$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: QNwlJ5tFR24qxvPHyrECRClKC823okyGUNrv1oY9EV0= Subject key identifier: 79:1B:21:86:A1:A9:D1:07:84:C4:EF:59:C7:5E:C4:A5:8E:3D:D7:2B Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 13C109EF2DD7BDDE023596E48A0B903F19F584D4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 0254 Signing time: Sun 15 Jun 2025 10:51:34 +0000 Manifest this update: Sun 15 Jun 2025 10:46:34 +0000 Manifest next update: Mon 16 Jun 2025 11:27:34 +0000 Files and hashes: 1: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: iAsWOL7+WKY/KYyObCEZQhJE43/Wb4KGMJhn6wndwzg=) 2: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: RA+L2a9rUnQEkE0h3dE9SdgUVHKokLJZl3eEmnwupDU=) 3: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: dUzgpny38MghrKpugSdB9dzvd5zDywxo+PBsCyfJHn4=) 4: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: kUd+OV7q9DAowS2L3/fdq/oS4HUMTFtScny+gWU7CG0=) 5: 326131343a316563373a663030653a3a2f34382d3438203d3e203336383332.roa (hash: 0dTOq5r3nzcU4nhnM0SPSmfHWBkaaGJU3KJhAxTcvLU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 11:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:c1:09:ef:2d:d7:bd:de:02:35:96:e4:8a:0b:90:3f:19:f5:84:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Jun 15 10:46:34 2025 GMT Not After : Jun 16 11:27:34 2025 GMT Subject: CN=791B2186A1A9D10784C4EF59C75EC4A58E3DD72B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:69:3f:b6:ce:84:0e:c4:5d:49:ae:32:ca:56: aa:f2:bf:5c:b5:f6:56:f2:e2:ee:c5:86:cf:1f:ce: fd:49:60:5c:8e:5c:1e:66:0d:b9:47:db:d8:bf:3a: 87:41:5c:aa:44:b4:85:77:74:a5:9b:3b:fa:31:15: 95:77:0b:03:89:f0:df:55:7a:a6:00:0b:dd:09:45: 24:e6:7e:d1:94:51:e0:8b:63:c3:9d:f4:5b:86:b9: f8:19:1d:d3:b4:ba:8a:5a:3e:39:e3:7e:46:57:51: 2b:3e:d3:8d:05:61:c5:6c:c0:f4:78:70:55:92:07: 45:08:bc:61:e1:be:ec:3b:a7:33:5f:53:75:be:03: 2e:82:14:5c:c2:26:a9:9a:02:eb:47:7d:65:37:84: d4:1c:92:68:f3:2c:9a:6b:c2:5c:05:8f:85:a7:2d: 3a:a7:5d:a0:4e:8e:2b:48:2c:a3:b1:a4:76:d8:8b: 57:30:18:e6:45:6d:ad:11:14:6a:56:1a:22:ed:f8: 24:fc:ce:75:bf:98:a7:4c:8e:ea:cb:50:1c:8c:72: 4f:27:21:76:0a:ab:1c:f1:5a:e5:26:9a:b7:75:3d: 2e:61:1e:a7:fa:dd:91:5a:0c:a3:84:ed:75:0e:1d: 0a:4b:6c:56:60:af:56:50:cb:85:58:27:93:9d:43: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1B:21:86:A1:A9:D1:07:84:C4:EF:59:C7:5E:C4:A5:8E:3D:D7:2B X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:3c:cc:96:fc:3d:61:b0:82:a9:5d:bd:e2:b0:40:6e:2f:88: dc:eb:7a:8a:04:dc:10:a5:8f:a6:f8:be:51:d0:b5:6e:dc:8f: 56:f5:c6:02:4f:0c:83:d4:46:63:ae:df:4f:8d:bb:1f:9d:1b: 03:7a:2e:90:df:26:53:4e:8a:5d:1f:f8:2a:c3:f2:5d:32:27: fd:e5:1f:1f:d3:da:27:f3:8d:bd:0a:46:0e:62:86:b2:67:6a: 5c:07:09:b7:0a:bc:86:d5:c8:ec:73:1b:77:83:bb:fc:99:94: 69:c5:3c:1c:69:c3:c7:c3:35:03:50:1a:7a:f2:fc:2d:6c:3e: cc:33:7e:ee:f6:a6:73:eb:89:a4:5a:c4:45:23:c9:d2:45:b0: b1:b2:98:7d:d0:3f:e4:4c:13:ee:63:f2:d2:f8:27:59:19:19: 60:21:95:a4:bc:ec:0a:e8:c7:19:46:ac:ac:1f:cd:d2:fb:b3: 43:7b:af:f1:69:81:d2:9d:c7:9d:66:71:a9:20:88:49:73:9c: ae:4a:9f:88:10:f5:b4:e9:f1:94:8c:c8:38:22:a7:d9:36:71: ba:fd:74:10:ff:15:ef:dc:22:01:57:ac:1d:79:ad:83:e8:e2: 27:6d:80:4f:c0:13:d1:a6:6f:a9:e3:3a:9c:84:ed:38:d0:f7: f5:64:13:83 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUE8EJ7y3Xvd4CNZbkiguQPxn1hNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNTA2MTUxMDQ2MzRaFw0yNTA2MTYxMTI3MzRaMDMxMTAvBgNV BAMTKDc5MUIyMTg2QTFBOUQxMDc4NEM0RUY1OUM3NUVDNEE1OEUzREQ3MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdaT+2zoQOxF1JrjLKVqryv1y1 9lby4u7Fhs8fzv1JYFyOXB5mDblH29i/OodBXKpEtIV3dKWbO/oxFZV3CwOJ8N9V eqYAC90JRSTmftGUUeCLY8Od9FuGufgZHdO0uopaPjnjfkZXUSs+040FYcVswPR4 cFWSB0UIvGHhvuw7pzNfU3W+Ay6CFFzCJqmaAutHfWU3hNQckmjzLJprwlwFj4Wn LTqnXaBOjitILKOxpHbYi1cwGOZFba0RFGpWGiLt+CT8znW/mKdMjurLUByMck8n IXYKqxzxWuUmmrd1PS5hHqf63ZFaDKOE7XUOHQpLbFZgr1ZQy4VYJ5OdQ143AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUeRshhqGp0QeExO9Zx17EpY491yswHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8PMyW /D1hsIKpXb3isEBuL4jc63qKBNwQpY+m+L5R0LVu3I9W9cYCTwyD1EZjrt9Pjbsf nRsDei6Q3yZTTopdH/gqw/JdMif95R8f09on8429CkYOYoayZ2pcBwm3CryG1cjs cxt3g7v8mZRpxTwcacPHwzUDUBp68vwtbD7MM37u9qZz64mkWsRFI8nSRbCxsph9 0D/kTBPuY/LS+CdZGRlgIZWkvOwK6McZRqysH83S+7NDe6/xaYHSncedZnGpIIhJ c5yuSp+IEPW06fGUjMg4IqfZNnG6/XQQ/xXv3CIBV6wdea2D6OInbYBPwBPRpm+p 4zqchO040Pf1ZBOD -----END CERTIFICATE-----Generated at Mon Jun 16 05:29:20 2025 by rpki-client