$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft File: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft (raw, json) Hash identifier: SnmR0QB1VtK6N02rwawNjGxhnzylMUh5kl98TS6za4w= Subject key identifier: 0B:50:73:1A:17:18:7C:EC:90:7E:4B:35:FD:E2:2C:25:C7:21:79:A9 Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Certificate serial: 2001B9BCC9474FF1E8871271F396EA61440D0BAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft Manifest number: A0 Signing time: Wed 02 Jul 2025 04:29:50 +0000 Manifest this update: Wed 02 Jul 2025 04:24:50 +0000 Manifest next update: Thu 03 Jul 2025 07:58:50 +0000 Files and hashes: 1: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl (hash: 3spoq25kLaDh3dbm4QP7Uqg7UEqkViUtelEUtmfyhH4=) 2: 326130653a666434353a326630303a3a2f34382d3438203d3e20323132393636.roa (hash: fCahoT0DASmE4L0CnNku4FHnUTfBEMsJKaoRBnEvKJY=) 3: 326130393a626534303a323830303a3a2f34302d3438203d3e20313939393530.roa (hash: AiP13DNBwIkSFzdQdSir0FYGd4okcKOcyfxhs/nt0mM=) 4: 326130653a666434353a326366303a3a2f34382d3438203d3e20323032383535.roa (hash: lpEMU1X1JLSHAOWUFG4frUPhBZsu7LhlBnijuGC43xs=) 5: 326130393a626534303a323830303a3a2f34302d3438203d3e20323133313730.roa (hash: bGsR+5RlWB67shIeVpz1QNwpCAPKyIXgoOV7T0RQXx8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 07:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:01:b9:bc:c9:47:4f:f1:e8:87:12:71:f3:96:ea:61:44:0d:0b:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Validity Not Before: Jul 2 04:24:50 2025 GMT Not After : Jul 3 07:58:50 2025 GMT Subject: CN=0B50731A17187CEC907E4B35FDE22C25C72179A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:24:69:f2:15:1d:74:c8:6b:b1:f9:58:35:ad: 51:c8:1b:13:28:7c:fc:a3:01:eb:c0:0a:96:72:20: e2:f8:8e:c1:d0:61:64:d2:a2:3f:56:a9:e4:16:73: 92:eb:29:60:a9:8f:ae:65:ec:0d:a8:af:5a:c3:87: 22:3c:6c:0c:83:2a:72:30:33:f7:a0:26:7e:3f:72: ff:57:f7:a4:af:02:56:b2:86:21:de:e1:3f:9c:da: 2d:69:db:ba:0a:ad:36:2c:c6:e1:e5:0e:d8:ff:d1: 9f:01:c7:0b:15:7e:72:56:5f:6f:05:a4:33:39:39: 3f:0f:b9:99:f3:c4:29:07:e5:64:aa:ee:f2:57:22: 7a:8d:79:98:29:3b:6d:ec:df:b2:c9:76:02:30:78: e4:75:e2:bb:4d:f6:0b:a1:dc:01:3e:54:c6:25:20: 20:36:dc:fd:fb:44:94:29:93:a8:85:ec:79:c1:80: c1:99:3a:ab:74:b8:47:0b:9a:08:55:2b:01:50:2e: c0:26:53:40:1b:e5:8b:87:ce:77:0c:9e:28:69:30: d8:48:41:31:ba:e9:02:21:77:50:e5:e0:cd:a0:83: d5:8f:b8:25:7b:e9:19:8d:56:78:9f:15:89:fa:40: ca:59:a4:bd:57:56:79:fc:04:3f:f1:cb:c7:c6:20: 3c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:50:73:1A:17:18:7C:EC:90:7E:4B:35:FD:E2:2C:25:C7:21:79:A9 X509v3 Authority Key Identifier: keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:8f:c0:e8:ab:e6:ee:ad:46:c8:63:36:58:aa:54:48:e2:21: c7:3d:1a:af:0d:8a:3c:97:3d:7c:1a:de:22:2b:97:a1:f5:e7: 57:d1:a7:53:6e:42:7f:73:cd:5e:c6:79:c6:60:1f:9e:1a:8e: 14:49:5d:de:4e:42:db:f5:2c:dd:40:a7:18:1f:c2:b7:92:1a: 6d:74:c4:32:c1:07:49:af:55:46:e7:db:2b:65:9f:90:08:68: 9f:6e:cc:bc:4e:25:b0:37:45:cf:0f:31:27:42:f7:4c:f0:38: f4:cf:ab:4d:66:7b:7e:48:c7:61:37:14:7a:f9:c9:1e:94:3c: 30:ed:1f:c5:32:0a:a2:d5:61:c2:e5:e5:f6:62:ad:31:cb:c1: 4d:b8:17:e7:01:4f:ef:2d:fa:ae:65:48:a3:41:01:cc:04:8d: a9:ce:80:df:83:08:68:ce:66:43:78:72:cc:35:64:1d:1e:7e: 9f:15:8d:9b:68:8c:7b:d3:d6:96:e8:93:e9:f9:c1:6f:c8:52: 4c:a3:b9:d0:24:25:e4:c2:7e:9d:bd:47:81:1d:ba:cd:84:48: 65:b0:b3:bd:98:6f:9a:f4:e4:a9:89:2c:8d:e7:61:42:4c:7b: 03:79:b3:6e:3f:10:f5:74:27:03:db:f5:e8:e2:14:f1:0d:b3: 3b:c9:fe:15 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIAG5vMlHT/HohxJx85bqYUQNC6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2YyMTZmNDlhM2I5YTg0YTBlODVlODBhMmM0Mjg3NGYw OWVhMzk4NTAeFw0yNTA3MDIwNDI0NTBaFw0yNTA3MDMwNzU4NTBaMDMxMTAvBgNV BAMTKDBCNTA3MzFBMTcxODdDRUM5MDdFNEIzNUZERTIyQzI1QzcyMTc5QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrJGnyFR10yGux+Vg1rVHIGxMo fPyjAevACpZyIOL4jsHQYWTSoj9WqeQWc5LrKWCpj65l7A2or1rDhyI8bAyDKnIw M/egJn4/cv9X96SvAlayhiHe4T+c2i1p27oKrTYsxuHlDtj/0Z8BxwsVfnJWX28F pDM5OT8PuZnzxCkH5WSq7vJXInqNeZgpO23s37LJdgIweOR14rtN9guh3AE+VMYl ICA23P37RJQpk6iF7HnBgMGZOqt0uEcLmghVKwFQLsAmU0Ab5YuHzncMnihpMNhI QTG66QIhd1Dl4M2gg9WPuCV76RmNVnifFYn6QMpZpL1XVnn8BD/xy8fGIDzxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUC1BzGhcYfOyQfks1/eIsJccheakwHwYDVR0j BBgwFoAUfyFvSaO5qEoOhegKLEKHTwnqOYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmRmYjMwY2EtZTFjMi00OTIxLWIwNTQtZDRhZjA5MTY1 YWYxLzAvN0YyMTZGNDlBM0I5QTg0QTBFODVFODBBMkM0Mjg3NEYwOUVBMzk4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Z5RnZTYU81cUVvT2hlZ0tMRUtIVHdu cU9ZVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZGZiMzBjYS1l MWMyLTQ5MjEtYjA1NC1kNGFmMDkxNjVhZjEvMC83RjIxNkY0OUEzQjlBODRBMEU4 NUU4MEEyQzQyODc0RjA5RUEzOTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgo/A6Kvm7q1GyGM2WKpU SOIhxz0arw2KPJc9fBreIiuXofXnV9GnU25Cf3PNXsZ5xmAfnhqOFEld3k5C2/Us 3UCnGB/Ct5IabXTEMsEHSa9VRufbK2WfkAhon27MvE4lsDdFzw8xJ0L3TPA49M+r TWZ7fkjHYTcUevnJHpQ8MO0fxTIKotVhwuXl9mKtMcvBTbgX5wFP7y36rmVIo0EB zASNqc6A34MIaM5mQ3hyzDVkHR5+nxWNm2iMe9PWluiT6fnBb8hSTKO50CQl5MJ+ nb1HgR26zYRIZbCzvZhvmvTkqYksjedhQkx7A3mzbj8Q9XQnA9v16OIU8Q2zO8n+ FQ== -----END CERTIFICATE-----Generated at Wed Jul 2 15:07:32 2025 by rpki-client