$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json) Hash identifier: g+UFB+4pvQD2cq3u9eUGvOd2gKRr7/Uaqigw3t5QXwQ= Subject key identifier: 15:67:A2:D5:EF:EB:F0:82:EC:5E:56:86:4E:F7:10:E7:AE:D4:3C:5A Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Certificate serial: 66584A33230E1DA104884AE3CB9697CAB6F08149 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft Manifest number: D5 Signing time: Wed 06 Aug 2025 00:17:56 +0000 Manifest this update: Wed 06 Aug 2025 00:12:56 +0000 Manifest next update: Thu 07 Aug 2025 03:25:56 +0000 Files and hashes: 1: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: u/JR7/M6BcKICssdDR7j/sPwWvJTPX2G+FFLBgXrUyU=) 2: 326131343a373538303a6430303a3a2f34342d3434203d3e20313939333130.roa (hash: aLNGjeKxhB+lb52UO94MmUGLP8+twH+NGpyj/wZMn3g=) 3: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: jIRO9mS3d6dPjcdQf+OkOGr/dNujGogdrEuPEpLgZJI=) 4: 326131343a373538303a6432303a3a2f34342d3438203d3e20313939333130.roa (hash: MgcoEmS08l4kBvePsItue5HuyPIuQGylETDDY3NTtWk=) 5: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: V3Rfxw9pNaIUMOWOrh46BbiIYuJCmzYCWMGSk0auXJk=) 6: 326131343a373538303a6431303a3a2f34342d3434203d3e20313939333130.roa (hash: d85Du7DNvyLWzCRKR6UAK4BxtZR8aY0O/ltb7NM7kI0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 03:25:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:58:4a:33:23:0e:1d:a1:04:88:4a:e3:cb:96:97:ca:b6:f0:81:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Validity Not Before: Aug 6 00:12:56 2025 GMT Not After : Aug 7 03:25:56 2025 GMT Subject: CN=1567A2D5EFEBF082EC5E56864EF710E7AED43C5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6d:45:73:5d:9e:2e:c2:21:3e:fb:96:9e:29: 0d:46:9e:d6:40:42:0b:a4:dd:87:38:9a:3c:67:0f: 5f:ee:93:0d:a1:21:70:38:68:d3:f4:82:2f:11:b7: 49:7f:c9:94:53:64:07:c5:fc:59:fc:a4:c1:77:f3: d1:2a:10:04:d1:8f:d1:93:ce:c0:9c:bc:ae:cb:43: b9:96:07:25:a6:4d:30:21:89:65:9d:de:44:d8:05: 9a:85:d2:f9:ce:2e:59:eb:20:59:23:84:61:77:62: 77:37:0f:42:9c:83:d6:94:f0:62:ac:fa:e7:d6:d3: 7a:ef:22:59:71:5a:af:f0:68:ac:c3:79:12:f8:1a: 5b:39:71:68:fe:71:bf:69:e2:d8:f0:17:78:51:f2: 6b:87:9c:ea:0d:82:8f:80:03:dc:33:e8:24:ee:de: 82:47:9e:a5:69:7b:ea:23:aa:0e:ba:4b:ef:37:26: 49:3a:b9:de:4d:78:20:3f:7c:af:c0:a9:2f:99:e0: 27:5b:e6:63:ce:be:f9:37:67:fd:43:da:0e:c4:12: 06:8d:c0:5a:9e:3f:0c:0c:4e:ab:78:e4:f2:c6:4c: cf:2d:2c:02:22:b0:6c:64:07:39:48:27:9b:87:14: e8:66:db:78:93:92:91:15:2f:18:a9:f7:d0:c2:dc: 85:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:67:A2:D5:EF:EB:F0:82:EC:5E:56:86:4E:F7:10:E7:AE:D4:3C:5A X509v3 Authority Key Identifier: keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:d5:a6:3b:ed:27:23:e5:9f:ba:c7:a7:bd:58:e1:2e:9d:1b: 05:25:1c:30:a7:45:3a:a1:2c:e1:aa:87:01:9e:a7:5f:1c:fb: 57:8b:cb:94:5c:8d:92:48:d3:c4:cd:22:c4:91:94:6f:76:a1: 4f:d6:1e:b9:2f:70:02:15:69:d2:35:b5:73:57:02:8f:e1:a2: 21:2a:7b:1c:db:b9:27:7c:8f:b9:8c:a7:ca:84:9a:96:a7:a1: 4a:d2:be:d8:5b:75:88:09:84:bd:32:2b:42:3d:f8:07:d3:ea: c2:fa:ee:cf:99:bc:ea:42:f5:a8:16:76:80:bc:c5:85:67:bc: ab:cb:3a:45:4e:23:98:6c:4d:14:0d:e8:47:19:4c:44:b7:a6: 84:fc:f9:1f:66:58:dd:78:87:28:55:8d:1c:b3:19:88:51:10: b9:56:6a:ce:c2:87:e7:fe:f3:49:96:f6:42:65:7f:c9:a4:39: cc:0f:f9:cd:60:db:a9:56:89:06:a0:10:52:c7:0e:60:1d:2a: 8d:d1:51:30:c9:68:53:71:0c:7b:6a:dc:e3:60:bb:6d:96:40: dc:a1:42:fa:9c:ff:19:f8:a5:79:a8:cd:75:93:f3:a4:e9:92: 7b:02:27:eb:55:25:92:9f:86:30:c2:da:84:21:aa:10:ea:9f: 93:2e:78:1e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZlhKMyMOHaEEiErjy5aXyrbwgUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUw RjgxOTZFQjAeFw0yNTA4MDYwMDEyNTZaFw0yNTA4MDcwMzI1NTZaMDMxMTAvBgNV BAMTKDE1NjdBMkQ1RUZFQkYwODJFQzVFNTY4NjRFRjcxMEU3QUVENDNDNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCAbUVzXZ4uwiE++5aeKQ1GntZA Qguk3Yc4mjxnD1/ukw2hIXA4aNP0gi8Rt0l/yZRTZAfF/Fn8pMF389EqEATRj9GT zsCcvK7LQ7mWByWmTTAhiWWd3kTYBZqF0vnOLlnrIFkjhGF3Ync3D0Kcg9aU8GKs +ufW03rvIllxWq/waKzDeRL4Gls5cWj+cb9p4tjwF3hR8muHnOoNgo+AA9wz6CTu 3oJHnqVpe+ojqg66S+83Jkk6ud5NeCA/fK/AqS+Z4Cdb5mPOvvk3Z/1D2g7EEgaN wFqePwwMTqt45PLGTM8tLAIisGxkBzlIJ5uHFOhm23iTkpEVLxip99DC3IVZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFWei1e/r8ILsXlaGTvcQ567UPFowHwYDVR0j BBgwFoAUE+GpmPd9fB/ylVwLaI/r/g+BluswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE1NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFm YWIyLzEvMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUwRjgxOTZFQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xM0UxQTk5OEY3N0Q3QzFGRjI5NTVDMEI2 ODhGRUJGRTBGODE5NkVCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAxNTc2NDdjLTkxZDYtNGEwNC04YTkxLWQxNTM4NWQxZmFiMi8xLzEzRTFBOTk4 Rjc3RDdDMUZGMjk1NUMwQjY4OEZFQkZFMEY4MTk2RUIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAj1aY7 7Scj5Z+6x6e9WOEunRsFJRwwp0U6oSzhqocBnqdfHPtXi8uUXI2SSNPEzSLEkZRv dqFP1h65L3ACFWnSNbVzVwKP4aIhKnsc27knfI+5jKfKhJqWp6FK0r7YW3WICYS9 MitCPfgH0+rC+u7PmbzqQvWoFnaAvMWFZ7yryzpFTiOYbE0UDehHGUxEt6aE/Pkf ZljdeIcoVY0csxmIURC5VmrOwofn/vNJlvZCZX/JpDnMD/nNYNupVokGoBBSxw5g HSqN0VEwyWhTcQx7atzjYLttlkDcoUL6nP8Z+KV5qM11k/Ok6ZJ7AifrVSWSn4Yw wtqEIaoQ6p+TLnge -----END CERTIFICATE-----Generated at Wed Aug 6 11:23:00 2025 by rpki-client