$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/3/33EDE0B0EE6D8AE9053E11C830DF759F85FB8157.mft File: 33EDE0B0EE6D8AE9053E11C830DF759F85FB8157.mft (raw, json) Hash identifier: SD3zBJw6ipc5eAXgiEvhj+cTYAb7B5nwXp9pNxkunKk= Subject key identifier: 16:66:2E:3A:05:CF:7E:B0:B2:0D:6E:50:25:28:F0:B0:0B:E7:3F:CC Authority key identifier: 33:ED:E0:B0:EE:6D:8A:E9:05:3E:11:C8:30:DF:75:9F:85:FB:81:57 Certificate issuer: /CN=33EDE0B0EE6D8AE9053E11C830DF759F85FB8157 Certificate serial: 246E7C2843548B4DB811FB0DA99B55AC0F5D1A9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/33EDE0B0EE6D8AE9053E11C830DF759F85FB8157.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/3/33EDE0B0EE6D8AE9053E11C830DF759F85FB8157.mft Manifest number: 07 Signing time: Sat 23 Aug 2025 15:21:41 +0000 Manifest this update: Sat 23 Aug 2025 15:16:41 +0000 Manifest next update: Sun 24 Aug 2025 16:11:41 +0000 Files and hashes: 1: 326131343a373538333a323030303a3a2f34312d3438203d3e20323133343133.roa (hash: T/KqHRNKCdrm3sTtcnZr9v9xTfR2Zz70OzlZEinvL+o=) 2: 326131343a373538333a323038343a3a2f34362d3438203d3e20323035393431.roa (hash: iQgvpacSF0u5Ue3HHO+ub83c/DXDcDP57KjwynyaU6k=) 3: 326131343a373538333a323038303a3a2f34362d3438203d3e20323035393431.roa (hash: 185WmB7/O691pioTQ1jhFvytbPcY5erP49yoKFH8w5c=) 4: 326131343a373538333a323030303a3a2f33362d3438203d3e20323035393431.roa (hash: O5nrRcAXJsFIbgmQjy7gFEjWPRzzjc6duZ3LHw3P3O8=) 5: 326131343a373538303a666639303a3a2f34342d3438203d3e20323035393431.roa (hash: 7N4lyNBMuutS3OvSSoE0Vwp3PGeAo19d8bgklkw0PMg=) 6: 33EDE0B0EE6D8AE9053E11C830DF759F85FB8157.crl (hash: QmZSWjhKG3coxr9BbLHLiPZsG/XvQFB56twYMbpBZyk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/3/33EDE0B0EE6D8AE9053E11C830DF759F85FB8157.crl rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/3/33EDE0B0EE6D8AE9053E11C830DF759F85FB8157.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/33EDE0B0EE6D8AE9053E11C830DF759F85FB8157.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:6e:7c:28:43:54:8b:4d:b8:11:fb:0d:a9:9b:55:ac:0f:5d:1a:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33EDE0B0EE6D8AE9053E11C830DF759F85FB8157 Validity Not Before: Aug 23 15:16:41 2025 GMT Not After : Aug 24 16:11:41 2025 GMT Subject: CN=16662E3A05CF7EB0B20D6E502528F0B00BE73FCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bb:98:65:e2:8a:c4:95:c4:4f:85:88:9b:01: 65:c0:07:65:bd:ed:3c:b4:5d:fe:5d:28:05:82:0d: b5:df:0a:02:c5:60:d2:33:94:2a:4f:f7:4c:7b:71: e3:fd:ef:f3:c5:5a:64:80:d9:bd:25:05:6d:81:80: 66:2e:2d:b7:01:15:b7:b3:f0:97:4e:62:a9:e5:f5: aa:b7:2e:ab:96:ed:72:b4:89:41:27:cb:8d:2b:ee: 95:a7:81:b2:b3:bd:19:7a:fb:e1:0b:12:86:55:c8: 36:bc:83:79:e3:25:e6:02:15:b4:bb:1e:c3:0b:05: e5:7c:e5:07:5a:60:78:e9:89:54:b8:e3:b1:fb:7c: 03:e2:a4:10:be:83:63:33:4a:79:96:e1:08:a9:bb: 64:e0:6f:ff:98:b5:cf:04:e0:5c:56:58:c8:4f:43: 57:eb:bb:b6:f5:6f:1c:64:af:a1:bb:c7:1c:c9:37: 38:ee:06:64:2a:bc:b0:c9:37:9a:f5:1b:ef:37:10: 80:f4:75:32:0e:ec:94:c4:a4:89:46:35:4a:59:2f: 94:d1:e8:3a:b5:30:06:a4:d5:74:5c:bf:7e:68:ab: 59:28:65:34:90:1e:ed:2e:6e:e1:e0:a7:03:cf:91: 79:d1:26:4b:1a:68:5a:a8:5b:3d:32:c1:36:b8:b2: de:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:66:2E:3A:05:CF:7E:B0:B2:0D:6E:50:25:28:F0:B0:0B:E7:3F:CC X509v3 Authority Key Identifier: keyid:33:ED:E0:B0:EE:6D:8A:E9:05:3E:11:C8:30:DF:75:9F:85:FB:81:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/3/33EDE0B0EE6D8AE9053E11C830DF759F85FB8157.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/33EDE0B0EE6D8AE9053E11C830DF759F85FB8157.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/3/33EDE0B0EE6D8AE9053E11C830DF759F85FB8157.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:06:08:e7:be:21:f6:d3:95:d5:67:dc:5d:eb:26:5f:6d:c6: a6:82:ce:86:6d:b0:7e:ca:32:71:c1:cb:b1:45:51:74:92:c6: 60:eb:ae:c2:bf:21:59:5c:b9:f0:55:55:b2:a9:96:7b:f8:9e: 1b:89:fd:72:31:1b:05:15:2c:a3:d7:37:58:0f:6b:7e:40:02: 20:58:2a:cd:b0:a3:10:b1:f8:c9:2f:64:b5:3a:99:2e:fb:df: c0:a3:cb:f7:f4:90:37:bf:65:e9:b2:d7:0b:cb:a7:5d:f6:3c: e3:d7:70:35:3c:30:7c:9c:64:cc:5d:33:21:73:af:81:1c:41: c3:aa:07:72:16:a2:b5:ab:61:e1:b5:2d:c4:92:83:69:45:7d: 3d:ea:6c:c2:7e:90:d4:83:79:fd:57:d8:3f:d9:5e:f9:7f:ed: 7a:44:d3:42:25:af:49:27:d8:4e:2b:66:33:c3:e3:56:a9:b5: 1e:b2:e1:dc:78:dd:a9:68:a8:a0:14:4e:98:c1:f0:a4:da:65: c9:a3:ad:b2:b5:6a:43:c6:80:d3:cd:5d:af:c4:39:16:23:51: 6e:3e:10:03:88:dd:2b:fe:9e:b3:31:86:17:b1:33:22:41:81: 64:98:78:8f:8b:4b:ba:b7:d8:f5:38:11:a2:fb:3e:cc:36:0f: f8:e0:13:fb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJG58KENUi024EfsNqZtVrA9dGpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNFREUwQjBFRTZEOEFFOTA1M0UxMUM4MzBERjc1OUY4 NUZCODE1NzAeFw0yNTA4MjMxNTE2NDFaFw0yNTA4MjQxNjExNDFaMDMxMTAvBgNV BAMTKDE2NjYyRTNBMDVDRjdFQjBCMjBENkU1MDI1MjhGMEIwMEJFNzNGQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMu5hl4orElcRPhYibAWXAB2W9 7Ty0Xf5dKAWCDbXfCgLFYNIzlCpP90x7ceP97/PFWmSA2b0lBW2BgGYuLbcBFbez 8JdOYqnl9aq3LquW7XK0iUEny40r7pWngbKzvRl6++ELEoZVyDa8g3njJeYCFbS7 HsMLBeV85QdaYHjpiVS447H7fAPipBC+g2MzSnmW4Qipu2Tgb/+Ytc8E4FxWWMhP Q1fru7b1bxxkr6G7xxzJNzjuBmQqvLDJN5r1G+83EID0dTIO7JTEpIlGNUpZL5TR 6Dq1MAak1XRcv35oq1koZTSQHu0ubuHgpwPPkXnRJksaaFqoWz0ywTa4st7rAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFmYuOgXPfrCyDW5QJSjwsAvnP8wwHwYDVR0j BBgwFoAUM+3gsO5tiukFPhHIMN91n4X7gVcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjdlYmRlMDMtMzRkZi00ZjJjLTkyZmEtOGZlMWQwODNk MTVkLzMvMzNFREUwQjBFRTZEOEFFOTA1M0UxMUM4MzBERjc1OUY4NUZCODE1Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zM0VERTBCMEVFNkQ4QUU5MDUzRTExQzgz MERGNzU5Rjg1RkI4MTU3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzI3ZWJkZTAzLTM0ZGYtNGYyYy05MmZhLThmZTFkMDgzZDE1ZC8zLzMzRURFMEIw RUU2RDhBRTkwNTNFMTFDODMwREY3NTlGODVGQjgxNTcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjBgjn viH205XVZ9xd6yZfbcamgs6GbbB+yjJxwcuxRVF0ksZg667CvyFZXLnwVVWyqZZ7 +J4bif1yMRsFFSyj1zdYD2t+QAIgWCrNsKMQsfjJL2S1Opku+9/Ao8v39JA3v2Xp stcLy6dd9jzj13A1PDB8nGTMXTMhc6+BHEHDqgdyFqK1q2HhtS3EkoNpRX096mzC fpDUg3n9V9g/2V75f+16RNNCJa9JJ9hOK2Yzw+NWqbUesuHceN2paKigFE6YwfCk 2mXJo62ytWpDxoDTzV2vxDkWI1FuPhADiN0r/p6zMYYXsTMiQYFkmHiPi0u6t9j1 OBGi+z7MNg/44BP7 -----END CERTIFICATE-----Generated at Sat Aug 23 17:39:54 2025 by rpki-client