$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: z7X3HxjRe6rvvlq55491iG0LABM8BmlEPd9lZMgF3mc= Subject key identifier: A6:D5:2A:7E:6D:A8:85:5E:8B:CD:A5:61:B7:71:C5:79:EF:14:A9:B7 Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 2EDC361896D23A21061DD6994F4DFB6ADB4087F0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 0268 Signing time: Mon 30 Jun 2025 08:41:35 +0000 Manifest this update: Mon 30 Jun 2025 08:36:35 +0000 Manifest next update: Tue 01 Jul 2025 09:42:35 +0000 Files and hashes: 1: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: RA+L2a9rUnQEkE0h3dE9SdgUVHKokLJZl3eEmnwupDU=) 2: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: dUzgpny38MghrKpugSdB9dzvd5zDywxo+PBsCyfJHn4=) 3: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: kUd+OV7q9DAowS2L3/fdq/oS4HUMTFtScny+gWU7CG0=) 4: 326131343a316563373a663030653a3a2f34382d3438203d3e203336383332.roa (hash: 0dTOq5r3nzcU4nhnM0SPSmfHWBkaaGJU3KJhAxTcvLU=) 5: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: VjLw2e2OJPAwxdFyBIYoqN5TiNg7STHVo3D9maEdJMU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 04:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:dc:36:18:96:d2:3a:21:06:1d:d6:99:4f:4d:fb:6a:db:40:87:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Jun 30 08:36:35 2025 GMT Not After : Jul 1 09:42:35 2025 GMT Subject: CN=A6D52A7E6DA8855E8BCDA561B771C579EF14A9B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:38:2b:d7:68:6d:c5:61:b6:06:98:3b:8c:83: 07:13:f9:96:47:87:dd:1c:f6:1f:7c:14:ba:c9:64: ef:24:6f:09:f0:2d:7f:b6:c2:a2:f5:d4:a2:2a:e4: c8:85:67:54:ad:7c:19:d8:8a:6c:13:3f:08:8b:23: f8:6f:10:4e:a9:0c:ef:33:d7:57:75:d7:75:50:41: 58:7c:27:0d:9e:7b:7d:98:34:dc:b3:e8:86:b1:a4: 34:03:42:71:00:64:c9:cc:26:eb:41:c7:1f:2a:ed: 49:f5:87:5b:1f:2a:5d:14:4a:4d:b5:f5:74:41:bf: fd:3a:b7:07:d3:7a:91:65:0f:fa:e1:4d:23:67:a5: 42:93:b6:fb:a5:f2:42:37:41:40:f2:c4:3f:a2:69: 5b:02:37:b5:31:2e:91:47:91:19:d8:19:9f:10:c5: bd:9e:a3:83:96:7f:d2:c4:c3:34:f3:c9:c0:df:4a: 65:60:51:66:32:c2:17:74:ba:10:35:e9:db:4d:5d: 2b:94:4d:70:bc:dc:b7:cc:97:13:9b:75:b1:c5:a4: bc:2c:38:65:46:82:f8:7a:25:a9:a4:65:38:5f:75: 63:f7:29:8c:01:ef:4a:d3:b2:64:40:47:58:ce:9f: 60:d9:59:80:fc:32:c1:c9:be:09:62:a4:42:7f:9c: c0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D5:2A:7E:6D:A8:85:5E:8B:CD:A5:61:B7:71:C5:79:EF:14:A9:B7 X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:85:89:ca:99:74:1f:63:2d:b5:ff:8c:5b:83:8e:dd:e2:e4: 2d:c0:a7:8f:a1:db:64:48:6d:96:4f:e1:1f:92:ff:6a:f3:1d: ac:44:9d:aa:c3:af:b3:c8:bd:8b:a8:8d:65:49:6b:2c:44:46: 14:2c:5c:a1:38:eb:7c:51:62:43:40:e3:f1:bc:d0:90:87:80: 81:cc:7b:08:e1:80:2a:0b:6c:89:47:bb:6b:06:e8:86:99:38: a6:b3:09:46:e5:c4:23:f8:32:01:5d:97:59:08:7f:66:09:a6: b5:c1:91:a7:4d:3c:d9:eb:6f:52:b8:c9:b0:c0:9d:b9:36:c3: a2:c1:56:bc:ae:55:1c:31:76:e0:2f:68:02:36:e9:ec:39:ed: 9f:9c:41:d7:82:b3:ae:f1:ef:c6:42:e7:a8:5c:6c:e2:2e:5e: a2:d8:9e:42:36:be:35:ce:c2:e2:65:cf:bf:f7:fb:2d:cd:8f: bb:73:ec:31:b4:88:6d:2c:cc:e6:f8:95:71:92:15:f2:22:c9: af:0e:7a:b3:ce:12:4b:ea:b7:8a:52:02:c1:0d:95:18:0d:64: be:e5:bf:43:39:eb:87:a9:a8:87:2a:6e:65:6f:5d:2d:5d:03: 47:aa:81:11:63:0e:98:60:80:cd:9e:40:aa:a9:f3:02:07:50: 79:7f:54:97 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULtw2GJbSOiEGHdaZT037attAh/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNTA2MzAwODM2MzVaFw0yNTA3MDEwOTQyMzVaMDMxMTAvBgNV BAMTKEE2RDUyQTdFNkRBODg1NUU4QkNEQTU2MUI3NzFDNTc5RUYxNEE5QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQOCvXaG3FYbYGmDuMgwcT+ZZH h90c9h98FLrJZO8kbwnwLX+2wqL11KIq5MiFZ1StfBnYimwTPwiLI/hvEE6pDO8z 11d113VQQVh8Jw2ee32YNNyz6IaxpDQDQnEAZMnMJutBxx8q7Un1h1sfKl0USk21 9XRBv/06twfTepFlD/rhTSNnpUKTtvul8kI3QUDyxD+iaVsCN7UxLpFHkRnYGZ8Q xb2eo4OWf9LEwzTzycDfSmVgUWYywhd0uhA16dtNXSuUTXC83LfMlxObdbHFpLws OGVGgvh6JamkZThfdWP3KYwB70rTsmRAR1jOn2DZWYD8MsHJvglipEJ/nMCJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUptUqfm2ohV6LzaVht3HFee8UqbcwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBhhYnK mXQfYy21/4xbg47d4uQtwKePodtkSG2WT+Efkv9q8x2sRJ2qw6+zyL2LqI1lSWss REYULFyhOOt8UWJDQOPxvNCQh4CBzHsI4YAqC2yJR7trBuiGmTimswlG5cQj+DIB XZdZCH9mCaa1wZGnTTzZ629SuMmwwJ25NsOiwVa8rlUcMXbgL2gCNunsOe2fnEHX grOu8e/GQueoXGziLl6i2J5CNr41zsLiZc+/9/stzY+7c+wxtIhtLMzm+JVxkhXy IsmvDnqzzhJL6reKUgLBDZUYDWS+5b9DOeuHqaiHKm5lb10tXQNHqoERYw6YYIDN nkCqqfMCB1B5f1SX -----END CERTIFICATE-----Generated at Mon Jun 30 12:21:10 2025 by rpki-client