 28 15:54:10 2025 GMT Not After : Jun 29 16:17:10 2025 GMT Subject: CN=C8B94829F49CAA0899996E1B387A297C144B59E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2e:a6:81:08:32:5c:7f:72:ee:0d:84:35:72: 46:f9:f0:f4:7c:1f:04:17:1f:6c:3e:6e:b8:1c:f5: a6:01:80:34:dd:08:c7:1a:58:a2:d2:36:ab:38:f7: c5:41:28:86:48:29:7b:84:e5:d4:2c:d2:30:b2:0f: 9f:e3:18:49:7e:39:dd:92:3f:e3:2d:12:65:f0:e6: c7:0e:31:d7:3b:65:ed:77:e5:6d:50:b9:0a:f7:81: 71:b6:19:37:9f:3a:28:cb:35:44:3b:fa:39:5d:c8: 01:61:3a:01:b5:eb:91:ff:e8:f9:3a:33:23:db:2d: 96:8d:ee:37:54:4b:97:fd:29:06:6c:fc:93:da:9f: a6:0f:2f:01:78:6a:5c:f6:1d:ba:0c:aa:39:b7:e3: 52:50:b8:fe:23:4a:78:22:95:c2:95:ca:a1:59:89: 4e:ce:51:1e:de:c9:64:97:84:ed:98:a5:52:0d:83: 97:d7:10:5c:ba:f9:f3:0a:7a:c4:c8:59:31:ea:f4: d4:51:34:f1:53:14:78:7a:82:d6:18:17:c8:02:7a: 9a:b8:a2:1b:e4:fb:ab:b7:ca:6a:c4:66:98:25:63: 97:a9:61:69:00:31:c3:6b:6c:58:ad:b1:20:c8:32: 15:e4:03:2e:f9:01:7f:a4:2f:22:d9:3c:0c:e0:6c: fb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B9:48:29:F4:9C:AA:08:99:99:6E:1B:38:7A:29:7C:14:4B:59:E6 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:a5:db:5e:77:e5:ae:b1:c1:ae:09:b2:84:40:26:21:d0:ec: e8:d3:31:27:7c:c3:47:b2:f0:17:7b:67:66:9e:a3:07:d7:48: 58:1a:88:94:69:55:52:7e:4b:40:a5:b7:c6:1a:38:2c:06:d5: 5b:dc:e7:1a:1f:c5:e5:b9:1c:c2:c4:10:3b:2e:f6:e8:dc:3d: e4:cf:d4:30:90:6d:c4:a0:0d:e2:96:0d:b9:d7:31:ae:90:6d: db:9d:45:d0:b0:fb:99:47:6d:29:cf:19:41:6d:84:15:cf:6d: 47:6e:33:34:29:f6:7f:6c:4e:9b:c6:9c:5a:bb:43:35:74:96: 79:0e:6d:30:f9:90:10:fb:ff:3b:db:56:9b:0d:3d:d5:e9:3c: b5:88:b7:af:8a:7e:bd:49:f4:c0:c6:76:ed:87:8c:a6:95:3c: 3f:ec:ad:ef:b4:15:d8:99:33:bc:55:8f:a7:17:da:16:f5:d0: a7:81:f5:85:c3:84:c0:ea:51:16:61:02:9a:54:68:63:7f:be: 28:38:82:25:f5:cb:57:24:e2:e4:ef:5a:0d:c3:62:01:45:5f: 11:b6:c2:6a:c5:7f:a7:3a:b7:bb:51:40:ed:b3:16:5a:4d:56: 89:fc:f9:19:1d:66:2a:39:51:71:42:8b:fb:2c:04:f2:a5:29: 0b:00:cf:e7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJ0AIAhALgrHRhzb1HmlnBQFZEjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNTA2MjgxNTU0MTBaFw0yNTA2MjkxNjE3MTBaMDMxMTAvBgNV BAMTKEM4Qjk0ODI5RjQ5Q0FBMDg5OTk5NkUxQjM4N0EyOTdDMTQ0QjU5RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeLqaBCDJcf3LuDYQ1ckb58PR8 HwQXH2w+brgc9aYBgDTdCMcaWKLSNqs498VBKIZIKXuE5dQs0jCyD5/jGEl+Od2S P+MtEmXw5scOMdc7Ze135W1QuQr3gXG2GTefOijLNUQ7+jldyAFhOgG165H/6Pk6 MyPbLZaN7jdUS5f9KQZs/JPan6YPLwF4alz2HboMqjm341JQuP4jSngilcKVyqFZ iU7OUR7eyWSXhO2YpVINg5fXEFy6+fMKesTIWTHq9NRRNPFTFHh6gtYYF8gCepq4 ohvk+6u3ymrEZpglY5epYWkAMcNrbFitsSDIMhXkAy75AX+kLyLZPAzgbPspAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUyLlIKfScqgiZmW4bOHopfBRLWeYwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6XbXnflrrHBrgmyhEAm IdDs6NMxJ3zDR7LwF3tnZp6jB9dIWBqIlGlVUn5LQKW3xho4LAbVW9znGh/F5bkc wsQQOy726Nw95M/UMJBtxKAN4pYNudcxrpBt251F0LD7mUdtKc8ZQW2EFc9tR24z NCn2f2xOm8acWrtDNXSWeQ5tMPmQEPv/O9tWmw091ek8tYi3r4p+vUn0wMZ27YeM ppU8P+yt77QV2JkzvFWPpxfaFvXQp4H1hcOEwOpRFmECmlRoY3++KDiCJfXLVyTi 5O9aDcNiAUVfEbbCasV/pzq3u1FA7bMWWk1Wifz5GR1mKjlRcUKL+ywE8qUpCwDP 5w== -----END CERTIFICATE-----Generated at Sun Jun 29 07:38:18 2025 by rpki-client