$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft File: B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft (raw, json) Hash identifier: VGm8U3mn9mbiscnjyGEuCCTK+/siguj/bU4o2vflCb0= Subject key identifier: 4C:F5:B8:B5:00:BC:BD:33:5E:66:A9:70:CA:E6:89:A3:FE:31:93:32 Authority key identifier: B7:D2:E8:6F:D3:DA:15:BD:13:4C:A2:15:5C:3A:9F:DA:71:8B:37:49 Certificate issuer: /CN=B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749 Certificate serial: 423B044DFCF7102717E0F67BACF95704DA4CE141 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft Manifest number: 9F Signing time: Sat 23 Aug 2025 15:29:01 +0000 Manifest this update: Sat 23 Aug 2025 15:24:01 +0000 Manifest next update: Sun 24 Aug 2025 19:16:01 +0000 Files and hashes: 1: 326131343a373538303a6330303a3a2f34302d3438203d3e20313938303235.roa (hash: 3eo92HTpLxu+/Kjst/g+aIrgcCeedR/rWPVZHkoZXZY=) 2: 326131343a373538303a6330303a3a2f34302d3438203d3e20313531313934.roa (hash: IcJMioVXTHIBW9dWRoa7QtI8OxLl1FTCXI6aJvTPxUg=) 3: B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl (hash: P24jx6n1/RCnrekNUrikXEnpIY+f0u2e2yRMov39o5M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:3b:04:4d:fc:f7:10:27:17:e0:f6:7b:ac:f9:57:04:da:4c:e1:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749 Validity Not Before: Aug 23 15:24:01 2025 GMT Not After : Aug 24 19:16:01 2025 GMT Subject: CN=4CF5B8B500BCBD335E66A970CAE689A3FE319332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:01:e9:17:a4:29:95:9e:c2:03:59:87:5c:5d: 69:98:98:ae:2d:02:19:9d:3b:50:06:e0:59:be:c1: c4:82:86:f5:54:d9:ec:31:25:15:ff:02:31:92:1f: 46:b1:4c:2a:80:1f:76:62:a7:93:39:91:f7:da:89: e8:84:aa:05:0d:c1:8c:17:9a:01:b0:01:ff:e2:ea: c6:e7:b8:d3:bd:d3:44:35:fb:b9:d2:78:0d:6c:01: 75:87:53:cf:c7:f8:12:a1:5c:6b:94:49:36:a7:c7: 59:92:c8:4d:5c:e2:6d:9c:5c:33:2e:ad:6e:0a:98: b7:c4:ff:0b:00:64:e1:a7:b1:32:ff:cc:d1:e9:3a: 2f:eb:d5:ea:7c:61:91:35:2b:33:25:b6:0a:a3:cf: 7f:9a:42:d8:3a:f9:21:04:da:25:e8:ff:41:7c:c4: fd:71:e8:8f:3b:19:14:7d:80:e7:d3:f2:78:c5:37: 7f:a7:25:64:67:4a:fa:7f:4b:0f:95:17:7c:06:10: 70:2b:74:47:cc:d4:01:f0:24:d1:07:7c:01:20:d1: ce:a0:09:70:c7:4b:7d:39:6d:9f:7d:d9:93:ff:55: 82:a2:95:56:fb:45:b6:72:bb:6f:40:ab:e6:7c:bd: 33:0a:fd:de:3e:69:b5:d8:36:3b:77:7c:2b:07:43: ae:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F5:B8:B5:00:BC:BD:33:5E:66:A9:70:CA:E6:89:A3:FE:31:93:32 X509v3 Authority Key Identifier: keyid:B7:D2:E8:6F:D3:DA:15:BD:13:4C:A2:15:5C:3A:9F:DA:71:8B:37:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:d0:44:f4:ad:65:66:45:0c:2a:cb:51:eb:42:06:14:aa:1e: b5:0a:1f:c4:cf:83:f6:a7:c4:41:57:d4:fb:9d:b7:9f:1a:07: 82:40:ae:df:6d:24:00:69:c0:16:72:cf:2e:20:81:1c:45:b1: 91:6b:8d:fb:f8:cf:ed:a5:88:15:6f:6b:85:9e:6c:ff:26:c7: 1f:81:52:69:2b:cc:dd:f2:86:70:f7:33:6a:08:fc:c5:d8:59: d0:aa:ea:29:29:35:58:c4:4c:04:42:d8:e3:65:a1:68:01:8b: 19:d0:f7:ce:42:93:3c:72:e7:a7:3d:f7:04:9c:7a:5d:34:bc: fd:2d:a7:61:7b:f9:50:1f:c2:6f:c5:f4:22:0f:e3:a2:3e:d7: ea:b6:7b:67:d7:ae:c3:66:ab:30:f6:c4:0d:e9:9c:ad:16:b9: 82:4c:fa:80:fd:b6:8d:4a:f9:f8:ba:e3:f3:47:f0:35:91:54: 69:e0:0a:79:b7:01:3a:7a:33:80:66:8d:35:fb:51:86:a4:d8: 14:04:a7:5c:78:f4:45:71:ad:ca:f7:67:b1:a8:50:cc:6d:5c: 7c:e7:77:0f:0c:0e:78:eb:7c:e7:29:c5:3b:03:90:20:f5:4a: 10:fa:7a:93:2f:9f:2b:b8:31:3d:c1:a9:76:3c:be:2d:85:ef: 80:5f:06:b4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQjsETfz3ECcX4PZ7rPlXBNpM4UEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdEMkU4NkZEM0RBMTVCRDEzNENBMjE1NUMzQTlGREE3 MThCMzc0OTAeFw0yNTA4MjMxNTI0MDFaFw0yNTA4MjQxOTE2MDFaMDMxMTAvBgNV BAMTKDRDRjVCOEI1MDBCQ0JEMzM1RTY2QTk3MENBRTY4OUEzRkUzMTkzMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnAekXpCmVnsIDWYdcXWmYmK4t AhmdO1AG4Fm+wcSChvVU2ewxJRX/AjGSH0axTCqAH3Zip5M5kffaieiEqgUNwYwX mgGwAf/i6sbnuNO900Q1+7nSeA1sAXWHU8/H+BKhXGuUSTanx1mSyE1c4m2cXDMu rW4KmLfE/wsAZOGnsTL/zNHpOi/r1ep8YZE1KzMltgqjz3+aQtg6+SEE2iXo/0F8 xP1x6I87GRR9gOfT8njFN3+nJWRnSvp/Sw+VF3wGEHArdEfM1AHwJNEHfAEg0c6g CXDHS305bZ992ZP/VYKilVb7RbZyu29Aq+Z8vTMK/d4+abXYNjt3fCsHQ66FAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUTPW4tQC8vTNeZqlwyuaJo/4xkzIwHwYDVR0j BBgwFoAUt9Lob9PaFb0TTKIVXDqf2nGLN0kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzZmZDRlYTEtYTI2Ni00ZGVhLWI0OGEtMTVkYTM1NDUy MTA5LzEvQjdEMkU4NkZEM0RBMTVCRDEzNENBMjE1NUMzQTlGREE3MThCMzc0OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CN0QyRTg2RkQzREExNUJEMTM0Q0EyMTU1 QzNBOUZEQTcxOEIzNzQ5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M2ZmQ0ZWExLWEyNjYtNGRlYS1iNDhhLTE1ZGEzNTQ1MjEwOS8xL0I3RDJFODZG RDNEQTE1QkQxMzRDQTIxNTVDM0E5RkRBNzE4QjM3NDkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCV0ET0 rWVmRQwqy1HrQgYUqh61Ch/Ez4P2p8RBV9T7nbefGgeCQK7fbSQAacAWcs8uIIEc RbGRa437+M/tpYgVb2uFnmz/JscfgVJpK8zd8oZw9zNqCPzF2FnQquopKTVYxEwE QtjjZaFoAYsZ0PfOQpM8cuenPfcEnHpdNLz9Ladhe/lQH8JvxfQiD+OiPtfqtntn 167DZqsw9sQN6ZytFrmCTPqA/baNSvn4uuPzR/A1kVRp4Ap5twE6ejOAZo01+1GG pNgUBKdcePRFca3K92exqFDMbVx853cPDA5463znKcU7A5Ag9UoQ+nqTL58ruDE9 wal2PL4the+AXwa0 -----END CERTIFICATE-----Generated at Sun Aug 24 01:30:35 2025 by rpki-client