$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft File: B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json) Hash identifier: tfRoWf8tdUkXkwRd4rDpV3jjsfd/yKlp2NsZRIbBf7w= Subject key identifier: 35:22:44:5F:95:AA:53:02:B8:02:2F:CA:C4:63:55:A6:2A:4A:EF:17 Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac Certificate serial: 4454C847F1B1289FFB8B9CBE8F87D71F1C87605C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft Manifest number: 0274 Signing time: Sat 23 Aug 2025 02:22:33 +0000 Manifest this update: Sat 23 Aug 2025 02:17:33 +0000 Manifest next update: Sun 24 Aug 2025 03:58:33 +0000 Files and hashes: 1: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: zbKaWYwmjPPC167P5YL6I94JcPZEWN0HKnmqpfcR9u4=) 2: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: 79cHbTkQwkAwsMMU8lM+wJPhgKCYr4KiunJsSIOV3JY=) 3: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: FBdBmLEGxXhvarnPJcmElFlCgeLSIQ6GXw75K+usirs=) 4: 3138352e3138362e32372e302f32342d3234203d3e203631333137.roa (hash: jD3TEx8Q8JwdsmzwyDZ9zaukL1sMlGUp0uzFac23xJs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 03:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:54:c8:47:f1:b1:28:9f:fb:8b:9c:be:8f:87:d7:1f:1c:87:60:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac Validity Not Before: Aug 23 02:17:33 2025 GMT Not After : Aug 24 03:58:33 2025 GMT Subject: CN=3522445F95AA5302B8022FCAC46355A62A4AEF17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f5:71:7f:da:a5:33:23:ad:36:05:2b:70:6e: 8d:7c:f4:96:30:b0:f5:92:fb:9b:75:52:9f:4b:f5: df:19:a1:af:db:8c:65:70:c5:e7:63:00:84:3e:9b: c9:b6:e7:54:b1:b3:26:0b:8f:d8:34:e3:c2:fb:4b: 04:3a:25:45:ee:7e:4a:0e:fe:75:0a:38:5a:fd:f1: 12:f9:95:1d:8c:f2:ed:3b:0e:d7:30:eb:db:01:89: be:aa:88:9c:d0:bb:a0:ed:42:af:26:5d:74:06:ef: 87:5c:c8:de:d8:d7:fc:05:a0:bf:16:0c:35:80:f4: 70:0c:5f:ff:8d:9b:cf:f0:9f:51:8a:54:d8:3a:1c: 0f:1d:7b:32:6a:76:5b:72:08:10:77:0f:40:78:75: d1:91:13:62:6d:27:7d:2e:e3:9a:4b:da:4e:b4:89: 3a:d1:99:5a:37:be:ed:d9:82:6e:b7:87:fc:34:82: 37:fb:4c:29:69:e8:1e:87:2c:ab:b2:38:36:e7:ba: 34:d3:c8:76:d5:28:fc:a1:ca:35:c2:a3:2c:4d:59: 7d:b9:0e:00:f0:72:55:7f:6a:a9:a0:b2:6a:1f:3e: c2:cf:66:87:af:8d:b5:e7:22:e4:5d:81:0b:3f:f0: cb:6a:ae:7c:be:64:ef:75:77:15:00:65:93:50:1c: cb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:22:44:5F:95:AA:53:02:B8:02:2F:CA:C4:63:55:A6:2A:4A:EF:17 X509v3 Authority Key Identifier: keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:0d:92:57:6f:05:2e:09:42:f0:0e:ed:87:bd:b3:49:ec:5a: f3:24:d9:d8:5d:9b:c1:6d:dd:d9:fc:3a:7a:d9:55:f7:9c:7b: a9:6a:b5:b6:65:b1:50:64:1e:39:f4:3c:85:8c:7c:93:4a:d8: c1:31:b4:cc:d4:b0:32:12:c5:56:96:33:2a:f4:ff:85:e0:52: eb:f4:1c:ca:11:84:97:e2:1d:86:30:00:99:96:30:e2:ed:85: d0:6f:4d:35:2b:ba:4d:fe:5a:40:63:b0:29:cc:e1:ce:de:27: d0:cc:8f:9d:e9:14:53:b0:6f:ba:d2:b7:90:44:a8:ee:34:9d: e6:15:90:48:27:26:0c:2b:b0:1b:0e:b5:e4:d6:7d:d7:46:6c: 93:87:de:22:b2:ab:6c:56:0c:46:44:37:e8:c3:cd:17:fc:82: 22:06:ab:f3:71:a7:b4:4f:3e:77:1c:9e:c5:02:8a:a9:10:86: 62:78:99:b6:9f:3c:53:d0:48:31:47:aa:21:db:87:15:9a:0b: 39:f7:9f:8d:c3:16:d1:e4:67:b9:ec:cd:df:04:d0:82:55:91: 5f:f7:c6:45:42:9e:16:fb:bb:d0:2a:00:b7:56:0b:cb:68:3b: ff:6f:80:71:72:4e:28:ab:da:08:71:dd:e6:d0:2c:e3:60:55: 95:81:bf:6a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURFTIR/GxKJ/7i5y+j4fXHxyHYFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjNkMDI4MGY1MDA2OTVhNDMyMDQyNTFjOTgzMDQ1NGNh OGEyZTdhYzAeFw0yNTA4MjMwMjE3MzNaFw0yNTA4MjQwMzU4MzNaMDMxMTAvBgNV BAMTKDM1MjI0NDVGOTVBQTUzMDJCODAyMkZDQUM0NjM1NUE2MkE0QUVGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi9XF/2qUzI602BStwbo189JYw sPWS+5t1Up9L9d8Zoa/bjGVwxedjAIQ+m8m251SxsyYLj9g048L7SwQ6JUXufkoO /nUKOFr98RL5lR2M8u07Dtcw69sBib6qiJzQu6DtQq8mXXQG74dcyN7Y1/wFoL8W DDWA9HAMX/+Nm8/wn1GKVNg6HA8dezJqdltyCBB3D0B4ddGRE2JtJ30u45pL2k60 iTrRmVo3vu3Zgm63h/w0gjf7TClp6B6HLKuyODbnujTTyHbVKPyhyjXCoyxNWX25 DgDwclV/aqmgsmofPsLPZoevjbXnIuRdgQs/8Mtqrny+ZO91dxUAZZNQHMtrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNSJEX5WqUwK4Ai/KxGNVpipK7xcwHwYDVR0j BBgwFoAUs9AoD1AGlaQyBCUcmDBFTKii56wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdhZTI1ZjMtNzA2Yi00N2VkLWJiNzQtNDY2ODRhZTBl ZjJiLzAvQjNEMDI4MEY1MDA2OTVBNDMyMDQyNTFDOTgzMDQ1NENBOEEyRTdBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M5QW9EMUFHbGFReUJDVWNtREJGVEtp aTU2dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2FlMjVmMy03 MDZiLTQ3ZWQtYmI3NC00NjY4NGFlMGVmMmIvMC9CM0QwMjgwRjUwMDY5NUE0MzIw NDI1MUM5ODMwNDU0Q0E4QTJFN0FDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwA2SV28FLglC8A7th72z Sexa8yTZ2F2bwW3d2fw6etlV95x7qWq1tmWxUGQeOfQ8hYx8k0rYwTG0zNSwMhLF VpYzKvT/heBS6/QcyhGEl+IdhjAAmZYw4u2F0G9NNSu6Tf5aQGOwKczhzt4n0MyP nekUU7BvutK3kESo7jSd5hWQSCcmDCuwGw615NZ910Zsk4feIrKrbFYMRkQ36MPN F/yCIgar83GntE8+dxyexQKKqRCGYniZtp88U9BIMUeqIduHFZoLOfefjcMW0eRn uezN3wTQglWRX/fGRUKeFvu70CoAt1YLy2g7/2+AcXJOKKvaCHHd5tAs42BVlYG/ ag== -----END CERTIFICATE-----Generated at Sat Aug 23 12:34:02 2025 by rpki-client