$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft File: 090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft (raw, json) Hash identifier: 6NAiQJSf5vvgrEsKY6K49Sgz5C9iCSFE5WFw9EblHMc= Subject key identifier: 8D:E4:7B:C8:ED:32:6D:A1:98:AF:E7:58:EB:48:81:FB:CF:D9:A0:51 Authority key identifier: 09:0F:FD:E4:0B:60:29:CD:7F:E3:1A:6E:DB:46:7E:1A:53:84:B1:E1 Certificate issuer: /CN=090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1 Certificate serial: 70EAD7716BC2614F2676232E83ADB8D28DEAA7BC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft Manifest number: 032B Signing time: Tue 01 Jul 2025 17:39:43 +0000 Manifest this update: Tue 01 Jul 2025 17:34:43 +0000 Manifest next update: Wed 02 Jul 2025 20:57:43 +0000 Files and hashes: 1: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: q03Pj7BB4FvQqVgWTNPLCqf6FWIvUGBqto+KCXVBKFQ=) 2: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: /6TLbLr5yUGE6+8nz6p2on3lwleCpU2rYt4G5JE9rDk=) 3: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: QnZhS/jyMu2GcYAJct7dnCIK9fFoWaGlnE/9lHFVCZk=) 4: 090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl (hash: lMNPboJ1et3/gWCIUpnMlBHVEzTk+HY/gdMXrcjOvH8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 20:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ea:d7:71:6b:c2:61:4f:26:76:23:2e:83:ad:b8:d2:8d:ea:a7:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1 Validity Not Before: Jul 1 17:34:43 2025 GMT Not After : Jul 2 20:57:43 2025 GMT Subject: CN=8DE47BC8ED326DA198AFE758EB4881FBCFD9A051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2c:72:6a:e1:a6:62:1f:7a:4e:61:b1:4a:79: 89:1e:ff:90:d2:d1:c7:3a:4c:08:2a:00:1d:c5:7d: 82:54:71:d4:14:21:df:61:ec:b9:61:9c:1b:6a:bf: 90:66:88:e5:30:04:2c:c7:10:2a:bd:61:58:0e:22: 70:b6:06:c3:89:1a:a3:6c:8a:86:04:4d:95:91:87: db:9d:45:1c:e4:e9:fe:85:7d:41:9e:98:a4:38:f1: e5:47:6f:70:34:36:1b:a1:56:af:1c:d7:0f:02:9e: 50:a2:fb:83:50:40:06:c1:b7:e2:9f:34:e6:19:5e: 39:fc:19:d3:9a:6d:3f:bf:97:60:fe:1c:33:f3:49: d2:b5:04:3f:b6:aa:f6:21:c5:47:03:f1:1f:31:a2: e4:7d:7d:6a:2d:aa:07:02:ed:da:20:e2:04:40:9f: f4:77:d4:71:20:bf:10:a3:2f:df:e7:fc:5f:31:31: 65:bb:bc:9a:b5:7c:af:b8:33:61:63:a4:56:e6:66: aa:db:ae:5c:32:26:bf:6e:5a:18:1b:38:e0:18:d1: e1:df:6c:1f:a6:56:1a:7c:81:19:15:e0:cc:00:03: 3c:f8:e1:87:d0:49:d3:ea:c0:d0:46:92:27:23:20: 29:74:65:4f:d3:18:7f:06:de:84:49:93:d2:ca:9a: 4c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E4:7B:C8:ED:32:6D:A1:98:AF:E7:58:EB:48:81:FB:CF:D9:A0:51 X509v3 Authority Key Identifier: keyid:09:0F:FD:E4:0B:60:29:CD:7F:E3:1A:6E:DB:46:7E:1A:53:84:B1:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7c:aa:0f:22:b4:a6:43:aa:b6:fc:e7:c7:e4:5d:2b:9a:08: 38:37:83:65:95:56:0d:8b:fb:5a:54:4a:cd:02:46:cd:65:ce: cc:ac:b4:fd:a4:38:c0:8c:d0:84:f9:88:42:d8:de:74:93:47: 30:86:5c:9d:db:55:48:4a:85:e4:dc:f7:18:b5:de:af:c1:95: 2f:84:9d:28:be:41:29:ff:9f:29:6f:bf:8f:c1:38:8a:54:e8: 1a:0e:67:c7:6e:a0:47:29:54:56:57:4e:23:48:e9:e2:3b:aa: 8f:2a:6c:fe:68:e3:01:77:4b:cc:04:f1:1b:7f:30:d5:e3:5a: d7:82:dd:81:f5:99:21:31:f7:d1:54:68:19:40:c8:af:20:c5: 00:a2:e3:5a:4b:e8:d5:d1:8e:35:af:89:34:7e:50:0b:fe:c0: dc:c8:09:b1:7b:cb:07:8c:8a:c6:2b:e3:2f:f7:9b:27:5f:cf: cf:ed:e9:ea:1e:06:1e:0c:b9:d4:61:99:54:55:d3:fb:e6:09: 64:b8:50:cb:13:cc:3e:d2:0e:5b:cb:b6:f5:ff:74:d7:73:ac: 57:86:29:5b:b8:26:51:2a:65:41:b2:65:89:b8:5c:f0:6d:53: 00:df:46:5d:f1:12:61:2a:d5:dd:05:db:3d:66:44:b7:04:9d: 39:e2:49:09 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcOrXcWvCYU8mdiMug6240o3qp7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkwRkZERTQwQjYwMjlDRDdGRTMxQTZFREI0NjdFMUE1 Mzg0QjFFMTAeFw0yNTA3MDExNzM0NDNaFw0yNTA3MDIyMDU3NDNaMDMxMTAvBgNV BAMTKDhERTQ3QkM4RUQzMjZEQTE5OEFGRTc1OEVCNDg4MUZCQ0ZEOUEwNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpLHJq4aZiH3pOYbFKeYke/5DS 0cc6TAgqAB3FfYJUcdQUId9h7LlhnBtqv5BmiOUwBCzHECq9YVgOInC2BsOJGqNs ioYETZWRh9udRRzk6f6FfUGemKQ48eVHb3A0NhuhVq8c1w8CnlCi+4NQQAbBt+Kf NOYZXjn8GdOabT+/l2D+HDPzSdK1BD+2qvYhxUcD8R8xouR9fWotqgcC7dog4gRA n/R31HEgvxCjL9/n/F8xMWW7vJq1fK+4M2FjpFbmZqrbrlwyJr9uWhgbOOAY0eHf bB+mVhp8gRkV4MwAAzz44YfQSdPqwNBGkicjICl0ZU/TGH8G3oRJk9LKmkx3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUjeR7yO0ybaGYr+dY60iB+8/ZoFEwHwYDVR0j BBgwFoAUCQ/95AtgKc1/4xpu20Z+GlOEseEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzUvMDkwRkZERTQwQjYwMjlDRDdGRTMxQTZFREI0NjdFMUE1Mzg0QjFFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC8wOTBGRkRFNDBCNjAyOUNEN0ZFMzFBNkVE QjQ2N0UxQTUzODRCMUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC81LzA5MEZGREU0 MEI2MDI5Q0Q3RkUzMUE2RURCNDY3RTFBNTM4NEIxRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAefKoP IrSmQ6q2/OfH5F0rmgg4N4NllVYNi/taVErNAkbNZc7MrLT9pDjAjNCE+YhC2N50 k0cwhlyd21VISoXk3PcYtd6vwZUvhJ0ovkEp/58pb7+PwTiKVOgaDmfHbqBHKVRW V04jSOniO6qPKmz+aOMBd0vMBPEbfzDV41rXgt2B9ZkhMffRVGgZQMivIMUAouNa S+jV0Y41r4k0flAL/sDcyAmxe8sHjIrGK+Mv95snX8/P7enqHgYeDLnUYZlUVdP7 5glkuFDLE8w+0g5by7b1/3TXc6xXhilbuCZRKmVBsmWJuFzwbVMA30Zd8RJhKtXd Bds9ZkS3BJ054kkJ -----END CERTIFICATE-----Generated at Wed Jul 2 12:47:26 2025 by rpki-client