$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: ypmhSOEhNI/tT3D8vbGetZgvEYbUGzAfDS50Pdw8Tyc= Subject key identifier: 94:24:45:24:A8:C4:B5:D6:3F:26:9F:44:45:4B:C8:A9:54:AF:48:D0 Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 14E2A011B464C0DBD906A58758BA8BC8F6BD44EC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 01E5 Signing time: Mon 04 Aug 2025 07:20:14 +0000 Manifest this update: Mon 04 Aug 2025 07:15:14 +0000 Manifest next update: Tue 05 Aug 2025 09:43:14 +0000 Files and hashes: 1: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: mkJFWBFqeptuvUSix8vUlQy6fAxT/DcTU9OFhDUmleE=) 2: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: 0Augomo0JPTrdfBB/3ITj/ZgfSBftNdAdE/vOPCbcS0=) 3: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: 1o4m8PJbpPTt/WwCt8wMPBTEbmCl+8vcVtrKZbTYjFM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 00:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e2:a0:11:b4:64:c0:db:d9:06:a5:87:58:ba:8b:c8:f6:bd:44:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Aug 4 07:15:14 2025 GMT Not After : Aug 5 09:43:14 2025 GMT Subject: CN=94244524A8C4B5D63F269F44454BC8A954AF48D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:55:03:50:8a:15:33:92:9d:30:fc:2f:52:d8: 96:25:5f:95:12:0b:8a:f8:b5:46:3c:7b:b2:75:05: 1e:2c:be:a4:13:b0:5c:be:40:e0:a2:8d:72:19:3f: c2:dc:ee:19:ea:c2:74:7b:92:21:92:67:93:8b:fc: 3e:89:33:0f:b5:f1:ea:ff:d6:06:3a:64:0b:61:33: 55:10:98:76:30:17:21:1c:bf:0e:32:a6:dd:82:a9: 04:17:ad:76:d0:f6:c8:e6:d7:18:91:da:88:2f:6e: f3:b2:9a:10:4b:35:fe:03:02:38:25:af:6e:82:5b: 10:e6:58:35:a9:08:86:98:9a:b0:6a:da:b6:9b:10: 42:82:c1:d3:0d:75:71:6f:2e:5e:c2:44:6c:27:db: 67:2a:10:87:7b:f8:19:f9:d9:ec:7a:22:6b:d2:06: 97:5e:06:b6:a2:c2:26:d8:b6:98:09:dc:9e:ff:6e: 81:d0:bc:d8:55:84:8a:dd:30:75:93:aa:ec:db:6f: 65:d7:29:5d:06:50:80:d6:22:37:6c:b8:b9:9f:c5: 13:be:a3:b2:f4:38:43:84:92:02:39:e9:8a:f0:5d: ed:26:df:62:d2:15:3f:59:28:c2:cf:99:23:3e:ff: 29:ec:62:e7:39:db:3b:0b:6f:2c:38:70:f5:b0:4c: 2b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:24:45:24:A8:C4:B5:D6:3F:26:9F:44:45:4B:C8:A9:54:AF:48:D0 X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:61:54:9a:26:9d:d8:e9:07:e1:a0:28:0a:4b:e3:44:67:6a: 46:4f:13:a2:a4:86:30:7d:b2:4d:97:97:1b:0e:73:09:7a:5c: 6e:36:c3:d5:56:85:e7:59:90:5b:7b:2a:96:c6:ca:2c:d1:31: 1e:a1:71:c8:fa:0e:a7:7c:fc:c4:04:d3:48:62:13:2b:53:f7: 78:fa:aa:36:bf:a7:cc:fc:45:74:3a:45:ea:9f:93:8f:8a:f0: 96:10:c5:a3:56:28:b2:c1:e2:27:85:76:05:1d:e4:5d:20:76: 9d:ec:de:6e:a1:4f:c3:09:12:2c:a3:5a:7c:93:31:37:c8:96: 38:2b:58:12:04:14:83:0f:01:56:f3:e7:e4:94:21:d5:5c:72: 60:01:56:89:53:23:fa:1a:92:65:56:c1:48:c1:1a:8f:31:f3: ab:7d:ed:98:6f:25:c8:00:c9:6c:f6:b5:c2:78:1c:12:d2:88: 1b:37:53:e4:e9:31:35:78:4f:8e:3d:e2:f5:91:bc:cb:90:3e: b6:2d:62:c2:0d:b3:19:dc:b7:7c:9a:e6:b1:48:05:e2:6b:38: df:9f:5a:0e:2f:07:d5:c2:3b:bb:e3:b5:0f:b1:e3:2e:c5:8e: 94:b7:bb:0a:4a:83:62:00:78:7d:24:ca:75:36:da:94:bc:b9: 98:de:a2:9b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFOKgEbRkwNvZBqWHWLqLyPa9ROwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNTA4MDQwNzE1MTRaFw0yNTA4MDUwOTQzMTRaMDMxMTAvBgNV BAMTKDk0MjQ0NTI0QThDNEI1RDYzRjI2OUY0NDQ1NEJDOEE5NTRBRjQ4RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChVQNQihUzkp0w/C9S2JYlX5US C4r4tUY8e7J1BR4svqQTsFy+QOCijXIZP8Lc7hnqwnR7kiGSZ5OL/D6JMw+18er/ 1gY6ZAthM1UQmHYwFyEcvw4ypt2CqQQXrXbQ9sjm1xiR2ogvbvOymhBLNf4DAjgl r26CWxDmWDWpCIaYmrBq2rabEEKCwdMNdXFvLl7CRGwn22cqEId7+Bn52ex6ImvS BpdeBraiwibYtpgJ3J7/boHQvNhVhIrdMHWTquzbb2XXKV0GUIDWIjdsuLmfxRO+ o7L0OEOEkgI56YrwXe0m32LSFT9ZKMLPmSM+/ynsYuc52zsLbyw4cPWwTCtnAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUlCRFJKjEtdY/Jp9ERUvIqVSvSNAwHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBHYVSa Jp3Y6QfhoCgKS+NEZ2pGTxOipIYwfbJNl5cbDnMJelxuNsPVVoXnWZBbeyqWxsos 0TEeoXHI+g6nfPzEBNNIYhMrU/d4+qo2v6fM/EV0OkXqn5OPivCWEMWjViiyweIn hXYFHeRdIHad7N5uoU/DCRIso1p8kzE3yJY4K1gSBBSDDwFW8+fklCHVXHJgAVaJ UyP6GpJlVsFIwRqPMfOrfe2YbyXIAMls9rXCeBwS0ogbN1Pk6TE1eE+OPeL1kbzL kD62LWLCDbMZ3Ld8muaxSAXiazjfn1oOLwfVwju747UPseMuxY6Ut7sKSoNiAHh9 JMp1NtqUvLmY3qKb -----END CERTIFICATE-----Generated at Mon Aug 4 11:10:15 2025 by rpki-client