$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft File: 47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json) Hash identifier: r0fJjmyQDRAjFOeQHJ60e3eTyxHgKjr4xxok392LLaA= Subject key identifier: 7F:86:1C:4C:AA:91:C7:2F:18:2F:5D:DC:CD:E7:12:AE:18:01:88:BC Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 Certificate issuer: /CN=47E9555355C6B007AACD5D45BF41E3383E991641 Certificate serial: 12AC84209BB43F8AC86899FA5E9E334EF5967D0D Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft Manifest number: 0437 Signing time: Sun 24 Aug 2025 00:52:13 +0000 Manifest this update: Sun 24 Aug 2025 00:47:13 +0000 Manifest next update: Mon 25 Aug 2025 04:49:13 +0000 Files and hashes: 1: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: vRyjDT1nzXWnm7MurwCq2HWAmpcAry7ga4vZxnB4NnE=) 2: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: 3ipGYMDZ54FZdaI4eg46OMa/ZV0a0Q3rHUY9RUekrv8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 08:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ac:84:20:9b:b4:3f:8a:c8:68:99:fa:5e:9e:33:4e:f5:96:7d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641 Validity Not Before: Aug 24 00:47:13 2025 GMT Not After : Aug 25 04:49:13 2025 GMT Subject: CN=7F861C4CAA91C72F182F5DDCCDE712AE180188BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ca:2b:0e:10:96:01:ca:af:3c:4f:cb:7b:90: a7:64:74:3e:b1:5a:bc:98:b5:7d:16:bc:4e:b2:84: 3f:f7:33:ed:4c:d6:2a:f7:77:ca:7f:01:27:32:db: fd:bc:73:e8:41:58:27:ee:2b:46:1d:a1:ed:39:87: 68:0f:a6:fe:17:7a:d1:d8:48:b8:c3:40:b0:89:d4: 99:fc:21:e5:3f:9b:4d:49:36:48:1a:b5:64:c1:e2: 96:d6:d8:3c:ea:ef:c3:d7:6a:95:3e:c5:44:91:96: 2e:ba:eb:5a:52:22:3a:4a:41:94:c1:ad:85:3f:9c: 4e:b2:55:20:20:6c:49:07:aa:83:c7:d4:df:28:ed: c9:9f:cf:4f:fc:bc:56:70:bd:a2:66:c1:47:a3:81: 73:b3:99:e9:a2:68:a1:5a:87:be:76:03:3e:e3:9a: 87:34:e7:da:26:ba:d0:66:9d:36:00:49:dd:f2:33: 4c:ee:2f:6f:d2:55:4d:d5:30:9b:c3:ef:b7:95:a0: b4:ef:b2:f7:91:95:7b:90:1a:df:ac:e4:66:71:2a: 36:10:53:3e:74:a0:c3:28:3e:b5:8f:6f:5c:26:96: 7c:7f:bd:ac:2d:d9:4e:42:06:c3:36:8c:90:c7:a7: f1:e9:09:6d:5e:e1:5a:f9:de:c7:fe:a7:45:9b:15: 0f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:86:1C:4C:AA:91:C7:2F:18:2F:5D:DC:CD:E7:12:AE:18:01:88:BC X509v3 Authority Key Identifier: keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:2d:3b:09:a9:e2:3d:2d:c3:a6:e3:21:6c:3f:cc:85:5c:6f: a4:5a:bf:fa:78:76:ef:bc:98:5b:2f:29:eb:2c:34:b8:7f:bb: 90:d4:bd:80:aa:af:69:be:b1:f6:3e:aa:af:3a:7b:84:63:88: f8:75:af:27:ef:ad:14:20:d5:3f:60:c4:ae:29:23:c0:53:d6: e2:33:3e:be:1e:a5:49:31:9f:48:71:5c:e0:40:83:c7:d3:b6: f7:db:d4:91:88:ed:21:1c:0e:b1:12:48:c3:2b:24:a9:87:34: 32:e9:89:97:66:dd:80:5b:85:63:7b:51:35:1b:46:19:3f:94: c4:8e:20:2b:70:39:84:18:8d:f1:71:27:bd:0e:34:ed:a3:91: 27:17:f3:e2:00:5a:76:d0:9a:4b:bb:99:ce:96:e1:50:1b:d3: ca:6e:0a:9f:12:56:de:3f:24:2c:fe:30:b0:c8:12:f3:5c:70: 52:be:ea:6e:00:0f:3d:e0:78:07:f1:49:55:01:5c:dc:27:ca: 9a:2f:9b:4b:6b:27:2d:9e:d9:86:f0:82:7d:23:77:c3:a4:cf: 1d:19:19:0c:33:8a:6c:ef:8d:7d:46:e1:1c:4c:c0:a9:b1:ac: 42:dd:a5:b0:21:fd:6f:17:b5:07:e7:02:b4:0e:3f:d8:f2:c7: 08:65:27:14 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUEqyEIJu0P4rIaJn6Xp4zTvWWfQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgz RTk5MTY0MTAeFw0yNTA4MjQwMDQ3MTNaFw0yNTA4MjUwNDQ5MTNaMDMxMTAvBgNV BAMTKDdGODYxQzRDQUE5MUM3MkYxODJGNUREQ0NERTcxMkFFMTgwMTg4QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDByisOEJYByq88T8t7kKdkdD6x WryYtX0WvE6yhD/3M+1M1ir3d8p/AScy2/28c+hBWCfuK0Ydoe05h2gPpv4XetHY SLjDQLCJ1Jn8IeU/m01JNkgatWTB4pbW2Dzq78PXapU+xUSRli6661pSIjpKQZTB rYU/nE6yVSAgbEkHqoPH1N8o7cmfz0/8vFZwvaJmwUejgXOzmemiaKFah752Az7j moc059omutBmnTYASd3yM0zuL2/SVU3VMJvD77eVoLTvsveRlXuQGt+s5GZxKjYQ Uz50oMMoPrWPb1wmlnx/vawt2U5CBsM2jJDHp/HpCW1e4Vr53sf+p0WbFQ8TAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUf4YcTKqRxy8YL13czecSrhgBiLwwHwYDVR0j BBgwFoAUR+lVU1XGsAeqzV1Fv0HjOD6ZFkEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzQvNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgzRTk5MTY0MS5j cmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJnLm5l dC9ycGtpL1JHbmV0LU9VL1ItbFZVMVhHc0FlcXpWMUZ2MEhqT0Q2WkZrRS5jZXIw gZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZTdkNTVmNy1lZTYwLTQwMDUt YmFkNy1iNDI4MThjZjUwZTgvNC80N0U5NTU1MzU1QzZCMDA3QUFDRDVENDVCRjQx RTMzODNFOTkxNjQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAli07CaniPS3DpuMhbD/MhVxvpFq/+nh2 77yYWy8p6yw0uH+7kNS9gKqvab6x9j6qrzp7hGOI+HWvJ++tFCDVP2DErikjwFPW 4jM+vh6lSTGfSHFc4ECDx9O299vUkYjtIRwOsRJIwyskqYc0MumJl2bdgFuFY3tR NRtGGT+UxI4gK3A5hBiN8XEnvQ407aORJxfz4gBadtCaS7uZzpbhUBvTym4KnxJW 3j8kLP4wsMgS81xwUr7qbgAPPeB4B/FJVQFc3CfKmi+bS2snLZ7ZhvCCfSN3w6TP HRkZDDOKbO+NfUbhHEzAqbGsQt2lsCH9bxe1B+cCtA4/2PLHCGUnFA== -----END CERTIFICATE-----Generated at Sun Aug 24 04:23:40 2025 by rpki-client