$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: jQF7lIrwB8HNFiM1+3ofHjSiznIuMBg6qGKBc6E1q2c= Subject key identifier: 7A:3B:B2:69:47:6A:EB:66:4F:85:5A:E7:91:77:A5:E5:BB:BE:62:04 Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 6D17891D636BAF9745E0598BA542F7B33E1FD867 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: 44 Signing time: Sun 24 Aug 2025 00:10:23 +0000 Manifest this update: Sun 24 Aug 2025 00:05:23 +0000 Manifest next update: Mon 25 Aug 2025 03:34:23 +0000 Files and hashes: 1: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: PoxwFIHy8kdey2mlHnL1hmx4hhF1/GhCPxY1mv6kDWE=) 2: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: BuHPesn/LP5KmzQRcA/cfwE6Cbg4th7qmHTLiSzRxio=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 13:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:17:89:1d:63:6b:af:97:45:e0:59:8b:a5:42:f7:b3:3e:1f:d8:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Aug 24 00:05:23 2025 GMT Not After : Aug 25 03:34:23 2025 GMT Subject: CN=7A3BB269476AEB664F855AE79177A5E5BBBE6204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7b:90:07:13:46:89:13:87:a3:17:47:ce:98: d9:77:0d:65:58:92:b1:af:b1:ee:c4:9e:69:c6:8d: 41:70:0a:40:d6:77:c2:3e:b5:a2:ac:01:ca:ea:0a: 0d:d0:8f:bb:1a:43:75:b1:51:6a:f6:65:a1:ab:95: 5b:95:a4:56:4e:f4:92:c9:2b:8f:e7:42:db:cd:02: 4e:e8:93:01:d3:20:b2:50:e2:b8:c4:0f:3b:32:f7: 62:ee:c1:c2:6c:ba:98:b8:46:97:89:5a:27:75:fc: 9b:4d:c6:ec:06:29:c7:1c:05:8e:de:a3:f8:dc:fe: f9:95:ea:36:1b:0e:5e:71:d2:b5:b1:87:60:36:a1: b2:e6:cd:ad:87:6d:27:6c:a9:71:eb:56:1a:15:a1: 45:eb:54:d2:8e:cb:d8:87:40:25:8c:b1:d0:fb:58: af:e9:fe:4f:02:30:1f:a5:7f:d0:c8:c4:2e:b6:2d: b0:7e:f2:37:67:3c:c7:4c:f3:99:1e:c1:1a:3f:54: db:de:9b:e4:a9:92:a8:6f:98:81:00:4e:fc:0c:b7: d1:f0:a4:15:c3:64:81:6b:67:6e:43:01:9f:15:ff: 4c:07:4d:bb:1a:12:74:37:6f:c2:4d:2b:e5:71:a9: 00:46:fa:bc:db:63:07:b1:bf:bf:f3:59:a2:1a:4d: 51:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3B:B2:69:47:6A:EB:66:4F:85:5A:E7:91:77:A5:E5:BB:BE:62:04 X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:33:e7:6f:c5:fa:b6:e0:46:13:be:16:a0:83:62:6c:45:83: 7e:6b:46:7e:63:de:77:72:db:f8:0d:9b:2a:f6:a8:99:e5:05: d9:f8:0d:35:9a:ac:f4:97:dd:d8:ba:4b:f4:17:40:2e:c1:c3: 65:74:d3:ce:df:90:a4:70:f9:52:79:18:20:b2:37:01:22:d9: 0f:d2:14:58:31:c1:a8:3c:32:a8:92:30:02:9f:07:eb:b8:cc: 33:8d:79:aa:6e:ab:a9:54:99:ec:0f:14:52:d3:73:d9:d3:06: 51:9d:15:a4:cd:7f:1e:8f:dd:61:c8:f4:8d:e7:17:5e:d4:2a: 69:8f:a0:23:1e:bf:64:f1:fe:6c:78:21:a2:bf:20:71:29:e6: 61:5f:79:3c:59:05:b8:fd:c6:81:21:a7:79:e7:a8:1a:b5:79: e1:2b:05:2e:1b:28:6d:10:47:65:64:d7:03:c0:90:8b:be:1c: 5c:02:7c:97:38:e1:98:f1:ad:82:c1:fe:69:a4:b4:5f:e5:48: f1:75:3b:62:5f:d4:66:21:d5:e8:fb:92:3a:7d:96:28:94:7b: 5a:35:3c:2b:99:c0:00:56:3d:a8:e3:ee:2b:77:94:bc:7c:21: b7:a3:c2:34:69:89:cc:51:8d:83:e8:04:4c:26:87:19:a9:5a: f2:46:6c:e8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbReJHWNrr5dF4FmLpUL3sz4f2GcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNTA4MjQwMDA1MjNaFw0yNTA4MjUwMzM0MjNaMDMxMTAvBgNV BAMTKDdBM0JCMjY5NDc2QUVCNjY0Rjg1NUFFNzkxNzdBNUU1QkJCRTYyMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2e5AHE0aJE4ejF0fOmNl3DWVY krGvse7EnmnGjUFwCkDWd8I+taKsAcrqCg3Qj7saQ3WxUWr2ZaGrlVuVpFZO9JLJ K4/nQtvNAk7okwHTILJQ4rjEDzsy92LuwcJsupi4RpeJWid1/JtNxuwGKcccBY7e o/jc/vmV6jYbDl5x0rWxh2A2obLmza2HbSdsqXHrVhoVoUXrVNKOy9iHQCWMsdD7 WK/p/k8CMB+lf9DIxC62LbB+8jdnPMdM85kewRo/VNvem+SpkqhvmIEATvwMt9Hw pBXDZIFrZ25DAZ8V/0wHTbsaEnQ3b8JNK+VxqQBG+rzbYwexv7/zWaIaTVFXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUejuyaUdq62ZPhVrnkXel5bu+YgQwHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDBM+dv xfq24EYTvhagg2JsRYN+a0Z+Y953ctv4DZsq9qiZ5QXZ+A01mqz0l93Yukv0F0Au wcNldNPO35CkcPlSeRggsjcBItkP0hRYMcGoPDKokjACnwfruMwzjXmqbqupVJns DxRS03PZ0wZRnRWkzX8ej91hyPSN5xde1Cppj6AjHr9k8f5seCGivyBxKeZhX3k8 WQW4/caBIad556gatXnhKwUuGyhtEEdlZNcDwJCLvhxcAnyXOOGY8a2Cwf5ppLRf 5UjxdTtiX9RmIdXo+5I6fZYolHtaNTwrmcAAVj2o4+4rd5S8fCG3o8I0aYnMUY2D 6ARMJocZqVryRmzo -----END CERTIFICATE-----Generated at Sun Aug 24 03:27:23 2025 by rpki-client