$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: rFLv/SWs5WbKCeyCw7XUwm1x+2IIusQ7+Q8ho8smZvc= Subject key identifier: 6C:70:5B:31:7C:5E:53:EB:8A:84:E0:C6:AC:38:DD:DD:58:04:93:37 Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 59C53D1AF7FFEE2E7EDA5DBC6B4DC7AA13475198 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: 011F Signing time: Sat 28 Jun 2025 20:24:33 +0000 Manifest this update: Sat 28 Jun 2025 20:19:33 +0000 Manifest next update: Sun 29 Jun 2025 23:48:33 +0000 Files and hashes: 1: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: eMIpuIkaeqx4JE3jxEm8lG63PC2jPuUTYLrx+Nywuns=) 2: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: liZtkDCXL4DmjNQ78r1O/4djDEbWR26m7nKfEkWRmh4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 23:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c5:3d:1a:f7:ff:ee:2e:7e:da:5d:bc:6b:4d:c7:aa:13:47:51:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Jun 28 20:19:33 2025 GMT Not After : Jun 29 23:48:33 2025 GMT Subject: CN=6C705B317C5E53EB8A84E0C6AC38DDDD58049337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:45:98:c0:98:98:8d:e8:27:22:21:a9:bf:f9: 21:f7:a1:5e:8d:9a:29:29:be:fe:a2:63:a1:a2:6d: 37:2e:fd:ef:e5:eb:b6:20:a9:10:cc:a4:7f:c9:a3: 57:82:4a:e5:52:3d:1d:da:a9:3b:8e:3b:bd:69:4b: 63:3d:ae:8a:0f:86:6f:a2:7a:8f:7b:3e:d6:11:6e: 1d:f8:5d:eb:0d:ca:e5:fd:0b:af:6e:5e:52:ef:9e: 1c:0f:b3:96:74:8e:c2:39:90:1e:21:e5:47:8d:74: 51:ae:8a:aa:64:5e:d0:b4:aa:8e:c7:65:ee:33:ed: f0:12:d9:6b:3d:09:6a:3a:60:cc:81:f0:ee:12:e6: 74:af:4d:59:fc:7b:c6:7d:e9:b1:9d:2b:c3:66:01: b5:51:56:27:06:89:49:9d:e8:20:01:f6:d2:ba:db: 93:bf:56:33:d3:10:1e:48:23:d2:c3:a5:8e:97:84: 0f:bf:52:08:0d:b7:90:24:a7:dd:13:0a:bc:36:4c: df:c9:8b:39:e0:f5:84:d7:df:9e:f4:85:a3:7c:fe: 80:fe:e6:fc:52:bf:59:cc:38:1d:7f:b1:04:74:7d: e6:5d:c3:68:a8:33:33:ab:a6:87:12:13:e6:71:55: cc:da:dc:40:82:18:a4:be:0b:b8:90:84:25:8c:d8: 8f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:70:5B:31:7C:5E:53:EB:8A:84:E0:C6:AC:38:DD:DD:58:04:93:37 X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:d8:59:f2:7f:db:9d:82:41:f9:de:20:fe:b0:33:fa:ad:67: 3e:34:60:0d:05:4d:ee:df:03:27:e7:14:3f:ec:87:24:1b:90: fe:bc:7e:cf:c1:b5:39:f3:f0:07:07:8e:a0:fb:d6:f7:d7:5c: 7a:c5:73:53:76:68:6b:9b:a8:60:e4:ff:13:e9:ab:ff:c7:ca: f1:1f:2d:8c:8e:0a:a5:d5:db:a4:9e:48:2f:6e:aa:93:6a:3a: 59:6a:9f:26:0b:74:08:30:b6:e6:2b:db:fc:7e:78:f3:36:ee: be:53:5d:73:33:6b:2a:1d:a3:0b:75:6f:fe:8f:a3:b4:56:bd: 4d:c7:13:d2:a8:2c:91:ec:37:39:57:d4:e8:c5:0f:a9:eb:9b: 1b:60:ee:ca:a5:be:30:79:c7:f9:e0:c9:96:91:db:ae:cd:25: 49:df:6a:4c:40:69:b5:e1:b7:4f:d9:26:78:e8:83:d7:54:8f: 23:b8:a6:1a:18:8c:47:49:84:af:40:85:8f:1f:fd:32:fd:80: d2:85:98:d8:79:b5:cb:cc:18:d4:a9:c3:0d:de:35:db:88:2c: f9:6b:be:9f:4c:3b:96:7b:88:8c:7b:1e:48:f9:07:0c:38:74: 99:77:5a:6d:14:26:9a:c0:e3:b4:81:70:a0:3c:e1:b3:37:a7: ac:64:c1:fa -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWcU9Gvf/7i5+2l28a03HqhNHUZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNTA2MjgyMDE5MzNaFw0yNTA2MjkyMzQ4MzNaMDMxMTAvBgNV BAMTKDZDNzA1QjMxN0M1RTUzRUI4QTg0RTBDNkFDMzhERERENTgwNDkzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4RZjAmJiN6CciIam/+SH3oV6N mikpvv6iY6GibTcu/e/l67YgqRDMpH/Jo1eCSuVSPR3aqTuOO71pS2M9rooPhm+i eo97PtYRbh34XesNyuX9C69uXlLvnhwPs5Z0jsI5kB4h5UeNdFGuiqpkXtC0qo7H Ze4z7fAS2Ws9CWo6YMyB8O4S5nSvTVn8e8Z96bGdK8NmAbVRVicGiUmd6CAB9tK6 25O/VjPTEB5II9LDpY6XhA+/UggNt5Akp90TCrw2TN/Jizng9YTX3570haN8/oD+ 5vxSv1nMOB1/sQR0feZdw2ioMzOrpocSE+ZxVcza3ECCGKS+C7iQhCWM2I+VAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUbHBbMXxeU+uKhODGrDjd3VgEkzcwHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBR2Fny f9udgkH53iD+sDP6rWc+NGANBU3u3wMn5xQ/7IckG5D+vH7PwbU58/AHB46g+9b3 11x6xXNTdmhrm6hg5P8T6av/x8rxHy2Mjgql1duknkgvbqqTajpZap8mC3QIMLbm K9v8fnjzNu6+U11zM2sqHaMLdW/+j6O0Vr1NxxPSqCyR7Dc5V9ToxQ+p65sbYO7K pb4wecf54MmWkduuzSVJ32pMQGm14bdP2SZ46IPXVI8juKYaGIxHSYSvQIWPH/0y /YDShZjYebXLzBjUqcMN3jXbiCz5a76fTDuWe4iMex5I+QcMOHSZd1ptFCaawOO0 gXCgPOGzN6esZMH6 -----END CERTIFICATE-----Generated at Sun Jun 29 15:33:21 2025 by rpki-client