$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: xam5RMo26qikgdVnP3yCLl4ZywrzueoMey4p4VqwWeI= Subject key identifier: DD:5A:2E:AF:FA:9B:B1:B2:A2:5C:C3:86:78:4E:A1:36:E9:D5:3E:69 Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 3A5FF16558175E2B4EADE6B472BD088419D92E18 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: 0169 Signing time: Sat 23 Aug 2025 14:56:05 +0000 Manifest this update: Sat 23 Aug 2025 14:51:05 +0000 Manifest next update: Sun 24 Aug 2025 18:18:05 +0000 Files and hashes: 1: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: WsukzEcBwvk00q2GQNol5269KR5THJ1JwrOqrRWdEOY=) 2: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: liZtkDCXL4DmjNQ78r1O/4djDEbWR26m7nKfEkWRmh4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:5f:f1:65:58:17:5e:2b:4e:ad:e6:b4:72:bd:08:84:19:d9:2e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Aug 23 14:51:05 2025 GMT Not After : Aug 24 18:18:05 2025 GMT Subject: CN=DD5A2EAFFA9BB1B2A25CC386784EA136E9D53E69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2a:32:77:8b:ed:ed:49:63:2c:c8:8a:fc:e9: 81:14:5a:65:7d:80:2a:62:fd:a0:32:06:12:bb:56: b0:ed:d0:c7:3f:e9:1d:30:62:6a:65:79:e3:c8:24: 63:d9:5c:a7:a4:72:06:a8:b7:1b:6f:4a:3e:c8:18: 71:94:ff:bf:2f:37:55:24:3b:45:79:e8:0f:ad:9a: b4:a8:60:20:25:9f:62:ff:e5:fd:8a:39:32:5e:82: 12:e0:c8:d1:81:c2:b7:b2:62:32:f7:b1:85:f6:4f: 87:62:9b:35:82:73:ea:1c:37:b3:f7:c9:3a:ec:68: 55:75:c3:56:1b:6b:54:c8:0c:5a:57:c5:8c:9e:33: 51:38:c3:80:93:d9:7c:2e:df:4e:f5:0f:a4:9b:b0: 63:74:31:3c:19:8e:d9:60:ef:bb:37:3a:a0:4d:98: 33:7b:ac:7f:6a:4f:58:47:10:fe:ca:a0:3e:fc:9f: 92:82:b7:3e:57:60:7b:e6:12:da:b4:5a:32:a4:bb: 0c:0c:22:b3:73:d3:09:cd:a0:a5:85:80:0a:75:9c: 9d:86:1d:b6:35:7d:c6:71:bf:df:33:65:4a:ca:28: e7:9f:c8:c9:f7:d8:6d:1e:ff:69:5f:15:c1:02:19: 96:7a:61:da:45:63:c9:53:de:ed:5d:61:f2:7f:1f: a9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5A:2E:AF:FA:9B:B1:B2:A2:5C:C3:86:78:4E:A1:36:E9:D5:3E:69 X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:eb:3a:98:23:85:e6:25:9f:89:e1:81:2b:da:39:de:0d:8c: b4:2e:c5:f5:09:9a:cf:fa:ac:f1:76:05:82:98:3d:bf:15:9b: 10:23:f0:cb:b8:70:83:94:8f:1b:32:5e:60:71:9a:6e:76:a3: 94:98:20:90:bc:5d:cc:9f:e1:1d:ec:b0:b9:77:ef:f4:4e:0a: 7f:38:77:d8:9f:e2:a2:71:40:d3:59:d5:df:11:a5:50:58:31: f4:ab:07:97:06:f0:d3:ad:90:7c:c3:bd:39:ab:f3:37:f8:0f: d0:57:56:87:16:71:90:38:98:46:49:94:ab:8a:32:be:0d:fa: f3:33:fa:e1:8c:dc:c3:59:1d:67:ab:4b:56:a5:bc:2e:62:18: d9:dc:ef:69:15:b5:31:d4:58:ba:e7:b0:30:b3:75:2b:07:59: b9:10:e5:1b:84:61:1d:2f:9a:58:31:23:56:3a:16:5d:db:e9: 98:df:aa:aa:7b:60:e6:0c:4d:be:8c:1f:31:cc:62:e2:7b:14: d6:20:15:76:7b:91:e5:5e:7c:5a:b3:61:4a:70:75:f6:d5:3d: 95:db:26:2a:b2:02:10:87:e5:4a:8c:05:65:bb:71:9e:ba:6d: 02:9f:11:00:ac:25:21:60:c5:9d:e9:f9:ef:67:cf:7e:b3:0a: dd:6c:77:29 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOl/xZVgXXitOrea0cr0IhBnZLhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNTA4MjMxNDUxMDVaFw0yNTA4MjQxODE4MDVaMDMxMTAvBgNV BAMTKERENUEyRUFGRkE5QkIxQjJBMjVDQzM4Njc4NEVBMTM2RTlENTNFNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKjJ3i+3tSWMsyIr86YEUWmV9 gCpi/aAyBhK7VrDt0Mc/6R0wYmpleePIJGPZXKekcgaotxtvSj7IGHGU/78vN1Uk O0V56A+tmrSoYCAln2L/5f2KOTJeghLgyNGBwreyYjL3sYX2T4dimzWCc+ocN7P3 yTrsaFV1w1Yba1TIDFpXxYyeM1E4w4CT2Xwu3071D6SbsGN0MTwZjtlg77s3OqBN mDN7rH9qT1hHEP7KoD78n5KCtz5XYHvmEtq0WjKkuwwMIrNz0wnNoKWFgAp1nJ2G HbY1fcZxv98zZUrKKOefyMn32G0e/2lfFcECGZZ6YdpFY8lT3u1dYfJ/H6m5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU3Vour/qbsbKiXMOGeE6hNunVPmkwHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBf6zqY I4XmJZ+J4YEr2jneDYy0LsX1CZrP+qzxdgWCmD2/FZsQI/DLuHCDlI8bMl5gcZpu dqOUmCCQvF3Mn+Ed7LC5d+/0Tgp/OHfYn+KicUDTWdXfEaVQWDH0qweXBvDTrZB8 w705q/M3+A/QV1aHFnGQOJhGSZSrijK+DfrzM/rhjNzDWR1nq0tWpbwuYhjZ3O9p FbUx1Fi657Aws3UrB1m5EOUbhGEdL5pYMSNWOhZd2+mY36qqe2DmDE2+jB8xzGLi exTWIBV2e5HlXnxas2FKcHX21T2V2yYqsgIQh+VKjAVlu3Geum0CnxEArCUhYMWd 6fnvZ89+swrdbHcp -----END CERTIFICATE-----Generated at Sat Aug 23 17:43:35 2025 by rpki-client