$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json) Hash identifier: sJwBGLBPVIVzgR6u9QnNuEZ9sJk2XCgFOQxbFYU6t44= Subject key identifier: B0:86:07:0E:B7:CB:4A:2B:9A:AB:AA:C5:87:3F:89:C0:36:6D:CB:88 Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Certificate serial: 01D6FD3161F366EBBC76218571B76B2D91430F42 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft Manifest number: 03FB Signing time: Sat 28 Jun 2025 23:46:00 +0000 Manifest this update: Sat 28 Jun 2025 23:41:00 +0000 Manifest next update: Mon 30 Jun 2025 02:39:00 +0000 Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: 7+P3drfAVg+Uf7WLfmSFv6dsI4w3vSQit0ELKJX8CjQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 02:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d6:fd:31:61:f3:66:eb:bc:76:21:85:71:b7:6b:2d:91:43:0f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Validity Not Before: Jun 28 23:41:00 2025 GMT Not After : Jun 30 02:39:00 2025 GMT Subject: CN=B086070EB7CB4A2B9AABAAC5873F89C0366DCB88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ad:3b:b0:38:0e:3d:37:fb:36:df:d8:47:2b: 25:b2:7b:40:9f:e4:e3:77:ea:ba:4a:5e:46:47:35: 70:ce:e1:3f:18:9d:a7:26:cb:b9:a2:4a:32:bd:bb: d4:c1:56:b9:50:b3:97:fb:52:8f:d0:f9:18:d0:b5: 9a:93:c3:2e:ba:4a:43:42:30:da:4c:c7:ec:fb:6a: 19:84:53:ef:9c:1f:f5:cf:32:bd:0a:13:16:ea:8e: 1b:2d:26:e8:1b:aa:fd:32:38:0a:05:79:79:96:b6: 03:eb:45:70:fb:39:98:c5:a2:35:d2:aa:72:55:6e: e2:ed:fd:5d:a8:34:10:ea:cf:d3:9c:42:1b:cc:e0: 1b:f3:ca:32:6e:58:0a:66:91:9c:51:6f:73:52:7f: 5e:29:e5:59:fa:8f:e4:95:56:36:e0:58:cf:1b:ee: 4c:62:18:11:b6:8b:ee:13:bb:fe:b3:09:77:ae:7b: 1b:d1:ca:c7:32:5a:4a:94:7f:33:a9:bf:5f:18:7c: bb:d1:5c:f7:b6:73:f5:17:47:81:d6:6e:3b:25:aa: 81:ec:04:2b:16:92:12:cf:ab:cb:ed:23:2e:57:9c: f8:9b:4d:36:5b:b7:8e:28:22:47:28:77:63:83:4a: 68:53:4f:b7:bf:f5:fa:db:6f:7a:fc:0e:4a:3c:d9: 1c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:86:07:0E:B7:CB:4A:2B:9A:AB:AA:C5:87:3F:89:C0:36:6D:CB:88 X509v3 Authority Key Identifier: keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:bb:6d:2f:d8:7e:67:9a:fc:69:05:ed:a7:dd:ee:05:11:c8: 39:f3:b1:83:f5:c6:25:08:8d:4b:67:e4:bc:01:3a:4a:95:c1: 66:27:f0:7f:de:9b:0c:b3:f1:93:59:66:7f:e5:ac:ab:10:2b: 36:c3:fb:1b:b2:5f:5d:b7:f9:63:7c:ee:db:a8:5e:af:9e:73: fa:82:b4:5d:7c:bf:f1:2b:5f:88:ba:0d:2e:73:7b:98:40:dd: 60:58:61:a9:8b:69:9e:a9:bd:5b:85:dd:24:56:be:a1:5a:67: e9:8c:20:cd:04:f9:d1:65:3f:f6:5e:2c:7a:52:e1:99:cf:0a: 87:33:a6:66:26:3c:2f:a4:a3:85:7e:6b:71:69:6f:f0:fd:c4: 77:1e:aa:29:5d:93:8d:77:2a:df:6f:b5:6d:3f:65:e4:d8:92: e7:d2:10:3a:6c:c3:ff:a6:2b:33:97:73:2d:e8:b7:86:3f:a4: e8:67:3d:19:b8:a7:06:49:12:ce:c3:c3:60:90:ad:53:21:55: af:8b:b6:58:ca:57:b3:7f:2e:40:7c:1e:1d:70:99:0d:eb:43: 1b:2f:a7:0e:d5:31:98:a9:06:f1:3f:57:91:4b:1a:19:87:9e: 6f:e7:ff:ef:63:35:8b:8f:6d:4d:f5:2d:2f:12:d4:9f:e1:d6: 58:89:f4:8c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUAdb9MWHzZuu8diGFcbdrLZFDD0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUx RDA0MEEzMDAeFw0yNTA2MjgyMzQxMDBaFw0yNTA2MzAwMjM5MDBaMDMxMTAvBgNV BAMTKEIwODYwNzBFQjdDQjRBMkI5QUFCQUFDNTg3M0Y4OUMwMzY2RENCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHrTuwOA49N/s239hHKyWye0Cf 5ON36rpKXkZHNXDO4T8Ynacmy7miSjK9u9TBVrlQs5f7Uo/Q+RjQtZqTwy66SkNC MNpMx+z7ahmEU++cH/XPMr0KExbqjhstJugbqv0yOAoFeXmWtgPrRXD7OZjFojXS qnJVbuLt/V2oNBDqz9OcQhvM4BvzyjJuWApmkZxRb3NSf14p5Vn6j+SVVjbgWM8b 7kxiGBG2i+4Tu/6zCXeuexvRyscyWkqUfzOpv18YfLvRXPe2c/UXR4HWbjslqoHs BCsWkhLPq8vtIy5XnPibTTZbt44oIkcod2ODSmhTT7e/9frbb3r8Dko82RxtAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUsIYHDrfLSiuaq6rFhz+JwDZty4gwHwYDVR0j BBgwFoAUDk68Qx41E/w/ZB24gOKy/h0ECjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzEvMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUxRDA0MEEzMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00YjFhLTQ2 ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC8wRTRFQkM0MzFFMzUxM0ZDM0Y2NDFEQjg4 MEUyQjJGRTFEMDQwQTMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzgxMTE1YmM2LTEwZjYtNGFmMy1iYTA5LThiNjg3YTU2ZmJmNS8xLzBFNEVCQzQz MUUzNTEzRkMzRjY0MURCODgwRTJCMkZFMUQwNDBBMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBu20v 2H5nmvxpBe2n3e4FEcg587GD9cYlCI1LZ+S8ATpKlcFmJ/B/3psMs/GTWWZ/5ayr ECs2w/sbsl9dt/ljfO7bqF6vnnP6grRdfL/xK1+Iug0uc3uYQN1gWGGpi2meqb1b hd0kVr6hWmfpjCDNBPnRZT/2Xix6UuGZzwqHM6ZmJjwvpKOFfmtxaW/w/cR3Hqop XZONdyrfb7VtP2Xk2JLn0hA6bMP/piszl3Mt6LeGP6ToZz0ZuKcGSRLOw8NgkK1T IVWvi7ZYylezfy5AfB4dcJkN60MbL6cO1TGYqQbxP1eRSxoZh55v5//vYzWLj21N 9S0vEtSf4dZYifSM -----END CERTIFICATE-----Generated at Sun Jun 29 09:47:28 2025 by rpki-client