$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft File: E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json) Hash identifier: jU3fEMcdqxuJdfUbMd6V1uAYfbRTOb4QzSuuHxRxlME= Subject key identifier: 18:65:B4:CC:02:C3:DE:C9:D5:6D:EE:37:BB:59:CA:5C:3E:80:73:0F Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Certificate serial: 61E4D8F6AC3900E64B20F1F4F01EA0EBED269675 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft Manifest number: EA Signing time: Sat 23 Aug 2025 06:52:33 +0000 Manifest this update: Sat 23 Aug 2025 06:47:33 +0000 Manifest next update: Sun 24 Aug 2025 07:02:33 +0000 Files and hashes: 1: 39312e3230392e34302e302f32342d3234203d3e203232343237.roa (hash: na/qAaTdIJ7PT1YXsvaqUnpzD/nkfVV0HbNT3JlIn2w=) 2: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: UjFw0WQQLm//XoiWgykA8VWz+amzh0YCKaelwGihPq4=) 3: 326130663a356663303a646561643a3a2f34382d3438203d3e203339363733.roa (hash: gO+lPcmBJ3b3FFlaD55CICvRL4LDSg56OGDANGd62H4=) 4: 39312e3230392e35382e302f32342d3234203d3e203634323637.roa (hash: vVPhAwxMoGbJX95BZTqrmZCi086rlFMNDRhMBQEniYs=) 5: 39312e3230392e34382e302f32342d3234203d3e2034363337.roa (hash: 4+D5jdmTDYB1GvCAU0z5GBGlSPW7Q/zpduO0wdWv8pU=) 6: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: Qj8pflv8KszWoeUIqOpeKQUtZrsbyJDTmnxefpUjjlo=) 7: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: /NpO9ZDUXFOD2qFxjEVkd0OgbvvaBnWZchdl2wBtIjI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:e4:d8:f6:ac:39:00:e6:4b:20:f1:f4:f0:1e:a0:eb:ed:26:96:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Validity Not Before: Aug 23 06:47:33 2025 GMT Not After : Aug 24 07:02:33 2025 GMT Subject: CN=1865B4CC02C3DEC9D56DEE37BB59CA5C3E80730F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:d9:22:6e:0c:d4:2a:83:57:88:9f:90:47: 5d:f6:af:2e:ce:36:48:e4:7b:22:57:0f:9f:3a:d0: 2e:b1:66:b8:43:89:57:1e:55:db:89:a6:d1:4f:3e: a8:88:2c:9d:86:e3:bf:a1:64:eb:87:5b:15:af:46: 20:53:01:01:28:e1:f4:e9:d2:bd:4c:04:ef:23:2b: 4f:14:db:41:0e:29:20:17:6b:47:6b:a5:b4:f8:d1: 86:c0:fa:dc:39:87:e7:6c:95:99:cf:83:3a:0e:6b: e6:e7:a9:e7:8e:3d:17:65:e0:05:25:54:26:73:9d: ae:99:f1:3a:85:1c:9f:14:6a:99:50:23:10:63:42: ae:d5:ae:03:c5:b8:e2:04:0d:bc:79:4b:a2:08:d3: 00:b0:29:60:64:cc:0e:62:2f:33:9e:d8:77:e5:f0: 70:55:a8:0f:57:98:ab:65:26:4d:7e:15:d5:8c:bb: a7:d9:e3:7e:26:9f:72:84:62:54:00:5a:cb:25:51: 44:b5:2b:53:82:aa:60:ea:e5:53:34:85:b1:8a:fa: c3:34:b6:3c:59:bb:0f:ae:92:a9:f3:d3:78:48:db: 0d:f4:1b:a9:c7:59:fa:bb:ee:ba:49:8c:cf:fe:49: b1:b1:87:32:76:e0:18:11:65:c0:09:0b:81:f8:5a: 0b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:65:B4:CC:02:C3:DE:C9:D5:6D:EE:37:BB:59:CA:5C:3E:80:73:0F X509v3 Authority Key Identifier: keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:b1:c0:50:52:0d:20:7a:5d:07:0c:e1:f8:5e:f2:36:a4:74: ba:98:81:53:58:ac:17:b2:e0:f7:f3:19:53:13:a7:26:6e:40: 1e:9c:98:08:3b:40:95:fd:b6:0a:b3:4a:be:b7:0a:4f:eb:c4: 80:27:0a:bf:a9:0d:ca:60:84:26:50:02:d5:78:eb:c9:50:0a: 84:18:a8:6c:e2:43:27:eb:f1:a9:84:4e:52:3b:bb:02:cf:1a: 11:38:40:ad:2d:59:2b:86:fb:11:ca:0e:32:1e:0b:fc:e1:a7: a2:19:b1:5a:1e:e7:44:3e:c2:4a:45:de:93:69:0b:d9:af:61: 33:3e:4d:61:84:e0:d4:43:a3:cb:d7:57:d1:75:0c:2d:15:5c: 40:1d:66:0e:c9:3f:71:e9:46:d4:04:36:8d:55:45:d8:fa:4e: ca:6c:ee:e2:6c:d7:ee:ef:d9:50:eb:0b:c7:6a:67:2c:b4:4a: 85:2e:7f:46:0d:4f:7f:d3:df:9b:f3:03:cb:dc:6f:af:cc:75: 42:8b:cd:15:27:7b:65:86:ee:2f:a5:86:70:7c:a4:ed:ed:b1: 98:70:21:38:91:25:38:4a:87:62:e2:d7:9b:f0:ce:97:5b:5a: 25:9b:da:8d:ea:8b:07:32:67:dd:bb:d9:0a:a4:ea:69:81:46: 1e:f6:84:ab -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYeTY9qw5AOZLIPH08B6g6+0mlnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3 NjI2MDBlNjAeFw0yNTA4MjMwNjQ3MzNaFw0yNTA4MjQwNzAyMzNaMDMxMTAvBgNV BAMTKDE4NjVCNENDMDJDM0RFQzlENTZERUUzN0JCNTlDQTVDM0U4MDczMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC43tkibgzUKoNXiJ+QR132ry7O NkjkeyJXD5860C6xZrhDiVceVduJptFPPqiILJ2G47+hZOuHWxWvRiBTAQEo4fTp 0r1MBO8jK08U20EOKSAXa0drpbT40YbA+tw5h+dslZnPgzoOa+bnqeeOPRdl4AUl VCZzna6Z8TqFHJ8UaplQIxBjQq7VrgPFuOIEDbx5S6II0wCwKWBkzA5iLzOe2Hfl 8HBVqA9XmKtlJk1+FdWMu6fZ434mn3KEYlQAWsslUUS1K1OCqmDq5VM0hbGK+sM0 tjxZuw+ukqnz03hI2w30G6nHWfq77rpJjM/+SbGxhzJ24BgRZcAJC4H4WgsnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUGGW0zALD3snVbe43u1nKXD6Acw8wHwYDVR0j BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1 N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ bUFPWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjBiZTNlMS04 NTRlLTQ2NjItOTJlOC0wMjg5NTBmZjU3ZmUvMC9FMjA1RUJGMDY1RkM0OTI5RjE4 MDI2NjJBRTYyRDdGOTc2MjYwMEU2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuLHAUFINIHpdBwzh+F7y NqR0upiBU1isF7Lg9/MZUxOnJm5AHpyYCDtAlf22CrNKvrcKT+vEgCcKv6kNymCE JlAC1XjryVAKhBiobOJDJ+vxqYROUju7As8aEThArS1ZK4b7EcoOMh4L/OGnohmx Wh7nRD7CSkXek2kL2a9hMz5NYYTg1EOjy9dX0XUMLRVcQB1mDsk/celG1AQ2jVVF 2PpOymzu4mzX7u/ZUOsLx2pnLLRKhS5/Rg1Pf9Pfm/MDy9xvr8x1QovNFSd7ZYbu L6WGcHyk7e2xmHAhOJElOEqHYuLXm/DOl1taJZvajeqLBzJn3bvZCqTqaYFGHvaE qw== -----END CERTIFICATE-----Generated at Sat Aug 23 12:25:47 2025 by rpki-client