$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json) Hash identifier: Y/L3eTebj7DbS4a0Vzx943gT8trmvbDF2Wbw3Ig1fgw= Subject key identifier: A7:07:7B:9A:97:8A:92:8D:47:AA:27:6C:3A:69:45:7C:7D:5E:C0:E8 Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Certificate serial: 05C05A42672CB070728706AFBE5F9DF3E05728FD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft Manifest number: EC Signing time: Sat 23 Aug 2025 03:34:08 +0000 Manifest this update: Sat 23 Aug 2025 03:29:08 +0000 Manifest next update: Sun 24 Aug 2025 06:40:08 +0000 Files and hashes: 1: 326131343a373538303a6431303a3a2f34342d3434203d3e20313939333130.roa (hash: d85Du7DNvyLWzCRKR6UAK4BxtZR8aY0O/ltb7NM7kI0=) 2: 326131343a373538303a6432303a3a2f34342d3438203d3e20313939333130.roa (hash: MgcoEmS08l4kBvePsItue5HuyPIuQGylETDDY3NTtWk=) 3: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: Chjc01veaJliAKL+T5rsr5i5WGOA0qiXUb+A8RQ5lsc=) 4: 326131343a373538303a6430303a3a2f34342d3434203d3e20313939333130.roa (hash: aLNGjeKxhB+lb52UO94MmUGLP8+twH+NGpyj/wZMn3g=) 5: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: u/JR7/M6BcKICssdDR7j/sPwWvJTPX2G+FFLBgXrUyU=) 6: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: jIRO9mS3d6dPjcdQf+OkOGr/dNujGogdrEuPEpLgZJI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 06:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c0:5a:42:67:2c:b0:70:72:87:06:af:be:5f:9d:f3:e0:57:28:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Validity Not Before: Aug 23 03:29:08 2025 GMT Not After : Aug 24 06:40:08 2025 GMT Subject: CN=A7077B9A978A928D47AA276C3A69457C7D5EC0E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e8:f5:b9:23:39:ee:52:b3:24:99:c3:0c:d6: c7:96:96:b2:47:e7:9e:91:c2:6b:74:cd:4f:75:0f: 8f:8a:42:74:3d:e1:eb:7e:0f:71:8f:41:bd:1d:f4: 6a:58:e4:ca:7b:ab:f2:72:06:7b:d0:3e:7f:5d:29: 60:43:9c:cb:c2:45:fa:2b:af:40:2a:d3:ca:aa:59: 93:2e:61:30:ec:92:42:34:51:63:84:f9:a9:45:af: 93:64:85:15:aa:3d:e7:90:53:4e:19:f2:19:6a:9f: c1:22:30:fa:62:99:dc:bd:a2:2e:17:02:34:45:b2: 9b:e7:a6:4a:0a:24:91:f3:a4:37:08:ea:a5:4f:e4: 2d:b0:19:3e:d2:7e:27:fc:4c:ac:5a:16:c8:1d:03: ba:3b:c5:ca:30:f4:4f:f2:b6:8d:fe:a4:b8:41:b5: 2c:c5:08:7e:7f:5b:de:8c:dc:e3:60:72:b6:4b:e2: 45:15:5f:07:f1:ed:05:21:e8:50:6c:3c:b8:6f:47: 36:0a:16:3f:ef:81:99:d3:f6:18:50:b1:6e:73:a8: 3f:11:d9:e0:3c:38:2c:ef:35:92:6a:d6:39:d1:e7: 90:5f:31:9b:b1:47:e6:96:44:c9:07:5a:b0:c3:d4: 6a:ea:e3:12:83:38:c6:b5:e6:54:7d:10:bf:ad:5a: 53:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:07:7B:9A:97:8A:92:8D:47:AA:27:6C:3A:69:45:7C:7D:5E:C0:E8 X509v3 Authority Key Identifier: keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:dd:50:81:e4:a7:08:65:ae:63:08:ff:7f:49:2f:23:1e:af: e7:6b:be:07:60:f3:5a:4c:cc:79:59:93:c0:4e:27:94:fa:02: 51:55:15:b8:87:ee:ad:4a:39:c7:3a:7c:b6:3f:64:3c:7d:cf: 08:a7:a1:c9:9c:28:72:f5:5a:9f:80:ef:46:92:ed:7f:72:59: d7:1c:97:74:57:14:34:47:77:4f:50:3c:b9:f1:59:a4:cd:a6: cc:a2:2a:0d:79:87:0e:64:41:99:83:33:2d:cb:61:63:8d:78: 56:c4:eb:17:02:f8:5d:4d:25:6e:6b:03:16:2e:de:a1:84:dd: 38:d0:06:59:3e:83:c9:5a:f9:35:57:6d:78:93:2f:1b:a6:dd: 2d:42:9e:53:b0:07:ac:cf:51:2d:67:9e:6c:d1:04:3a:25:45: 15:19:2d:1d:9b:cb:2f:dc:58:6f:1e:c6:32:09:29:1c:f3:54: 98:2e:36:ca:8a:2d:0b:ce:be:67:ef:7c:a0:7b:14:c5:81:49: 83:80:37:d4:2f:f2:17:27:bd:69:10:52:8d:6f:3c:39:d6:f2: 09:30:97:3f:18:3e:a5:bd:3e:3d:e0:b8:20:35:3b:ab:c5:35: f2:7c:5f:70:27:c4:28:9a:a6:db:0c:3a:06:c2:3f:31:75:95: ea:03:74:54 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBcBaQmcssHByhwavvl+d8+BXKP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUw RjgxOTZFQjAeFw0yNTA4MjMwMzI5MDhaFw0yNTA4MjQwNjQwMDhaMDMxMTAvBgNV BAMTKEE3MDc3QjlBOTc4QTkyOEQ0N0FBMjc2QzNBNjk0NTdDN0Q1RUMwRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP6PW5IznuUrMkmcMM1seWlrJH 556Rwmt0zU91D4+KQnQ94et+D3GPQb0d9GpY5Mp7q/JyBnvQPn9dKWBDnMvCRfor r0Aq08qqWZMuYTDskkI0UWOE+alFr5NkhRWqPeeQU04Z8hlqn8EiMPpimdy9oi4X AjRFspvnpkoKJJHzpDcI6qVP5C2wGT7Sfif8TKxaFsgdA7o7xcow9E/yto3+pLhB tSzFCH5/W96M3ONgcrZL4kUVXwfx7QUh6FBsPLhvRzYKFj/vgZnT9hhQsW5zqD8R 2eA8OCzvNZJq1jnR55BfMZuxR+aWRMkHWrDD1Grq4xKDOMa15lR9EL+tWlPfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUpwd7mpeKko1HqidsOmlFfH1ewOgwHwYDVR0j BBgwFoAUE+GpmPd9fB/ylVwLaI/r/g+BluswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE1NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFm YWIyLzEvMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUwRjgxOTZFQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xM0UxQTk5OEY3N0Q3QzFGRjI5NTVDMEI2 ODhGRUJGRTBGODE5NkVCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAxNTc2NDdjLTkxZDYtNGEwNC04YTkxLWQxNTM4NWQxZmFiMi8xLzEzRTFBOTk4 Rjc3RDdDMUZGMjk1NUMwQjY4OEZFQkZFMEY4MTk2RUIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAI3VCB 5KcIZa5jCP9/SS8jHq/na74HYPNaTMx5WZPATieU+gJRVRW4h+6tSjnHOny2P2Q8 fc8Ip6HJnChy9VqfgO9Gku1/clnXHJd0VxQ0R3dPUDy58VmkzabMoioNeYcOZEGZ gzMty2FjjXhWxOsXAvhdTSVuawMWLt6hhN040AZZPoPJWvk1V214ky8bpt0tQp5T sAesz1EtZ55s0QQ6JUUVGS0dm8sv3FhvHsYyCSkc81SYLjbKii0Lzr5n73ygexTF gUmDgDfUL/IXJ71pEFKNbzw51vIJMJc/GD6lvT494LggNTurxTXyfF9wJ8Qomqbb DDoGwj8xdZXqA3RU -----END CERTIFICATE-----Generated at Sat Aug 23 19:23:52 2025 by rpki-client