$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json) Hash identifier: KobyST0UJrwEpEiC/PyCjB96hF19W37EFu8i7kSwKVI= Subject key identifier: 4A:48:7F:DE:5A:D5:71:40:44:60:90:E7:00:5B:08:15:A1:26:09:7A Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Certificate serial: 0FC7CC202F32A1E855F2D1D169A03AF973A7EFD4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft Manifest number: 0430 Signing time: Mon 04 Aug 2025 07:05:45 +0000 Manifest this update: Mon 04 Aug 2025 07:00:45 +0000 Manifest next update: Tue 05 Aug 2025 07:05:45 +0000 Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: Yqrtb7xaE0y9mNdxHsOrIIkerc94rE3gwHKIFE8n0vQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 06:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c7:cc:20:2f:32:a1:e8:55:f2:d1:d1:69:a0:3a:f9:73:a7:ef:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Validity Not Before: Aug 4 07:00:45 2025 GMT Not After : Aug 5 07:05:45 2025 GMT Subject: CN=4A487FDE5AD57140446090E7005B0815A126097A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b7:ce:cd:b2:e1:f5:63:89:66:aa:4a:20:12: 8c:23:66:fe:74:38:fb:8b:3a:99:53:80:99:7a:47: 03:a0:bb:55:eb:2c:6f:0e:88:5b:d7:96:0e:ff:9c: 2d:41:c4:35:94:ae:68:d8:e7:70:7f:18:df:80:0c: 2e:a3:ed:7b:1c:7b:97:ed:fb:b2:98:2c:01:16:9e: b0:59:98:61:5f:20:b0:01:bc:af:84:c3:9a:8f:2b: a1:89:1d:d5:2a:3c:4e:24:6a:9f:c5:89:3e:e5:52: c6:0f:aa:0f:a3:8a:05:6a:cb:81:ac:b0:93:a2:6b: e2:8d:4f:16:3f:da:d7:40:8c:af:12:e0:fe:27:04: c3:69:f0:af:a1:fd:21:45:15:0b:3d:80:bb:21:47: 51:52:0e:8d:6f:02:83:64:83:ec:1a:4b:c2:a7:3b: fd:04:86:76:f9:0f:bd:ff:05:fd:de:c2:9e:e5:67: b9:75:4b:c6:69:52:05:8d:95:be:e2:82:8a:10:bd: b2:15:96:14:a5:98:0d:39:98:2f:36:9c:54:15:11: 55:3b:cb:e4:d0:5f:6b:2d:f7:c9:eb:67:22:48:85: 18:94:ab:f4:7e:62:ee:81:e7:79:27:1f:bb:fa:34: 8a:e5:2f:23:c2:73:b1:97:3d:34:1a:cf:89:da:f7: 7c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:48:7F:DE:5A:D5:71:40:44:60:90:E7:00:5B:08:15:A1:26:09:7A X509v3 Authority Key Identifier: keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:09:36:7c:32:1b:6e:38:35:17:a8:76:4f:40:86:31:84:bb: 4a:df:db:d0:ef:83:be:7c:57:38:d0:c0:86:e4:8f:f4:c3:30: f2:59:78:57:53:75:d8:21:8e:35:cb:c1:48:a4:a1:b4:3c:75: e4:9e:e5:ae:36:3f:12:f0:49:f5:a0:07:63:52:6c:0c:ea:f4: 6d:2d:87:76:26:b9:1b:a6:55:56:4c:05:a9:04:06:64:d2:ec: 5b:89:e8:c4:d5:00:bf:02:fb:95:71:ff:1d:c2:d6:b5:69:d5: a6:05:5e:39:77:b9:8c:2c:52:18:11:da:fa:fd:50:d6:ef:6c: ec:97:cd:30:5d:88:d4:cd:09:00:95:2d:17:8b:a1:16:dd:ce: 33:bb:b6:f6:80:0e:85:ae:2a:fa:22:f8:a6:d2:8a:b2:f6:38: 3f:8c:bf:aa:a0:ad:90:b9:d1:6e:72:7d:1c:05:6c:e4:15:34: 8a:ed:9b:5d:1b:b1:02:e9:a3:b8:f9:88:19:d3:40:f9:65:1d: 29:00:4e:4b:b7:bc:7a:7e:2b:42:c8:e3:b7:34:bd:22:5a:43: 85:84:d2:6f:a7:8a:74:3d:b0:5b:47:e6:8f:57:2d:be:fa:42: 4a:07:11:f1:2f:e7:d5:7b:b5:a0:62:32:47:98:17:f3:49:bb: c7:c2:fd:09 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUD8fMIC8yoehV8tHRaaA6+XOn79QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUx RDA0MEEzMDAeFw0yNTA4MDQwNzAwNDVaFw0yNTA4MDUwNzA1NDVaMDMxMTAvBgNV BAMTKDRBNDg3RkRFNUFENTcxNDA0NDYwOTBFNzAwNUIwODE1QTEyNjA5N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCft87NsuH1Y4lmqkogEowjZv50 OPuLOplTgJl6RwOgu1XrLG8OiFvXlg7/nC1BxDWUrmjY53B/GN+ADC6j7Xsce5ft +7KYLAEWnrBZmGFfILABvK+Ew5qPK6GJHdUqPE4kap/FiT7lUsYPqg+jigVqy4Gs sJOia+KNTxY/2tdAjK8S4P4nBMNp8K+h/SFFFQs9gLshR1FSDo1vAoNkg+waS8Kn O/0Ehnb5D73/Bf3ewp7lZ7l1S8ZpUgWNlb7igooQvbIVlhSlmA05mC82nFQVEVU7 y+TQX2st98nrZyJIhRiUq/R+Yu6B53knH7v6NIrlLyPCc7GXPTQaz4na93zxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUSkh/3lrVcUBEYJDnAFsIFaEmCXowHwYDVR0j BBgwFoAUDk68Qx41E/w/ZB24gOKy/h0ECjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzEvMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUxRDA0MEEzMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00YjFhLTQ2 ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC8wRTRFQkM0MzFFMzUxM0ZDM0Y2NDFEQjg4 MEUyQjJGRTFEMDQwQTMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzgxMTE1YmM2LTEwZjYtNGFmMy1iYTA5LThiNjg3YTU2ZmJmNS8xLzBFNEVCQzQz MUUzNTEzRkMzRjY0MURCODgwRTJCMkZFMUQwNDBBMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCoCTZ8 MhtuODUXqHZPQIYxhLtK39vQ74O+fFc40MCG5I/0wzDyWXhXU3XYIY41y8FIpKG0 PHXknuWuNj8S8En1oAdjUmwM6vRtLYd2JrkbplVWTAWpBAZk0uxbiejE1QC/AvuV cf8dwta1adWmBV45d7mMLFIYEdr6/VDW72zsl80wXYjUzQkAlS0Xi6EW3c4zu7b2 gA6Frir6Ivim0oqy9jg/jL+qoK2QudFucn0cBWzkFTSK7ZtdG7EC6aO4+YgZ00D5 ZR0pAE5Lt7x6fitCyOO3NL0iWkOFhNJvp4p0PbBbR+aPVy2++kJKBxHxL+fVe7Wg YjJHmBfzSbvHwv0J -----END CERTIFICATE-----Generated at Mon Aug 4 18:12:34 2025 by rpki-client