$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: 7pg9kIhwX9LBCe+MKOmsKYeAuVeZaUmuaISeKpCoS7Q= Subject key identifier: 04:F1:3A:2A:7A:4F:FB:BD:E7:E9:91:A3:84:17:C9:04:DA:1F:0C:83 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 41C51D8AD25107CC6CFA9B775CCAE74FF23AEAD9 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: E3 Signing time: Sat 23 Aug 2025 23:46:48 +0000 Manifest this update: Sat 23 Aug 2025 23:41:48 +0000 Manifest next update: Mon 25 Aug 2025 14:08:48 +0000 Files and hashes: 1: 326130623a346530373a363064303a3a2f34342d3438203d3e20323134373031.roa (hash: uV2TLwh180zk/DItScOuiwKDHaU99Mhyx8m59bwZFmA=) 2: 326130623a346530373a363030303a3a2f34312d3438203d3e20323134373031.roa (hash: 4kUbGyjkNaSVg+CdxZZIcLS92ZdRbZtwjsOz4Bjkgro=) 3: 326130623a346530373a363065303a3a2f34342d3438203d3e203339333531.roa (hash: /JgrvpSR1ZDGP36oDONfP8baAAR4FG/skafz4v4Fs6E=) 4: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: ihss6g9XOjyKHGqtHEOk/KgRMIYC9Qn3oxKp2BujPtw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 13:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:c5:1d:8a:d2:51:07:cc:6c:fa:9b:77:5c:ca:e7:4f:f2:3a:ea:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Aug 23 23:41:48 2025 GMT Not After : Aug 25 14:08:48 2025 GMT Subject: CN=04F13A2A7A4FFBBDE7E991A38417C904DA1F0C83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:df:87:64:f6:b3:be:ac:7a:e3:28:eb:d2:4a: 7f:09:40:b2:31:c8:4b:7d:4b:af:ba:d7:df:96:96: 88:b5:fd:88:ca:88:00:b5:07:32:0d:ea:10:bb:95: 5b:31:b3:27:13:ed:83:5f:42:5b:dc:c9:64:1a:85: 0e:69:51:bc:cd:2e:bf:18:8d:08:2a:7f:38:51:af: 27:7b:dd:1b:15:b7:98:12:c2:a8:a0:4d:71:6e:f4: f1:9b:18:f1:87:db:f7:5e:ed:d4:62:81:6f:60:d2: 7b:e2:96:c3:57:0d:17:91:41:cc:c5:8b:6c:13:2b: b0:f8:c2:25:be:04:b5:0b:5e:2c:da:75:cc:bc:66: 52:fd:4f:86:6c:67:c3:bb:47:44:25:70:db:31:34: 5f:e6:3b:a6:18:85:16:c4:a9:de:39:2c:2b:62:c5: 03:8e:bb:d5:3f:6a:fb:bf:54:07:c3:19:39:9d:b0: e7:a9:36:01:09:2c:e1:bb:77:f9:74:1e:74:e4:1f: db:c4:5b:d0:00:2d:8f:f6:2e:fe:03:87:a0:32:2e: 0e:73:08:67:d8:e1:28:e3:a0:2d:84:47:ab:8b:e3: 10:1d:d7:13:00:fd:d1:24:74:50:92:bf:5d:42:75: a4:15:8b:69:e6:46:c0:d2:74:36:50:ae:1c:f0:93: 35:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F1:3A:2A:7A:4F:FB:BD:E7:E9:91:A3:84:17:C9:04:DA:1F:0C:83 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:2f:56:c2:fa:47:af:02:86:60:13:e1:54:f7:b0:60:a4:1d: fc:ec:92:53:77:0f:f8:52:bb:4f:05:52:ea:ff:63:23:9f:8d: 4f:d2:c4:00:44:eb:df:7d:94:7e:5a:28:71:86:77:0b:fd:da: 4e:aa:56:7a:83:3e:12:0a:e2:73:aa:00:2e:dc:c7:20:a3:78: 0e:29:8a:08:b3:09:e4:12:fe:05:b3:d2:36:1f:90:80:a9:80: 33:a0:6c:75:b4:25:6a:c5:77:bc:84:b4:ea:65:eb:17:df:02: ac:a9:4f:76:4c:af:b0:e0:68:42:d5:4f:14:54:ea:6b:14:e0: b3:79:8b:6f:df:de:e7:98:85:80:91:bc:6a:c0:be:0a:4f:69: 98:17:17:87:f6:10:9a:6f:ad:fd:c9:f3:0f:92:a1:16:c1:09: 83:a3:23:38:fb:c6:cd:f7:92:8d:d5:58:26:3f:92:72:14:72: 34:99:1d:36:b4:92:2f:19:aa:30:ec:19:26:9a:46:b0:e9:3d: 15:e9:cd:0a:e9:58:b3:61:a1:f8:4e:49:33:52:89:26:cc:7c: df:5d:c2:e0:d1:aa:05:ce:3c:ab:e8:db:74:f3:f5:04:b7:47: c7:5d:d0:34:23:2b:bd:af:9f:b4:3d:59:43:38:84:4a:39:0b: 7d:34:50:bf -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUQcUditJRB8xs+pt3XMrnT/I66tkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNTA4MjMyMzQxNDhaFw0yNTA4MjUxNDA4NDhaMDMxMTAvBgNV BAMTKDA0RjEzQTJBN0E0RkZCQkRFN0U5OTFBMzg0MTdDOTA0REExRjBDODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq34dk9rO+rHrjKOvSSn8JQLIx yEt9S6+619+Wloi1/YjKiAC1BzIN6hC7lVsxsycT7YNfQlvcyWQahQ5pUbzNLr8Y jQgqfzhRryd73RsVt5gSwqigTXFu9PGbGPGH2/de7dRigW9g0nvilsNXDReRQczF i2wTK7D4wiW+BLULXizadcy8ZlL9T4ZsZ8O7R0QlcNsxNF/mO6YYhRbEqd45LCti xQOOu9U/avu/VAfDGTmdsOepNgEJLOG7d/l0HnTkH9vEW9AALY/2Lv4Dh6AyLg5z CGfY4SjjoC2ER6uL4xAd1xMA/dEkdFCSv11CdaQVi2nmRsDSdDZQrhzwkzXDAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUBPE6KnpP+73n6ZGjhBfJBNofDIMwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdC9WwvpHrwKGYBPhVPew YKQd/OySU3cP+FK7TwVS6v9jI5+NT9LEAETr332UfloocYZ3C/3aTqpWeoM+Egri c6oALtzHIKN4DimKCLMJ5BL+BbPSNh+QgKmAM6BsdbQlasV3vIS06mXrF98CrKlP dkyvsOBoQtVPFFTqaxTgs3mLb9/e55iFgJG8asC+Ck9pmBcXh/YQmm+t/cnzD5Kh FsEJg6MjOPvGzfeSjdVYJj+SchRyNJkdNrSSLxmqMOwZJppGsOk9FenNCulYs2Gh +E5JM1KJJsx8313C4NGqBc48q+jbdPP1BLdHx13QNCMrva+ftD1ZQziESjkLfTRQ vw== -----END CERTIFICATE-----Generated at Sun Aug 24 04:02:50 2025 by rpki-client