$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft File: 307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json) Hash identifier: 3YS7Os9XJ+j6m2kksVMGMU7DnNgy/majHrTi6PL5rNU= Subject key identifier: 46:3F:79:B5:A3:E3:DA:20:A5:80:BA:34:FD:86:E9:52:52:00:13:17 Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 Certificate issuer: /CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Certificate serial: 4B08FE6E8E4FA7CA44EAFCB0E9A6E2E357A5B69B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft Manifest number: 18 Signing time: Wed 06 Aug 2025 21:02:49 +0000 Manifest this update: Wed 06 Aug 2025 20:57:49 +0000 Manifest next update: Fri 08 Aug 2025 00:47:49 +0000 Files and hashes: 1: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: CT94562rejcnI+8jxgzLTkVrQpgFmfP0lWQH0xwtsug=) 2: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: aBp6U2aVMH3hSM5eeFVi+p63pJd0WYDoQYC72uEJ/w8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 20:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:08:fe:6e:8e:4f:a7:ca:44:ea:fc:b0:e9:a6:e2:e3:57:a5:b6:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Validity Not Before: Aug 6 20:57:49 2025 GMT Not After : Aug 8 00:47:49 2025 GMT Subject: CN=463F79B5A3E3DA20A580BA34FD86E95252001317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:bc:51:79:4c:4e:67:66:2b:6a:68:98:3e:59: 3a:ab:43:c0:5c:f5:15:fe:2e:fc:c1:9e:7d:2d:b8: 38:86:8a:16:9f:37:9a:ca:64:cc:b3:b3:29:a1:f8: 59:14:30:62:16:09:af:e6:50:ec:1b:e8:b0:ba:01: 89:0d:fb:e4:50:41:b8:70:39:b5:0e:e7:ca:64:58: 24:52:74:e3:ed:f0:57:ca:71:02:c7:df:ce:30:84: 3e:06:60:7c:ca:eb:a5:fa:12:b8:89:f0:7a:c2:8c: 73:90:4c:b3:5d:37:dc:e6:83:62:f5:93:44:40:06: c9:0b:47:63:72:44:69:2a:54:12:95:c3:c9:93:00: 7d:28:41:45:f9:ab:12:4f:a4:14:85:b5:12:a6:38: f0:b7:2a:bf:54:bb:08:ca:f5:0a:c8:6e:ff:d2:63: ad:3c:56:36:5d:45:7a:c2:82:7d:33:56:4d:eb:fe: 5f:bf:01:43:1e:8d:f9:53:3c:0e:04:44:05:e9:c6: 2e:f0:dc:ba:cb:12:95:5d:c0:b1:31:98:0d:5a:2e: 27:3d:0b:72:cc:31:94:6e:13:94:fa:2a:7c:aa:9d: 91:5a:f0:df:db:75:c3:75:cb:f7:7d:09:99:dc:82: de:7f:3f:16:34:bf:1c:2b:73:7d:13:a9:04:25:a6: 5f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3F:79:B5:A3:E3:DA:20:A5:80:BA:34:FD:86:E9:52:52:00:13:17 X509v3 Authority Key Identifier: keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:e9:b1:1d:35:2b:bb:01:69:76:35:58:01:a5:0e:77:f5:4e: 11:a0:78:5d:3c:01:fc:b0:11:f5:23:c0:d9:d9:a3:a0:7f:e8: 03:88:75:7e:94:ec:20:cc:ed:b2:9b:01:92:ab:98:df:d9:ae: 01:1e:cf:22:0c:3d:3f:39:0a:79:6c:f3:b4:78:ed:cb:67:aa: 0c:bd:70:d6:92:09:89:82:44:a6:9b:40:b8:23:54:1f:a6:6a: 2a:14:64:ed:0f:ee:8d:9a:b7:f9:dd:69:18:2d:8a:d4:9c:69: 0a:65:29:08:b3:64:73:25:7b:11:3f:4b:e8:64:00:5b:07:d2: 42:d8:cd:eb:2d:bf:ba:4f:63:f1:41:78:3f:64:b9:4e:2d:7d: 56:f8:9c:e4:fd:a9:6d:15:0e:bc:b9:d1:fe:89:eb:ef:55:28: 76:fc:7e:e4:cb:cf:56:58:81:cb:58:29:c1:0a:d0:a7:c6:a1: 2c:c3:96:55:98:7b:41:96:1f:f5:4d:eb:11:af:87:96:39:c9: 25:7d:a8:5b:7f:aa:5b:b9:1d:c9:c2:c2:0c:84:66:5f:a7:ab: 6c:eb:2f:07:12:52:d2:75:21:6c:7b:3a:b6:db:7b:51:95:69: 66:60:f8:8b:ee:78:e8:15:d0:34:de:ba:37:d6:d4:d4:d9:7e: d1:50:47:cf -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUSwj+bo5Pp8pE6vyw6abi41eltpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVC NEU5RTBGMDAeFw0yNTA4MDYyMDU3NDlaFw0yNTA4MDgwMDQ3NDlaMDMxMTAvBgNV BAMTKDQ2M0Y3OUI1QTNFM0RBMjBBNTgwQkEzNEZEODZFOTUyNTIwMDEzMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxvFF5TE5nZitqaJg+WTqrQ8Bc 9RX+LvzBnn0tuDiGihafN5rKZMyzsymh+FkUMGIWCa/mUOwb6LC6AYkN++RQQbhw ObUO58pkWCRSdOPt8FfKcQLH384whD4GYHzK66X6EriJ8HrCjHOQTLNdN9zmg2L1 k0RABskLR2NyRGkqVBKVw8mTAH0oQUX5qxJPpBSFtRKmOPC3Kr9UuwjK9QrIbv/S Y608VjZdRXrCgn0zVk3r/l+/AUMejflTPA4ERAXpxi7w3LrLEpVdwLExmA1aLic9 C3LMMZRuE5T6KnyqnZFa8N/bdcN1y/d9CZncgt5/PxY0vxwrc30TqQQlpl9FAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQURj95taPj2iClgLo0/YbpUlIAExcwHwYDVR0j BBgwFoAUMHRW4DoR27SEQ+k1OJWLFbTp4PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5RTBGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5 RTBGMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS8zMDc0NTZFMDNBMTFEQkI0ODQ0 M0U5MzUzODk1OEIxNUI0RTlFMEYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARumxHTUruwFpdjVYAaUO d/VOEaB4XTwB/LAR9SPA2dmjoH/oA4h1fpTsIMztspsBkquY39muAR7PIgw9PzkK eWzztHjty2eqDL1w1pIJiYJEpptAuCNUH6ZqKhRk7Q/ujZq3+d1pGC2K1JxpCmUp CLNkcyV7ET9L6GQAWwfSQtjN6y2/uk9j8UF4P2S5Ti19Vvic5P2pbRUOvLnR/onr 71Uodvx+5MvPVliBy1gpwQrQp8ahLMOWVZh7QZYf9U3rEa+HljnJJX2oW3+qW7kd ycLCDIRmX6erbOsvBxJS0nUhbHs6ttt7UZVpZmD4i+546BXQNN66N9bU1Nl+0VBH zw== -----END CERTIFICATE-----Generated at Thu Aug 7 01:17:22 2025 by rpki-client