$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.mft File: AC2082F41576F66D1AA264309E33E738246AC454.mft (raw, json) Hash identifier: pdIv9K9bIIRbYSexARbFv1EJ4FPzdtB5GgaXZx1gWss= Subject key identifier: CE:4E:09:4D:69:3B:62:14:57:3F:25:B6:58:0F:60:B2:53:D8:43:8B Authority key identifier: AC:20:82:F4:15:76:F6:6D:1A:A2:64:30:9E:33:E7:38:24:6A:C4:54 Certificate issuer: /CN=AC2082F41576F66D1AA264309E33E738246AC454 Certificate serial: 46A5132D7E6D5C95B4B572E6251F71B6432824CE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AC2082F41576F66D1AA264309E33E738246AC454.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.mft Manifest number: 1D Signing time: Sun 29 Jun 2025 09:19:55 +0000 Manifest this update: Sun 29 Jun 2025 09:14:55 +0000 Manifest next update: Mon 30 Jun 2025 13:05:55 +0000 Files and hashes: 1: AC2082F41576F66D1AA264309E33E738246AC454.crl (hash: OXJoJgLidWkgQg3ZEaiqEQr5ChRJNVStOZRLiH8wPoc=) 2: 326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa (hash: cDRjR1Gs+0Iu9xhCGCcpko1viLmb0+uf6ywJ7Kgfxpo=) 3: 326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa (hash: FemJ+80fd71XEtyMVGoBFKhnKHjJGamQyy+E//E8CQM=) 4: 326131343a373538343a343130303a3a2f34302d3438203d3e20323136333039.roa (hash: dyI/vpBN2up97kkgTILkiXBGaFO4U5IDn0366sa0vPo=) 5: 326131343a373538343a346630303a3a2f34302d3430203d3e20323132353136.roa (hash: w8qLN4QSYjEpdJCkomXgGfT8US2E2zuhO/hns/+C5XM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.crl rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AC2082F41576F66D1AA264309E33E738246AC454.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 07:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a5:13:2d:7e:6d:5c:95:b4:b5:72:e6:25:1f:71:b6:43:28:24:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC2082F41576F66D1AA264309E33E738246AC454 Validity Not Before: Jun 29 09:14:55 2025 GMT Not After : Jun 30 13:05:55 2025 GMT Subject: CN=CE4E094D693B6214573F25B6580F60B253D8438B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e7:bd:41:1b:de:66:50:12:20:d7:76:a3:2f: 2f:32:15:ac:95:85:9b:45:ac:7f:17:65:dc:bf:25: e2:29:08:11:56:1c:ce:ff:28:d5:05:ec:a5:7b:d0: cc:19:7e:4f:c5:3d:1f:e1:11:44:f1:2a:54:8a:a9: 81:a9:f8:50:37:04:67:4a:f7:cf:ca:ac:46:37:d3: ff:6a:9d:ab:64:50:a3:6b:48:44:6f:47:f3:d5:68: 50:4f:72:a1:81:68:78:a7:ad:28:e5:0e:75:a2:c6: 4c:a1:0d:9b:d2:59:89:d6:c7:61:9e:18:9f:cb:45: e7:9b:12:6c:b2:33:b1:dd:06:35:43:c9:f5:03:d6: 3d:b6:3e:3f:0a:7f:74:4a:3e:19:63:a2:fd:a6:80: 4c:39:2d:3a:63:9d:7e:d9:f9:4a:ee:ea:1c:54:dd: 1f:4e:ab:19:6a:58:f4:af:9a:81:8d:c0:7d:44:bc: 89:d4:cb:f1:bf:35:4b:d3:a5:d2:73:e3:e6:7a:67: cd:6c:0d:30:b6:09:b8:39:ed:bc:b2:e9:7d:d6:c0: 38:3a:8c:bc:95:f8:c9:56:3d:17:62:81:3d:8c:fc: d6:5c:a6:d8:db:b4:62:e1:a1:77:42:08:67:fc:c4: 99:9f:f7:7e:96:0d:13:a7:0e:6b:4b:3f:99:cf:e5: 6b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4E:09:4D:69:3B:62:14:57:3F:25:B6:58:0F:60:B2:53:D8:43:8B X509v3 Authority Key Identifier: keyid:AC:20:82:F4:15:76:F6:6D:1A:A2:64:30:9E:33:E7:38:24:6A:C4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AC2082F41576F66D1AA264309E33E738246AC454.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d1:f2:97:4e:fd:b0:b8:26:b8:87:4f:bf:a1:b1:17:de:a0: 92:6c:51:5a:63:68:00:96:a8:ee:a4:3f:60:7c:2c:dc:06:1b: 34:29:03:db:42:16:10:50:fe:ec:4d:af:8c:c8:5a:75:ad:25: 3c:09:22:43:e0:ce:8b:d8:49:2b:b0:2a:79:7f:5f:db:fe:b7: 9b:ef:95:e6:97:f0:6f:d5:42:31:12:6c:87:19:db:04:ab:a9: bb:dd:5a:9c:d6:b8:c9:a0:1b:11:37:9f:06:ad:f5:ac:28:6e: 4b:a1:b8:3c:2a:d9:04:f9:be:b1:5e:c4:7c:63:8a:98:25:b5: 40:4c:5e:02:90:e7:dc:4a:0b:99:be:9c:14:69:28:89:58:12: c1:ca:9b:29:53:77:e8:55:5b:c7:57:fc:6d:9b:fc:55:bd:db: 4a:b1:78:0f:e4:ef:f4:74:72:61:4d:b4:c6:01:94:b9:2d:e5: 98:fc:01:c5:39:c3:9c:73:d7:22:d4:3f:97:39:c7:23:45:16: 59:0c:50:7e:d9:39:19:f7:3a:fb:8c:6c:42:f5:da:fc:00:ed: 1e:f8:7d:47:af:7d:d0:1d:e1:8c:6a:1a:d1:38:0f:34:73:28: 3b:3b:4a:61:92:57:ec:2a:73:80:02:e7:7e:82:c0:d1:dd:c3: 32:75:f8:a4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURqUTLX5tXJW0tXLmJR9xtkMoJM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyMDgyRjQxNTc2RjY2RDFBQTI2NDMwOUUzM0U3Mzgy NDZBQzQ1NDAeFw0yNTA2MjkwOTE0NTVaFw0yNTA2MzAxMzA1NTVaMDMxMTAvBgNV BAMTKENFNEUwOTRENjkzQjYyMTQ1NzNGMjVCNjU4MEY2MEIyNTNEODQzOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0571BG95mUBIg13ajLy8yFayV hZtFrH8XZdy/JeIpCBFWHM7/KNUF7KV70MwZfk/FPR/hEUTxKlSKqYGp+FA3BGdK 98/KrEY30/9qnatkUKNrSERvR/PVaFBPcqGBaHinrSjlDnWixkyhDZvSWYnWx2Ge GJ/LReebEmyyM7HdBjVDyfUD1j22Pj8Kf3RKPhljov2mgEw5LTpjnX7Z+Uru6hxU 3R9OqxlqWPSvmoGNwH1EvInUy/G/NUvTpdJz4+Z6Z81sDTC2Cbg57byy6X3WwDg6 jLyV+MlWPRdigT2M/NZcptjbtGLhoXdCCGf8xJmf936WDROnDmtLP5nP5WuFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUzk4JTWk7YhRXPyW2WA9gslPYQ4swHwYDVR0j BBgwFoAUrCCC9BV29m0aomQwnjPnOCRqxFQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTljODNlNWMtNGI1NS00YTFhLTgwMDMtMWI3ZWNjNTFk NDdhLzIvQUMyMDgyRjQxNTc2RjY2RDFBQTI2NDMwOUUzM0U3MzgyNDZBQzQ1NC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BQzIwODJGNDE1NzZGNjZEMUFBMjY0MzA5 RTMzRTczODI0NkFDNDU0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU5YzgzZTVjLTRiNTUtNGExYS04MDAzLTFiN2VjYzUxZDQ3YS8yL0FDMjA4MkY0 MTU3NkY2NkQxQUEyNjQzMDlFMzNFNzM4MjQ2QUM0NTQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCF0fKX Tv2wuCa4h0+/obEX3qCSbFFaY2gAlqjupD9gfCzcBhs0KQPbQhYQUP7sTa+MyFp1 rSU8CSJD4M6L2EkrsCp5f1/b/reb75Xml/Bv1UIxEmyHGdsEq6m73Vqc1rjJoBsR N58GrfWsKG5Lobg8KtkE+b6xXsR8Y4qYJbVATF4CkOfcSguZvpwUaSiJWBLBypsp U3foVVvHV/xtm/xVvdtKsXgP5O/0dHJhTbTGAZS5LeWY/AHFOcOcc9ci1D+XOccj RRZZDFB+2TkZ9zr7jGxC9dr8AO0e+H1Hr33QHeGMahrROA80cyg7O0phklfsKnOA Aud+gsDR3cMydfik -----END CERTIFICATE-----Generated at Sun Jun 29 15:42:52 2025 by rpki-client