$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft File: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft (raw, json) Hash identifier: hXx0ThtTRAEqCgXojrvk1P2f+wkjebm0mQTz/kb/qXw= Subject key identifier: E8:9C:74:E5:C3:50:CA:1C:10:42:85:30:73:58:91:4D:D2:73:80:32 Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Certificate serial: 2DF68DE3FAFB7B67AD2BADFE398A05574EBBD0A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft Manifest number: 039B Signing time: Mon 04 Aug 2025 13:32:19 +0000 Manifest this update: Mon 04 Aug 2025 13:27:19 +0000 Manifest next update: Tue 05 Aug 2025 17:04:19 +0000 Files and hashes: 1: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl (hash: 9mmsMysDXXGt9b35RBw5vjJrm6ZQKmNgDXQZ1FObTXQ=) 2: 34352e3134362e3136322e302f32342d3234203d3e203138363331.roa (hash: C/6HJC1mRnTjt5un9I/ly/ex3eg1Ngny62cwbLuyXag=) 3: 34352e3134362e3136302e302f32332d3233203d3e203437343437.roa (hash: RhIjHNXayp0tS4DN32atD6aHafLrHUAz0HkdV618CRY=) 4: 34352e3134362e3136332e302f32342d3234203d3e20323136313833.roa (hash: VqRU0PsdkYcQlfLEqZmAkEPw8yvo7sqFgCP45AzG5Gs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f6:8d:e3:fa:fb:7b:67:ad:2b:ad:fe:39:8a:05:57:4e:bb:d0:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Validity Not Before: Aug 4 13:27:19 2025 GMT Not After : Aug 5 17:04:19 2025 GMT Subject: CN=E89C74E5C350CA1C104285307358914DD2738032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4d:d0:7e:54:cc:33:c6:8a:f3:1c:df:17:93: e9:e7:f2:49:b6:d8:8d:cd:73:e9:8c:fd:a7:b1:83: 4e:f9:3e:76:56:d0:d9:2b:dc:a7:e5:f1:5a:c2:01: 6e:c9:ec:87:2a:47:0a:c6:d7:e7:bf:4d:2e:8f:ad: 24:3f:fc:dc:20:78:cc:29:43:2d:8a:a3:fa:6d:8a: 30:89:0a:d6:a0:5a:3a:a3:77:36:e1:31:e8:53:f0: 47:1f:75:08:64:5d:1d:67:1e:54:9c:3d:70:ff:31: 57:2c:f5:78:a4:d7:3e:2f:60:16:3c:7d:4c:9a:22: eb:e4:e6:97:3f:90:84:27:78:13:2b:40:09:4e:cb: 89:b3:ec:0d:38:83:2f:05:c9:65:9e:50:86:77:10: 6a:ef:02:f5:d8:3a:fa:5d:a1:83:23:af:53:54:bf: 45:3e:78:e9:bd:d7:ec:34:75:f9:0a:c7:af:3d:77: e1:68:6e:d0:a0:06:e8:6f:cb:d2:1f:1c:5b:b0:85: 9b:17:e1:0a:d9:90:14:0d:cd:13:63:73:e9:a0:a7: 57:f0:d0:88:83:29:1d:a6:58:71:96:5d:b7:52:af: af:a0:39:a9:d3:c7:2f:f2:02:be:3e:1c:34:fc:4f: 1c:59:85:d1:0e:54:9c:c3:66:15:63:fe:8b:68:af: 52:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9C:74:E5:C3:50:CA:1C:10:42:85:30:73:58:91:4D:D2:73:80:32 X509v3 Authority Key Identifier: keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:44:c4:a7:ac:41:80:e0:fe:85:b5:e1:86:3d:7e:e0:56:3f: 1b:1d:b8:57:66:0c:b7:09:51:45:97:a7:03:00:fa:fc:a1:aa: 99:b9:14:40:19:5c:ca:1c:2a:55:10:cd:27:3c:2f:bd:da:1d: 2e:66:ac:72:03:38:10:f7:70:b0:b9:71:fd:6c:52:19:ca:40: 04:54:c1:e0:56:ef:48:e5:6c:b9:f3:0c:57:8f:6d:dd:59:31: 1f:32:39:52:79:0d:79:b4:c9:5f:fe:17:7b:54:2a:ec:46:f3: f9:2d:08:94:f6:43:f5:74:f5:12:60:16:60:95:d2:d5:7b:24: 8f:dc:7f:f2:74:3a:4e:2c:7d:4b:d5:8e:5e:65:41:90:46:d7: af:ef:6f:1d:29:a4:66:11:9a:c3:e5:a9:a8:58:40:f2:8d:fc: 67:5b:ce:3d:06:45:7b:29:1f:8a:5a:d9:fc:87:db:8b:17:5f: de:31:3c:0d:71:e6:f5:5e:f8:e1:40:9d:59:c0:59:5b:32:61: b6:10:6f:f3:c0:f3:19:07:b8:d8:44:be:b9:c0:d6:31:5d:52: 9d:ce:23:78:b6:26:33:25:a6:4f:4d:97:ab:3e:12:48:a8:74: 14:af:97:48:4c:ed:d0:c2:1c:b1:ef:ec:81:40:ee:b8:ea:c6: b8:e7:55:d2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULfaN4/r7e2etK63+OYoFV0670KYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRlZmUwOTIyZjRmNTUyNzBkY2Q1YzA4ZjA0ZjFjN2Jm MjYwNzNjMzAeFw0yNTA4MDQxMzI3MTlaFw0yNTA4MDUxNzA0MTlaMDMxMTAvBgNV BAMTKEU4OUM3NEU1QzM1MENBMUMxMDQyODUzMDczNTg5MTRERDI3MzgwMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvTdB+VMwzxorzHN8Xk+nn8km2 2I3Nc+mM/aexg075PnZW0Nkr3Kfl8VrCAW7J7IcqRwrG1+e/TS6PrSQ//NwgeMwp Qy2Ko/ptijCJCtagWjqjdzbhMehT8EcfdQhkXR1nHlScPXD/MVcs9Xik1z4vYBY8 fUyaIuvk5pc/kIQneBMrQAlOy4mz7A04gy8FyWWeUIZ3EGrvAvXYOvpdoYMjr1NU v0U+eOm91+w0dfkKx689d+FobtCgBuhvy9IfHFuwhZsX4QrZkBQNzRNjc+mgp1fw 0IiDKR2mWHGWXbdSr6+gOanTxy/yAr4+HDT8TxxZhdEOVJzDZhVj/otor1JBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6Jx05cNQyhwQQoUwc1iRTdJzgDIwHwYDVR0j BBgwFoAUXe/gki9PVScNzVwI8E8ce/Jgc8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmZlMmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYz NzkwLzAvNURFRkUwOTIyRjRGNTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hlX2draTlQVlNjTnpWd0k4RThjZV9K Z2M4TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZmUyYjI3YS0x ZWM1LTRhYjctOTc4ZS02ZGE5Y2Y5ZjM3OTAvMC81REVGRTA5MjJGNEY1NTI3MERD RDVDMDhGMDRGMUM3QkYyNjA3M0MzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkTEp6xBgOD+hbXhhj1+ 4FY/Gx24V2YMtwlRRZenAwD6/KGqmbkUQBlcyhwqVRDNJzwvvdodLmascgM4EPdw sLlx/WxSGcpABFTB4FbvSOVsufMMV49t3VkxHzI5UnkNebTJX/4Xe1Qq7Ebz+S0I lPZD9XT1EmAWYJXS1Xskj9x/8nQ6Tix9S9WOXmVBkEbXr+9vHSmkZhGaw+WpqFhA 8o38Z1vOPQZFeykfilrZ/Ifbixdf3jE8DXHm9V744UCdWcBZWzJhthBv88DzGQe4 2ES+ucDWMV1Snc4jeLYmMyWmT02Xqz4SSKh0FK+XSEzt0MIcse/sgUDuuOrGuOdV 0g== -----END CERTIFICATE-----Generated at Mon Aug 4 15:59:57 2025 by rpki-client