$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: 8MhsX8aMXYprhLTq0Kxji4MZMPtCjRBccmEjKCqm4KY= Subject key identifier: 2E:BE:08:1E:CD:1F:E9:38:99:21:00:4B:11:05:83:DB:74:AF:9C:0A Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 4613F3B2BA47ECEC8A0E6BEF4B480FF5E3C2E8AB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: F2 Signing time: Tue 05 Aug 2025 13:03:13 +0000 Manifest this update: Tue 05 Aug 2025 12:58:13 +0000 Manifest next update: Wed 06 Aug 2025 16:34:13 +0000 Files and hashes: 1: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: MorJ8/zqWP+ENMZ78Dfg8lahRlU/VfcwHwmQyMuE7hc=) 2: 326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa (hash: /ul2/wI6OjmF90yvjh37x7TtdkRoh3MUQv78SD8t7W0=) 3: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: TjBtqzu7eS98Oyez3B6wZW8JWCD8Dxdgq+guGFjm+jI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 14:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:13:f3:b2:ba:47:ec:ec:8a:0e:6b:ef:4b:48:0f:f5:e3:c2:e8:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Aug 5 12:58:13 2025 GMT Not After : Aug 6 16:34:13 2025 GMT Subject: CN=2EBE081ECD1FE9389921004B110583DB74AF9C0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:14:19:09:c7:87:54:43:1c:19:3b:bf:02: 1d:31:06:8c:5e:f8:78:df:e7:1a:4c:80:17:c0:91: 65:8c:df:3e:c6:b2:8c:8d:88:41:90:53:8e:25:9a: e2:ff:c4:38:45:10:2f:ee:b3:3d:6b:49:2c:a0:89: 00:a2:61:ba:bd:a2:32:31:c9:46:86:3f:e6:5b:31: 99:2b:87:0f:33:60:ab:50:f3:69:8b:8d:1c:8d:9e: a0:ad:ba:7e:4f:ba:97:3e:dd:e6:d7:37:46:a3:34: fe:93:6b:67:7a:5d:b6:c5:8c:8a:48:26:d9:d2:21: 6f:8c:3b:80:ea:d8:67:15:88:fd:7e:8d:ab:e0:d9: 2b:24:53:da:5f:bc:e9:18:7e:21:f5:66:4e:23:98: ce:b2:40:8b:d1:6a:14:b9:3c:41:ee:c6:e0:6b:e8: 6b:d5:54:39:f0:56:42:a6:5c:31:54:b4:af:27:a5: 38:84:8c:b1:53:33:01:40:26:bf:50:f2:00:f1:41: 4a:c8:0a:d0:60:55:15:99:ee:dc:9a:d8:44:b1:af: f8:4a:3f:09:b9:1d:72:a9:d9:4a:4d:19:eb:d9:b2: a4:b9:52:f3:74:9a:dc:ff:0e:cc:fb:23:e3:b6:00: 33:3d:c3:0b:28:94:df:90:1b:f8:05:f2:e6:00:f2: f3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BE:08:1E:CD:1F:E9:38:99:21:00:4B:11:05:83:DB:74:AF:9C:0A X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a1:4f:66:75:aa:ef:e2:4f:e2:35:63:4b:b5:a2:d4:23:b2: c1:0f:51:39:81:13:1a:71:ce:8c:11:e0:50:1a:d9:a2:6f:02: 9a:4d:23:45:fb:f5:e3:e0:ab:44:47:d5:59:d3:ea:43:e9:fd: 28:37:5b:32:1b:3c:42:88:d2:f2:4a:37:6e:04:ea:38:c6:3a: e4:27:92:e8:97:99:3b:8e:15:3e:ec:9f:da:87:97:03:fb:b0: 96:01:e2:60:71:66:9f:21:16:4f:51:10:51:48:81:07:e8:80: ae:aa:f6:1d:a0:19:37:b2:e4:6f:c4:b6:d3:ce:78:d2:ac:97: 5b:10:1c:e3:3b:cc:4c:09:13:30:1a:0b:04:aa:f5:65:7c:f9: c4:6b:a5:eb:74:98:6c:b7:3c:71:fc:56:6e:8e:60:83:87:32: f7:22:38:4c:ce:40:63:2a:a5:9b:92:d2:2f:27:53:64:ed:55: 56:98:6c:cd:28:17:60:be:fa:15:dc:5d:16:18:c5:49:54:6d: 97:41:52:e7:8f:4a:8d:e1:ae:f7:71:e6:3b:0a:af:6e:ce:77: fe:70:32:2e:d1:b5:e5:5a:4f:82:67:40:82:e9:63:20:72:f3: 78:4a:c1:a9:75:1e:31:9e:f5:19:8c:b0:0e:9a:2f:c4:b0:0f: dd:68:2c:3f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURhPzsrpH7OyKDmvvS0gP9ePC6KswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNTA4MDUxMjU4MTNaFw0yNTA4MDYxNjM0MTNaMDMxMTAvBgNV BAMTKDJFQkUwODFFQ0QxRkU5Mzg5OTIxMDA0QjExMDU4M0RCNzRBRjlDMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEGRQZCceHVEMcGTu/Ah0xBoxe +Hjf5xpMgBfAkWWM3z7GsoyNiEGQU44lmuL/xDhFEC/usz1rSSygiQCiYbq9ojIx yUaGP+ZbMZkrhw8zYKtQ82mLjRyNnqCtun5Pupc+3ebXN0ajNP6Ta2d6XbbFjIpI JtnSIW+MO4Dq2GcViP1+javg2SskU9pfvOkYfiH1Zk4jmM6yQIvRahS5PEHuxuBr 6GvVVDnwVkKmXDFUtK8npTiEjLFTMwFAJr9Q8gDxQUrICtBgVRWZ7tya2ESxr/hK Pwm5HXKp2UpNGevZsqS5UvN0mtz/Dsz7I+O2ADM9wwsolN+QG/gF8uYA8vOxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQULr4IHs0f6TiZIQBLEQWD23SvnAowHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCToU9m darv4k/iNWNLtaLUI7LBD1E5gRMacc6MEeBQGtmibwKaTSNF+/Xj4KtER9VZ0+pD 6f0oN1syGzxCiNLySjduBOo4xjrkJ5Lol5k7jhU+7J/ah5cD+7CWAeJgcWafIRZP URBRSIEH6ICuqvYdoBk3suRvxLbTznjSrJdbEBzjO8xMCRMwGgsEqvVlfPnEa6Xr dJhstzxx/FZujmCDhzL3IjhMzkBjKqWbktIvJ1Nk7VVWmGzNKBdgvvoV3F0WGMVJ VG2XQVLnj0qN4a73ceY7Cq9uznf+cDIu0bXlWk+CZ0CC6WMgcvN4SsGpdR4xnvUZ jLAOmi/EsA/daCw/ -----END CERTIFICATE-----Generated at Tue Aug 5 20:02:08 2025 by rpki-client