$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json) Hash identifier: 2uYZRvJrF+bbEau9d8Qtrmai2VSNTD1Uk2TeEWhlVas= Subject key identifier: 9F:73:5F:B8:9E:0C:87:CC:7E:51:85:33:BF:35:0A:4E:5E:B9:BC:F3 Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Certificate serial: 5AB1B17D18C2381B7AA79046EDDB0B2AAB600928 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft Manifest number: 044F Signing time: Sat 23 Aug 2025 15:10:11 +0000 Manifest this update: Sat 23 Aug 2025 15:05:11 +0000 Manifest next update: Sun 24 Aug 2025 15:24:11 +0000 Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: Hyhf19jko7vCFBV/OcGpwsK9SAbEyKzAyBm9Dn7MW60=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 15:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b1:b1:7d:18:c2:38:1b:7a:a7:90:46:ed:db:0b:2a:ab:60:09:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Validity Not Before: Aug 23 15:05:11 2025 GMT Not After : Aug 24 15:24:11 2025 GMT Subject: CN=9F735FB89E0C87CC7E518533BF350A4E5EB9BCF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:39:8f:dc:94:be:01:6c:0a:2a:7a:ba:e0:56: f7:e0:1b:26:f5:49:52:60:6b:1f:d4:82:3d:d0:89: 68:b4:a6:41:82:02:3e:65:cf:78:c7:f3:34:ca:59: a7:04:7f:d3:09:2f:33:cd:5b:d5:9c:a1:ce:5a:c4: a3:d1:e4:52:54:11:dd:e3:89:12:8c:4d:6c:42:2e: 9e:20:1e:00:f3:ed:94:68:3c:fd:6d:54:38:08:53: 86:a5:4b:34:d7:6b:09:dd:13:f5:66:ab:c2:97:63: 4d:7d:ef:72:17:f1:ef:74:de:bb:70:c5:27:7a:92: b1:ee:89:f3:a1:d0:d8:80:f3:d5:6f:8a:32:c5:3a: 2e:c1:35:75:58:a6:7d:2f:f3:93:e4:0c:af:34:24: e5:ae:6b:96:4c:49:b5:7d:8c:41:42:19:b8:e0:61: e1:10:6b:fb:64:20:e5:cf:eb:a9:8b:4e:00:cb:db: 98:6b:39:d2:5f:99:0a:67:11:f0:e3:71:e7:70:64: 48:35:95:95:e1:84:e4:e9:3d:34:34:6e:dd:80:22: 82:cb:b1:d8:b3:43:31:c7:b0:ad:ae:7e:bb:3f:fe: 05:99:27:50:4b:e9:b4:4c:96:3e:20:8c:2d:95:77: b7:bf:3d:05:13:68:05:dc:05:77:aa:83:f4:dd:6f: ee:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:73:5F:B8:9E:0C:87:CC:7E:51:85:33:BF:35:0A:4E:5E:B9:BC:F3 X509v3 Authority Key Identifier: keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0e:3c:b0:c4:60:05:0b:3f:9e:4c:11:df:aa:c7:7e:fc:08: d3:9e:f2:f4:11:cc:6b:54:b3:55:55:ef:67:38:b5:f3:f4:c2: d8:f7:23:ae:91:66:88:16:3e:d4:1e:69:76:35:cf:7c:e9:98: 18:17:5f:ba:6a:5a:30:3f:36:70:34:7a:d3:cb:9c:fc:d0:14: 27:ca:74:9a:8b:e6:c8:9e:59:2d:89:6d:ae:a4:9b:f9:c1:03: f2:6a:7e:b3:82:e2:c9:d9:a1:5f:e3:5c:3d:57:f3:65:98:86: 1b:9c:17:ec:68:42:53:cc:32:41:1e:64:b1:a5:c4:f3:3e:73: ff:23:4b:ef:43:21:56:00:ac:68:ec:3a:24:b5:32:8a:52:38: ca:4e:3e:94:ec:cd:37:44:b1:1f:09:db:5a:d7:58:82:79:0c: b2:cf:cc:be:bc:94:0a:e4:1f:7f:19:07:21:af:eb:9e:32:59: a8:3b:d8:bc:06:b9:2f:0e:1d:02:81:28:74:63:e0:5d:05:09: dc:19:76:82:4c:aa:a4:dc:aa:61:af:2d:a9:fa:f3:ab:32:0d: 46:e6:02:a7:3c:b5:ad:f4:fd:a3:08:38:e0:de:18:31:b3:d7: 2a:7a:67:0f:6a:22:e1:10:2c:19:f5:fe:56:b2:48:0d:72:6b: 00:ba:33:d0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWrGxfRjCOBt6p5BG7dsLKqtgCSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUx RDA0MEEzMDAeFw0yNTA4MjMxNTA1MTFaFw0yNTA4MjQxNTI0MTFaMDMxMTAvBgNV BAMTKDlGNzM1RkI4OUUwQzg3Q0M3RTUxODUzM0JGMzUwQTRFNUVCOUJDRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmOY/clL4BbAoqerrgVvfgGyb1 SVJgax/Ugj3QiWi0pkGCAj5lz3jH8zTKWacEf9MJLzPNW9Wcoc5axKPR5FJUEd3j iRKMTWxCLp4gHgDz7ZRoPP1tVDgIU4alSzTXawndE/Vmq8KXY01973IX8e903rtw xSd6krHuifOh0NiA89VvijLFOi7BNXVYpn0v85PkDK80JOWua5ZMSbV9jEFCGbjg YeEQa/tkIOXP66mLTgDL25hrOdJfmQpnEfDjcedwZEg1lZXhhOTpPTQ0bt2AIoLL sdizQzHHsK2ufrs//gWZJ1BL6bRMlj4gjC2Vd7e/PQUTaAXcBXeqg/Tdb+7RAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUn3NfuJ4Mh8x+UYUzvzUKTl65vPMwHwYDVR0j BBgwFoAUDk68Qx41E/w/ZB24gOKy/h0ECjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzEvMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUxRDA0MEEzMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00YjFhLTQ2 ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC8wRTRFQkM0MzFFMzUxM0ZDM0Y2NDFEQjg4 MEUyQjJGRTFEMDQwQTMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzgxMTE1YmM2LTEwZjYtNGFmMy1iYTA5LThiNjg3YTU2ZmJmNS8xLzBFNEVCQzQz MUUzNTEzRkMzRjY0MURCODgwRTJCMkZFMUQwNDBBMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArDjyw xGAFCz+eTBHfqsd+/AjTnvL0EcxrVLNVVe9nOLXz9MLY9yOukWaIFj7UHml2Nc98 6ZgYF1+6alowPzZwNHrTy5z80BQnynSai+bInlktiW2upJv5wQPyan6zguLJ2aFf 41w9V/NlmIYbnBfsaEJTzDJBHmSxpcTzPnP/I0vvQyFWAKxo7DoktTKKUjjKTj6U 7M03RLEfCdta11iCeQyyz8y+vJQK5B9/GQchr+ueMlmoO9i8BrkvDh0CgSh0Y+Bd BQncGXaCTKqk3Kphry2p+vOrMg1G5gKnPLWt9P2jCDjg3hgxs9cqemcPaiLhECwZ 9f5WskgNcmsAujPQ -----END CERTIFICATE-----Generated at Sun Aug 24 04:36:56 2025 by rpki-client