$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft File: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft (raw, json) Hash identifier: C4BzpFQ1YZgs+wZAZxSnriMm1VQLlbxVEcDz2iSap4w= Subject key identifier: 8F:10:D0:EC:81:72:70:59:16:7E:2A:9D:D8:13:29:F9:62:9D:D4:B8 Authority key identifier: 72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 Certificate issuer: /CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Certificate serial: 13F30DE9FF1ACCBE2BDAD00347690405F972ED0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft Manifest number: 85 Signing time: Tue 05 Aug 2025 09:01:47 +0000 Manifest this update: Tue 05 Aug 2025 08:56:47 +0000 Manifest next update: Wed 06 Aug 2025 10:55:47 +0000 Files and hashes: 1: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl (hash: 342ilvzV3TQOycLJOpswDd7OBKV0O8N7AYWZvPr7A4w=) 2: 3139352e37342e34302e302f32322d3234203d3e203331313834.roa (hash: OWTrG12il6+R+m95Ctsd+LQNgEyVIDW3AMDlydaSO3g=) 3: 326131333a363134303a3a2f32392d3332203d3e203331313834.roa (hash: HEAzsbwZSQMPtZWHDUG9J3+dKm/03SetBs7lrO1nkwI=) 4: 3139332e32322e3235332e302f32342d3234203d3e203331313834.roa (hash: WrMYNrMKiwcHb7Layep1L0ANnPM7z3AEErZKMOJmYxg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 10:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f3:0d:e9:ff:1a:cc:be:2b:da:d0:03:47:69:04:05:f9:72:ed:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Validity Not Before: Aug 5 08:56:47 2025 GMT Not After : Aug 6 10:55:47 2025 GMT Subject: CN=8F10D0EC81727059167E2A9DD81329F9629DD4B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f0:f4:0e:4e:7a:74:6a:7b:b6:35:92:c9:eb: 67:9c:ee:d1:16:48:1b:91:be:e9:38:87:9d:9b:45: 93:f3:b3:6d:56:db:5f:a7:5e:46:dd:e0:b4:82:2b: cf:e1:02:7e:c8:70:69:4d:c8:16:02:fb:35:2b:fa: ee:97:c5:b0:1a:43:f3:3f:43:d0:b8:6c:a3:45:b1: f8:74:7b:e9:a5:f2:69:51:ae:7a:69:2d:74:7c:3a: fa:fb:41:37:ec:c4:5c:28:9d:2b:97:f9:17:78:35: 12:28:3b:f4:37:ac:1f:d4:43:e8:e7:0f:8b:05:ae: e2:69:79:56:70:0d:51:76:ee:d0:bc:b1:1b:31:a4: bd:1e:1c:45:df:b9:b3:51:d9:6a:df:d2:00:d6:be: 8b:b3:f3:5a:91:c9:34:95:7c:19:b0:b0:73:ab:be: 75:5e:bf:4e:99:fd:bc:9f:40:0e:64:b2:65:32:8e: 8a:42:c5:43:90:21:bb:91:25:57:47:13:4b:81:12: 77:e1:ff:89:a1:e7:9e:40:e5:d0:3d:e0:bb:f7:92: e1:71:08:c6:e4:df:4f:80:1d:cd:ba:8e:03:59:a3: 6b:9f:5d:91:7f:a9:76:df:90:da:42:c3:4d:4e:a1: dc:b8:60:bf:25:36:2b:99:13:3a:d7:d1:2c:c9:9d: 44:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:10:D0:EC:81:72:70:59:16:7E:2A:9D:D8:13:29:F9:62:9D:D4:B8 X509v3 Authority Key Identifier: keyid:72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:d8:23:ce:19:db:81:9a:f6:f6:63:ab:b2:99:d8:99:70:41: 09:cc:e9:0d:7a:99:9b:6c:1a:af:91:51:5f:14:e7:c2:08:5e: 52:fc:dd:04:c1:41:df:c4:f6:88:bc:dd:e9:cf:f2:7a:8c:43: dc:0b:f8:5b:cb:50:e0:b2:a5:ae:c1:b1:1e:4c:03:0e:64:6b: 3c:26:30:e2:d8:3c:88:40:28:cf:e5:47:da:8b:51:f1:6c:e6: b8:b3:54:08:bb:02:23:ef:70:33:65:e6:bc:7d:7b:00:6b:70: 6c:d2:b5:58:12:f1:b9:4a:54:62:cb:4e:dd:2e:ed:85:86:de: 3d:a6:42:89:38:5b:e6:f9:3e:ed:16:dd:05:09:ad:89:26:c0: dc:95:d8:54:36:bd:3b:76:5a:63:35:fc:73:de:39:62:ed:93: 3c:12:a1:f7:b1:17:6d:e3:e5:8d:fa:a9:6c:ed:b9:93:e9:4d: 20:73:36:71:b9:75:c5:70:ec:02:c3:cb:1f:1c:fd:27:98:2c: 2f:96:c0:30:a0:bf:9b:00:77:7e:da:6b:07:30:6f:b1:36:d5: d8:31:40:5c:28:3f:a1:76:f4:97:d1:ac:f0:1f:2d:0a:65:ef: 1f:9d:5d:bf:4a:18:8f:89:08:77:87:f8:f7:9f:e0:c5:12:53: 89:c5:ee:3e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUE/MN6f8azL4r2tADR2kEBfly7Q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJmM2VlMTY5ZjliZDcxZjc4YTQyZDFhNzJmZTBmMmE4 MjQ4MjJkMTAeFw0yNTA4MDUwODU2NDdaFw0yNTA4MDYxMDU1NDdaMDMxMTAvBgNV BAMTKDhGMTBEMEVDODE3MjcwNTkxNjdFMkE5REQ4MTMyOUY5NjI5REQ0QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG8PQOTnp0anu2NZLJ62ec7tEW SBuRvuk4h52bRZPzs21W21+nXkbd4LSCK8/hAn7IcGlNyBYC+zUr+u6XxbAaQ/M/ Q9C4bKNFsfh0e+ml8mlRrnppLXR8Ovr7QTfsxFwonSuX+Rd4NRIoO/Q3rB/UQ+jn D4sFruJpeVZwDVF27tC8sRsxpL0eHEXfubNR2Wrf0gDWvouz81qRyTSVfBmwsHOr vnVev06Z/byfQA5ksmUyjopCxUOQIbuRJVdHE0uBEnfh/4mh555A5dA94Lv3kuFx CMbk30+AHc26jgNZo2ufXZF/qXbfkNpCw01Oody4YL8lNiuZEzrX0SzJnURlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUjxDQ7IFycFkWfiqd2BMp+WKd1LgwHwYDVR0j BBgwFoAUcvPuFp+b1x94pC0acv4PKoJIItEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjgyYjVlMDAtMmFjMy00OWYxLWEyOWItMjZhNWZkZjBm YTQxLzAvNzJGM0VFMTY5RjlCRDcxRjc4QTQyRDFBNzJGRTBGMkE4MjQ4MjJEMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2N2UHVGcC1iMXg5NHBDMGFjdjRQS29K SUl0RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yODJiNWUwMC0y YWMzLTQ5ZjEtYTI5Yi0yNmE1ZmRmMGZhNDEvMC83MkYzRUUxNjlGOUJENzFGNzhB NDJEMUE3MkZFMEYyQTgyNDgyMkQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINgjzhnbgZr29mOrspnY mXBBCczpDXqZm2war5FRXxTnwgheUvzdBMFB38T2iLzd6c/yeoxD3Av4W8tQ4LKl rsGxHkwDDmRrPCYw4tg8iEAoz+VH2otR8WzmuLNUCLsCI+9wM2XmvH17AGtwbNK1 WBLxuUpUYstO3S7thYbePaZCiThb5vk+7RbdBQmtiSbA3JXYVDa9O3ZaYzX8c945 Yu2TPBKh97EXbePljfqpbO25k+lNIHM2cbl1xXDsAsPLHxz9J5gsL5bAMKC/mwB3 ftprBzBvsTbV2DFAXCg/oXb0l9Gs8B8tCmXvH51dv0oYj4kId4f495/gxRJTicXu Pg== -----END CERTIFICATE-----Generated at Tue Aug 5 20:13:08 2025 by rpki-client