$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft File: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft (raw, json) Hash identifier: xwZcd4LS8idMAZH04xjKRSS8rS56Fu8cDq1m/+izc0o= Subject key identifier: 89:B4:78:B9:CC:69:18:74:AF:22:52:89:02:EE:C1:B6:53:F3:4B:97 Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Certificate serial: 1252674AD88C4029C94D995F9942DC526AB9DEB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft Manifest number: E5 Signing time: Sat 23 Aug 2025 04:45:29 +0000 Manifest this update: Sat 23 Aug 2025 04:40:29 +0000 Manifest next update: Sun 24 Aug 2025 08:27:29 +0000 Files and hashes: 1: 326130653a666434353a326630303a3a2f34382d3438203d3e20323132393636.roa (hash: fCahoT0DASmE4L0CnNku4FHnUTfBEMsJKaoRBnEvKJY=) 2: 326130393a626534303a323830303a3a2f34302d3438203d3e20313939393530.roa (hash: AiP13DNBwIkSFzdQdSir0FYGd4okcKOcyfxhs/nt0mM=) 3: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl (hash: EJlkm+eskm9BT9MW3BVBPEJIMfHqaZ60I2oaYc46Rjo=) 4: 326130393a626534303a323830303a3a2f34302d3438203d3e20323133313730.roa (hash: bGsR+5RlWB67shIeVpz1QNwpCAPKyIXgoOV7T0RQXx8=) 5: 326130653a666434353a326366303a3a2f34382d3438203d3e20323032383535.roa (hash: lpEMU1X1JLSHAOWUFG4frUPhBZsu7LhlBnijuGC43xs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:52:67:4a:d8:8c:40:29:c9:4d:99:5f:99:42:dc:52:6a:b9:de:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Validity Not Before: Aug 23 04:40:29 2025 GMT Not After : Aug 24 08:27:29 2025 GMT Subject: CN=89B478B9CC691874AF22528902EEC1B653F34B97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:46:0f:6e:73:cf:59:74:a0:45:22:6f:e0: 97:25:cf:61:a8:1f:0d:51:39:37:ad:f2:22:0b:0c: c5:a8:f9:e8:3f:ce:92:07:92:29:59:e5:07:bb:a2: e4:41:30:16:eb:65:e9:24:39:6b:b4:cd:e9:1d:b3: eb:a8:ab:15:68:a5:b3:bb:b7:8c:d6:f8:83:4f:e2: e4:f6:07:14:2f:bc:8c:6d:e0:8d:48:8c:03:3b:77: 68:02:71:9e:83:71:12:df:f6:84:81:53:46:a3:91: de:3b:30:4a:bd:08:a9:bd:5b:39:3b:4c:9c:e5:40: 75:33:d6:76:8d:3c:da:22:e8:15:6b:e0:2f:3e:0e: 41:ca:0d:e3:87:f8:66:0b:02:2b:4a:35:09:25:b3: 5a:82:37:3c:24:c6:f0:e4:90:67:84:ca:75:28:48: f7:3f:5a:60:9b:75:e1:cd:f1:12:61:70:c1:85:4e: 47:b7:54:2d:18:cd:5a:10:be:cb:66:1c:02:d8:f9: e7:c3:54:6b:7c:5b:ee:c1:18:75:23:f5:f0:56:3a: 47:9b:c1:db:8f:e1:33:1c:9b:c5:16:51:6a:e1:a1: 22:10:7d:3e:5d:7b:a2:34:00:b8:59:3c:f7:c2:b2: e1:ac:39:8f:80:25:b9:48:5b:82:28:7f:09:b7:81: 96:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B4:78:B9:CC:69:18:74:AF:22:52:89:02:EE:C1:B6:53:F3:4B:97 X509v3 Authority Key Identifier: keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f5:c3:d6:1f:c7:fa:f2:84:17:53:ee:65:60:4e:39:61:18: 71:f1:c7:6a:6b:05:2b:2f:91:a2:09:6d:90:a5:62:fe:72:c1: c3:f5:ab:03:3f:56:8a:39:29:cf:a9:71:42:37:69:aa:54:99: 15:3f:23:9e:e1:0c:51:fa:fd:62:10:c8:0f:36:f5:95:63:2e: 48:93:3c:eb:3b:7e:da:e5:dc:2c:12:e6:7b:78:5a:79:20:0d: 84:20:e9:3a:e4:33:ed:3f:b0:7b:48:86:f8:e9:49:4a:87:a9: 35:eb:0a:86:42:bb:bb:c5:79:86:32:d9:e1:2a:4d:14:f8:ac: 63:c7:57:45:c9:e1:b6:ff:4e:40:36:e1:85:86:c5:06:b1:ad: 09:c9:25:fb:7c:2f:9a:a8:38:33:df:d6:ac:79:19:2f:da:ab: 9a:a3:56:21:5c:71:50:35:46:a1:84:d7:e1:c0:a9:a5:39:73: 2b:fd:1d:ed:6d:3c:df:9c:df:30:5a:1a:2e:47:10:d9:79:b1: a7:cd:e4:33:63:99:99:60:7b:b3:f7:68:1c:d6:ed:58:11:4f: d8:f6:ba:cf:39:52:13:96:6c:a2:f7:b7:e3:0f:fe:37:11:eb: 8c:44:fb:57:eb:4e:6f:4d:cb:07:24:53:f6:dc:6d:61:63:d6: f8:24:88:f7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUElJnStiMQCnJTZlfmULcUmq53rkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2YyMTZmNDlhM2I5YTg0YTBlODVlODBhMmM0Mjg3NGYw OWVhMzk4NTAeFw0yNTA4MjMwNDQwMjlaFw0yNTA4MjQwODI3MjlaMDMxMTAvBgNV BAMTKDg5QjQ3OEI5Q0M2OTE4NzRBRjIyNTI4OTAyRUVDMUI2NTNGMzRCOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHDUYPbnPPWXSgRSJv4Jclz2Go Hw1ROTet8iILDMWo+eg/zpIHkilZ5Qe7ouRBMBbrZekkOWu0zekds+uoqxVopbO7 t4zW+INP4uT2BxQvvIxt4I1IjAM7d2gCcZ6DcRLf9oSBU0ajkd47MEq9CKm9Wzk7 TJzlQHUz1naNPNoi6BVr4C8+DkHKDeOH+GYLAitKNQkls1qCNzwkxvDkkGeEynUo SPc/WmCbdeHN8RJhcMGFTke3VC0YzVoQvstmHALY+efDVGt8W+7BGHUj9fBWOkeb wduP4TMcm8UWUWrhoSIQfT5de6I0ALhZPPfCsuGsOY+AJblIW4Iofwm3gZbpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUibR4ucxpGHSvIlKJAu7BtlPzS5cwHwYDVR0j BBgwFoAUfyFvSaO5qEoOhegKLEKHTwnqOYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmRmYjMwY2EtZTFjMi00OTIxLWIwNTQtZDRhZjA5MTY1 YWYxLzAvN0YyMTZGNDlBM0I5QTg0QTBFODVFODBBMkM0Mjg3NEYwOUVBMzk4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Z5RnZTYU81cUVvT2hlZ0tMRUtIVHdu cU9ZVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZGZiMzBjYS1l MWMyLTQ5MjEtYjA1NC1kNGFmMDkxNjVhZjEvMC83RjIxNkY0OUEzQjlBODRBMEU4 NUU4MEEyQzQyODc0RjA5RUEzOTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPPXD1h/H+vKEF1PuZWBO OWEYcfHHamsFKy+RogltkKVi/nLBw/WrAz9Wijkpz6lxQjdpqlSZFT8jnuEMUfr9 YhDIDzb1lWMuSJM86zt+2uXcLBLme3haeSANhCDpOuQz7T+we0iG+OlJSoepNesK hkK7u8V5hjLZ4SpNFPisY8dXRcnhtv9OQDbhhYbFBrGtCckl+3wvmqg4M9/WrHkZ L9qrmqNWIVxxUDVGoYTX4cCppTlzK/0d7W0835zfMFoaLkcQ2Xmxp83kM2OZmWB7 s/doHNbtWBFP2Pa6zzlSE5Zsove34w/+NxHrjET7V+tOb03LByRT9txtYWPW+CSI 9w== -----END CERTIFICATE-----Generated at Sat Aug 23 12:32:41 2025 by rpki-client