$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft File: 2E2674263AECD572673F87614919CA492C79FAEA.mft (raw, json) Hash identifier: jg2FXWFHGrIDcVR1x/W2kFrChS6rH/UzuhF12D1Pzcc= Subject key identifier: 1C:9E:99:EE:76:44:A4:44:51:30:B2:73:C7:3E:08:17:E5:E2:FD:62 Authority key identifier: 2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA Certificate issuer: /CN=2e2674263aecd572673f87614919ca492c79faea Certificate serial: 1A669A3AEAFEA42885C109E909EB364FA53B05F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft Manifest number: CE Signing time: Sat 28 Jun 2025 15:44:10 +0000 Manifest this update: Sat 28 Jun 2025 15:39:10 +0000 Manifest next update: Sun 29 Jun 2025 17:21:10 +0000 Files and hashes: 1: 2E2674263AECD572673F87614919CA492C79FAEA.crl (hash: BR6BcGctgFFzEzMdMQBbA5t9wJZ84ORtiVpZwR3jdrU=) 2: 34352e36362e36332e302f32342d3234203d3e20383334.roa (hash: +lxugZDOPYeNvwOMe73TcSTp+67iTBoQ2Mh6vI2juqw=) 3: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: imRIoujslgfIw1o5CZvn1r7w9Uct08AIqiMVjfiL8o4=) 4: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: tU7tyCca1tIOx1hnSKjuKCDiTN546CQQQvHB6q/i7qk=) 5: 34352e36362e36302e302f32342d3234203d3e20383334.roa (hash: cob4jPxF3rrMg6hwki6aZSVe0/iQEcIhptQTeWjOdMo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:66:9a:3a:ea:fe:a4:28:85:c1:09:e9:09:eb:36:4f:a5:3b:05:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2674263aecd572673f87614919ca492c79faea Validity Not Before: Jun 28 15:39:10 2025 GMT Not After : Jun 29 17:21:10 2025 GMT Subject: CN=1C9E99EE7644A4445130B273C73E0817E5E2FD62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:31:08:b0:9a:97:9a:bb:cb:8c:7d:b4:a1: cd:80:4a:aa:47:2d:25:e2:17:12:bc:10:a3:39:00: 9d:38:ee:5d:13:6a:63:db:31:00:90:d0:be:fd:7b: cf:11:d8:f3:dd:71:75:46:a1:e5:e0:55:59:c0:c4: a9:8a:b7:e3:00:25:ac:39:15:6f:68:42:8e:74:08: 6e:fa:04:b7:c8:78:71:55:c4:cb:96:f2:1e:19:31: 9e:14:c6:73:7e:b1:51:c8:04:28:86:7c:cd:17:e6: ed:df:5a:ff:ba:a2:de:75:14:62:3b:84:c2:69:f4: 7a:c6:65:59:82:54:14:29:d6:00:6c:1c:23:8f:f8: 64:42:1e:70:22:5e:fb:45:ca:dd:19:87:4c:83:48: 7d:cb:b3:27:87:3b:09:84:04:d2:3e:9f:5a:fa:3f: 74:ec:c1:53:ad:fb:2f:d9:7d:7e:7a:b5:6e:37:6f: 19:33:d6:bf:40:40:c6:89:6e:9b:3a:a6:5b:3e:64: 29:9b:df:73:4d:39:ee:b0:5c:d5:70:ef:47:9a:f4: 9e:02:75:e6:1c:e8:aa:55:c5:16:89:77:18:6b:95: 2b:47:3a:70:e2:48:cb:74:26:ca:e8:b0:c6:de:15: 85:11:2b:8e:5e:9d:9f:cc:44:2a:d1:01:44:16:b5: 8e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9E:99:EE:76:44:A4:44:51:30:B2:73:C7:3E:08:17:E5:E2:FD:62 X509v3 Authority Key Identifier: keyid:2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:2b:6e:d1:2b:87:b1:6a:e2:c4:c4:6f:81:61:e2:44:bd:bf: cc:a5:06:00:06:24:f8:78:35:c4:18:30:1f:37:2a:d7:b8:08: 47:7c:2a:9e:59:d7:8e:1b:a3:da:28:0c:dc:8b:3c:8b:74:4e: 1f:d1:2f:52:2a:85:77:4e:c3:2c:c9:7d:b7:c2:92:fc:a5:49: 5a:24:97:64:f5:c6:f6:d8:b8:53:61:b7:47:50:85:3d:55:fe: c3:f6:17:c3:b7:31:26:aa:21:dd:5e:44:f7:d5:c3:f9:1d:66: 47:2e:f8:38:65:52:f4:8a:f4:be:fa:61:16:c2:60:12:f3:b1: 22:ef:e2:4c:70:76:da:48:3a:16:5b:a9:9e:46:15:af:9d:eb: 25:46:72:7c:b8:72:a7:2f:cb:74:2a:10:48:f4:ff:ec:1e:3f: a6:0a:a9:95:89:52:99:e5:be:ed:ef:77:a9:6d:b5:93:e5:c9: 6d:0d:7f:35:7a:9e:67:46:07:cb:24:ff:69:b5:d0:75:82:c0: dc:2d:81:57:64:3c:b1:59:78:eb:7f:74:d4:ca:06:ee:6a:7b: 63:cd:c5:10:5d:3d:4b:c4:4c:9f:28:f1:02:dd:d9:e3:5f:54: 0d:57:55:d9:35:37:5f:58:3b:02:99:a4:c3:e6:e2:ea:a8:20: 45:b7:98:3f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGmaaOur+pCiFwQnpCes2T6U7BfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmUyNjc0MjYzYWVjZDU3MjY3M2Y4NzYxNDkxOWNhNDky Yzc5ZmFlYTAeFw0yNTA2MjgxNTM5MTBaFw0yNTA2MjkxNzIxMTBaMDMxMTAvBgNV BAMTKDFDOUU5OUVFNzY0NEE0NDQ1MTMwQjI3M0M3M0UwODE3RTVFMkZENjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+aDEIsJqXmrvLjH20oc2ASqpH LSXiFxK8EKM5AJ047l0TamPbMQCQ0L79e88R2PPdcXVGoeXgVVnAxKmKt+MAJaw5 FW9oQo50CG76BLfIeHFVxMuW8h4ZMZ4UxnN+sVHIBCiGfM0X5u3fWv+6ot51FGI7 hMJp9HrGZVmCVBQp1gBsHCOP+GRCHnAiXvtFyt0Zh0yDSH3LsyeHOwmEBNI+n1r6 P3TswVOt+y/ZfX56tW43bxkz1r9AQMaJbps6pls+ZCmb33NNOe6wXNVw70ea9J4C deYc6KpVxRaJdxhrlStHOnDiSMt0JsrosMbeFYURK45enZ/MRCrRAUQWtY79AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHJ6Z7nZEpERRMLJzxz4IF+Xi/WIwHwYDVR0j BBgwFoAULiZ0Jjrs1XJnP4dhSRnKSSx5+uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmQ3YzIzMWUtYTMzYy00NTU1LWI0MmUtZDAyMDkzODQ5 Mjk5LzAvMkUyNjc0MjYzQUVDRDU3MjY3M0Y4NzYxNDkxOUNBNDkyQzc5RkFFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xpWjBKanJzMVhKblA0ZGhTUm5LU1N4 NS11by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZDdjMjMxZS1h MzNjLTQ1NTUtYjQyZS1kMDIwOTM4NDkyOTkvMC8yRTI2NzQyNjNBRUNENTcyNjcz Rjg3NjE0OTE5Q0E0OTJDNzlGQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiStu0SuHsWrixMRvgWHi RL2/zKUGAAYk+Hg1xBgwHzcq17gIR3wqnlnXjhuj2igM3Is8i3ROH9EvUiqFd07D LMl9t8KS/KVJWiSXZPXG9ti4U2G3R1CFPVX+w/YXw7cxJqoh3V5E99XD+R1mRy74 OGVS9Ir0vvphFsJgEvOxIu/iTHB22kg6FlupnkYVr53rJUZyfLhypy/LdCoQSPT/ 7B4/pgqplYlSmeW+7e93qW21k+XJbQ1/NXqeZ0YHyyT/abXQdYLA3C2BV2Q8sVl4 63901MoG7mp7Y83FEF09S8RMnyjxAt3Z419UDVdV2TU3X1g7Apmkw+bi6qggRbeY Pw== -----END CERTIFICATE-----Generated at Sat Jun 28 19:50:47 2025 by rpki-client