$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json) Hash identifier: MIZo7NuX10L1GZH6+j/E1jzcg7TJE0oU0dKTzn9cPpg= Subject key identifier: 23:89:0D:C3:6D:BD:32:93:BB:52:20:67:B3:85:8D:A2:CA:E3:52:DD Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Certificate serial: 271D50E3859BD32F8E8D45F643C225049D321533 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft Manifest number: A5 Signing time: Mon 30 Jun 2025 00:16:05 +0000 Manifest this update: Mon 30 Jun 2025 00:11:05 +0000 Manifest next update: Tue 01 Jul 2025 03:55:05 +0000 Files and hashes: 1: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: jIRO9mS3d6dPjcdQf+OkOGr/dNujGogdrEuPEpLgZJI=) 2: 326131343a373538303a6430303a3a2f34342d3434203d3e20313939333130.roa (hash: aLNGjeKxhB+lb52UO94MmUGLP8+twH+NGpyj/wZMn3g=) 3: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: InNL7zjCXQaAUcwGJSEBRgAXaLBQ9hIKuybOmOkcNIw=) 4: 326131343a373538303a6432303a3a2f34342d3438203d3e20313939333130.roa (hash: MgcoEmS08l4kBvePsItue5HuyPIuQGylETDDY3NTtWk=) 5: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: u/JR7/M6BcKICssdDR7j/sPwWvJTPX2G+FFLBgXrUyU=) 6: 326131343a373538303a6431303a3a2f34342d3434203d3e20313939333130.roa (hash: d85Du7DNvyLWzCRKR6UAK4BxtZR8aY0O/ltb7NM7kI0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 03:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:1d:50:e3:85:9b:d3:2f:8e:8d:45:f6:43:c2:25:04:9d:32:15:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Validity Not Before: Jun 30 00:11:05 2025 GMT Not After : Jul 1 03:55:05 2025 GMT Subject: CN=23890DC36DBD3293BB522067B3858DA2CAE352DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:88:74:89:0f:af:35:d5:59:4b:e8:33:92:0a: 39:25:85:f6:86:15:78:f4:bd:1f:ca:5e:23:25:e0: e5:6a:0c:d2:f7:73:12:8c:3a:b2:58:75:53:8d:a7: 63:54:5f:9b:fe:12:32:5a:81:cc:8d:7d:5d:d8:9e: 4c:10:57:37:fc:e9:5f:6f:d4:aa:e6:90:52:6e:73: d4:98:e3:d4:72:10:0f:31:49:b2:5a:1b:6e:22:ae: a9:18:18:b8:64:eb:90:01:f6:66:98:5d:95:f7:cb: d7:61:02:77:62:b7:04:d6:8a:c1:98:1c:88:af:0f: bd:97:17:5f:2a:a5:12:5e:bd:ad:d8:00:0b:44:cc: 6b:f5:6e:65:76:61:97:ba:20:54:c2:00:4b:f7:38: e0:02:88:8c:2d:4e:a6:49:44:8d:6e:8b:d3:c8:dc: 91:2b:54:62:d2:14:7e:d3:9f:0a:1a:9c:4e:bc:05: cf:bd:37:2a:97:42:a8:53:34:81:30:f5:ac:61:92: 81:64:cf:8c:ea:29:87:20:c7:f5:f5:6e:01:ce:59: 22:f2:23:d9:e2:8b:72:bc:64:71:ac:3c:b3:15:06: eb:7a:b4:50:fa:91:0b:17:4c:37:1a:a6:f1:0f:ad: 84:d9:c9:65:cd:86:44:8c:51:23:28:33:6a:c0:9c: ee:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:89:0D:C3:6D:BD:32:93:BB:52:20:67:B3:85:8D:A2:CA:E3:52:DD X509v3 Authority Key Identifier: keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:cf:27:6f:c1:cf:50:8e:4b:1e:cd:35:63:ac:aa:78:2a:4b: 52:c5:2d:37:a8:5a:04:a0:03:0b:10:21:cd:e2:47:8e:13:5e: 5a:35:12:26:b8:72:96:c0:1e:e2:72:8d:26:b0:87:cd:80:3b: 1c:38:67:40:8d:5b:e3:b5:21:94:a6:b9:3c:4b:5d:53:bd:5b: 6a:69:5a:46:00:46:74:4d:44:e8:fc:b4:5d:56:a7:44:fe:d2: c3:44:f7:e3:d1:44:d2:18:6c:6a:77:f8:7f:c4:76:38:d5:c1: 7b:de:d6:3b:10:d4:8b:3c:00:12:30:b6:5e:bc:9b:ee:bf:f9: 9b:ef:a1:3a:f2:05:0a:c6:8c:c7:8b:87:1f:cf:b8:2e:72:f6: b4:66:11:50:52:d0:4c:63:01:c9:fd:89:27:30:b7:dc:f9:1f: 11:c8:51:4a:e2:81:23:52:ca:89:5c:03:03:ee:08:f6:4e:33: 12:1b:53:dc:e5:85:ae:cb:3e:0a:e8:83:7f:40:1d:c6:8e:38: 71:05:4f:d3:b5:5e:e4:6a:6b:2e:80:f6:8e:d7:e8:71:cb:e0: f0:62:04:b5:44:a8:ff:ed:df:dd:05:6f:00:64:e4:4e:78:33: f5:b8:bc:48:23:64:0b:9d:ab:9f:d9:96:b1:92:ad:64:c4:74: 9b:74:4a:c4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJx1Q44Wb0y+OjUX2Q8IlBJ0yFTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUw RjgxOTZFQjAeFw0yNTA2MzAwMDExMDVaFw0yNTA3MDEwMzU1MDVaMDMxMTAvBgNV BAMTKDIzODkwREMzNkRCRDMyOTNCQjUyMjA2N0IzODU4REEyQ0FFMzUyREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfiHSJD6811VlL6DOSCjklhfaG FXj0vR/KXiMl4OVqDNL3cxKMOrJYdVONp2NUX5v+EjJagcyNfV3YnkwQVzf86V9v 1KrmkFJuc9SY49RyEA8xSbJaG24irqkYGLhk65AB9maYXZX3y9dhAnditwTWisGY HIivD72XF18qpRJeva3YAAtEzGv1bmV2YZe6IFTCAEv3OOACiIwtTqZJRI1ui9PI 3JErVGLSFH7TnwoanE68Bc+9NyqXQqhTNIEw9axhkoFkz4zqKYcgx/X1bgHOWSLy I9nii3K8ZHGsPLMVBut6tFD6kQsXTDcapvEPrYTZyWXNhkSMUSMoM2rAnO7HAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUI4kNw229MpO7UiBns4WNosrjUt0wHwYDVR0j BBgwFoAUE+GpmPd9fB/ylVwLaI/r/g+BluswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE1NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFm YWIyLzEvMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUwRjgxOTZFQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xM0UxQTk5OEY3N0Q3QzFGRjI5NTVDMEI2 ODhGRUJGRTBGODE5NkVCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAxNTc2NDdjLTkxZDYtNGEwNC04YTkxLWQxNTM4NWQxZmFiMi8xLzEzRTFBOTk4 Rjc3RDdDMUZGMjk1NUMwQjY4OEZFQkZFMEY4MTk2RUIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBrzydv wc9QjksezTVjrKp4KktSxS03qFoEoAMLECHN4keOE15aNRImuHKWwB7ico0msIfN gDscOGdAjVvjtSGUprk8S11TvVtqaVpGAEZ0TUTo/LRdVqdE/tLDRPfj0UTSGGxq d/h/xHY41cF73tY7ENSLPAASMLZevJvuv/mb76E68gUKxozHi4cfz7gucva0ZhFQ UtBMYwHJ/YknMLfc+R8RyFFK4oEjUsqJXAMD7gj2TjMSG1Pc5YWuyz4K6IN/QB3G jjhxBU/TtV7kamsugPaO1+hxy+DwYgS1RKj/7d/dBW8AZOROeDP1uLxII2QLnauf 2Zaxkq1kxHSbdErE -----END CERTIFICATE-----Generated at Mon Jun 30 16:10:56 2025 by rpki-client