$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: FxIlhfxct7G4vH8xLjfhGWy5Xuq/UNsAD809RNz30ag= Subject key identifier: 75:B3:C2:68:A8:25:EE:90:0A:43:15:E6:29:AA:D3:6C:80:CA:6C:1F Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 725CFDC55B4031E89946FDA2BAA3590C5EB9CC3E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 02B0 Signing time: Sat 23 Aug 2025 02:40:23 +0000 Manifest this update: Sat 23 Aug 2025 02:35:23 +0000 Manifest next update: Sun 24 Aug 2025 03:54:23 +0000 Files and hashes: 1: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: VQ/IRozPlcmYYo0jn9gD+fgX9fQdLgaqr+rdJEzMaMY=) 2: 326131343a316563373a663030653a3a2f34382d3438203d3e203336383332.roa (hash: 0dTOq5r3nzcU4nhnM0SPSmfHWBkaaGJU3KJhAxTcvLU=) 3: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: kUd+OV7q9DAowS2L3/fdq/oS4HUMTFtScny+gWU7CG0=) 4: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: RA+L2a9rUnQEkE0h3dE9SdgUVHKokLJZl3eEmnwupDU=) 5: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: dUzgpny38MghrKpugSdB9dzvd5zDywxo+PBsCyfJHn4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 02:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:5c:fd:c5:5b:40:31:e8:99:46:fd:a2:ba:a3:59:0c:5e:b9:cc:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Aug 23 02:35:23 2025 GMT Not After : Aug 24 03:54:23 2025 GMT Subject: CN=75B3C268A825EE900A4315E629AAD36C80CA6C1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:91:fc:c6:7e:07:ba:9d:50:5e:19:8e:42: 57:9f:57:9e:e8:70:fe:73:cd:9c:18:5a:e8:8d:4e: e2:44:da:e2:7a:d4:07:2d:de:cd:d3:83:63:f2:1b: 5e:03:8d:06:5d:22:c9:5d:a4:21:6c:73:cf:11:5f: 14:a7:34:43:af:3e:c5:3d:d2:0d:ea:7f:22:5b:ec: 10:4f:78:d8:05:66:a3:02:fe:f5:24:69:18:9e:84: 26:08:bd:9f:6c:d4:73:a6:78:2b:db:6e:39:02:9a: ec:a9:64:de:f5:f6:0d:03:b2:66:17:e0:96:a5:a8: 22:59:08:f5:db:19:5c:a1:f4:cb:04:cf:7b:fa:27: 83:7c:f3:27:06:45:b2:a4:9f:92:f8:69:58:13:6e: df:2b:8a:80:1b:45:5e:80:0c:8b:72:50:a2:66:4b: da:6d:50:57:ba:29:1d:f5:e6:2e:3c:70:fc:53:44: a9:4d:b8:24:ee:b1:ad:5a:12:a5:e2:8e:b1:57:d7: c9:ba:b9:04:07:5c:e1:d1:d3:5a:25:f4:82:5d:06: 06:c9:29:6f:ea:f8:b8:18:8f:f9:cf:17:d4:dd:0f: 5c:19:0a:8f:29:50:1a:53:0e:79:17:d7:de:f1:ee: 44:26:db:a6:84:bf:21:eb:f6:f7:ed:9b:64:15:09: 5e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B3:C2:68:A8:25:EE:90:0A:43:15:E6:29:AA:D3:6C:80:CA:6C:1F X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:53:33:05:8d:6f:00:84:5a:03:fa:b2:2f:3f:c7:de:91:f4: fd:cc:0a:bf:e0:59:40:12:e1:48:1c:45:be:df:f0:05:62:6d: 87:60:29:36:9e:e8:58:70:46:4b:76:8f:37:fd:b2:30:8f:5e: b5:d1:ed:69:58:78:e8:ec:4a:7e:ff:71:8a:eb:e1:0d:f5:68: e4:ba:03:44:f9:b4:ac:2f:ac:aa:87:1f:b1:44:78:1e:e1:cb: 65:32:c8:18:a7:96:aa:5f:6e:5c:66:1c:19:5e:70:b2:44:a3: 78:ab:72:a0:23:3d:39:fb:b7:43:59:6d:90:65:d7:b0:33:fd: a5:86:e1:6f:e7:46:eb:bb:76:5d:b5:18:e1:29:a3:7c:7c:9b: 53:c5:76:54:64:ca:06:cd:ef:0a:b8:df:1c:b9:b7:76:c3:0b: 63:1b:b1:22:ff:db:5e:ed:29:c4:de:5f:ab:9f:c2:6c:ce:9e: ba:c0:b3:40:16:a3:52:d1:b2:4d:69:05:96:fc:37:60:66:1d: b6:8e:18:07:f5:fb:21:52:27:03:5d:bf:d6:85:dd:58:6a:61: fb:c1:20:36:b0:ca:52:ee:a3:45:64:e0:81:48:5b:05:5e:38: ff:1a:77:38:5f:a3:b6:2f:80:9a:8c:e1:dd:fb:10:e4:5d:d5: 30:b3:75:5f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUclz9xVtAMeiZRv2iuqNZDF65zD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNTA4MjMwMjM1MjNaFw0yNTA4MjQwMzU0MjNaMDMxMTAvBgNV BAMTKDc1QjNDMjY4QTgyNUVFOTAwQTQzMTVFNjI5QUFEMzZDODBDQTZDMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfZH8xn4Hup1QXhmOQlefV57o cP5zzZwYWuiNTuJE2uJ61Act3s3Tg2PyG14DjQZdIsldpCFsc88RXxSnNEOvPsU9 0g3qfyJb7BBPeNgFZqMC/vUkaRiehCYIvZ9s1HOmeCvbbjkCmuypZN719g0DsmYX 4JalqCJZCPXbGVyh9MsEz3v6J4N88ycGRbKkn5L4aVgTbt8rioAbRV6ADItyUKJm S9ptUFe6KR315i48cPxTRKlNuCTusa1aEqXijrFX18m6uQQHXOHR01ol9IJdBgbJ KW/q+LgYj/nPF9TdD1wZCo8pUBpTDnkX197x7kQm26aEvyHr9vftm2QVCV6TAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUdbPCaKgl7pAKQxXmKarTbIDKbB8wHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAEUzMF jW8AhFoD+rIvP8fekfT9zAq/4FlAEuFIHEW+3/AFYm2HYCk2nuhYcEZLdo83/bIw j1610e1pWHjo7Ep+/3GK6+EN9WjkugNE+bSsL6yqhx+xRHge4ctlMsgYp5aqX25c ZhwZXnCyRKN4q3KgIz05+7dDWW2QZdewM/2lhuFv50bru3ZdtRjhKaN8fJtTxXZU ZMoGze8KuN8cubd2wwtjG7Ei/9te7SnE3l+rn8Jszp66wLNAFqNS0bJNaQWW/Ddg Zh22jhgH9fshUicDXb/Whd1YamH7wSA2sMpS7qNFZOCBSFsFXjj/Gnc4X6O2L4Ca jOHd+xDkXdUws3Vf -----END CERTIFICATE-----Generated at Sat Aug 23 20:11:01 2025 by rpki-client