$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft File: 47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json) Hash identifier: 4uW23EQOfTFrci/znWjp0CzjFWWdnDSZBSc5xIo25jk= Subject key identifier: 20:BE:67:A4:1E:7A:E4:27:04:98:F1:05:73:A2:40:01:68:2B:22:BD Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 Certificate issuer: /CN=47E9555355C6B007AACD5D45BF41E3383E991641 Certificate serial: 2782CF102BFDAB90C13896996AB554B80281DA0A Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft Manifest number: 03EB Signing time: Mon 30 Jun 2025 09:59:42 +0000 Manifest this update: Mon 30 Jun 2025 09:54:42 +0000 Manifest next update: Tue 01 Jul 2025 10:37:42 +0000 Files and hashes: 1: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: 3ipGYMDZ54FZdaI4eg46OMa/ZV0a0Q3rHUY9RUekrv8=) 2: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: QTwpwHdYKNdKJAmCjqtTrR53F4Rf+1YRj7EEVX4wDM0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 23:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:82:cf:10:2b:fd:ab:90:c1:38:96:99:6a:b5:54:b8:02:81:da:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641 Validity Not Before: Jun 30 09:54:42 2025 GMT Not After : Jul 1 10:37:42 2025 GMT Subject: CN=20BE67A41E7AE4270498F10573A24001682B22BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7e:e4:f6:c4:19:93:d0:26:fe:95:8d:1d:c8: be:b5:58:7b:6d:d2:be:19:e2:52:fa:72:27:68:cd: ca:6f:f1:df:1e:29:d8:f3:0b:4e:90:3d:de:fb:f3: 2d:28:53:8e:56:cf:a0:00:09:76:15:48:64:ea:94: 7b:07:e0:7e:b7:33:03:7a:ee:ed:51:f7:56:98:56: 0a:d2:5c:9f:02:3d:42:ea:85:c3:97:1b:e6:24:61: 07:f9:20:76:cd:01:6c:da:ae:99:26:bf:5d:80:ce: 8e:82:36:14:3e:65:98:25:11:5c:7b:b2:ad:56:a9: 47:8d:5c:18:3b:58:3b:69:c1:dd:6f:c2:41:6c:de: 33:18:16:57:94:0d:cb:b3:30:74:cf:cf:8b:00:24: 6b:b7:bb:61:ec:34:13:13:8d:7d:dd:39:5c:f6:66: 88:e1:a8:e6:c8:70:f3:a8:00:1e:89:23:2b:58:40: 64:76:24:e6:4b:ef:3b:db:3d:a5:39:25:8c:96:d1: 6f:3a:23:90:ec:c5:21:ac:77:95:29:92:8d:48:06: 10:ff:5e:42:10:13:aa:33:ca:d2:27:8f:34:d0:3d: 1c:c9:05:dd:03:87:dd:38:36:cd:32:a4:d6:3d:b9: b0:d8:af:e8:30:63:d6:bf:f4:8d:33:f9:98:57:d2: c0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BE:67:A4:1E:7A:E4:27:04:98:F1:05:73:A2:40:01:68:2B:22:BD X509v3 Authority Key Identifier: keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:b2:a9:d3:9a:68:94:f5:ce:65:31:ae:a9:c8:9f:0a:e8:17: 15:1c:7d:91:76:40:57:e0:c7:e8:86:5a:5e:11:2a:10:35:cb: 2d:ec:56:72:ed:02:17:71:57:14:91:b7:e3:1e:3f:88:7b:0e: 10:c4:18:66:a6:c4:26:cb:38:bb:06:b3:35:cd:f0:58:1f:55: ef:39:f9:3a:35:b6:46:53:98:e7:b2:88:ba:7c:49:3b:22:3a: 01:df:7c:0a:1c:1b:4e:ed:9e:34:6b:6a:62:88:2b:2b:26:5f: 70:79:ce:f2:ce:84:17:0d:b5:2d:81:00:77:76:96:90:41:1a: f6:3a:6d:8a:8d:43:05:b0:dc:bb:0f:fa:6e:a6:8d:c8:13:57: 44:89:09:0e:e8:0b:52:f4:e6:fe:d6:8b:1b:b3:ad:3b:e0:15: 54:5b:d0:73:f4:0d:50:1a:99:bc:a1:6d:5a:8c:19:5c:8f:0a: 90:80:cf:40:90:98:c2:06:7e:61:c6:96:aa:8f:54:d2:98:57: b6:a7:8b:f3:39:6e:9b:02:fe:f8:b9:d8:63:a0:bb:72:1a:98: 02:59:13:d7:fb:49:f7:ac:29:c1:07:65:a9:2c:da:7f:d5:c1: a6:eb:79:99:56:6d:b9:2b:92:cc:68:44:1e:ef:51:1a:7c:1a: 1d:5c:3d:e9 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUJ4LPECv9q5DBOJaZarVUuAKB2gowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgz RTk5MTY0MTAeFw0yNTA2MzAwOTU0NDJaFw0yNTA3MDExMDM3NDJaMDMxMTAvBgNV BAMTKDIwQkU2N0E0MUU3QUU0MjcwNDk4RjEwNTczQTI0MDAxNjgyQjIyQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdfuT2xBmT0Cb+lY0dyL61WHtt 0r4Z4lL6cidozcpv8d8eKdjzC06QPd778y0oU45Wz6AACXYVSGTqlHsH4H63MwN6 7u1R91aYVgrSXJ8CPULqhcOXG+YkYQf5IHbNAWzarpkmv12Azo6CNhQ+ZZglEVx7 sq1WqUeNXBg7WDtpwd1vwkFs3jMYFleUDcuzMHTPz4sAJGu3u2HsNBMTjX3dOVz2 ZojhqObIcPOoAB6JIytYQGR2JOZL7zvbPaU5JYyW0W86I5DsxSGsd5Upko1IBhD/ XkIQE6ozytInjzTQPRzJBd0Dh904Ns0ypNY9ubDYr+gwY9a/9I0z+ZhX0sCvAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUIL5npB565CcEmPEFc6JAAWgrIr0wHwYDVR0j BBgwFoAUR+lVU1XGsAeqzV1Fv0HjOD6ZFkEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzQvNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgzRTk5MTY0MS5j cmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJnLm5l dC9ycGtpL1JHbmV0LU9VL1ItbFZVMVhHc0FlcXpWMUZ2MEhqT0Q2WkZrRS5jZXIw gZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZTdkNTVmNy1lZTYwLTQwMDUt YmFkNy1iNDI4MThjZjUwZTgvNC80N0U5NTU1MzU1QzZCMDA3QUFDRDVENDVCRjQx RTMzODNFOTkxNjQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7Kp05polPXOZTGuqcifCugXFRx9kXZA V+DH6IZaXhEqEDXLLexWcu0CF3FXFJG34x4/iHsOEMQYZqbEJss4uwazNc3wWB9V 7zn5OjW2RlOY57KIunxJOyI6Ad98ChwbTu2eNGtqYogrKyZfcHnO8s6EFw21LYEA d3aWkEEa9jptio1DBbDcuw/6bqaNyBNXRIkJDugLUvTm/taLG7OtO+AVVFvQc/QN UBqZvKFtWowZXI8KkIDPQJCYwgZ+YcaWqo9U0phXtqeL8zlumwL++LnYY6C7chqY AlkT1/tJ96wpwQdlqSzaf9XBput5mVZtuSuSzGhEHu9RGnwaHVw96Q== -----END CERTIFICATE-----Generated at Mon Jun 30 19:08:06 2025 by rpki-client