$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: /Py2g7IFt14axNJSjIxoc0N0cC0vh7Wq55taKV+Ki+w= Subject key identifier: 24:A4:D5:DA:C1:E2:60:90:24:21:69:7A:54:71:B4:16:B6:71:28:9D Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 69855F942601737547BAD9DC322A886EAC9FE7AE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 0268 Signing time: Sun 29 Jun 2025 08:05:53 +0000 Manifest this update: Sun 29 Jun 2025 08:00:53 +0000 Manifest next update: Mon 30 Jun 2025 11:44:53 +0000 Files and hashes: 1: 326131343a373538303a393230303a3a2f34302d3438203d3e20313430393135.roa (hash: n6lsjVYHHKKKPmzUm98edFKQEZTX7R3BteBSBE3ZmTg=) 2: 326131343a373538303a393030303a3a2f34302d3438203d3e20323134363433.roa (hash: TpBOht4fHdBbgzn8V6oN1sv1lzMWI2nPHKIFH/SJnHk=) 3: 326131343a373538313a653030303a3a2f33362d3438203d3e20323134363433.roa (hash: x9Ws2a9hchs2I1MVNTnPpvnZFWRirIvQpeIuGTe39hw=) 4: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: cFxWp20cVK0UfiJxxcLtUOXevD3OgB7dMefIF5hBHOk=) 5: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: FdQRym83UlDtyT5N7Lh5oYGuKYtWkJ8u1c9Pt78Hca4=) 6: 326131343a373538303a393130303a3a2f34302d3438203d3e20323136323939.roa (hash: c4wfh1kOphA8Axvw6+dnj3lAut4b1kpMpQW/rZEnV+o=) 7: 326131343a373538303a393630303a3a2f34302d3438203d3e20313533333736.roa (hash: a3qLcUPi+RQppEqo978zrfnO/2oaV9TKnigMH0wuHZQ=) 8: 326131343a373538303a393130303a3a2f34302d3438203d3e20323031333836.roa (hash: HGfpWKFgSmhSbJJ0S3ZdUrJxu8/156bUgg5vlqYKRis=) 9: 326131343a373538303a393330303a3a2f34302d3438203d3e20323136323939.roa (hash: 0JNkK9KnjI4w2zV41Uw2bLOQhv0TkTdwPhPOAejMVJo=) 10: 326131343a373538303a393430303a3a2f33392d3438203d3e20313430393135.roa (hash: mVqYPHXZFgCW00Y2ej0uNLFZlmcciaFr8mPxKhhXZIs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:85:5f:94:26:01:73:75:47:ba:d9:dc:32:2a:88:6e:ac:9f:e7:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Jun 29 08:00:53 2025 GMT Not After : Jun 30 11:44:53 2025 GMT Subject: CN=24A4D5DAC1E260902421697A5471B416B671289D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f0:80:57:1b:9f:47:d1:d2:77:cc:a8:3b:d1: c6:57:eb:5f:30:a6:9d:bd:c8:ab:09:74:1a:66:c0: 66:2f:f4:de:47:41:04:4a:5d:49:70:65:c9:cc:94: 45:ac:b5:db:00:3a:e2:4b:20:5c:32:d1:0e:d0:75: 33:02:a0:e7:a1:5a:c0:cb:d4:6b:26:a3:a0:61:9f: dc:09:70:1d:3c:31:98:f2:e9:f6:29:ba:fe:34:ee: e6:40:8b:b1:02:9a:2b:d0:b2:eb:23:a2:21:ea:58: d2:1c:c1:f6:71:29:93:16:71:ab:c5:14:e3:fe:b8: f0:97:4e:30:5c:d6:16:71:f0:01:73:8a:e1:70:69: 96:ed:9e:d7:d4:59:af:db:a7:de:1e:d3:73:ed:38: a1:18:c8:f7:5d:44:1f:4a:3b:e0:14:df:0b:76:14: 06:23:dc:4a:b7:ca:60:a3:da:79:34:ed:65:7d:fb: 2c:ed:c1:59:e6:e6:80:7d:a1:90:05:af:00:59:63: 49:1c:d6:4a:a5:96:fd:c4:81:b2:3f:35:6c:82:f2: 4f:95:48:13:7c:9c:ee:15:20:ef:22:5b:13:b9:65: d4:07:ee:97:05:f6:48:7d:26:40:fc:39:6c:51:34: 4f:69:98:b1:c0:19:87:20:fb:fe:28:fd:cf:27:cd: 47:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A4:D5:DA:C1:E2:60:90:24:21:69:7A:54:71:B4:16:B6:71:28:9D X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:3a:5d:c6:03:1d:b4:98:0f:48:14:b9:a4:01:e6:d9:c9:7b: 24:50:8d:70:1f:f9:95:47:7a:8d:73:10:02:79:3d:8a:38:3c: a5:48:a4:98:9d:8a:b9:9c:42:16:5b:da:4c:d8:54:07:17:58: 59:85:57:06:f2:bf:df:83:b2:8a:c6:a1:cb:48:e4:eb:6d:31: 7f:bf:75:1b:ba:77:5a:a5:7d:9a:a5:d6:e9:17:2e:d9:6e:af: d6:8b:d1:b2:89:0a:4c:5b:16:ec:5f:fe:17:58:28:1a:f6:c4: a2:6b:e4:16:72:71:b8:6b:e0:00:9e:eb:2d:7b:eb:1c:ae:e9: 44:a2:48:9e:77:68:52:cd:0e:1b:65:5b:5e:c4:9e:d1:d6:bc: 3a:1f:48:64:ec:ce:b9:18:2e:55:b3:51:0d:e3:25:6d:b3:a9: 8e:81:39:f7:4e:5d:b8:d8:4d:72:0b:61:8e:56:43:5b:d6:d2: b4:7a:20:ca:9e:b0:bf:93:d1:3a:73:cf:98:62:77:5c:29:61: cd:84:c6:55:25:07:1e:9a:e0:39:ad:09:01:c2:cf:c4:89:91: 29:12:bb:76:8e:89:3e:1e:fb:4c:18:c0:2f:cc:08:c0:52:ec: 0d:40:ca:66:64:24:9e:bc:ba:71:ad:08:b0:2e:40:75:61:2d: d3:d2:67:80 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaYVflCYBc3VHutncMiqIbqyf564wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNTA2MjkwODAwNTNaFw0yNTA2MzAxMTQ0NTNaMDMxMTAvBgNV BAMTKDI0QTRENURBQzFFMjYwOTAyNDIxNjk3QTU0NzFCNDE2QjY3MTI4OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs8IBXG59H0dJ3zKg70cZX618w pp29yKsJdBpmwGYv9N5HQQRKXUlwZcnMlEWstdsAOuJLIFwy0Q7QdTMCoOehWsDL 1Gsmo6Bhn9wJcB08MZjy6fYpuv407uZAi7ECmivQsusjoiHqWNIcwfZxKZMWcavF FOP+uPCXTjBc1hZx8AFziuFwaZbtntfUWa/bp94e03PtOKEYyPddRB9KO+AU3wt2 FAYj3Eq3ymCj2nk07WV9+yztwVnm5oB9oZAFrwBZY0kc1kqllv3EgbI/NWyC8k+V SBN8nO4VIO8iWxO5ZdQH7pcF9kh9JkD8OWxRNE9pmLHAGYcg+/4o/c8nzUdxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJKTV2sHiYJAkIWl6VHG0FrZxKJ0wHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnOl3G Ax20mA9IFLmkAebZyXskUI1wH/mVR3qNcxACeT2KODylSKSYnYq5nEIWW9pM2FQH F1hZhVcG8r/fg7KKxqHLSOTrbTF/v3UbundapX2apdbpFy7Zbq/Wi9GyiQpMWxbs X/4XWCga9sSia+QWcnG4a+AAnuste+scrulEokied2hSzQ4bZVtexJ7R1rw6H0hk 7M65GC5Vs1EN4yVts6mOgTn3Tl242E1yC2GOVkNb1tK0eiDKnrC/k9E6c8+YYndc KWHNhMZVJQcemuA5rQkBws/EiZEpErt2jok+HvtMGMAvzAjAUuwNQMpmZCSevLpx rQiwLkB1YS3T0meA -----END CERTIFICATE-----Generated at Sun Jun 29 12:10:37 2025 by rpki-client