$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: bkvexo4o2R13MxMx70KOSDsbclWw/fj25S4Q8y68EvU= Subject key identifier: A5:C0:82:03:EE:1A:03:E6:FD:AE:9B:FE:1E:3B:DA:68:5B:55:C3:4D Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 6B49ACD240A30532B2238C64B7F405E2B537A2A8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 0288 Signing time: Sat 23 Aug 2025 20:25:22 +0000 Manifest this update: Sat 23 Aug 2025 20:20:22 +0000 Manifest next update: Sun 24 Aug 2025 22:53:22 +0000 Files and hashes: 1: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg=) 2: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: s8PXZ6xun7QdEzluX2KYTIUVTeLEFzlJ1flicK9iKH8=) 3: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: 17qN8Bd0gWBZvDkn96RHqKMURz1HVyJmOiwn1OSD2G0=) 4: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: HFC73nPp0gQhC6K9OlLjIceLfajh4wWcEuT5GIqZ9tk=) 5: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 6: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 7: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: 7RQ0gXCWkNwXJyLVMAjMT4ifOZKJ140AG/jnIia+kz4=) 8: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo=) 9: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 10: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk=) 11: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: polxJUQuuGvo82QFQvRtgLcGzpMrITqZaH9JMW5PByU=) 12: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=) 13: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=) 14: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=) 15: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 16: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) 17: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 17:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:49:ac:d2:40:a3:05:32:b2:23:8c:64:b7:f4:05:e2:b5:37:a2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Aug 23 20:20:22 2025 GMT Not After : Aug 24 22:53:22 2025 GMT Subject: CN=A5C08203EE1A03E6FDAE9BFE1E3BDA685B55C34D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:70:16:e4:d1:64:da:44:bd:23:21:ca:08:45: e0:55:ad:df:fe:91:bf:34:57:fd:c8:b3:0a:f6:6e: 5e:18:d0:bd:1b:c5:51:5a:75:ae:9f:89:21:3f:b6: 41:f8:9d:4e:0f:65:b1:34:51:9d:c6:c0:7d:15:c9: 07:11:8b:ed:ce:6e:12:1f:17:b9:28:4e:e8:c8:b0: c8:43:95:26:86:9a:17:a3:1e:3f:22:99:92:f5:50: 07:63:0d:6f:69:ee:9b:61:df:d3:cd:8f:2f:74:8c: 4c:a2:46:41:96:c4:ab:2e:4f:7b:86:c9:58:9c:f8: 97:ec:af:ac:74:7f:95:63:17:01:f0:78:b4:97:79: b5:b9:ec:4b:99:a0:96:8e:52:82:4c:c6:62:7c:a9: 02:d1:88:92:31:a4:bc:27:a9:f0:26:1e:5a:d9:92: 31:a4:52:d5:8a:b6:80:90:cb:31:ab:37:de:c9:64: 6a:89:73:0b:cb:c9:30:84:02:72:c6:90:e8:99:ae: 01:68:5a:fc:7f:32:33:fe:29:7f:90:a1:ee:c4:ec: 34:94:4b:05:e7:e0:e9:bf:dd:c8:e4:a4:8e:ff:86: 9b:6e:21:b4:25:22:ab:3d:b2:0e:c9:30:c2:77:6e: 38:03:f8:f5:c7:1f:e9:4b:38:c0:1c:e0:82:60:bf: ab:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C0:82:03:EE:1A:03:E6:FD:AE:9B:FE:1E:3B:DA:68:5B:55:C3:4D X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e4:40:df:b5:fa:77:e7:42:7b:e3:f9:13:55:6e:79:50:b9: 40:4e:f0:8f:fc:e9:4d:23:1f:fc:03:27:00:8f:7a:b9:ce:a8: b6:1e:c9:2b:7a:2d:6d:b2:88:4d:26:b6:0b:ad:4b:35:13:ae: ff:10:37:93:7d:5c:9a:a6:66:b3:76:d2:0d:77:5b:e7:df:60: 0d:c1:32:2b:24:35:bd:ba:62:19:7e:5a:08:53:57:f0:da:e9: d9:78:3e:31:fb:39:e4:e5:59:68:34:19:44:bb:0c:91:e5:60: ba:39:5c:55:a4:85:7e:16:36:ec:f1:4a:b8:e5:51:6a:5e:be: c8:85:56:f7:bb:08:20:e0:49:95:41:a3:84:b3:00:a9:22:7a: 5c:df:a5:6d:95:41:de:96:cb:c8:4d:f9:cd:9c:83:63:21:02: 86:f8:2a:62:98:2c:4a:65:e7:d9:3b:71:c6:4b:37:17:97:c5: 1f:ae:0f:59:2f:35:4f:99:83:85:96:9d:3a:d8:3b:47:10:de: 2c:50:60:c9:de:8a:ee:ed:95:52:b3:0e:e9:33:e5:72:a3:79: be:4b:ab:93:3c:9e:1a:91:c9:ed:94:fd:03:38:14:86:a7:72: 66:1c:48:51:c0:a2:fa:70:f3:43:eb:a1:b6:c7:5d:34:13:df: 21:01:51:fc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUa0ms0kCjBTKyI4xkt/QF4rU3oqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNTA4MjMyMDIwMjJaFw0yNTA4MjQyMjUzMjJaMDMxMTAvBgNV BAMTKEE1QzA4MjAzRUUxQTAzRTZGREFFOUJGRTFFM0JEQTY4NUI1NUMzNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjcBbk0WTaRL0jIcoIReBVrd/+ kb80V/3Iswr2bl4Y0L0bxVFada6fiSE/tkH4nU4PZbE0UZ3GwH0VyQcRi+3ObhIf F7koTujIsMhDlSaGmhejHj8imZL1UAdjDW9p7pth39PNjy90jEyiRkGWxKsuT3uG yVic+Jfsr6x0f5VjFwHweLSXebW57EuZoJaOUoJMxmJ8qQLRiJIxpLwnqfAmHlrZ kjGkUtWKtoCQyzGrN97JZGqJcwvLyTCEAnLGkOiZrgFoWvx/MjP+KX+Qoe7E7DSU SwXn4Om/3cjkpI7/hptuIbQlIqs9sg7JMMJ3bjgD+PXHH+lLOMAc4IJgv6uPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUpcCCA+4aA+b9rpv+HjvaaFtVw00wHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA15EDf tfp350J74/kTVW55ULlATvCP/OlNIx/8AycAj3q5zqi2Hskrei1tsohNJrYLrUs1 E67/EDeTfVyapmazdtINd1vn32ANwTIrJDW9umIZfloIU1fw2unZeD4x+znk5Vlo NBlEuwyR5WC6OVxVpIV+Fjbs8Uq45VFqXr7IhVb3uwgg4EmVQaOEswCpInpc36Vt lUHelsvITfnNnINjIQKG+CpimCxKZefZO3HGSzcXl8Ufrg9ZLzVPmYOFlp062DtH EN4sUGDJ3oru7ZVSsw7pM+Vyo3m+S6uTPJ4akcntlP0DOBSGp3JmHEhRwKL6cPND 66G2x100E98hAVH8 -----END CERTIFICATE-----Generated at Sun Aug 24 01:33:11 2025 by rpki-client