$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft File: 41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft (raw, json) Hash identifier: SXlRTBqgoD5HBDbcP3MbX0NHkOmrYvnr3JVNLZh/P9U= Subject key identifier: 2B:B3:68:C2:F9:95:EB:37:09:BB:28:AE:F7:E9:F3:97:56:0D:21:CB Authority key identifier: 41:C6:B5:56:7A:DB:76:46:22:2A:1B:9F:1A:A7:03:8F:0C:2D:4B:4B Certificate issuer: /CN=41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B Certificate serial: 78237B82FDC061528174DFCB33A59818750EE067 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft Manifest number: 0157 Signing time: Sun 29 Jun 2025 15:12:50 +0000 Manifest this update: Sun 29 Jun 2025 15:07:50 +0000 Manifest next update: Mon 30 Jun 2025 16:47:50 +0000 Files and hashes: 1: 326131343a373538343a323030303a3a2f34342d3438203d3e20323134343531.roa (hash: TvKEkNYj4nNFZRmfcRKXhCgzG3ePxJK2Myah2LEVKqU=) 2: 41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl (hash: 2PPke58EPYdGCW/8F5f1NLZJdZpeSeu7IxFYuKhyqjI=) 3: 326131343a373538353a3a2f33342d3438203d3e20323134343531.roa (hash: yjNthGbbmW0Ge+31mmqVYbuaafw7Gi25y1PPXI63utw=) 4: 326131343a373538343a326630303a3a2f34302d3430203d3e20323134343531.roa (hash: BVEufTN1j/5/3JlAtiBF76psjVuWYELIUZLMoB7yQqo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:23:7b:82:fd:c0:61:52:81:74:df:cb:33:a5:98:18:75:0e:e0:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B Validity Not Before: Jun 29 15:07:50 2025 GMT Not After : Jun 30 16:47:50 2025 GMT Subject: CN=2BB368C2F995EB3709BB28AEF7E9F397560D21CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:89:09:98:83:50:29:72:30:9c:26:e5:e9:f3: 15:2d:81:1f:84:12:71:cf:32:fa:1a:22:0c:d6:0e: 4c:0f:6a:43:c3:e4:43:a3:d6:f7:48:2d:b3:62:e5: 76:5f:39:3f:d9:ae:f2:26:50:60:b0:6c:d8:77:c8: a9:f1:ef:e3:6a:02:8a:df:f9:e2:cf:d4:8c:d4:43: 35:00:bc:11:16:03:c5:4c:07:83:c5:b5:5a:c6:c0: b5:ca:b2:7d:eb:55:40:18:9e:36:ec:da:85:9a:68: 7a:04:50:de:79:c8:4a:de:7b:6c:87:d6:b4:17:4c: d6:83:4d:9e:52:a8:64:b2:cb:67:09:d3:7e:15:65: 4d:a8:67:97:4b:5e:32:1f:89:f0:1c:de:00:8c:db: 02:3f:5c:eb:98:82:55:67:90:da:ba:db:6b:fd:29: a3:40:3c:2f:b9:58:4a:3e:12:de:f6:25:b6:ae:05: bc:ab:98:4a:5a:92:af:2f:99:80:25:52:2b:0e:43: 60:e9:e3:31:59:22:71:d8:e7:d3:4f:15:bb:22:ac: 5a:ac:f1:f2:26:94:f0:24:6b:44:b7:91:c1:ac:20: 3d:08:eb:f1:f7:f4:71:d3:8a:be:88:59:3d:6d:3a: 90:fa:e3:94:25:9a:92:37:f2:85:db:74:07:bb:04: 99:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B3:68:C2:F9:95:EB:37:09:BB:28:AE:F7:E9:F3:97:56:0D:21:CB X509v3 Authority Key Identifier: keyid:41:C6:B5:56:7A:DB:76:46:22:2A:1B:9F:1A:A7:03:8F:0C:2D:4B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:e9:1b:f9:ea:1a:68:27:1d:e7:69:ce:8e:26:2c:89:52:ff: b0:90:49:8a:66:e7:b2:fc:8b:04:36:0d:24:d8:39:0e:aa:b1: c2:fd:35:6a:b8:49:90:6d:40:d5:af:f4:6e:e9:29:98:08:a6: ff:63:ba:aa:fb:ff:60:c0:08:3c:93:9f:df:a6:f1:77:0c:f7: 43:67:9a:c0:7a:f8:b4:4c:a2:d5:66:c8:24:c5:37:a0:dd:a3: 41:b6:1f:f9:06:0a:ed:3b:39:55:08:8a:09:61:19:4b:02:df: ad:d8:68:b5:8f:69:45:69:a8:90:14:f8:27:79:6a:fb:50:0f: 9f:42:f3:f4:51:1c:3b:de:c1:63:ec:1f:f7:61:03:42:b4:88: a7:f9:8c:ef:e7:a7:bd:54:a5:88:6c:9b:9f:b5:2d:c5:0f:17: 3b:6e:4e:ee:b2:46:c1:5e:b8:a5:87:5c:86:1b:1e:60:b5:d6: a6:07:08:b0:62:c6:3a:07:10:29:d4:cc:1e:06:e5:1b:d2:68: 94:7a:49:4a:60:f6:1f:d6:ab:dc:99:ef:41:07:61:49:72:9b: 29:94:f9:65:5b:98:8f:41:6a:4c:ca:8f:43:2b:50:e5:7d:50: 68:8b:7b:01:0c:37:00:08:74:e2:86:a2:44:5a:f4:e8:8f:f4: a6:cc:0b:f0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUeCN7gv3AYVKBdN/LM6WYGHUO4GcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFDNkI1NTY3QURCNzY0NjIyMkExQjlGMUFBNzAzOEYw QzJENEI0QjAeFw0yNTA2MjkxNTA3NTBaFw0yNTA2MzAxNjQ3NTBaMDMxMTAvBgNV BAMTKDJCQjM2OEMyRjk5NUVCMzcwOUJCMjhBRUY3RTlGMzk3NTYwRDIxQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkiQmYg1ApcjCcJuXp8xUtgR+E EnHPMvoaIgzWDkwPakPD5EOj1vdILbNi5XZfOT/ZrvImUGCwbNh3yKnx7+NqAorf +eLP1IzUQzUAvBEWA8VMB4PFtVrGwLXKsn3rVUAYnjbs2oWaaHoEUN55yEree2yH 1rQXTNaDTZ5SqGSyy2cJ034VZU2oZ5dLXjIfifAc3gCM2wI/XOuYglVnkNq622v9 KaNAPC+5WEo+Et72JbauBbyrmEpakq8vmYAlUisOQ2Dp4zFZInHY59NPFbsirFqs 8fImlPAka0S3kcGsID0I6/H39HHTir6IWT1tOpD645QlmpI38oXbdAe7BJkdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUK7NowvmV6zcJuyiu9+nzl1YNIcswHwYDVR0j BBgwFoAUQca1VnrbdkYiKhufGqcDjwwtS0swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl OTUwLzEvNDFDNkI1NTY3QURCNzY0NjIyMkExQjlGMUFBNzAzOEYwQzJENEI0Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MUM2QjU1NjdBREI3NjQ2MjIyQTFCOUYx QUE3MDM4RjBDMkQ0QjRCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyY2Y4YmE3LWNiMDItNDE4Yi1iZTA0LTRkOWYzYTA3ZTk1MC8xLzQxQzZCNTU2 N0FEQjc2NDYyMjJBMUI5RjFBQTcwMzhGMEMyRDRCNEIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDI6Rv5 6hpoJx3nac6OJiyJUv+wkEmKZuey/IsENg0k2DkOqrHC/TVquEmQbUDVr/Ru6SmY CKb/Y7qq+/9gwAg8k5/fpvF3DPdDZ5rAevi0TKLVZsgkxTeg3aNBth/5BgrtOzlV CIoJYRlLAt+t2Gi1j2lFaaiQFPgneWr7UA+fQvP0URw73sFj7B/3YQNCtIin+Yzv 56e9VKWIbJuftS3FDxc7bk7uskbBXrilh1yGGx5gtdamBwiwYsY6BxAp1MweBuUb 0miUeklKYPYf1qvcme9BB2FJcpsplPllW5iPQWpMyo9DK1DlfVBoi3sBDDcACHTi hqJEWvToj/SmzAvw -----END CERTIFICATE-----Generated at Sun Jun 29 22:08:40 2025 by rpki-client