$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft File: 1498141819112B8446C2D4A3111F53038F05DBE9.mft (raw, json) Hash identifier: pESSBzDSp0LxBT4Lb8Un8g/zcj/xfn/ttg46Txd2SYo= Subject key identifier: E6:51:73:2E:E7:B6:A5:CB:2A:2C:E6:F4:9B:8B:73:5D:2D:3B:E0:1D Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9 Certificate serial: 03A673428D777463E75DAB9C9891A2E73677372C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft Manifest number: 2B Signing time: Sat 28 Jun 2025 06:14:08 +0000 Manifest this update: Sat 28 Jun 2025 06:09:08 +0000 Manifest next update: Sun 29 Jun 2025 06:38:08 +0000 Files and hashes: 1: 1498141819112B8446C2D4A3111F53038F05DBE9.crl (hash: uS7a0yXHWIsOuj/kRRAGn5WkSDQ7TVQoZDPE+C4UI/g=) 2: 3138352e39312e3131352e302f32342d3234203d3e20313337353137.roa (hash: X1+DKmCz9fjQ0YFjOBy8DCDKUifeMBU5Rwd+VfLqCPU=) 3: 3138352e39312e3131322e302f32342d3234203d3e203136323736.roa (hash: 816LcoMP7IzyrdlbDQQeycStorYxYzCTT1WckHhtHIY=) 4: 3138352e39312e3131332e302f32342d3234203d3e20323134323038.roa (hash: qSSu/jTa9CtmAhgZlrJ1s4QldXeKp0EqfLu29FuP5Zs=) 5: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (hash: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 06:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a6:73:42:8d:77:74:63:e7:5d:ab:9c:98:91:a2:e7:36:77:37:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9 Validity Not Before: Jun 28 06:09:08 2025 GMT Not After : Jun 29 06:38:08 2025 GMT Subject: CN=E651732EE7B6A5CB2A2CE6F49B8B735D2D3BE01D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:66:cf:db:cc:13:86:fe:b4:8f:1a:a2:c6:15: 71:01:c7:ed:75:cf:b6:b2:05:b4:f1:6e:fa:09:66: 01:6a:62:72:f6:11:c1:00:a0:24:79:3f:3c:f8:74: 83:3b:c6:57:51:41:48:4f:56:66:a8:94:34:00:ff: 35:c9:7f:e2:87:5b:0c:a3:b2:9b:93:cb:0d:2a:43: a6:63:0f:35:d1:aa:38:9d:4e:32:86:d3:3f:87:bd: 9d:a9:db:ff:aa:c2:9a:d0:6a:b9:ef:4b:a3:2d:08: 04:de:dc:ed:45:97:96:67:6f:e2:1b:3e:c8:f5:30: ab:ad:1e:0f:57:65:5e:63:87:e1:33:85:1f:c3:8b: e3:36:bc:f6:64:de:ce:d3:9a:63:ae:6f:85:40:93: 01:df:ac:74:2f:fe:dc:7d:dd:99:39:2e:24:b0:1b: 4f:bc:74:a4:21:a0:35:ce:98:42:f8:b3:4e:fa:70: 1d:0d:71:d2:d1:45:96:50:a3:ba:61:25:ce:13:c9: 82:49:60:58:a4:e6:9f:b2:99:82:22:72:dc:03:94: 1d:05:b8:b4:23:06:97:9c:da:86:0e:20:8b:30:4f: bb:e5:7a:10:13:77:9d:5d:3e:27:7f:64:b5:66:d3: c1:d4:09:31:fc:18:69:79:bc:05:b8:95:02:ea:b0: 06:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:51:73:2E:E7:B6:A5:CB:2A:2C:E6:F4:9B:8B:73:5D:2D:3B:E0:1D X509v3 Authority Key Identifier: keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:44:fc:23:b0:32:70:41:14:99:2d:92:5e:8a:e3:2c:5d:3f: f1:8c:eb:9d:41:83:63:6e:10:41:09:98:03:30:67:e4:77:35: 0e:c4:1a:0d:10:bd:79:90:ff:82:ee:8d:de:7b:68:c2:90:3a: 7f:18:89:b8:2e:61:f4:e0:ac:66:59:cd:35:67:2b:21:f8:5b: f5:77:84:cc:e6:ca:f7:30:4a:d8:35:44:c5:da:9f:af:fa:f3: c0:73:f7:78:f9:91:01:be:6b:a6:f5:7f:72:25:bc:9c:55:ff: 9b:4a:ad:01:bb:dc:dd:22:ed:13:0f:70:60:d9:63:93:0d:1e: 26:8e:58:44:b3:f6:01:39:a4:7a:3a:60:cd:9e:1c:3f:8e:44: 39:e0:8e:52:2c:81:ff:17:8a:61:9a:a4:af:2f:4d:0b:17:85: c6:07:75:b1:77:ef:79:eb:1a:4a:31:f9:f7:9a:b8:d2:88:fd: e7:92:35:44:70:00:ed:e5:3b:83:10:3f:98:b7:11:c7:b6:d0: 3a:38:11:ef:4c:c5:40:0e:85:3b:8b:74:85:5e:02:39:b6:ed: 4e:26:85:83:f2:32:f3:24:fc:c5:cb:2f:94:57:c1:14:c9:e7: 08:d8:77:8d:d9:d3:e3:59:a5:06:b9:70:7d:de:a0:39:cc:4e: e2:60:ae:aa -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUA6ZzQo13dGPnXaucmJGi5zZ3NywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5ODE0MTgxOTExMmI4NDQ2YzJkNGEzMTExZjUzMDM4 ZjA1ZGJlOTAeFw0yNTA2MjgwNjA5MDhaFw0yNTA2MjkwNjM4MDhaMDMxMTAvBgNV BAMTKEU2NTE3MzJFRTdCNkE1Q0IyQTJDRTZGNDlCOEI3MzVEMkQzQkUwMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZZs/bzBOG/rSPGqLGFXEBx+11 z7ayBbTxbvoJZgFqYnL2EcEAoCR5Pzz4dIM7xldRQUhPVmaolDQA/zXJf+KHWwyj spuTyw0qQ6ZjDzXRqjidTjKG0z+HvZ2p2/+qwprQarnvS6MtCATe3O1Fl5Znb+Ib Psj1MKutHg9XZV5jh+EzhR/Di+M2vPZk3s7TmmOub4VAkwHfrHQv/tx93Zk5LiSw G0+8dKQhoDXOmEL4s076cB0NcdLRRZZQo7phJc4TyYJJYFik5p+ymYIictwDlB0F uLQjBpec2oYOIIswT7vlehATd51dPid/ZLVm08HUCTH8GGl5vAW4lQLqsAY7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU5lFzLue2pcsqLOb0m4tzXS074B0wHwYDVR0j BBgwFoAUFJgUGBkRK4RGwtSjER9TA48F2+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQtZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5 ODk3LzAvMTQ5ODE0MTgxOTExMkI4NDQ2QzJENEEzMTExRjUzMDM4RjA1REJFOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ZKZ1VHQmtSSzRSR3d0U2pFUjlUQTQ4 RjItay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOTA2NmY1ZC1l Y2MxLTQ5MjctOTVjMS1lMWE4ZGY4Zjk4OTcvMC8xNDk4MTQxODE5MTEyQjg0NDZD MkQ0QTMxMTFGNTMwMzhGMDVEQkU5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUT8I7AycEEUmS2SXorj LF0/8YzrnUGDY24QQQmYAzBn5Hc1DsQaDRC9eZD/gu6N3ntowpA6fxiJuC5h9OCs ZlnNNWcrIfhb9XeEzObK9zBK2DVExdqfr/rzwHP3ePmRAb5rpvV/ciW8nFX/m0qt Abvc3SLtEw9wYNljkw0eJo5YRLP2ATmkejpgzZ4cP45EOeCOUiyB/xeKYZqkry9N CxeFxgd1sXfveesaSjH595q40oj955I1RHAA7eU7gxA/mLcRx7bQOjgR70zFQA6F O4t0hV4CObbtTiaFg/Iy8yT8xcsvlFfBFMnnCNh3jdnT41mlBrlwfd6gOcxO4mCu qg== -----END CERTIFICATE-----Generated at Sat Jun 28 22:11:56 2025 by rpki-client