$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: 153pIqylH6GdtuOW3c7zlGEILR6B7TxuPbj5nqB4pzw= Subject key identifier: 99:20:BF:42:6D:68:05:6E:41:A7:15:B1:EF:87:28:2C:6F:45:8B:B5 Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 62B84CB96021E7B17E132A2B19EC0C1F4635BC3B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 0299 Signing time: Tue 05 Aug 2025 23:28:15 +0000 Manifest this update: Tue 05 Aug 2025 23:23:15 +0000 Manifest next update: Thu 07 Aug 2025 00:51:15 +0000 Files and hashes: 1: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: dUzgpny38MghrKpugSdB9dzvd5zDywxo+PBsCyfJHn4=) 2: 326131343a316563373a663030653a3a2f34382d3438203d3e203336383332.roa (hash: 0dTOq5r3nzcU4nhnM0SPSmfHWBkaaGJU3KJhAxTcvLU=) 3: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: RA+L2a9rUnQEkE0h3dE9SdgUVHKokLJZl3eEmnwupDU=) 4: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: CY/uWfPvpbbYD9vEtucxOCEfMTdKLyqjUDoee83oJxs=) 5: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: kUd+OV7q9DAowS2L3/fdq/oS4HUMTFtScny+gWU7CG0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b8:4c:b9:60:21:e7:b1:7e:13:2a:2b:19:ec:0c:1f:46:35:bc:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Aug 5 23:23:15 2025 GMT Not After : Aug 7 00:51:15 2025 GMT Subject: CN=9920BF426D68056E41A715B1EF87282C6F458BB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fa:7d:49:2d:67:ac:dc:66:3c:fc:a3:8b:f6: eb:2e:ab:f4:90:c4:71:4b:f4:02:04:f6:8b:06:8e: f7:e7:84:68:5b:9b:30:df:34:2a:7c:7c:ac:45:59: de:19:6a:b0:c3:86:1a:53:81:74:3c:dc:f7:fd:0e: b5:fa:c1:ef:a6:38:60:1e:a0:c3:67:b6:a0:cf:b4: b4:1d:1c:bf:e6:4f:06:6d:b1:0d:41:ca:0b:bf:d1: 79:2c:38:64:9a:23:b2:b4:5f:e6:ee:de:a3:ed:4d: 75:ec:3b:3d:e9:9d:e8:03:1e:ec:9e:93:5d:e1:9f: 52:b7:51:9f:c8:2c:a2:70:21:87:d2:1a:a2:12:96: 84:8c:72:ea:e1:c2:dc:18:eb:ab:ab:59:ea:71:4e: e5:1a:47:d8:b1:34:0d:23:bb:bb:96:d7:42:a3:7e: 4f:94:ae:c3:6b:ef:60:bf:2d:b0:04:cc:ff:b7:5c: 5b:85:5f:40:42:2d:4f:a2:57:91:14:2f:86:ac:50: e0:7b:89:d2:35:17:25:3f:b0:40:80:e3:55:37:41: f2:52:d7:89:bf:c6:30:75:52:ec:68:51:b4:26:bb: 4d:65:54:ab:85:a4:25:f3:df:4e:37:92:51:c0:66: 0d:94:2d:1b:12:a1:7d:67:a0:6f:dd:6d:f9:de:7b: 9c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:20:BF:42:6D:68:05:6E:41:A7:15:B1:EF:87:28:2C:6F:45:8B:B5 X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a4:2d:8c:55:d9:c1:12:ea:9d:50:b7:c1:df:9d:09:50:09: ed:b5:fa:b9:ac:ec:ad:81:c8:d6:77:6a:81:5b:67:e0:c5:38: c0:61:7b:5f:00:3c:f1:19:a4:50:79:19:df:7e:dc:26:1d:6d: bc:68:e9:cb:29:cb:ee:db:dd:b0:56:22:c7:1c:f3:a6:43:b6: e7:d0:cc:fe:ae:0a:cf:1f:53:20:2a:e5:9b:fd:5f:cd:9d:0a: 90:c9:7a:ee:bc:fe:2c:84:e0:ee:79:b9:5a:c5:23:42:04:93: 36:7a:65:91:13:76:fa:c8:79:0a:e7:f5:3f:ea:53:60:71:14: 65:3b:98:52:96:1e:f1:87:77:c7:4e:d6:8b:6d:d3:64:26:5e: a2:70:ec:95:14:f2:5b:59:fa:0c:86:69:9c:84:cf:99:23:c5: f6:10:c2:6e:3e:65:c5:61:9f:0b:73:06:86:16:7d:a6:cb:97: 6d:bc:06:54:cc:80:85:26:d0:0b:a4:a6:cc:e2:2b:f2:39:4f: a2:cf:ba:b6:d3:73:d7:03:4f:d4:0c:b9:4f:8c:cc:9f:af:99: 82:b8:0a:72:74:6f:8e:81:17:cc:79:cd:36:ff:01:11:3d:85: 7e:e2:26:68:60:64:ea:2d:a3:d9:01:a0:df:26:e3:43:39:4d: 99:b4:20:f8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYrhMuWAh57F+EyorGewMH0Y1vDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNTA4MDUyMzIzMTVaFw0yNTA4MDcwMDUxMTVaMDMxMTAvBgNV BAMTKDk5MjBCRjQyNkQ2ODA1NkU0MUE3MTVCMUVGODcyODJDNkY0NThCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk+n1JLWes3GY8/KOL9usuq/SQ xHFL9AIE9osGjvfnhGhbmzDfNCp8fKxFWd4ZarDDhhpTgXQ83Pf9DrX6we+mOGAe oMNntqDPtLQdHL/mTwZtsQ1Bygu/0XksOGSaI7K0X+bu3qPtTXXsOz3pnegDHuye k13hn1K3UZ/ILKJwIYfSGqISloSMcurhwtwY66urWepxTuUaR9ixNA0ju7uW10Kj fk+UrsNr72C/LbAEzP+3XFuFX0BCLU+iV5EUL4asUOB7idI1FyU/sECA41U3QfJS 14m/xjB1UuxoUbQmu01lVKuFpCXz3043klHAZg2ULRsSoX1noG/dbfnee5wlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUmSC/Qm1oBW5BpxWx74coLG9Fi7UwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAXpC2M VdnBEuqdULfB350JUAnttfq5rOytgcjWd2qBW2fgxTjAYXtfADzxGaRQeRnfftwm HW28aOnLKcvu292wViLHHPOmQ7bn0Mz+rgrPH1MgKuWb/V/NnQqQyXruvP4shODu eblaxSNCBJM2emWRE3b6yHkK5/U/6lNgcRRlO5hSlh7xh3fHTtaLbdNkJl6icOyV FPJbWfoMhmmchM+ZI8X2EMJuPmXFYZ8LcwaGFn2my5dtvAZUzICFJtALpKbM4ivy OU+iz7q203PXA0/UDLlPjMyfr5mCuApydG+OgRfMec02/wERPYV+4iZoYGTqLaPZ AaDfJuNDOU2ZtCD4 -----END CERTIFICATE-----Generated at Wed Aug 6 09:27:43 2025 by rpki-client