$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft File: 926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json) Hash identifier: p9s+pY2B5CDc+9FQMZvDKYgfHhKBvTaH2+/cTk9xPOE= Subject key identifier: 1C:4A:BF:E1:96:44:1E:CF:B6:2C:B7:54:44:44:CB:FC:2D:1E:92:62 Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 Certificate issuer: /CN=926cb33722a3493216283dc80cae0ee9d58874f2 Certificate serial: 21DA83858740F8A75BF30789F5051FEB26201CEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft Manifest number: 04D1 Signing time: Sat 28 Jun 2025 05:29:32 +0000 Manifest this update: Sat 28 Jun 2025 05:24:32 +0000 Manifest next update: Sun 29 Jun 2025 08:44:32 +0000 Files and hashes: 1: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: vwSEUgdFJ5PPtETvmVfTCVmULHvCJLz5jSqlSjdS13k=) 2: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: TR2ouiz6fdeF6iWoPi8BreRS8WSeDl6iRBRfM0Q37V0=) 3: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: G0pJKexFl5iJSj7RvTDDHGwylbeAPcm6mkIGuJ7MB4g=) 4: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: kkkt+CdVzC7OjY449gnOlMwgGCN8KNpK56RTONBzmFY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 08:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:da:83:85:87:40:f8:a7:5b:f3:07:89:f5:05:1f:eb:26:20:1c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2 Validity Not Before: Jun 28 05:24:32 2025 GMT Not After : Jun 29 08:44:32 2025 GMT Subject: CN=1C4ABFE196441ECFB62CB7544444CBFC2D1E9262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0f:2a:29:c0:0f:ff:37:d6:7e:2f:b1:2a:45: 11:24:82:d2:6c:26:8a:8f:f9:91:d2:b7:2a:16:77: 93:a5:c7:71:99:a6:54:0e:63:67:92:0c:61:ef:74: ec:00:4d:a6:96:29:08:aa:c7:1d:53:bb:c4:29:a3: 58:b3:e0:51:5a:f4:86:d7:dc:d7:91:07:ae:b8:6b: b9:86:bc:75:62:f5:99:dc:0e:5b:4c:6c:ba:a7:e3: 12:38:54:cd:73:1e:1f:64:53:6b:02:0c:c7:f9:1f: af:31:4a:1e:56:d9:2a:a1:2f:54:6c:df:71:c9:55: 73:ce:a4:81:84:00:8a:cb:fc:13:b8:e5:04:14:c1: a4:fc:a4:53:5f:8e:b5:6a:52:44:33:7e:2e:2f:54: c3:e7:1b:ac:79:a4:11:60:4d:46:6e:f0:50:14:1c: c4:0a:45:e4:a6:d4:ea:c4:2d:38:6f:b7:56:98:f5: 2f:ea:b4:c7:2d:e8:8d:16:4a:38:a5:c8:f3:db:0f: 10:9b:7a:86:c4:52:a1:62:6e:42:99:87:d4:ee:ab: 9c:7c:b2:24:5b:f4:ce:92:52:ad:6a:40:84:88:52: c4:8b:56:8a:e2:fc:8f:35:dd:cd:c8:a2:a4:a3:02: 1d:3a:8f:8f:61:94:5b:7a:74:f2:49:4e:f7:2a:95: 32:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4A:BF:E1:96:44:1E:CF:B6:2C:B7:54:44:44:CB:FC:2D:1E:92:62 X509v3 Authority Key Identifier: keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:34:cf:f6:00:57:f7:b9:bd:f2:7b:c9:0d:d4:cc:13:dc:d2: 03:71:24:71:76:4f:e5:8c:38:d4:67:86:4a:61:b4:45:17:f2: 92:0d:d3:93:f4:24:24:ba:cd:70:8b:2a:1b:0a:0b:ec:f8:bf: 71:16:4f:b1:36:be:65:1c:d6:d8:ff:fe:1e:0c:16:5b:71:71: 84:12:8e:c2:10:e5:6b:25:b0:6d:e7:1b:d8:8b:7d:17:40:6e: f1:11:7c:31:a3:cb:f8:e8:ff:1e:bc:22:7f:f7:73:5c:aa:ed: a2:49:7b:f9:44:62:34:37:06:35:83:ee:e4:37:e1:2c:fd:77: 0e:d4:68:95:a7:57:19:54:90:6d:4e:d5:23:68:13:30:f3:78: f4:71:2f:72:c3:dd:bc:4e:a0:00:17:f1:c2:45:87:2e:39:11: c8:52:28:8d:78:c0:e3:a5:4c:e2:c7:dc:6e:01:c8:51:97:81: a0:4f:ee:5f:08:51:64:fd:54:2f:c3:9e:a2:97:29:1d:7a:54: d1:d4:5c:96:a7:fa:5f:b3:98:fd:e5:a2:2e:73:cd:69:a1:14: af:ac:15:5f:a5:f7:90:55:ec:3e:ea:84:33:ee:c8:a5:47:35: 05:2e:3a:71:ae:5e:2e:f7:a3:a9:42:35:79:8d:35:04:fb:e4: b3:23:51:c4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIdqDhYdA+Kdb8weJ9QUf6yYgHOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI2Y2IzMzcyMmEzNDkzMjE2MjgzZGM4MGNhZTBlZTlk NTg4NzRmMjAeFw0yNTA2MjgwNTI0MzJaFw0yNTA2MjkwODQ0MzJaMDMxMTAvBgNV BAMTKDFDNEFCRkUxOTY0NDFFQ0ZCNjJDQjc1NDQ0NDRDQkZDMkQxRTkyNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFDyopwA//N9Z+L7EqRREkgtJs JoqP+ZHStyoWd5Olx3GZplQOY2eSDGHvdOwATaaWKQiqxx1Tu8Qpo1iz4FFa9IbX 3NeRB664a7mGvHVi9ZncDltMbLqn4xI4VM1zHh9kU2sCDMf5H68xSh5W2SqhL1Rs 33HJVXPOpIGEAIrL/BO45QQUwaT8pFNfjrVqUkQzfi4vVMPnG6x5pBFgTUZu8FAU HMQKReSm1OrELThvt1aY9S/qtMct6I0WSjilyPPbDxCbeobEUqFibkKZh9Tuq5x8 siRb9M6SUq1qQISIUsSLVori/I813c3IoqSjAh06j49hlFt6dPJJTvcqlTJ1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUHEq/4ZZEHs+2LLdURETL/C0ekmIwHwYDVR0j BBgwFoAUkmyzNyKjSTIWKD3IDK4O6dWIdPIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NlMDBjZjktMDRhNS00M2QxLThiODktZWRmYTYwY2Q4 ZDRhLzIvOTI2Q0IzMzcyMkEzNDkzMjE2MjgzREM4MENBRTBFRTlENTg4NzRGMi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2tteXpOeUtqU1RJV0tEM0lESzRPNmRX SWRQSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jY2UwMGNmOS0w NGE1LTQzZDEtOGI4OS1lZGZhNjBjZDhkNGEvMi85MjZDQjMzNzIyQTM0OTMyMTYy ODNEQzgwQ0FFMEVFOUQ1ODg3NEYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzTP9gBX97m98nvJDdTM E9zSA3EkcXZP5Yw41GeGSmG0RRfykg3Tk/QkJLrNcIsqGwoL7Pi/cRZPsTa+ZRzW 2P/+HgwWW3FxhBKOwhDlayWwbecb2It9F0Bu8RF8MaPL+Oj/Hrwif/dzXKrtokl7 +URiNDcGNYPu5DfhLP13DtRoladXGVSQbU7VI2gTMPN49HEvcsPdvE6gABfxwkWH LjkRyFIojXjA46VM4sfcbgHIUZeBoE/uXwhRZP1UL8OeopcpHXpU0dRclqf6X7OY /eWiLnPNaaEUr6wVX6X3kFXsPuqEM+7IpUc1BS46ca5eLvejqUI1eY01BPvksyNR xA== -----END CERTIFICATE-----Generated at Sat Jun 28 22:39:23 2025 by rpki-client