$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft File: 307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json) Hash identifier: Why1ILASw0ZTfhSogT7yS7WVqUX+492D6PYH4hpNRiw= Subject key identifier: 3F:41:3E:D0:61:77:F5:4A:90:EC:FF:73:42:DA:60:E0:F5:E6:A6:E8 Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 Certificate issuer: /CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Certificate serial: 76291EB23DB32D7189472334AF944472DE8BAE80 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft Manifest number: 2E Signing time: Sat 23 Aug 2025 09:23:03 +0000 Manifest this update: Sat 23 Aug 2025 09:18:03 +0000 Manifest next update: Sun 24 Aug 2025 11:54:03 +0000 Files and hashes: 1: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: 8mpcRNKzp7UYjkZR9Xe+HPEPFWpTeWHPX/SfpW3stGg=) 2: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: aBp6U2aVMH3hSM5eeFVi+p63pJd0WYDoQYC72uEJ/w8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 11:54:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:29:1e:b2:3d:b3:2d:71:89:47:23:34:af:94:44:72:de:8b:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Validity Not Before: Aug 23 09:18:03 2025 GMT Not After : Aug 24 11:54:03 2025 GMT Subject: CN=3F413ED06177F54A90ECFF7342DA60E0F5E6A6E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d9:c7:cd:82:c3:2a:88:25:0f:a9:aa:4d:d8: 84:07:59:6c:af:2d:36:46:f5:21:1a:3e:4b:1c:e7: 8c:dd:cd:49:5b:05:b7:ea:69:f4:43:ef:a5:d7:5d: da:39:a4:7a:7c:98:f4:52:eb:f6:cf:ff:68:6d:75: 92:15:da:75:b7:07:05:67:21:f0:cd:68:61:66:54: 7e:48:3b:1d:57:7e:8c:f2:ba:d8:06:fa:6b:74:42: 34:b3:c2:4e:5b:13:ba:7f:d9:91:3b:81:fb:eb:63: f3:aa:85:d2:e3:0e:4d:80:1b:aa:27:cc:eb:cd:9c: 80:cd:6c:75:ac:e6:62:6e:3a:93:f0:0a:84:2e:58: 11:a4:5f:d5:25:db:d1:d9:ca:c8:18:f8:36:da:41: fe:71:51:a8:7c:b1:5c:09:9a:a3:63:5c:23:c6:d1: df:1e:78:7a:9f:52:a5:2a:70:e2:9d:5c:39:b8:8f: 1e:b2:aa:b2:57:56:24:b2:ee:80:1b:2e:ea:2a:02: ea:59:c7:aa:a9:42:86:51:00:57:bc:bf:11:de:31: 95:25:a4:8b:2a:5d:94:5a:73:5d:9b:1d:d5:5d:52: 98:a4:e0:0d:4d:b1:50:4e:f3:88:f9:21:3d:5e:66: 04:b0:ec:d9:62:4c:16:d6:76:5d:ef:80:b9:7c:fc: 7d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:41:3E:D0:61:77:F5:4A:90:EC:FF:73:42:DA:60:E0:F5:E6:A6:E8 X509v3 Authority Key Identifier: keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:da:3d:47:2d:48:70:c0:a5:61:97:ba:2a:71:c7:ef:ee:12: a7:4e:54:b9:2d:67:68:15:42:d9:a7:34:47:16:5d:c1:15:41: b9:5e:ed:81:a2:73:63:5b:19:44:fd:16:49:8d:44:9d:df:0c: da:ba:27:b7:a5:b9:d0:02:4a:12:51:a8:23:eb:30:41:01:04: 15:fe:25:cc:d9:8a:43:0c:e7:12:a6:80:d8:4b:84:9f:f9:10: 0e:ae:b5:96:95:53:62:d1:39:2a:99:4b:91:41:c2:43:a3:29: 33:32:60:16:da:a6:11:b1:61:6f:ab:98:13:af:35:18:83:59: d8:bb:6a:97:d4:87:0e:dd:35:c6:97:77:d8:a3:81:b9:cf:0a: 36:f1:4d:b8:ab:d0:51:7d:6c:cd:1d:a2:83:1f:2b:64:04:7c: b7:65:a9:fe:fd:18:a8:53:8a:34:e7:2d:32:07:4e:6a:1c:13: cc:b1:e3:76:7d:aa:0c:de:71:48:dc:42:25:41:a4:74:28:35: d5:c6:65:4b:12:14:73:5a:c4:41:07:dd:1f:10:8d:85:90:6c: de:58:69:f1:8d:a9:b1:de:6d:2b:73:d4:52:ff:12:ff:0f:12: 86:00:9e:01:0f:25:55:1b:72:dc:87:f4:e6:d4:c5:99:a0:39: 47:7b:92:92 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUdikesj2zLXGJRyM0r5REct6LroAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVC NEU5RTBGMDAeFw0yNTA4MjMwOTE4MDNaFw0yNTA4MjQxMTU0MDNaMDMxMTAvBgNV BAMTKDNGNDEzRUQwNjE3N0Y1NEE5MEVDRkY3MzQyREE2MEUwRjVFNkE2RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2cfNgsMqiCUPqapN2IQHWWyv LTZG9SEaPksc54zdzUlbBbfqafRD76XXXdo5pHp8mPRS6/bP/2htdZIV2nW3BwVn IfDNaGFmVH5IOx1XfozyutgG+mt0QjSzwk5bE7p/2ZE7gfvrY/OqhdLjDk2AG6on zOvNnIDNbHWs5mJuOpPwCoQuWBGkX9Ul29HZysgY+DbaQf5xUah8sVwJmqNjXCPG 0d8eeHqfUqUqcOKdXDm4jx6yqrJXViSy7oAbLuoqAupZx6qpQoZRAFe8vxHeMZUl pIsqXZRac12bHdVdUpik4A1NsVBO84j5IT1eZgSw7NliTBbWdl3vgLl8/H2vAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUP0E+0GF39UqQ7P9zQtpg4PXmpugwHwYDVR0j BBgwFoAUMHRW4DoR27SEQ+k1OJWLFbTp4PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5RTBGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5 RTBGMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS8zMDc0NTZFMDNBMTFEQkI0ODQ0 M0U5MzUzODk1OEIxNUI0RTlFMEYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnto9Ry1IcMClYZe6KnHH 7+4Sp05UuS1naBVC2ac0RxZdwRVBuV7tgaJzY1sZRP0WSY1End8M2ront6W50AJK ElGoI+swQQEEFf4lzNmKQwznEqaA2EuEn/kQDq61lpVTYtE5KplLkUHCQ6MpMzJg FtqmEbFhb6uYE681GINZ2Ltql9SHDt01xpd32KOBuc8KNvFNuKvQUX1szR2igx8r ZAR8t2Wp/v0YqFOKNOctMgdOahwTzLHjdn2qDN5xSNxCJUGkdCg11cZlSxIUc1rE QQfdHxCNhZBs3lhp8Y2psd5tK3PUUv8S/w8ShgCeAQ8lVRty3If05tTFmaA5R3uS kg== -----END CERTIFICATE-----Generated at Sat Aug 23 21:19:44 2025 by rpki-client