$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft File: E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json) Hash identifier: n7lOTlshJvzyIxjuSxfyQwF2pcKp1fTSZzO5R9dttGw= Subject key identifier: 51:F5:A5:CC:04:87:A5:7C:66:EC:B6:07:4C:D0:EC:32:56:66:B4:DA Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Certificate serial: 4DBF7E9A4F9FFF4FE08E4CDE67851B2922C29191 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft Manifest number: A0 Signing time: Sat 28 Jun 2025 12:19:09 +0000 Manifest this update: Sat 28 Jun 2025 12:14:09 +0000 Manifest next update: Sun 29 Jun 2025 14:42:09 +0000 Files and hashes: 1: 39312e3230392e35382e302f32342d3234203d3e203634323637.roa (hash: vVPhAwxMoGbJX95BZTqrmZCi086rlFMNDRhMBQEniYs=) 2: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: Qj8pflv8KszWoeUIqOpeKQUtZrsbyJDTmnxefpUjjlo=) 3: 39312e3230392e34302e302f32342d3234203d3e203232343237.roa (hash: na/qAaTdIJ7PT1YXsvaqUnpzD/nkfVV0HbNT3JlIn2w=) 4: 326130663a356663303a646561643a3a2f34382d3438203d3e203339363733.roa (hash: gO+lPcmBJ3b3FFlaD55CICvRL4LDSg56OGDANGd62H4=) 5: 39312e3230392e34382e302f32342d3234203d3e2035353131.roa (hash: pWHUy4sfDHhMYcXOwCmnLzzNUiYAcTbJlR4z9A6zTiI=) 6: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: XuahceKdwbb89yuGBr7VFDmiSOfBX4TkCvk761DQyCk=) 7: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: UjFw0WQQLm//XoiWgykA8VWz+amzh0YCKaelwGihPq4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 14:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:bf:7e:9a:4f:9f:ff:4f:e0:8e:4c:de:67:85:1b:29:22:c2:91:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Validity Not Before: Jun 28 12:14:09 2025 GMT Not After : Jun 29 14:42:09 2025 GMT Subject: CN=51F5A5CC0487A57C66ECB6074CD0EC325666B4DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:03:a4:63:c7:c7:e9:8d:5d:df:6d:ab:81: 15:fc:c0:74:8b:ef:56:7f:7a:a4:88:3e:fc:e0:01: fd:19:31:0e:7c:d2:d9:88:21:56:e3:61:12:06:68: 90:cd:bb:14:bf:03:05:c6:43:e9:f3:87:87:b4:3f: 9e:cb:23:ba:2e:65:36:01:15:31:ac:0a:0b:3f:27: 32:41:34:af:95:c1:fe:d4:ba:36:d8:ef:9f:7a:00: d6:0a:cb:25:5f:ce:2d:e3:bb:18:23:ed:86:c1:2e: cd:af:74:53:c2:81:30:20:b2:63:77:14:f4:ae:5a: 2f:77:9a:ff:ec:bd:b1:22:ba:53:cd:31:78:5c:5f: 17:0d:41:b9:b0:43:92:a4:3f:fe:1f:73:af:5e:03: d1:7a:6a:63:5c:a6:7b:7d:f9:d8:2a:0a:08:e8:fe: 73:a4:61:92:29:0b:66:e7:94:68:79:58:36:c1:a4: e8:af:d0:f3:44:16:c5:f5:40:83:65:64:15:39:b2: 0f:ae:01:23:d8:0a:23:16:bd:6e:fb:0b:f2:f7:2b: e8:99:c6:ea:71:7a:2b:ca:80:13:ff:c4:06:59:f7: 9d:8a:3f:d0:c2:3d:08:81:32:18:20:51:8c:14:94: 8a:97:cc:00:5b:3c:71:a4:1d:06:4e:85:0b:27:3c: 3c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F5:A5:CC:04:87:A5:7C:66:EC:B6:07:4C:D0:EC:32:56:66:B4:DA X509v3 Authority Key Identifier: keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:00:f8:82:f5:93:d1:c8:d3:05:c6:aa:2d:d9:7a:23:da:c8: b5:7f:58:d9:3f:f3:15:68:01:d8:da:80:07:8b:f8:5e:22:2a: 06:77:d1:a4:15:77:2a:1a:29:d7:7f:24:ff:c9:3e:80:7d:27: 20:8d:cf:4e:ea:07:4e:9b:84:52:09:37:40:b5:e6:42:28:36: 9b:83:15:19:de:a4:83:a7:1f:9d:21:08:5f:58:6a:db:0a:5e: 5d:4a:b4:0d:a5:72:0a:79:70:70:12:77:10:15:2a:60:a3:e0: d3:af:02:fb:10:ae:28:e9:17:69:f0:8b:78:0d:f4:75:34:c5: ab:71:1a:af:5d:dd:12:6a:e4:74:e2:15:e7:dd:a8:c2:4b:27: ab:53:37:2c:8a:ca:d1:62:6a:2b:f4:fc:5d:35:d2:cf:b9:e3: b4:c4:66:8d:d3:dc:81:7c:17:2c:6f:a0:c4:31:76:0c:1d:13: e4:06:46:d9:0e:b0:44:15:a4:0b:9a:be:89:6f:c9:0b:b0:27: d1:c7:43:aa:86:1a:05:fe:2e:36:33:34:97:09:b9:4d:45:fa: e9:cf:63:8a:43:dc:cd:97:60:8e:53:cc:e2:66:20:70:a4:e2: 49:97:e3:1b:50:11:b6:b4:0a:1f:f5:dc:cc:78:d6:06:ee:90: f7:fc:34:48 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTb9+mk+f/0/gjkzeZ4UbKSLCkZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3 NjI2MDBlNjAeFw0yNTA2MjgxMjE0MDlaFw0yNTA2MjkxNDQyMDlaMDMxMTAvBgNV BAMTKDUxRjVBNUNDMDQ4N0E1N0M2NkVDQjYwNzRDRDBFQzMyNTY2NkI0REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBYQOkY8fH6Y1d322rgRX8wHSL 71Z/eqSIPvzgAf0ZMQ580tmIIVbjYRIGaJDNuxS/AwXGQ+nzh4e0P57LI7ouZTYB FTGsCgs/JzJBNK+Vwf7UujbY7596ANYKyyVfzi3juxgj7YbBLs2vdFPCgTAgsmN3 FPSuWi93mv/svbEiulPNMXhcXxcNQbmwQ5KkP/4fc69eA9F6amNcpnt9+dgqCgjo /nOkYZIpC2bnlGh5WDbBpOiv0PNEFsX1QINlZBU5sg+uASPYCiMWvW77C/L3K+iZ xupxeivKgBP/xAZZ952KP9DCPQiBMhggUYwUlIqXzABbPHGkHQZOhQsnPDyBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUfWlzASHpXxm7LYHTNDsMlZmtNowHwYDVR0j BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1 N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ bUFPWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjBiZTNlMS04 NTRlLTQ2NjItOTJlOC0wMjg5NTBmZjU3ZmUvMC9FMjA1RUJGMDY1RkM0OTI5RjE4 MDI2NjJBRTYyRDdGOTc2MjYwMEU2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAD4gvWT0cjTBcaqLdl6 I9rItX9Y2T/zFWgB2NqAB4v4XiIqBnfRpBV3Khop138k/8k+gH0nII3PTuoHTpuE Ugk3QLXmQig2m4MVGd6kg6cfnSEIX1hq2wpeXUq0DaVyCnlwcBJ3EBUqYKPg068C +xCuKOkXafCLeA30dTTFq3Ear13dEmrkdOIV592owksnq1M3LIrK0WJqK/T8XTXS z7njtMRmjdPcgXwXLG+gxDF2DB0T5AZG2Q6wRBWkC5q+iW/JC7An0cdDqoYaBf4u NjM0lwm5TUX66c9jikPczZdgjlPM4mYgcKTiSZfjG1ARtrQKH/XczHjWBu6Q9/w0 SA== -----END CERTIFICATE-----Generated at Sat Jun 28 23:02:45 2025 by rpki-client