$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft File: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft (raw, json) Hash identifier: 4OGRuxK5xz/GgkleEkHt/Em07JwIjMr2pLoxM/C881Q= Subject key identifier: 6D:AC:1F:08:23:44:11:60:9E:15:D6:D0:21:7F:32:64:BA:14:42:A1 Authority key identifier: 72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 Certificate issuer: /CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Certificate serial: 7D072A442FD59F1BB25CEEA95CE3AF5A84A92E2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft Manifest number: 9D Signing time: Sat 23 Aug 2025 04:27:46 +0000 Manifest this update: Sat 23 Aug 2025 04:22:46 +0000 Manifest next update: Sun 24 Aug 2025 07:23:46 +0000 Files and hashes: 1: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl (hash: SqkziwcqehquHIQ+smfGiPfEDGKr8ZzsbDrN79MOvqk=) 2: 3139332e32322e3235332e302f32342d3234203d3e203331313834.roa (hash: WrMYNrMKiwcHb7Layep1L0ANnPM7z3AEErZKMOJmYxg=) 3: 326131333a363134303a3a2f32392d3332203d3e203331313834.roa (hash: HEAzsbwZSQMPtZWHDUG9J3+dKm/03SetBs7lrO1nkwI=) 4: 3139352e37342e34302e302f32322d3234203d3e203331313834.roa (hash: OWTrG12il6+R+m95Ctsd+LQNgEyVIDW3AMDlydaSO3g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:07:2a:44:2f:d5:9f:1b:b2:5c:ee:a9:5c:e3:af:5a:84:a9:2e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Validity Not Before: Aug 23 04:22:46 2025 GMT Not After : Aug 24 07:23:46 2025 GMT Subject: CN=6DAC1F08234411609E15D6D0217F3264BA1442A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0b:6c:d6:5c:b5:7d:32:e1:23:10:03:72:ac: d9:20:8a:5d:68:ce:75:30:96:1c:36:cc:43:f8:49: 5d:e7:e5:40:b9:0d:38:70:9d:06:d8:8d:4c:81:05: a7:0e:7e:ca:a6:ed:50:82:30:66:47:63:ad:d2:fb: 8e:09:42:d9:75:cc:ee:86:72:41:7c:2a:bb:e4:46: fa:25:5c:a3:70:10:af:ca:fe:46:fc:ca:fd:28:47: ec:b3:6b:bf:56:a1:30:f5:b6:a1:3e:d3:66:f0:6f: 43:62:74:be:5a:03:f8:97:39:84:09:e9:ec:42:41: 63:1d:da:51:73:c3:a2:bd:86:49:ce:96:71:4d:a3: 66:f3:8a:c0:f5:82:05:e8:39:04:99:12:8c:d5:70: 0a:00:9b:ee:f6:0d:2f:30:bd:09:42:c4:80:2b:18: 9c:45:be:9d:24:31:9d:fd:75:b7:d2:c7:3b:b1:8a: 76:db:bb:65:46:db:68:aa:25:44:9c:4f:bf:c4:43: fd:af:24:1c:b3:4f:5c:a7:dd:16:68:2e:ef:f3:1f: d0:cb:9b:54:2c:44:a1:4c:d9:4b:8c:3a:34:b6:86: b8:42:2f:cf:91:7d:db:0c:a2:be:6b:aa:b5:8a:98: 50:d2:cd:83:c9:c4:9f:84:79:94:59:9d:98:45:28: 1a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AC:1F:08:23:44:11:60:9E:15:D6:D0:21:7F:32:64:BA:14:42:A1 X509v3 Authority Key Identifier: keyid:72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:bc:62:e0:fd:f1:05:e5:4c:d1:d0:5c:a4:02:c7:3a:46:7d: 93:49:c5:7c:6d:e7:b3:cf:f5:3a:db:02:36:a4:6f:9f:d3:dc: f2:35:18:8f:71:af:da:1b:a0:aa:af:72:f6:e8:e6:a1:4a:ee: 8d:39:a7:d6:77:e2:0b:e8:43:5b:98:d8:4b:e0:0f:cc:47:e3: 81:bc:ed:b8:52:d1:77:06:ec:24:ed:bc:db:e4:dc:e7:2f:87: 70:1c:48:15:bb:91:bc:e5:35:42:8d:f4:35:bc:99:50:55:34: e9:66:76:e9:13:9d:7f:03:5c:f1:5b:78:2c:13:4c:bb:f0:a4: 80:9b:8c:72:d3:f8:1d:91:4c:d1:96:e4:bd:58:49:d8:cc:c5: 2d:84:27:2f:e9:5d:59:21:ad:67:d3:1e:86:69:b0:c6:95:4e: 08:21:9a:a1:bc:14:2a:ea:5d:39:56:2b:50:3e:04:58:ff:8f: 1a:3b:74:a3:97:b6:2d:36:41:c4:5c:47:d3:ee:88:be:ce:9c: 2f:86:61:c0:d7:95:d2:5c:73:8c:e8:85:27:92:97:47:cc:67: fe:70:f4:cd:ba:94:f3:ee:b7:d6:4e:28:91:0f:31:bd:ca:d2: c3:ed:1b:41:cc:77:65:18:c0:95:79:88:22:4f:1f:8e:34:5e: 0f:b6:6e:37 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfQcqRC/VnxuyXO6pXOOvWoSpLi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJmM2VlMTY5ZjliZDcxZjc4YTQyZDFhNzJmZTBmMmE4 MjQ4MjJkMTAeFw0yNTA4MjMwNDIyNDZaFw0yNTA4MjQwNzIzNDZaMDMxMTAvBgNV BAMTKDZEQUMxRjA4MjM0NDExNjA5RTE1RDZEMDIxN0YzMjY0QkExNDQyQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxC2zWXLV9MuEjEANyrNkgil1o znUwlhw2zEP4SV3n5UC5DThwnQbYjUyBBacOfsqm7VCCMGZHY63S+44JQtl1zO6G ckF8KrvkRvolXKNwEK/K/kb8yv0oR+yza79WoTD1tqE+02bwb0NidL5aA/iXOYQJ 6exCQWMd2lFzw6K9hknOlnFNo2bzisD1ggXoOQSZEozVcAoAm+72DS8wvQlCxIAr GJxFvp0kMZ39dbfSxzuxinbbu2VG22iqJUScT7/EQ/2vJByzT1yn3RZoLu/zH9DL m1QsRKFM2UuMOjS2hrhCL8+RfdsMor5rqrWKmFDSzYPJxJ+EeZRZnZhFKBpJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUbawfCCNEEWCeFdbQIX8yZLoUQqEwHwYDVR0j BBgwFoAUcvPuFp+b1x94pC0acv4PKoJIItEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjgyYjVlMDAtMmFjMy00OWYxLWEyOWItMjZhNWZkZjBm YTQxLzAvNzJGM0VFMTY5RjlCRDcxRjc4QTQyRDFBNzJGRTBGMkE4MjQ4MjJEMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2N2UHVGcC1iMXg5NHBDMGFjdjRQS29K SUl0RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yODJiNWUwMC0y YWMzLTQ5ZjEtYTI5Yi0yNmE1ZmRmMGZhNDEvMC83MkYzRUUxNjlGOUJENzFGNzhB NDJEMUE3MkZFMEYyQTgyNDgyMkQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELxi4P3xBeVM0dBcpALH OkZ9k0nFfG3ns8/1OtsCNqRvn9Pc8jUYj3Gv2hugqq9y9ujmoUrujTmn1nfiC+hD W5jYS+APzEfjgbztuFLRdwbsJO282+Tc5y+HcBxIFbuRvOU1Qo30NbyZUFU06WZ2 6ROdfwNc8Vt4LBNMu/CkgJuMctP4HZFM0ZbkvVhJ2MzFLYQnL+ldWSGtZ9Mehmmw xpVOCCGaobwUKupdOVYrUD4EWP+PGjt0o5e2LTZBxFxH0+6Ivs6cL4ZhwNeV0lxz jOiFJ5KXR8xn/nD0zbqU8+631k4okQ8xvcrSw+0bQcx3ZRjAlXmIIk8fjjReD7Zu Nw== -----END CERTIFICATE-----Generated at Sat Aug 23 09:41:37 2025 by rpki-client