$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft File: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft (raw, json) Hash identifier: H2v3HGUm4lWrG/YMeajHBITFj2va/gVtocZbn/rGuqM= Subject key identifier: FD:F9:78:3A:AD:C2:6E:E3:DC:50:59:B7:A8:E9:E6:22:E2:DF:30:E8 Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3 Certificate issuer: /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3 Certificate serial: 76F462D0289FED153CEDFDAA09143AF2609FA16B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft Manifest number: 0102 Signing time: Sat 23 Aug 2025 02:00:48 +0000 Manifest this update: Sat 23 Aug 2025 01:55:48 +0000 Manifest next update: Sun 24 Aug 2025 03:04:48 +0000 Files and hashes: 1: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (hash: 54w2F3M9c9ZMYqej/uVTYoc9lVaBw0QpLSZEW7mlB7o=) 2: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (hash: 9+L5QD9C8ye40Ikj2zBEBBChEOO2tsV/W1In9gyAruM=) 3: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl (hash: RiwTECiyR20DIPAAu/UF2git12HtSxMd+dmtUHFGpto=) 4: AS215296.asa (hash: ZUhznpJKsAa9LaDOPMe8wN6G79cK71SOYf6WHfqiJOY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:f4:62:d0:28:9f:ed:15:3c:ed:fd:aa:09:14:3a:f2:60:9f:a1:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3 Validity Not Before: Aug 23 01:55:48 2025 GMT Not After : Aug 24 03:04:48 2025 GMT Subject: CN=FDF9783AADC26EE3DC5059B7A8E9E622E2DF30E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2d:11:2f:74:47:22:ec:67:3c:5c:dc:5f:4b: d9:26:19:54:76:cd:59:4a:5b:41:f7:1c:54:67:a1: df:94:d7:3b:f6:c2:78:9f:89:2e:10:53:54:3e:ec: 32:43:59:86:d8:7e:45:b3:ad:f4:dd:53:03:52:8f: e3:24:45:de:0e:2c:ec:93:49:ef:4c:5d:0a:3f:90: 5f:58:77:d6:8a:2d:db:ab:da:8f:d0:40:1a:f3:cf: df:42:63:8e:ed:06:de:22:68:71:4b:be:b0:21:34: 41:a6:e6:e4:4a:0b:11:d9:24:94:95:c6:3a:83:6d: b4:5c:d9:e9:60:08:fa:f7:df:6d:11:12:5e:28:97: cb:a6:80:d3:d7:28:88:22:d5:ce:a4:81:fa:63:74: c0:43:d7:45:c3:99:24:76:be:7c:5f:47:ff:a2:26: 38:c3:34:b1:5e:6a:73:db:e3:b2:7f:89:0b:43:23: ab:df:14:ba:e0:d4:8f:d1:a0:c7:d4:dd:87:6a:24: 3d:68:8e:a0:aa:b7:92:d0:ec:d7:3c:8c:fc:52:8b: 9c:e3:58:03:6f:87:5a:cd:0c:5d:1a:dc:eb:d2:73: 7a:bd:aa:c3:04:14:33:2d:76:04:6e:5d:e9:b7:f4: 09:10:98:2d:13:dd:7f:1f:34:02:84:46:46:83:c4: 9b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F9:78:3A:AD:C2:6E:E3:DC:50:59:B7:A8:E9:E6:22:E2:DF:30:E8 X509v3 Authority Key Identifier: keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:84:a6:d5:da:7a:94:6c:1e:fd:2f:e4:fe:b1:10:07:26:d4: ea:07:7e:10:86:20:c3:e7:98:00:80:e7:9d:ae:dd:bf:17:4e: 39:a1:43:38:2a:f3:17:ba:41:41:6a:63:61:d8:f3:fc:5c:9c: d3:8b:ac:48:f4:14:5e:84:84:a2:96:58:74:17:93:18:43:58: f1:c8:2e:82:96:ab:4b:af:da:5c:d4:d2:f9:08:62:17:71:51: 6c:95:59:47:ef:e4:80:a4:06:c1:72:8e:0b:6b:15:ad:6c:49: c9:79:94:ca:a3:e8:ac:72:04:bb:ae:62:f2:fb:58:2c:c8:3d: 81:6f:a3:8d:21:c5:c8:5e:59:90:3a:f0:11:31:40:60:cc:08: 9c:10:83:7f:25:6a:44:f4:e0:34:fd:84:68:5d:a4:df:d3:15: 52:b5:d4:07:9e:89:94:6c:08:e7:92:a6:64:b6:94:df:34:c0: 2f:7b:ae:e1:3c:4f:f0:24:13:41:60:32:20:ca:95:03:9b:d6: b6:30:51:a3:9f:86:18:3e:08:bd:a8:d3:9c:18:f2:65:be:b8: be:35:a5:57:3c:63:43:90:a3:09:98:f7:2f:42:cc:56:4b:08: 82:ad:c2:78:85:5f:59:e1:60:97:8e:19:5f:a8:52:70:46:a8: d9:62:3d:cb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdvRi0Cif7RU87f2qCRQ68mCfoWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4ZDdkYzk3NzliMjc4MTVlYmI1YzNmNWZjZjA3Y2M1 ODM3MDhiMzAeFw0yNTA4MjMwMTU1NDhaFw0yNTA4MjQwMzA0NDhaMDMxMTAvBgNV BAMTKEZERjk3ODNBQURDMjZFRTNEQzUwNTlCN0E4RTlFNjIyRTJERjMwRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYLREvdEci7Gc8XNxfS9kmGVR2 zVlKW0H3HFRnod+U1zv2wnifiS4QU1Q+7DJDWYbYfkWzrfTdUwNSj+MkRd4OLOyT Se9MXQo/kF9Yd9aKLdur2o/QQBrzz99CY47tBt4iaHFLvrAhNEGm5uRKCxHZJJSV xjqDbbRc2elgCPr3320REl4ol8umgNPXKIgi1c6kgfpjdMBD10XDmSR2vnxfR/+i JjjDNLFeanPb47J/iQtDI6vfFLrg1I/RoMfU3YdqJD1ojqCqt5LQ7Nc8jPxSi5zj WANvh1rNDF0a3OvSc3q9qsMEFDMtdgRuXem39AkQmC0T3X8fNAKERkaDxJu9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/fl4Oq3CbuPcUFm3qOnmIuLfMOgwHwYDVR0j BBgwFoAUV419yXebJ4Feu1w/X88HzFg3CLMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWNhMjUzNTAtOWUzZi00NmUxLWFlMmItMWM2MWI2ZWE1 YWUyLzAvNTc4RDdEQzk3NzlCMjc4MTVFQkI1QzNGNUZDRjA3Q0M1ODM3MDhCMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Y0MTl5WGViSjRGZXUxd19YODhIekZn M0NMTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lY2EyNTM1MC05 ZTNmLTQ2ZTEtYWUyYi0xYzYxYjZlYTVhZTIvMC81NzhEN0RDOTc3OUIyNzgxNUVC QjVDM0Y1RkNGMDdDQzU4MzcwOEIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4Sm1dp6lGwe/S/k/rEQ BybU6gd+EIYgw+eYAIDnna7dvxdOOaFDOCrzF7pBQWpjYdjz/Fyc04usSPQUXoSE opZYdBeTGENY8cgugparS6/aXNTS+QhiF3FRbJVZR+/kgKQGwXKOC2sVrWxJyXmU yqPorHIEu65i8vtYLMg9gW+jjSHFyF5ZkDrwETFAYMwInBCDfyVqRPTgNP2EaF2k 39MVUrXUB56JlGwI55KmZLaU3zTAL3uu4TxP8CQTQWAyIMqVA5vWtjBRo5+GGD4I vajTnBjyZb64vjWlVzxjQ5CjCZj3L0LMVksIgq3CeIVfWeFgl44ZX6hScEao2WI9 yw== -----END CERTIFICATE-----Generated at Sat Aug 23 09:48:53 2025 by rpki-client