$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.mft File: EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.mft (raw, json) Hash identifier: 4NKpjfsfgX0CMzdpYcoXgCLWvlHN36KEXaz11kc0Wa4= Subject key identifier: E1:57:0E:E4:4C:37:3F:1C:2B:3B:F5:5C:A6:F5:55:D8:CE:41:B1:6C Authority key identifier: ED:B2:DC:B9:23:52:13:13:E4:6C:ED:D7:E5:05:C1:E6:71:4C:9C:1D Certificate issuer: /CN=EDB2DCB923521313E46CEDD7E505C1E6714C9C1D Certificate serial: 4028AA4673CC8AEAB9DE58D490EF40595EB2BC8F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.mft Manifest number: C0 Signing time: Sun 29 Jun 2025 19:29:41 +0000 Manifest this update: Sun 29 Jun 2025 19:24:41 +0000 Manifest next update: Mon 30 Jun 2025 22:44:41 +0000 Files and hashes: 1: EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.crl (hash: 4qQTc8KbdeSS7GpahzXAjbg7sqkBIL5pnmN8U/P6esc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:28:aa:46:73:cc:8a:ea:b9:de:58:d4:90:ef:40:59:5e:b2:bc:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDB2DCB923521313E46CEDD7E505C1E6714C9C1D Validity Not Before: Jun 29 19:24:41 2025 GMT Not After : Jun 30 22:44:41 2025 GMT Subject: CN=E1570EE44C373F1C2B3BF55CA6F555D8CE41B16C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:98:34:41:8e:e9:77:31:aa:30:d5:7e:c9:e1: 9c:a2:3f:05:de:25:3c:6e:64:56:b5:db:00:71:14: e6:9d:a2:49:e3:7d:b6:8a:7a:79:a8:4c:f1:97:57: d7:4f:24:73:32:f0:1d:b8:a4:fa:0f:d2:5f:6b:6d: 4d:10:0b:c9:27:d7:ff:e0:9f:42:02:83:a1:75:8d: 43:42:34:ce:02:c5:85:8a:b2:bf:aa:db:79:07:06: 6d:aa:30:21:da:b0:f8:b7:78:c6:ed:ac:1a:78:4a: 25:5b:d6:54:ed:78:ed:41:5b:78:af:61:f3:0f:32: 9e:ea:f8:fd:9f:a4:33:30:50:44:21:d0:30:d9:13: a3:bd:e0:54:01:dc:4d:3e:1e:d2:cc:d0:62:64:22: ae:51:9f:ed:f7:e7:ff:e1:7d:29:e7:a4:5d:38:e1: 00:23:9b:0a:14:a1:c8:b6:0d:d2:39:54:39:af:4f: 49:ac:76:f0:07:d2:0c:38:f2:e1:cf:3f:a7:8a:86: 22:f2:f1:4a:ec:89:14:2b:12:4a:b6:d9:c7:81:7b: 17:d0:ce:ff:da:04:75:d4:40:23:49:68:84:99:51: 51:99:95:4f:99:fd:79:b9:be:f3:98:5c:fb:a8:49: 4c:89:73:61:c3:0a:4f:47:a8:b0:90:61:ff:31:d2: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:57:0E:E4:4C:37:3F:1C:2B:3B:F5:5C:A6:F5:55:D8:CE:41:B1:6C X509v3 Authority Key Identifier: keyid:ED:B2:DC:B9:23:52:13:13:E4:6C:ED:D7:E5:05:C1:E6:71:4C:9C:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:96:55:91:2b:cb:21:72:84:c2:63:64:66:a5:2d:27:ce:1a: 80:b3:a4:3c:cf:4b:12:a5:9f:92:51:94:41:cc:07:64:e3:21: ee:06:b2:07:09:5a:fd:f7:6d:84:f0:c9:9b:68:7f:25:6c:11: 39:17:48:4b:e2:9d:88:09:34:3c:be:f1:7c:f6:6e:3f:e6:29: c7:9a:8f:98:12:a5:05:5f:a7:60:a5:26:5f:1b:33:03:47:32: 77:a5:3c:ab:08:92:e9:fd:e4:25:87:15:e4:07:5f:93:51:c8: 94:01:49:d8:00:81:67:60:66:0a:a3:e8:5f:1f:a3:de:2d:f5: 08:6b:31:56:c4:41:64:aa:5a:e7:eb:16:7d:0a:52:57:94:da: 12:58:45:75:96:d9:6e:af:ae:5f:1b:c5:ad:ab:30:a6:63:b0: 54:18:5c:23:97:28:aa:bf:a4:38:f2:46:41:3c:ea:41:8b:5c: 3a:11:c8:81:35:4e:35:75:0b:f4:f3:84:36:e9:eb:37:3d:d4: 60:44:5d:86:d8:f5:58:ea:83:77:54:bd:a4:59:b2:b2:e0:35: 90:7d:ce:af:50:28:08:4f:32:a0:bb:22:e4:b1:76:ea:7a:9c: cc:5b:32:5f:66:5f:85:a9:4d:ca:b5:45:a1:f2:61:e4:b5:3c: 68:83:39:c3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQCiqRnPMiuq53ljUkO9AWV6yvI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURCMkRDQjkyMzUyMTMxM0U0NkNFREQ3RTUwNUMxRTY3 MTRDOUMxRDAeFw0yNTA2MjkxOTI0NDFaFw0yNTA2MzAyMjQ0NDFaMDMxMTAvBgNV BAMTKEUxNTcwRUU0NEMzNzNGMUMyQjNCRjU1Q0E2RjU1NUQ4Q0U0MUIxNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUmDRBjul3Maow1X7J4ZyiPwXe JTxuZFa12wBxFOadoknjfbaKenmoTPGXV9dPJHMy8B24pPoP0l9rbU0QC8kn1//g n0ICg6F1jUNCNM4CxYWKsr+q23kHBm2qMCHasPi3eMbtrBp4SiVb1lTteO1BW3iv YfMPMp7q+P2fpDMwUEQh0DDZE6O94FQB3E0+HtLM0GJkIq5Rn+335//hfSnnpF04 4QAjmwoUoci2DdI5VDmvT0msdvAH0gw48uHPP6eKhiLy8UrsiRQrEkq22ceBexfQ zv/aBHXUQCNJaISZUVGZlU+Z/Xm5vvOYXPuoSUyJc2HDCk9HqLCQYf8x0rL9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU4VcO5Ew3PxwrO/VcpvVV2M5BsWwwHwYDVR0j BBgwFoAU7bLcuSNSExPkbO3X5QXB5nFMnB0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzgvRURCMkRDQjkyMzUyMTMxM0U0NkNFREQ3RTUwNUMxRTY3MTRDOUMxRC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9FREIyRENCOTIzNTIxMzEzRTQ2Q0VERDdF NTA1QzFFNjcxNEM5QzFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC84L0VEQjJEQ0I5 MjM1MjEzMTNFNDZDRUREN0U1MDVDMUU2NzE0QzlDMUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCfllWR K8shcoTCY2RmpS0nzhqAs6Q8z0sSpZ+SUZRBzAdk4yHuBrIHCVr9922E8MmbaH8l bBE5F0hL4p2ICTQ8vvF89m4/5inHmo+YEqUFX6dgpSZfGzMDRzJ3pTyrCJLp/eQl hxXkB1+TUciUAUnYAIFnYGYKo+hfH6PeLfUIazFWxEFkqlrn6xZ9ClJXlNoSWEV1 ltlur65fG8WtqzCmY7BUGFwjlyiqv6Q48kZBPOpBi1w6EciBNU41dQv084Q26es3 PdRgRF2G2PVY6oN3VL2kWbKy4DWQfc6vUCgITzKguyLksXbqepzMWzJfZl+FqU3K tUWh8mHktTxogznD -----END CERTIFICATE-----Generated at Mon Jun 30 01:35:31 2025 by rpki-client