$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: L2k0081lidDz2SkFVFEUgkR3zz9gz3v+Oi06c1LF/rQ= Subject key identifier: 7B:AD:E1:A9:B4:BE:C5:3A:9B:9A:E0:1A:09:D0:05:80:16:71:DB:57 Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 1F67C126E239F83048EB9EB52FD15B02C89271 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 01A2 Signing time: Sat 14 Jun 2025 21:36:28 +0000 Manifest this update: Sat 14 Jun 2025 21:31:28 +0000 Manifest next update: Mon 16 Jun 2025 00:58:28 +0000 Files and hashes: 1: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: wRAV0WiZBTApeYTgaY4fv+ZslwcIn3uZEGVvRwpg1s4=) 2: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: GOSro5bSH04/LhFcp3jWcxc9uL2by5TiBmqbWGnAjdA=) 3: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: WAEDCXUcEyZrm+AiMC7S/4c05J5m88q64rRSqxpIjho=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 16:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:67:c1:26:e2:39:f8:30:48:eb:9e:b5:2f:d1:5b:02:c8:92:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Jun 14 21:31:28 2025 GMT Not After : Jun 16 00:58:28 2025 GMT Subject: CN=7BADE1A9B4BEC53A9B9AE01A09D005801671DB57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3d:36:ae:c8:d5:e8:52:df:65:e4:7d:5f:77: a3:50:9a:7c:66:22:e7:97:8c:13:0f:4b:11:7d:ad: 29:23:c5:a8:cc:cf:57:b7:2a:c5:ce:c3:af:8b:0c: a7:ef:af:14:04:5c:aa:33:a9:f0:19:fa:ef:15:30: 38:65:75:c5:34:e3:9d:4b:ae:20:17:13:23:42:74: bc:75:af:be:26:18:a6:cc:dc:c3:c3:16:03:28:d4: 54:6f:42:9e:23:b4:ad:d8:88:07:98:6e:83:56:45: 04:e1:c3:5f:17:28:1f:16:bf:b8:b1:dc:5a:17:72: 23:e6:47:23:a2:2d:5b:eb:d3:df:13:32:25:f9:59: c3:e1:c4:2a:60:df:af:d0:0d:a6:14:39:95:d8:81: 43:02:fa:27:8b:34:58:39:af:b3:3e:49:7a:0c:f4: 6d:3b:58:15:2d:05:c5:35:c5:e7:8a:82:a2:82:b9: 6d:dc:13:5e:31:5f:05:f8:a4:c5:eb:51:f1:07:4e: 38:a4:df:1b:bf:6c:fc:a2:7d:27:37:cd:dc:ec:62: 33:1f:d8:68:22:92:c7:4f:25:f3:6e:62:21:12:2b: d5:18:d1:ae:f4:d2:80:58:fd:a8:c1:04:36:b4:b9: fa:44:b0:52:e9:b6:c8:82:f6:96:ef:85:ca:6d:cd: 0a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AD:E1:A9:B4:BE:C5:3A:9B:9A:E0:1A:09:D0:05:80:16:71:DB:57 X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8d:cf:73:4f:dc:d7:94:9b:39:42:37:d3:6c:3d:40:ec:66: d6:81:98:4d:4b:ad:9c:04:70:c1:03:9c:f1:96:67:14:76:bf: bd:f2:ec:c0:ea:d1:29:94:6c:2d:e6:ae:12:5e:72:89:8e:ba: d3:bf:bc:5a:21:2a:1d:9c:a6:54:fa:31:cd:d0:80:99:59:1c: b6:3f:ec:10:0e:5b:51:5c:b5:b9:80:bd:db:6e:fd:05:43:dc: 95:80:76:0e:aa:e5:12:de:a0:37:3c:77:95:b2:4a:56:ed:3f: 28:7f:ec:9a:20:64:07:57:9c:75:a5:9e:0d:d1:6f:46:79:ce: 76:2a:47:f7:d7:ea:5d:9f:32:82:11:fe:79:7e:cc:46:40:fe: ce:6a:33:66:ac:9e:74:ec:fa:88:fb:99:37:1d:99:48:cc:d6: ca:1b:df:07:ca:30:de:79:7e:06:fd:b3:72:ed:81:e5:58:a7: ba:20:94:f0:4d:a5:83:ea:49:ef:14:58:a3:3a:b9:c7:2f:5d: 27:f2:bb:f2:bb:c0:9d:03:60:d1:af:44:b6:81:eb:3b:bc:eb: 5d:92:33:34:b3:72:8b:ba:d8:da:93:0f:25:74:0f:ec:03:50: 94:8e:72:bd:23:c3:07:59:8a:62:21:1d:8a:f7:05:75:b8:a6: 95:df:95:e1 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgITH2fBJuI5+DBI6561L9FbAsiScTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygwQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JEMTY1RDBFRkZC ODIzRTQ1MB4XDTI1MDYxNDIxMzEyOFoXDTI1MDYxNjAwNTgyOFowMzExMC8GA1UE AxMoN0JBREUxQTlCNEJFQzUzQTlCOUFFMDFBMDlEMDA1ODAxNjcxREI1NzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJk9Nq7I1ehS32XkfV93o1CafGYi 55eMEw9LEX2tKSPFqMzPV7cqxc7Dr4sMp++vFARcqjOp8Bn67xUwOGV1xTTjnUuu IBcTI0J0vHWvviYYpszcw8MWAyjUVG9CniO0rdiIB5hug1ZFBOHDXxcoHxa/uLHc WhdyI+ZHI6ItW+vT3xMyJflZw+HEKmDfr9ANphQ5ldiBQwL6J4s0WDmvsz5Jegz0 bTtYFS0FxTXF54qCooK5bdwTXjFfBfikxetR8QdOOKTfG79s/KJ9JzfN3OxiMx/Y aCKSx08l825iIRIr1RjRrvTSgFj9qMEENrS5+kSwUum2yIL2lu+Fym3NCosCAwEA AaOCAoIwggJ+MB0GA1UdDgQWBBR7reGptL7FOpua4BoJ0AWAFnHbVzAfBgNVHSME GDAWgBQKi2GoRNbCx6847cvRZdDv+4I+RTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS83MmM0MDVmMS1jMzJkLTQ3Y2UtODk0My0wNzUyZWQxM2Q4 ZWYvMS8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JEMTY1RDBFRkZCODIzRTQ1LmNy bDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5 OS1iMDc5LTMwOWVkOTdmMzgyNC8wLzBBOEI2MUE4NDRENkMyQzdBRjM4RURDQkQx NjVEMEVGRkI4MjNFNDUuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNkOGVmLzEvMEE4QjYxQTg0 NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHyNz3NP 3NeUmzlCN9NsPUDsZtaBmE1LrZwEcMEDnPGWZxR2v73y7MDq0SmUbC3mrhJecomO utO/vFohKh2cplT6Mc3QgJlZHLY/7BAOW1FctbmAvdtu/QVD3JWAdg6q5RLeoDc8 d5WySlbtPyh/7JogZAdXnHWlng3Rb0Z5znYqR/fX6l2fMoIR/nl+zEZA/s5qM2as nnTs+oj7mTcdmUjM1sob3wfKMN55fgb9s3LtgeVYp7oglPBNpYPqSe8UWKM6uccv XSfyu/K7wJ0DYNGvRLaB6zu8612SMzSzcou62NqTDyV0D+wDUJSOcr0jwwdZimIh HYr3BXW4ppXfleE= -----END CERTIFICATE-----Generated at Sun Jun 15 08:57:01 2025 by rpki-client