$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: uzvhmrFPaYvj6U4rEed55wSqbQAsvfGKtdz9WdPVoHk= Subject key identifier: 2A:BD:34:46:20:A2:D2:A2:BE:A2:06:18:11:D3:5C:22:29:E6:14:3C Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 11571340A25137CC0729A694BD64142E7301406A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 040A Signing time: Sat 23 Aug 2025 10:27:33 +0000 Manifest this update: Sat 23 Aug 2025 10:22:33 +0000 Manifest next update: Sun 24 Aug 2025 11:15:33 +0000 Files and hashes: 1: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: 67hzJ7+qEviKc+JKiq3KV4OqZ4fSU1BU+NXzASboCBg=) 2: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=) 3: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=) 4: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: YyMBgTPVms4MPnbkUVc7TpGwl6ukB7kzc/uAePl3SRA=) 5: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: 8TO+ve7jJct708TXqqhBBn3/6oawjMzmGtHcbVylQVE=) 6: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: nmhaoLhqUBAnDccEuteaqmwjmYCIqjMWJmqWnwMVbc8=) 7: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: OZBNVOvtp3V7O1L8kF6JcTp/niAHFDMwWI3RV/AoyZY=) 8: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: T+9QQX64dOYanRzHKI9rhWnUyaZt9GgRQXrvhvIBrgs=) 9: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: 2/naNLsZWsKbctisH+91/rgvttkXh//515D4Dxt3bfg=) 10: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: g8GfxZyUsq5sAHB2Ct+7Z9GS7IIVHVNG2gaO8plmjSA=) 11: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: yDRyc1h8O+mXAEgAFoITsNpFI2VU0vygznR0PJDNh0M=) 12: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: NZcAKMAEu2FS5Zqz0hBFL7Zpu38dDC8QIhg4PJE0Lh4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:57:13:40:a2:51:37:cc:07:29:a6:94:bd:64:14:2e:73:01:40:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Aug 23 10:22:33 2025 GMT Not After : Aug 24 11:15:33 2025 GMT Subject: CN=2ABD344620A2D2A2BEA2061811D35C2229E6143C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:71:79:40:d7:8f:50:d0:65:d0:0a:47:e0:94: ab:1f:23:08:4b:2d:c3:dd:88:da:6c:72:a6:86:e7: 82:a7:cc:22:48:2e:ee:ef:3a:0b:91:9d:2e:27:23: ae:59:82:47:e3:1c:86:2b:eb:0d:59:b4:44:3f:55: 9f:70:cb:52:4a:51:5e:07:b1:ae:25:81:a1:f4:91: 83:e7:6c:cf:e4:b9:ea:39:cf:da:d3:56:d1:2d:74: bb:50:8b:15:9a:79:d8:b7:7a:c0:c5:30:a2:01:d0: 15:99:a9:a7:28:59:c7:46:df:ba:ca:9d:99:aa:e2: 94:77:32:aa:68:5c:3c:6f:94:85:66:8b:ef:9d:dd: 58:76:7d:a9:0c:da:a0:17:ed:fa:0d:7b:bc:09:57: 15:07:9b:24:bd:78:09:54:06:67:bb:c4:09:1f:60: 73:fc:dc:29:a9:13:98:d5:a8:a2:ef:d4:08:f1:48: 19:ba:4a:7b:33:e5:eb:68:5f:66:5d:2e:89:ce:2f: 42:ca:7d:da:53:0d:21:d3:28:5f:ff:ff:e6:84:25: 91:44:7d:a2:ba:56:57:45:2b:9d:ca:78:6a:5b:ff: 66:ae:35:ca:d7:32:e9:3f:5d:da:38:0c:17:61:41: 80:3b:24:35:86:c3:75:0d:7c:66:44:44:5b:19:da: 6e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BD:34:46:20:A2:D2:A2:BE:A2:06:18:11:D3:5C:22:29:E6:14:3C X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:e2:8d:52:15:be:6f:cc:dc:72:63:27:c7:8e:bc:34:20:e9: 9b:2e:51:81:79:1f:91:33:71:d8:cb:e7:53:54:97:ed:bd:1b: 44:8b:b0:87:2a:39:95:a1:ea:6d:7f:42:01:f0:d6:a8:c0:d7: b7:be:de:c6:5a:4d:5d:e7:aa:6b:2c:ec:9e:c9:24:75:b7:0d: 2c:81:c8:2b:a7:bc:2b:23:66:ec:5b:82:c4:29:b7:08:fb:55: 2f:bf:44:e9:f1:41:09:2f:7d:8e:88:e5:84:7d:9b:73:b2:24: f8:4e:3d:d3:50:01:af:fd:17:3b:89:d2:d2:26:29:58:1b:7b: 5f:3c:c0:3c:61:b6:ae:44:3b:1a:33:67:ac:ef:c7:ab:13:1e: 44:ab:ba:71:32:1f:71:f4:63:0f:a4:4b:f2:fc:9c:20:48:75: 92:b2:eb:d5:1a:97:d1:b7:7b:99:ac:ea:17:ea:22:2c:40:5f: 7e:2d:26:ab:4a:e4:dd:97:03:b4:71:f8:a8:85:75:c8:7b:20: 37:fc:c2:21:6f:ba:27:a9:ec:4e:ab:81:37:38:38:e7:7d:5d: cf:89:29:d9:87:cc:98:af:ff:c4:0d:32:e4:4d:4e:70:72:63: 8e:fb:88:9c:bb:33:73:ed:f7:1b:67:bd:0e:6c:cf:1e:e6:5a: 99:ce:54:fd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEVcTQKJRN8wHKaaUvWQULnMBQGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNTA4MjMxMDIyMzNaFw0yNTA4MjQxMTE1MzNaMDMxMTAvBgNV BAMTKDJBQkQzNDQ2MjBBMkQyQTJCRUEyMDYxODExRDM1QzIyMjlFNjE0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdcXlA149Q0GXQCkfglKsfIwhL LcPdiNpscqaG54KnzCJILu7vOguRnS4nI65ZgkfjHIYr6w1ZtEQ/VZ9wy1JKUV4H sa4lgaH0kYPnbM/kueo5z9rTVtEtdLtQixWaedi3esDFMKIB0BWZqacoWcdG37rK nZmq4pR3MqpoXDxvlIVmi++d3Vh2fakM2qAX7foNe7wJVxUHmyS9eAlUBme7xAkf YHP83CmpE5jVqKLv1AjxSBm6Snsz5etoX2ZdLonOL0LKfdpTDSHTKF///+aEJZFE faK6VldFK53KeGpb/2auNcrXMuk/Xdo4DBdhQYA7JDWGw3UNfGZERFsZ2m6NAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUKr00RiCi0qK+ogYYEdNcIinmFDwwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuKNUhW+b8zccmMnx468 NCDpmy5RgXkfkTNx2MvnU1SX7b0bRIuwhyo5laHqbX9CAfDWqMDXt77exlpNXeeq ayzsnskkdbcNLIHIK6e8KyNm7FuCxCm3CPtVL79E6fFBCS99jojlhH2bc7Ik+E49 01ABr/0XO4nS0iYpWBt7XzzAPGG2rkQ7GjNnrO/HqxMeRKu6cTIfcfRjD6RL8vyc IEh1krLr1RqX0bd7mazqF+oiLEBffi0mq0rk3ZcDtHH4qIV1yHsgN/zCIW+6J6ns TquBNzg4531dz4kp2YfMmK//xA0y5E1OcHJjjvuInLszc+33G2e9DmzPHuZamc5U /Q== -----END CERTIFICATE-----Generated at Sat Aug 23 14:03:38 2025 by rpki-client