$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft File: 2E2674263AECD572673F87614919CA492C79FAEA.mft (raw, json) Hash identifier: 9ZEn9kROfcR4vyNrLPNKJuSMKGgWs4NdRZFwOhtKU+s= Subject key identifier: 38:67:0C:6F:1E:70:C5:E0:DB:B1:9A:1B:22:2E:83:68:67:56:94:22 Authority key identifier: 2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA Certificate issuer: /CN=2e2674263aecd572673f87614919ca492c79faea Certificate serial: 46D6E37B11F73A42E7BDC1A3026189E94B3183C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft Manifest number: 0117 Signing time: Fri 22 Aug 2025 22:47:33 +0000 Manifest this update: Fri 22 Aug 2025 22:42:33 +0000 Manifest next update: Sun 24 Aug 2025 02:00:33 +0000 Files and hashes: 1: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: tU7tyCca1tIOx1hnSKjuKCDiTN546CQQQvHB6q/i7qk=) 2: 34352e36362e36302e302f32342d3234203d3e203332313637.roa (hash: Ox5N2o1ve/SVl8NpCWqJ1Xe7PoW/L1UXaaDEmMEC144=) 3: 34352e36362e36332e302f32342d3234203d3e20323134343332.roa (hash: bZNP+wA40wAyACtbN5qUmpIVm/KoebsR0HiX5BeNfUM=) 4: 2E2674263AECD572673F87614919CA492C79FAEA.crl (hash: oR7V4Fm6TWxyui5F+GRduDZ0BSH0cEAMFm09dnzUgT4=) 5: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: imRIoujslgfIw1o5CZvn1r7w9Uct08AIqiMVjfiL8o4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d6:e3:7b:11:f7:3a:42:e7:bd:c1:a3:02:61:89:e9:4b:31:83:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2674263aecd572673f87614919ca492c79faea Validity Not Before: Aug 22 22:42:33 2025 GMT Not After : Aug 24 02:00:33 2025 GMT Subject: CN=38670C6F1E70C5E0DBB19A1B222E836867569422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:60:f0:d0:a5:89:37:e3:42:b4:06:eb:2d:84: be:1b:c5:e2:4f:36:29:22:69:54:38:9a:23:a9:ed: 9d:f9:d0:0b:7b:29:0d:76:39:f3:39:59:3a:5d:2e: 21:3e:bc:b6:6a:0b:ff:e9:26:5e:08:f8:3c:f9:93: 69:0d:6c:78:d4:9f:d8:98:e0:58:74:59:20:25:16: c8:fe:f0:b2:2e:5a:84:fd:b7:64:79:e8:9b:d7:bc: 05:3a:22:d5:ce:13:85:9b:26:b0:22:de:79:76:7b: 13:a2:48:05:36:d2:e2:56:8d:80:82:ba:ac:d1:1d: 68:2d:db:b5:b2:5e:74:d8:56:3b:23:43:8f:e5:4d: 6b:47:ff:fa:d1:22:5a:f4:36:f8:3e:b8:30:14:27: 66:07:12:be:c8:d4:2f:10:01:a1:6f:bc:40:08:6e: 79:d4:56:79:f1:81:9a:c7:66:11:9d:c3:64:d5:55: b1:3a:6e:50:39:a7:70:19:8e:3a:eb:dc:59:5f:ef: 9b:54:62:4e:01:eb:01:2b:ce:79:c4:7b:c4:16:e3: f0:42:d1:4f:26:d6:fc:64:6a:ca:1f:e3:c1:cb:c2: e3:6a:3e:87:0d:04:55:b0:27:f3:b5:fe:38:68:48: b9:30:43:a0:b4:fa:0b:72:7c:50:03:51:ec:71:fd: 9b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:67:0C:6F:1E:70:C5:E0:DB:B1:9A:1B:22:2E:83:68:67:56:94:22 X509v3 Authority Key Identifier: keyid:2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:bc:1a:e8:30:0d:46:7a:c1:dd:66:0b:0d:71:5a:41:6f:3e: e7:52:76:39:2d:f1:45:96:6b:63:3b:a1:1c:1a:61:96:e9:b4: 34:fc:6b:d4:17:63:c7:b4:90:83:4e:74:59:4e:86:8e:31:1d: d8:3b:0f:d0:19:a7:1e:6a:d6:be:49:36:4f:20:9f:90:c9:ef: 3a:56:b5:8c:cf:2f:64:b2:18:46:8c:26:30:57:2a:26:c2:62: e0:93:07:e2:4d:ff:de:8b:8b:41:16:9f:ef:e2:2a:6a:d4:ab: 44:69:45:53:49:59:a2:05:61:32:a6:ec:73:cb:0b:5f:68:49: d4:00:59:88:69:10:a1:02:5f:bf:ca:b5:50:f4:4e:39:c3:d0: 2c:29:ff:1a:8a:3c:a3:36:87:5e:a4:48:2d:eb:6e:ae:81:49: 73:73:63:bf:69:99:9e:26:5e:84:77:aa:72:73:28:dd:cd:91: 37:78:51:e1:ff:15:d6:8b:61:99:ee:1e:3c:13:28:12:ef:69: 11:38:aa:bf:43:be:eb:96:2c:5c:4a:ba:4d:ce:83:f9:49:1d: 80:22:7c:0f:6f:7f:38:8e:d6:42:66:01:db:0b:58:25:0a:c6: 00:a7:63:14:73:53:3f:d7:82:6f:3c:53:cf:19:26:7e:64:80: 03:72:20:b5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURtbjexH3OkLnvcGjAmGJ6Usxg8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmUyNjc0MjYzYWVjZDU3MjY3M2Y4NzYxNDkxOWNhNDky Yzc5ZmFlYTAeFw0yNTA4MjIyMjQyMzNaFw0yNTA4MjQwMjAwMzNaMDMxMTAvBgNV BAMTKDM4NjcwQzZGMUU3MEM1RTBEQkIxOUExQjIyMkU4MzY4Njc1Njk0MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPYPDQpYk340K0BusthL4bxeJP NikiaVQ4miOp7Z350At7KQ12OfM5WTpdLiE+vLZqC//pJl4I+Dz5k2kNbHjUn9iY 4Fh0WSAlFsj+8LIuWoT9t2R56JvXvAU6ItXOE4WbJrAi3nl2exOiSAU20uJWjYCC uqzRHWgt27WyXnTYVjsjQ4/lTWtH//rRIlr0Nvg+uDAUJ2YHEr7I1C8QAaFvvEAI bnnUVnnxgZrHZhGdw2TVVbE6blA5p3AZjjrr3Flf75tUYk4B6wErznnEe8QW4/BC 0U8m1vxkasof48HLwuNqPocNBFWwJ/O1/jhoSLkwQ6C0+gtyfFADUexx/ZtnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUOGcMbx5wxeDbsZobIi6DaGdWlCIwHwYDVR0j BBgwFoAULiZ0Jjrs1XJnP4dhSRnKSSx5+uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmQ3YzIzMWUtYTMzYy00NTU1LWI0MmUtZDAyMDkzODQ5 Mjk5LzAvMkUyNjc0MjYzQUVDRDU3MjY3M0Y4NzYxNDkxOUNBNDkyQzc5RkFFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xpWjBKanJzMVhKblA0ZGhTUm5LU1N4 NS11by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZDdjMjMxZS1h MzNjLTQ1NTUtYjQyZS1kMDIwOTM4NDkyOTkvMC8yRTI2NzQyNjNBRUNENTcyNjcz Rjg3NjE0OTE5Q0E0OTJDNzlGQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy7wa6DANRnrB3WYLDXFa QW8+51J2OS3xRZZrYzuhHBphlum0NPxr1Bdjx7SQg050WU6GjjEd2DsP0BmnHmrW vkk2TyCfkMnvOla1jM8vZLIYRowmMFcqJsJi4JMH4k3/3ouLQRaf7+IqatSrRGlF U0lZogVhMqbsc8sLX2hJ1ABZiGkQoQJfv8q1UPROOcPQLCn/Goo8ozaHXqRILetu roFJc3Njv2mZniZehHeqcnMo3c2RN3hR4f8V1othme4ePBMoEu9pETiqv0O+65Ys XEq6Tc6D+UkdgCJ8D29/OI7WQmYB2wtYJQrGAKdjFHNTP9eCbzxTzxkmfmSAA3Ig tQ== -----END CERTIFICATE-----Generated at Sat Aug 23 09:39:48 2025 by rpki-client