$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft File: 99D922574ADCFE8B3741930044512F9A57EF91A4.mft (raw, json) Hash identifier: hAIjlQ91++fcZq9og2IwqfwBFlVNl4UqPhiRZbkIamg= Subject key identifier: A6:7A:B7:8F:97:29:E4:86:89:C9:1C:4E:F4:61:8C:AD:69:BF:CE:1A Authority key identifier: 99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4 Certificate issuer: /CN=99D922574ADCFE8B3741930044512F9A57EF91A4 Certificate serial: 03F7988560AD7F8C8CAF3F63323206C3BABCFBBE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft Manifest number: 020E Signing time: Mon 30 Jun 2025 05:03:35 +0000 Manifest this update: Mon 30 Jun 2025 04:58:35 +0000 Manifest next update: Tue 01 Jul 2025 09:02:35 +0000 Files and hashes: 1: 99D922574ADCFE8B3741930044512F9A57EF91A4.crl (hash: hFG+DRhgCztOWQA11cP+rydtCsCtr9cnMDKbNyYljOI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 20:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f7:98:85:60:ad:7f:8c:8c:af:3f:63:32:32:06:c3:ba:bc:fb:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99D922574ADCFE8B3741930044512F9A57EF91A4 Validity Not Before: Jun 30 04:58:35 2025 GMT Not After : Jul 1 09:02:35 2025 GMT Subject: CN=A67AB78F9729E48689C91C4EF4618CAD69BFCE1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:31:42:d2:40:df:fc:88:61:0a:44:6e:43:c2: 82:c2:73:8a:bd:0f:68:d4:d1:01:58:97:50:69:09: e7:4b:de:5e:49:8a:0a:87:4e:9f:e3:98:7a:b3:9e: 50:36:8e:98:06:9a:9b:56:a6:51:3c:03:9f:45:a3: 3d:41:c4:84:ce:db:99:46:e2:21:0d:50:d0:a1:ae: d8:48:22:6c:20:0b:e5:22:d2:e0:a5:af:c6:cd:e1: 8f:1c:d6:21:59:f8:6f:e7:99:93:26:b8:fb:b8:11: 76:21:a7:04:23:da:c3:3c:5b:01:8a:aa:f2:86:62: 0f:03:5e:fa:54:dd:ce:33:09:a1:c1:56:0a:d0:e6: 72:47:aa:39:9f:75:65:e3:f6:cf:06:87:f5:a5:a6: 72:e0:60:d2:a0:7c:39:13:e8:e4:03:3f:77:c7:08: 5c:1a:95:0e:fc:c2:22:49:2e:f5:71:80:19:f7:29: bf:b3:99:7e:cc:8c:bf:46:fe:61:b7:16:6e:ac:23: 6c:f2:aa:ab:4d:d8:07:7d:d2:2f:da:9b:6a:61:20: e4:7a:8f:d0:86:a2:17:28:5e:d4:ef:0d:da:30:37: b5:70:0f:28:0c:f4:21:dd:2c:85:f8:c4:05:a4:ee: 21:65:ab:dd:a0:08:91:89:01:b7:19:38:b0:05:80: 6a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7A:B7:8F:97:29:E4:86:89:C9:1C:4E:F4:61:8C:AD:69:BF:CE:1A X509v3 Authority Key Identifier: keyid:99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:c9:42:3f:7f:62:9b:b4:f7:91:6b:36:0c:ad:25:ab:55:1d: 38:29:ab:fd:35:4c:5b:8b:65:31:12:00:0b:85:19:6b:e0:45: c9:b6:a5:d2:65:c2:f1:f2:be:2a:da:78:27:27:17:72:34:a2: 55:5e:6a:e5:85:2e:da:0a:50:00:ea:ad:7a:79:22:d3:d7:30: 71:12:7d:a9:68:cc:10:0c:87:c4:0e:42:8d:c3:a1:b1:4f:a3: 04:e9:78:59:7d:fe:33:ca:a3:ad:a5:c6:f0:49:02:d7:09:68: d1:f9:36:39:00:a7:d8:26:47:a4:65:72:5c:79:ac:d3:45:1e: c0:95:fe:8d:5b:c4:9c:ec:35:0e:23:ee:33:cf:05:c1:a7:dd: c0:11:81:04:44:cb:b7:54:ee:f5:62:80:b4:10:e4:ae:23:47: e9:62:58:46:c3:c0:24:ec:39:d5:90:c1:8b:9b:65:eb:a0:d1: a1:1e:2c:d5:f4:a3:4a:ea:bc:99:68:88:cf:db:6f:ae:11:98: d2:e3:13:16:83:6b:3e:bb:09:7a:34:c4:3d:cf:03:16:1d:8e: 76:ad:d9:69:b4:f4:2d:fd:97:47:84:4a:8b:59:cd:34:40:f4: fa:a9:2a:63:93:81:05:3e:e3:24:7b:d8:4b:24:31:bd:9a:98: 9d:e2:1b:0c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUA/eYhWCtf4yMrz9jMjIGw7q8+74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlEOTIyNTc0QURDRkU4QjM3NDE5MzAwNDQ1MTJGOUE1 N0VGOTFBNDAeFw0yNTA2MzAwNDU4MzVaFw0yNTA3MDEwOTAyMzVaMDMxMTAvBgNV BAMTKEE2N0FCNzhGOTcyOUU0ODY4OUM5MUM0RUY0NjE4Q0FENjlCRkNFMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgMULSQN/8iGEKRG5DwoLCc4q9 D2jU0QFYl1BpCedL3l5JigqHTp/jmHqznlA2jpgGmptWplE8A59Foz1BxITO25lG 4iENUNChrthIImwgC+Ui0uClr8bN4Y8c1iFZ+G/nmZMmuPu4EXYhpwQj2sM8WwGK qvKGYg8DXvpU3c4zCaHBVgrQ5nJHqjmfdWXj9s8Gh/WlpnLgYNKgfDkT6OQDP3fH CFwalQ78wiJJLvVxgBn3Kb+zmX7MjL9G/mG3Fm6sI2zyqqtN2Ad90i/am2phIOR6 j9CGohcoXtTvDdowN7VwDygM9CHdLIX4xAWk7iFlq92gCJGJAbcZOLAFgGo9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUpnq3j5cp5IaJyRxO9GGMrWm/zhowHwYDVR0j BBgwFoAUmdkiV0rc/os3QZMARFEvmlfvkaQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzIvOTlEOTIyNTc0QURDRkU4QjM3NDE5MzAwNDQ1MTJGOUE1N0VGOTFBNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC85OUQ5MjI1NzRBRENGRThCMzc0MTkzMDA0 NDUxMkY5QTU3RUY5MUE0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZmZjdhOTg5LWVjZGYtNDNkNi04NmUxLWY2YzM5MzViOWIzZC8yLzk5RDkyMjU3 NEFEQ0ZFOEIzNzQxOTMwMDQ0NTEyRjlBNTdFRjkxQTQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxyUI/ f2KbtPeRazYMrSWrVR04Kav9NUxbi2UxEgALhRlr4EXJtqXSZcLx8r4q2ngnJxdy NKJVXmrlhS7aClAA6q16eSLT1zBxEn2paMwQDIfEDkKNw6GxT6ME6XhZff4zyqOt pcbwSQLXCWjR+TY5AKfYJkekZXJceazTRR7Alf6NW8Sc7DUOI+4zzwXBp93AEYEE RMu3VO71YoC0EOSuI0fpYlhGw8Ak7DnVkMGLm2XroNGhHizV9KNK6ryZaIjP22+u EZjS4xMWg2s+uwl6NMQ9zwMWHY52rdlptPQt/ZdHhEqLWc00QPT6qSpjk4EFPuMk e9hLJDG9mpid4hsM -----END CERTIFICATE-----Generated at Mon Jun 30 10:25:37 2025 by rpki-client