$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft File: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft (raw, json) Hash identifier: IKkJ1t7DF/4hPBm3RYANfGZBWNHcDlkCNpZDBHUZt5A= Subject key identifier: A3:A3:DE:A7:EA:63:63:6D:28:60:9D:C6:61:4E:4D:76:45:46:C3:D2 Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 09D0A962B0B8B7D9B1B5E88395F1962606B00438 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft Manifest number: CB Signing time: Sat 28 Jun 2025 12:59:10 +0000 Manifest this update: Sat 28 Jun 2025 12:54:10 +0000 Manifest next update: Sun 29 Jun 2025 16:28:10 +0000 Files and hashes: 1: 3134312e39382e34322e302f32342d3234203d3e203236303432.roa (hash: +GT6tipOpP7a/jmS2jvS0OmHJ5lSewd2owWcI6P6Cp8=) 2: 3134312e39382e34332e302f32342d3234203d3e2039333138.roa (hash: vFBdBlnnWQnqw/EQOfV9mi7/0u42NWKBiZsEOC5m9Es=) 3: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl (hash: Sl1UcRhlYfiecijWSdYfgMsjrnGmBK53yvbZjKHfP4I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d0:a9:62:b0:b8:b7:d9:b1:b5:e8:83:95:f1:96:26:06:b0:04:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Jun 28 12:54:10 2025 GMT Not After : Jun 29 16:28:10 2025 GMT Subject: CN=A3A3DEA7EA63636D28609DC6614E4D764546C3D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:98:5a:48:a5:83:82:23:2e:06:b1:81:a5:80: e6:8c:95:b8:c5:d7:90:74:5c:e8:a2:00:e1:f7:84: 79:53:29:0e:83:ea:b9:33:3f:c9:25:90:5d:04:14: bf:6a:82:78:de:a7:d8:e7:16:50:16:63:fc:13:41: 19:a0:0e:69:e5:a7:c5:60:f2:19:1c:dd:af:09:bb: 94:f6:1d:71:9e:ab:4d:3d:87:0f:61:52:0e:92:25: 36:c8:00:ba:b5:cf:9f:67:8c:8d:c3:c1:89:7a:ed: fc:25:bb:e9:8f:79:2e:ad:c0:35:b4:2d:87:1f:c7: 2e:59:c5:11:2f:36:37:94:ae:a6:ab:5a:2c:43:3f: 72:03:08:ab:a9:75:e0:a9:37:8e:0e:37:ea:7a:95: a0:c9:24:ea:8a:91:d2:38:a5:4c:e9:3e:29:1b:1a: 18:8e:89:5c:31:1d:a0:b9:d6:be:5f:eb:d5:7c:79: 9d:ff:72:33:ec:bc:d8:c4:8f:7d:92:50:85:81:53: 28:19:e8:ad:86:d9:03:b7:14:df:57:56:e7:ba:60: 25:f7:aa:32:86:db:9d:4e:03:4d:87:d8:70:67:d2: df:a5:1b:6d:99:57:5d:28:a0:69:82:b4:f1:78:b6: 54:71:15:98:83:5a:f3:f4:a4:19:8b:fc:da:81:2a: f0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A3:DE:A7:EA:63:63:6D:28:60:9D:C6:61:4E:4D:76:45:46:C3:D2 X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f4:16:51:f6:3d:e0:3c:d5:08:4d:99:7c:79:6d:1a:a5:0a: 62:d2:74:aa:6d:9a:ce:30:b2:9c:56:6d:cc:17:72:27:47:79: 12:9c:e4:2d:a5:68:d6:74:bf:65:f6:12:0b:8b:82:c5:96:3d: fa:4f:67:77:15:ea:5b:a2:89:ac:31:90:e0:6f:a0:7c:78:0a: ad:53:e7:79:f7:26:8f:1a:9f:6a:61:86:20:17:91:96:48:1a: 4a:83:da:59:3e:bb:f7:d4:d5:98:79:ff:29:1a:6d:79:8d:29: b7:c5:0d:f7:7b:b0:ca:74:f8:c6:84:d0:f4:50:a0:c7:49:13: 47:dd:e7:6b:b0:82:95:96:19:d2:e8:89:6d:2b:ba:67:27:92: 38:6f:e7:87:c7:24:b9:9d:ef:17:33:64:47:83:85:07:15:49: bd:78:0b:f8:5a:71:6e:ee:4d:d3:47:58:c8:07:44:31:4e:1b: 1a:9d:3c:f3:fb:22:2f:56:71:9e:b4:e9:29:2d:c4:8d:37:df: e7:f1:f3:3c:ab:c5:1a:41:f6:c8:c9:3d:b4:10:1d:d7:f6:b7: 44:82:07:be:79:c7:6d:a2:ad:02:17:4a:ae:05:ec:ae:ac:e4: 18:3b:86:2d:2d:e3:17:04:5f:55:a3:55:43:0d:db:33:43:30: c7:a1:aa:b3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCdCpYrC4t9mxteiDlfGWJgawBDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNTA2MjgxMjU0MTBaFw0yNTA2MjkxNjI4MTBaMDMxMTAvBgNV BAMTKEEzQTNERUE3RUE2MzYzNkQyODYwOURDNjYxNEU0RDc2NDU0NkMzRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDamFpIpYOCIy4GsYGlgOaMlbjF 15B0XOiiAOH3hHlTKQ6D6rkzP8klkF0EFL9qgnjep9jnFlAWY/wTQRmgDmnlp8Vg 8hkc3a8Ju5T2HXGeq009hw9hUg6SJTbIALq1z59njI3DwYl67fwlu+mPeS6twDW0 LYcfxy5ZxREvNjeUrqarWixDP3IDCKupdeCpN44ON+p6laDJJOqKkdI4pUzpPikb GhiOiVwxHaC51r5f69V8eZ3/cjPsvNjEj32SUIWBUygZ6K2G2QO3FN9XVue6YCX3 qjKG251OA02H2HBn0t+lG22ZV10ooGmCtPF4tlRxFZiDWvP0pBmL/NqBKvA3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUo6Pep+pjY20oYJ3GYU5NdkVGw9IwHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ODFiN2YwOC1k ZDk0LTRjZDAtYWEzOC04NTEyZjE1MmJkMzIvMC83RTUxQ0FDMUNFMkFGRTE5NThC MUZCNkE2MjM3NzE3QjBCNUQ0ODEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvQWUfY94DzVCE2ZfHlt GqUKYtJ0qm2azjCynFZtzBdyJ0d5EpzkLaVo1nS/ZfYSC4uCxZY9+k9ndxXqW6KJ rDGQ4G+gfHgKrVPnefcmjxqfamGGIBeRlkgaSoPaWT6799TVmHn/KRpteY0pt8UN 93uwynT4xoTQ9FCgx0kTR93na7CClZYZ0uiJbSu6ZyeSOG/nh8ckuZ3vFzNkR4OF BxVJvXgL+Fpxbu5N00dYyAdEMU4bGp088/siL1ZxnrTpKS3EjTff5/HzPKvFGkH2 yMk9tBAd1/a3RIIHvnnHbaKtAhdKrgXsrqzkGDuGLS3jFwRfVaNVQw3bM0Mwx6Gq sw== -----END CERTIFICATE-----Generated at Sat Jun 28 22:00:38 2025 by rpki-client