$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft File: 1498141819112B8446C2D4A3111F53038F05DBE9.mft (raw, json) Hash identifier: eh/q5R5NUT+69XAdpcbuuKdKNpI0Q555zXOq5w656tw= Subject key identifier: 94:94:E4:91:D4:5D:0A:59:49:3F:B7:C0:71:7B:F8:BF:DC:F7:93:BD Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9 Certificate serial: 179E516CBDFA806D1F0812010201D297628B63D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft Manifest number: 60 Signing time: Mon 04 Aug 2025 13:47:19 +0000 Manifest this update: Mon 04 Aug 2025 13:42:19 +0000 Manifest next update: Tue 05 Aug 2025 17:04:19 +0000 Files and hashes: 1: 3138352e39312e3131352e302f32342d3234203d3e2034363337.roa (hash: ck91ILJJRhGrU5dcx7s2t1suhnGyLbRTekoZlADPXPE=) 2: 3138352e39312e3131332e302f32342d3234203d3e20323134323038.roa (hash: qSSu/jTa9CtmAhgZlrJ1s4QldXeKp0EqfLu29FuP5Zs=) 3: 1498141819112B8446C2D4A3111F53038F05DBE9.crl (hash: rkJbuchlIEn1ltNfJy599e4wNR61MJ12aBjQFsf6gps=) 4: 3138352e39312e3131322e302f32342d3234203d3e20383334.roa (hash: nCT/SQY58cfSozsTA679WyJHcn2kiXLwasv4kzYoDOc=) 5: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (hash: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:9e:51:6c:bd:fa:80:6d:1f:08:12:01:02:01:d2:97:62:8b:63:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9 Validity Not Before: Aug 4 13:42:19 2025 GMT Not After : Aug 5 17:04:19 2025 GMT Subject: CN=9494E491D45D0A59493FB7C0717BF8BFDCF793BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4f:b5:78:98:01:96:20:ef:a5:e7:c8:8c:7b: 48:fe:b2:00:94:f1:b8:88:cf:56:20:fb:96:57:50: 2e:ed:8b:d0:12:0d:92:3c:e4:3c:0e:3f:1c:df:19: 02:dc:52:58:cd:2c:93:b8:a2:41:b2:50:43:1c:78: c8:5d:7e:f6:a0:66:71:bc:d1:32:df:f5:2d:e1:56: 63:fa:30:14:d8:84:b3:f0:ef:81:8e:bb:b7:b7:92: 4f:aa:25:75:0d:2c:36:56:33:6d:b8:7a:03:91:a4: 0c:3f:c9:ea:de:2d:ae:86:0e:5d:d7:24:01:6f:fd: 88:53:67:ec:4e:d6:bf:4c:04:e3:47:34:a1:40:bf: fe:39:5b:9c:1d:5e:0f:2c:2f:59:99:21:f5:cc:33: 07:15:f3:18:c5:70:6e:95:8d:23:c2:07:aa:67:30: ce:77:54:cb:35:75:d7:c2:2b:cb:d2:00:ca:50:97: 53:29:71:fc:f1:d4:00:9f:af:19:e1:6a:60:c4:fc: 53:d4:86:15:47:99:12:fd:ad:47:48:43:9a:71:c4: 51:35:0d:a1:5d:5c:f2:67:7a:32:a2:22:07:2b:d8: 11:a2:cd:55:5f:42:21:14:b8:42:00:42:05:03:64: 48:cb:cb:16:34:4b:3f:6d:f2:8c:f5:2e:cc:ff:bd: ca:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:94:E4:91:D4:5D:0A:59:49:3F:B7:C0:71:7B:F8:BF:DC:F7:93:BD X509v3 Authority Key Identifier: keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:5a:6f:13:41:01:ab:76:3d:56:71:87:39:97:bf:aa:f6:b1: 06:f1:7e:2b:1d:a3:5f:b2:39:a1:27:49:a8:4f:97:4f:2a:24: 13:96:f3:81:21:8a:e6:09:25:e2:9b:02:76:85:89:50:b7:ae: 6d:39:d5:1a:e7:f2:cf:e1:f2:c1:aa:cb:e9:35:7b:a6:1c:5f: 6f:77:1a:6f:c6:92:9a:58:07:a7:9e:cb:3a:0f:38:fe:6c:5e: 85:ce:a6:98:51:fa:b9:68:0c:d2:e5:62:ab:d8:85:2c:e8:ca: df:b8:69:a7:5d:03:ab:d4:f4:6c:86:9c:47:a6:40:a1:b3:0e: 5b:d0:6c:38:4a:2a:a9:fa:36:b6:43:d3:30:64:e4:da:ad:ed: 2f:ee:e9:fd:d9:11:f4:95:f1:91:04:23:6f:d0:70:2f:f6:50: 8c:41:2a:60:b2:64:d6:49:59:ed:1e:5a:a8:b3:a9:6c:75:d5: e1:f9:96:c3:07:5a:7d:10:44:ee:12:2e:cd:e3:e4:1c:85:2c: 59:ef:5f:d9:66:bf:20:45:26:4d:d0:7f:a1:14:d2:25:05:72: 73:7b:4d:bd:78:bf:69:b9:3c:1a:34:b2:f3:33:4c:f7:33:e1: 27:81:ef:43:5c:b6:03:82:1f:39:3b:03:0b:cc:06:3c:41:f4: eb:a2:35:5a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUF55RbL36gG0fCBIBAgHSl2KLY9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5ODE0MTgxOTExMmI4NDQ2YzJkNGEzMTExZjUzMDM4 ZjA1ZGJlOTAeFw0yNTA4MDQxMzQyMTlaFw0yNTA4MDUxNzA0MTlaMDMxMTAvBgNV BAMTKDk0OTRFNDkxRDQ1RDBBNTk0OTNGQjdDMDcxN0JGOEJGRENGNzkzQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCST7V4mAGWIO+l58iMe0j+sgCU 8biIz1Yg+5ZXUC7ti9ASDZI85DwOPxzfGQLcUljNLJO4okGyUEMceMhdfvagZnG8 0TLf9S3hVmP6MBTYhLPw74GOu7e3kk+qJXUNLDZWM224egORpAw/yereLa6GDl3X JAFv/YhTZ+xO1r9MBONHNKFAv/45W5wdXg8sL1mZIfXMMwcV8xjFcG6VjSPCB6pn MM53VMs1ddfCK8vSAMpQl1Mpcfzx1ACfrxnhamDE/FPUhhVHmRL9rUdIQ5pxxFE1 DaFdXPJnejKiIgcr2BGizVVfQiEUuEIAQgUDZEjLyxY0Sz9t8oz1Lsz/vcrTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlJTkkdRdCllJP7fAcXv4v9z3k70wHwYDVR0j BBgwFoAUFJgUGBkRK4RGwtSjER9TA48F2+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQtZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5 ODk3LzAvMTQ5ODE0MTgxOTExMkI4NDQ2QzJENEEzMTExRjUzMDM4RjA1REJFOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ZKZ1VHQmtSSzRSR3d0U2pFUjlUQTQ4 RjItay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOTA2NmY1ZC1l Y2MxLTQ5MjctOTVjMS1lMWE4ZGY4Zjk4OTcvMC8xNDk4MTQxODE5MTEyQjg0NDZD MkQ0QTMxMTFGNTMwMzhGMDVEQkU5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1pvE0EBq3Y9VnGHOZe/ qvaxBvF+Kx2jX7I5oSdJqE+XTyokE5bzgSGK5gkl4psCdoWJULeubTnVGufyz+Hy warL6TV7phxfb3cab8aSmlgHp57LOg84/mxehc6mmFH6uWgM0uViq9iFLOjK37hp p10Dq9T0bIacR6ZAobMOW9BsOEoqqfo2tkPTMGTk2q3tL+7p/dkR9JXxkQQjb9Bw L/ZQjEEqYLJk1klZ7R5aqLOpbHXV4fmWwwdafRBE7hIuzePkHIUsWe9f2Wa/IEUm TdB/oRTSJQVyc3tNvXi/abk8GjSy8zNM9zPhJ4HvQ1y2A4IfOTsDC8wGPEH066I1 Wg== -----END CERTIFICATE-----Generated at Mon Aug 4 19:01:32 2025 by rpki-client