$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: nzYtBaVp1J2kenQqjTAUdB/eDyGSsWxtbnMMQNEEA1U= Subject key identifier: F1:58:4B:B6:93:E5:63:01:4F:91:E7:3E:74:D4:58:72:A4:3B:B1:A0 Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 17A2ED8CDEF7FE253175D95208E2867C715D4C6B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: 2C Signing time: Tue 05 Aug 2025 20:33:15 +0000 Manifest this update: Tue 05 Aug 2025 20:28:15 +0000 Manifest next update: Wed 06 Aug 2025 23:58:15 +0000 Files and hashes: 1: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: can147yLxO7rz/EkiMzNRaFtdljMHXH/UVck5D4Ds5s=) 2: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: PoxwFIHy8kdey2mlHnL1hmx4hhF1/GhCPxY1mv6kDWE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 16:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a2:ed:8c:de:f7:fe:25:31:75:d9:52:08:e2:86:7c:71:5d:4c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Aug 5 20:28:15 2025 GMT Not After : Aug 6 23:58:15 2025 GMT Subject: CN=F1584BB693E563014F91E73E74D45872A43BB1A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5f:51:df:ae:fc:c2:ef:4b:85:1b:86:ec:c7: 7c:f6:3c:0f:1f:eb:69:24:f7:f1:aa:9f:48:67:8b: 00:10:30:c5:ce:4e:81:dd:c5:dd:ee:f8:e9:7b:2c: 40:00:82:6d:94:ee:d5:61:fd:03:41:92:52:cc:c9: 10:e3:b0:92:d6:83:89:cc:36:8b:6f:e6:08:b2:6c: 94:7d:e4:ed:d8:9f:ea:c5:0c:fe:f0:c4:03:83:0b: 28:3c:f5:8b:26:73:93:ab:4c:2b:1e:73:e7:03:df: 35:51:c6:97:9e:79:19:53:0c:19:91:ed:32:0d:1c: 70:8f:90:e4:9b:50:91:3b:e4:79:48:3f:c2:4c:71: 4a:04:9a:d8:b8:03:db:98:85:63:10:6b:04:16:47: e1:d3:9a:82:4c:d3:79:2c:58:23:32:d7:c5:83:84: d1:0c:94:bf:be:5c:4b:de:38:c2:e3:d4:a5:e3:c8: cd:4e:2f:01:d9:e1:5a:96:3b:99:d9:73:a1:fd:bc: 93:9e:1e:ee:6e:0b:c7:d3:e3:61:04:c4:30:56:64: 5c:a5:a7:69:ae:0a:88:b6:c8:a0:85:a2:0e:50:67: be:c0:c1:d6:27:0e:43:4a:f3:b5:cf:85:46:3f:25: 2c:ac:bf:b9:1c:d4:a4:95:52:31:25:30:e7:f1:4a: fe:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:58:4B:B6:93:E5:63:01:4F:91:E7:3E:74:D4:58:72:A4:3B:B1:A0 X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:45:7f:ff:8f:c6:8b:a2:5b:f2:6b:bf:72:4e:80:32:e7:6f: 7f:2a:25:87:36:4c:3b:69:87:51:83:b9:1f:af:ff:91:d9:dc: c3:71:69:08:60:a7:0c:01:de:0a:06:cb:9c:b5:68:95:8f:42: 1a:d5:4a:2e:d2:c6:06:d3:61:85:c4:e9:bc:ab:7c:38:58:27: c0:38:5b:b9:5f:a9:94:5e:45:44:88:80:a3:b2:c3:4d:b3:b0: a4:c6:86:6d:f9:71:98:70:9d:70:dc:5f:7c:81:82:e9:b2:21: ef:9a:36:d5:ec:b4:72:88:cc:02:15:be:bd:0d:b9:3d:d4:b8: 19:3c:eb:35:5e:03:34:c6:d9:41:c6:43:b6:dd:16:3f:66:03: cf:1c:c8:55:59:a1:ee:6b:f5:2d:3b:ff:b8:fd:be:cd:32:cb: fe:1f:2e:90:2b:7b:3b:0c:83:3c:3b:97:1d:18:dd:e2:f8:a6: 44:59:49:df:2e:f7:fc:88:23:e9:5c:44:85:95:97:80:c5:06: ea:e7:67:97:6e:01:7b:04:2d:cd:2b:30:c4:0a:46:15:6f:28: 96:a0:b6:b0:2e:e5:fc:b1:26:89:a8:37:f6:d5:00:62:f7:b0: 16:1e:9f:19:9b:b5:04:c9:b7:9e:1a:94:a8:df:9d:5a:dd:83: ac:1d:b8:42 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUF6LtjN73/iUxddlSCOKGfHFdTGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNTA4MDUyMDI4MTVaFw0yNTA4MDYyMzU4MTVaMDMxMTAvBgNV BAMTKEYxNTg0QkI2OTNFNTYzMDE0RjkxRTczRTc0RDQ1ODcyQTQzQkIxQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMX1HfrvzC70uFG4bsx3z2PA8f 62kk9/Gqn0hniwAQMMXOToHdxd3u+Ol7LEAAgm2U7tVh/QNBklLMyRDjsJLWg4nM Notv5giybJR95O3Yn+rFDP7wxAODCyg89Ysmc5OrTCsec+cD3zVRxpeeeRlTDBmR 7TINHHCPkOSbUJE75HlIP8JMcUoEmti4A9uYhWMQawQWR+HTmoJM03ksWCMy18WD hNEMlL++XEveOMLj1KXjyM1OLwHZ4VqWO5nZc6H9vJOeHu5uC8fT42EExDBWZFyl p2muCoi2yKCFog5QZ77AwdYnDkNK87XPhUY/JSysv7kc1KSVUjElMOfxSv4dAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU8VhLtpPlYwFPkec+dNRYcqQ7saAwHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApRX// j8aLolvya79yToAy529/KiWHNkw7aYdRg7kfr/+R2dzDcWkIYKcMAd4KBsuctWiV j0Ia1Uou0sYG02GFxOm8q3w4WCfAOFu5X6mUXkVEiICjssNNs7CkxoZt+XGYcJ1w 3F98gYLpsiHvmjbV7LRyiMwCFb69Dbk91LgZPOs1XgM0xtlBxkO23RY/ZgPPHMhV WaHua/UtO/+4/b7NMsv+Hy6QK3s7DIM8O5cdGN3i+KZEWUnfLvf8iCPpXESFlZeA xQbq52eXbgF7BC3NKzDECkYVbyiWoLawLuX8sSaJqDf21QBi97AWHp8Zm7UEybee GpSo351a3YOsHbhC -----END CERTIFICATE-----Generated at Wed Aug 6 04:15:42 2025 by rpki-client