$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: ryyTdB9dk7n6c98GT05JWR6r9UcevuTWhrz5YPKoAXI= Subject key identifier: F9:5A:43:82:99:59:8D:0C:4D:FE:E0:8B:89:6C:E4:45:90:62:B5:B6 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 05C98DCD05F18A223242AAEF1E7246ED3887A415 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 02B1 Signing time: Sat 23 Aug 2025 00:23:06 +0000 Manifest this update: Sat 23 Aug 2025 00:18:06 +0000 Manifest next update: Sun 24 Aug 2025 03:02:06 +0000 Files and hashes: 1: 326131343a373538303a393330303a3a2f34302d3438203d3e20323136323939.roa (hash: 0JNkK9KnjI4w2zV41Uw2bLOQhv0TkTdwPhPOAejMVJo=) 2: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: cFxWp20cVK0UfiJxxcLtUOXevD3OgB7dMefIF5hBHOk=) 3: 326131343a373538303a393130303a3a2f34302d3438203d3e20323136323939.roa (hash: c4wfh1kOphA8Axvw6+dnj3lAut4b1kpMpQW/rZEnV+o=) 4: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: Gd+8Sk93eYphAIcnhe/QMzE+SMO6S+djclWycbFhUe4=) 5: 326131343a373538303a393030303a3a2f34302d3438203d3e20323134363433.roa (hash: TpBOht4fHdBbgzn8V6oN1sv1lzMWI2nPHKIFH/SJnHk=) 6: 326131343a373538303a393230303a3a2f34302d3438203d3e20313430393135.roa (hash: n6lsjVYHHKKKPmzUm98edFKQEZTX7R3BteBSBE3ZmTg=) 7: 326131343a373538303a393630303a3a2f34302d3438203d3e20313533333736.roa (hash: a3qLcUPi+RQppEqo978zrfnO/2oaV9TKnigMH0wuHZQ=) 8: 326131343a373538303a393130303a3a2f34302d3438203d3e20323031333836.roa (hash: HGfpWKFgSmhSbJJ0S3ZdUrJxu8/156bUgg5vlqYKRis=) 9: 326131343a373538303a393430303a3a2f33392d3438203d3e20313430393135.roa (hash: mVqYPHXZFgCW00Y2ej0uNLFZlmcciaFr8mPxKhhXZIs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 03:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c9:8d:cd:05:f1:8a:22:32:42:aa:ef:1e:72:46:ed:38:87:a4:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Aug 23 00:18:06 2025 GMT Not After : Aug 24 03:02:06 2025 GMT Subject: CN=F95A438299598D0C4DFEE08B896CE4459062B5B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:30:06:69:f1:e4:0c:53:8c:bb:62:9b:c9:7a: ce:b0:ed:91:f4:49:4c:eb:81:27:de:bb:2b:01:27: 64:59:6c:c4:47:6d:82:3f:77:7a:e5:0c:a8:67:10: ee:3e:eb:92:99:60:50:5e:76:88:1d:25:e9:f4:ec: 11:66:15:49:19:1d:9b:38:74:3c:b2:ba:3f:a8:3c: 0f:65:b9:7f:41:40:0c:db:11:24:fd:51:08:73:89: 2d:fa:6c:e6:fc:f2:0f:36:fb:72:52:62:06:46:68: 84:74:36:7f:2d:98:cf:0c:a6:54:15:86:e3:4c:20: 3c:05:18:8a:e0:98:cd:45:70:62:e4:46:eb:52:83: ff:89:95:6e:d2:2c:32:11:ad:8d:20:c0:03:f0:38: c1:17:f0:c0:0e:48:49:39:92:54:b9:b7:1e:e0:6c: f3:3a:8c:ed:ad:a9:4f:59:aa:1c:0c:ab:00:e0:43: 28:db:d0:d8:64:74:c7:60:6e:6c:0b:45:c8:9d:f7: a0:92:46:14:cd:0f:c4:1a:82:a0:a9:be:88:38:ba: 9f:d1:14:3c:de:c6:0b:3b:53:30:c2:f8:26:93:12: e2:75:3a:05:dc:c1:4e:08:ed:73:a1:dd:01:ec:99: 25:a5:19:51:67:86:a0:ce:5b:47:ae:b1:ff:26:14: 41:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5A:43:82:99:59:8D:0C:4D:FE:E0:8B:89:6C:E4:45:90:62:B5:B6 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c6:8a:27:39:6b:85:93:b7:06:7f:2d:3a:ba:c3:f3:83:16: b6:53:c4:cd:54:e7:62:86:a3:35:d9:21:54:89:95:92:d4:2e: 6b:49:46:32:4a:a9:8e:47:32:9d:72:3e:9a:41:c9:ef:35:ea: bc:0c:2e:12:32:79:b8:1a:e8:e2:d2:ad:7d:7f:e0:97:74:5f: 27:f9:50:e3:6a:81:16:c6:a0:b7:fc:a7:5d:e6:39:be:cc:2b: 68:e1:c9:d1:2e:3a:17:54:5d:98:62:90:c4:61:a1:87:fd:2d: a0:cf:59:04:28:7c:e5:c0:00:95:e6:0b:7a:52:ee:2a:a1:6c: 55:d8:3f:5f:c3:e1:e9:00:08:80:82:15:78:e9:ba:33:70:29: 57:53:93:c1:54:2d:38:43:5c:f6:ab:7f:de:cc:aa:95:a5:da: 3c:9f:b1:ae:85:db:d8:e6:8e:1e:55:53:52:9b:de:26:36:3f: 21:03:79:b9:36:a9:1a:68:69:4c:85:1e:f6:77:8a:4a:e7:fb: e8:f0:33:10:74:d0:4f:0f:d5:f6:a6:41:db:bf:8e:98:1c:bc: 0f:95:7e:27:40:9f:46:d2:00:f3:3b:99:e8:55:51:be:b2:9b: 96:e3:17:a6:4a:e1:17:79:a2:3f:26:fc:06:bf:10:41:d2:4f: 19:7a:f7:54 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBcmNzQXxiiIyQqrvHnJG7TiHpBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNTA4MjMwMDE4MDZaFw0yNTA4MjQwMzAyMDZaMDMxMTAvBgNV BAMTKEY5NUE0MzgyOTk1OThEMEM0REZFRTA4Qjg5NkNFNDQ1OTA2MkI1QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6MAZp8eQMU4y7YpvJes6w7ZH0 SUzrgSfeuysBJ2RZbMRHbYI/d3rlDKhnEO4+65KZYFBedogdJen07BFmFUkZHZs4 dDyyuj+oPA9luX9BQAzbEST9UQhziS36bOb88g82+3JSYgZGaIR0Nn8tmM8MplQV huNMIDwFGIrgmM1FcGLkRutSg/+JlW7SLDIRrY0gwAPwOMEX8MAOSEk5klS5tx7g bPM6jO2tqU9ZqhwMqwDgQyjb0NhkdMdgbmwLRcid96CSRhTND8QagqCpvog4up/R FDzexgs7UzDC+CaTEuJ1OgXcwU4I7XOh3QHsmSWlGVFnhqDOW0eusf8mFEFRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU+VpDgplZjQxN/uCLiWzkRZBitbYwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCZxoon OWuFk7cGfy06usPzgxa2U8TNVOdihqM12SFUiZWS1C5rSUYySqmORzKdcj6aQcnv Neq8DC4SMnm4Guji0q19f+CXdF8n+VDjaoEWxqC3/Kdd5jm+zCto4cnRLjoXVF2Y YpDEYaGH/S2gz1kEKHzlwACV5gt6Uu4qoWxV2D9fw+HpAAiAghV46bozcClXU5PB VC04Q1z2q3/ezKqVpdo8n7GuhdvY5o4eVVNSm94mNj8hA3m5NqkaaGlMhR72d4pK 5/vo8DMQdNBPD9X2pkHbv46YHLwPlX4nQJ9G0gDzO5noVVG+spuW4xemSuEXeaI/ JvwGvxBB0k8ZevdU -----END CERTIFICATE-----Generated at Sat Aug 23 17:36:50 2025 by rpki-client