$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft File: 41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft (raw, json) Hash identifier: x6MrL1jU5c9sTPhDfhwJBqdTklI++RYG5ExM6Qw48eE= Subject key identifier: BB:B7:3B:65:9F:CB:08:C1:95:48:F6:64:F1:B0:EA:AA:45:CC:ED:52 Authority key identifier: 41:C6:B5:56:7A:DB:76:46:22:2A:1B:9F:1A:A7:03:8F:0C:2D:4B:4B Certificate issuer: /CN=41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B Certificate serial: 3252E163F2D9E1F735204027C39D489FEFB383FD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft Manifest number: 013A Signing time: Sat 14 Jun 2025 14:57:49 +0000 Manifest this update: Sat 14 Jun 2025 14:52:49 +0000 Manifest next update: Sun 15 Jun 2025 16:14:49 +0000 Files and hashes: 1: 41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl (hash: 3IAOgIs5ZM4WpI/g53vkFGWN086y8SOw+tag8uSArSA=) 2: 326131343a373538343a323030303a3a2f34342d3438203d3e20323134343531.roa (hash: TvKEkNYj4nNFZRmfcRKXhCgzG3ePxJK2Myah2LEVKqU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 16:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:52:e1:63:f2:d9:e1:f7:35:20:40:27:c3:9d:48:9f:ef:b3:83:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B Validity Not Before: Jun 14 14:52:49 2025 GMT Not After : Jun 15 16:14:49 2025 GMT Subject: CN=BBB73B659FCB08C19548F664F1B0EAAA45CCED52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:93:87:56:a8:0a:26:98:1f:36:3e:cc:b4:4f: fd:98:e4:50:16:46:f3:f6:ca:5f:a0:07:83:45:1d: f4:44:0a:40:19:58:c0:26:cc:e9:6d:a5:3b:a9:7d: 65:8f:82:9e:12:94:b0:5d:3a:02:bb:a2:c7:0c:19: ca:62:74:c4:72:85:a3:be:1d:20:e4:9b:ed:c9:5f: 3d:1c:0e:b7:20:80:3f:1b:e6:04:28:31:45:a2:3c: d1:45:7c:9e:3c:b5:46:40:c8:bb:aa:27:45:b8:3a: e6:46:5e:8d:0c:5f:e1:16:f8:2c:8d:68:e4:c0:68: 2b:33:45:a8:ca:6e:00:41:22:ff:e6:2c:19:5a:8e: 4c:43:79:9e:0c:68:42:cf:be:16:2b:ea:b1:b7:2c: e7:78:7a:a9:69:24:26:3a:a2:6e:b2:be:a3:69:ab: 99:6a:52:98:94:6b:27:77:0a:28:ff:d0:2c:b6:e5: aa:0a:51:d9:cf:da:19:56:4c:13:d0:ac:7e:6b:e4: 3c:d4:d6:5d:09:e4:dd:4d:be:ba:b9:f7:d3:04:34: 7b:82:bb:e9:3d:99:40:a3:0c:ff:99:9b:ab:94:2b: 6e:c5:09:26:c4:c5:c2:57:37:27:e6:5a:89:72:b0: f8:00:c0:51:a3:0d:21:bd:48:25:84:14:88:37:2a: fd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B7:3B:65:9F:CB:08:C1:95:48:F6:64:F1:B0:EA:AA:45:CC:ED:52 X509v3 Authority Key Identifier: keyid:41:C6:B5:56:7A:DB:76:46:22:2A:1B:9F:1A:A7:03:8F:0C:2D:4B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f4:ce:66:f9:d4:41:a3:ee:ec:33:a6:d8:df:08:1d:85:78: cd:8c:d5:bf:af:68:91:c4:ae:61:71:b1:77:9f:14:ef:f2:39: 4c:a2:d1:c7:fd:fd:f6:0a:25:12:ca:03:d7:0e:24:3b:2a:dd: 5a:96:8f:e9:5d:23:af:88:93:c7:af:a1:ab:d5:96:1a:f3:4c: f5:08:1f:f9:5e:33:59:8f:67:96:44:d2:5c:eb:01:81:e7:a8: d8:67:73:12:c8:fc:89:70:a4:6f:f7:a0:5e:98:00:6b:2e:ab: 81:6c:bd:cb:9a:18:ed:cf:20:f9:85:e9:14:05:09:52:87:67: b1:55:94:f0:1c:de:1e:57:ce:77:37:01:7e:66:e6:9c:7e:16: 81:ba:f9:7a:a9:3d:0f:c1:aa:38:7c:e0:f2:f0:ac:a5:cc:46: 31:00:44:dc:7c:ab:c4:7d:86:4e:9c:50:da:42:f9:5d:95:6f: f4:d5:12:cc:13:f4:10:ba:09:6c:95:51:9d:96:48:0f:85:8c: e6:aa:55:f5:e5:f4:a1:1f:a0:c6:20:de:c0:a8:01:67:59:3b: 5b:87:4e:2b:88:7d:97:6f:3b:9c:7f:e3:42:bc:cb:b9:e7:05: f6:be:50:e1:50:0e:cf:8e:d1:83:d6:b1:40:66:f1:33:75:cb: af:68:3e:9e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMlLhY/LZ4fc1IEAnw51In++zg/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFDNkI1NTY3QURCNzY0NjIyMkExQjlGMUFBNzAzOEYw QzJENEI0QjAeFw0yNTA2MTQxNDUyNDlaFw0yNTA2MTUxNjE0NDlaMDMxMTAvBgNV BAMTKEJCQjczQjY1OUZDQjA4QzE5NTQ4RjY2NEYxQjBFQUFBNDVDQ0VENTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuk4dWqAommB82Psy0T/2Y5FAW RvP2yl+gB4NFHfRECkAZWMAmzOltpTupfWWPgp4SlLBdOgK7oscMGcpidMRyhaO+ HSDkm+3JXz0cDrcggD8b5gQoMUWiPNFFfJ48tUZAyLuqJ0W4OuZGXo0MX+EW+CyN aOTAaCszRajKbgBBIv/mLBlajkxDeZ4MaELPvhYr6rG3LOd4eqlpJCY6om6yvqNp q5lqUpiUayd3Cij/0Cy25aoKUdnP2hlWTBPQrH5r5DzU1l0J5N1Nvrq599MENHuC u+k9mUCjDP+Zm6uUK27FCSbExcJXNyfmWolysPgAwFGjDSG9SCWEFIg3Kv0xAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUu7c7ZZ/LCMGVSPZk8bDqqkXM7VIwHwYDVR0j BBgwFoAUQca1VnrbdkYiKhufGqcDjwwtS0swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl OTUwLzEvNDFDNkI1NTY3QURCNzY0NjIyMkExQjlGMUFBNzAzOEYwQzJENEI0Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MUM2QjU1NjdBREI3NjQ2MjIyQTFCOUYx QUE3MDM4RjBDMkQ0QjRCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyY2Y4YmE3LWNiMDItNDE4Yi1iZTA0LTRkOWYzYTA3ZTk1MC8xLzQxQzZCNTU2 N0FEQjc2NDYyMjJBMUI5RjFBQTcwMzhGMEMyRDRCNEIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/9M5m +dRBo+7sM6bY3wgdhXjNjNW/r2iRxK5hcbF3nxTv8jlMotHH/f32CiUSygPXDiQ7 Kt1alo/pXSOviJPHr6Gr1ZYa80z1CB/5XjNZj2eWRNJc6wGB56jYZ3MSyPyJcKRv 96BemABrLquBbL3LmhjtzyD5hekUBQlSh2exVZTwHN4eV853NwF+ZuacfhaBuvl6 qT0Pwao4fODy8KylzEYxAETcfKvEfYZOnFDaQvldlW/01RLME/QQuglslVGdlkgP hYzmqlX15fShH6DGIN7AqAFnWTtbh04riH2Xbzucf+NCvMu55wX2vlDhUA7PjtGD 1rFAZvEzdcuvaD6e -----END CERTIFICATE-----Generated at Sun Jun 15 08:55:26 2025 by rpki-client