$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json) Hash identifier: m29sOJCXE6SkWwE/QYufnM5/vi2pzYbFapynJ/FQdUQ= Subject key identifier: 7B:C0:6F:8D:A4:70:B6:30:A5:43:F9:A4:E1:7B:11:FA:98:4C:48:AE Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Certificate serial: 1EE83C49D292C5AB2F700F6169302166792DD6F6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft Manifest number: 03E6 Signing time: Sun 15 Jun 2025 00:01:34 +0000 Manifest this update: Sat 14 Jun 2025 23:56:34 +0000 Manifest next update: Mon 16 Jun 2025 03:00:34 +0000 Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: kXymG5SL10aUb7JdPx6DhRh9ZWTv/4z0xUTg89N6wu8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e8:3c:49:d2:92:c5:ab:2f:70:0f:61:69:30:21:66:79:2d:d6:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Validity Not Before: Jun 14 23:56:34 2025 GMT Not After : Jun 16 03:00:34 2025 GMT Subject: CN=7BC06F8DA470B630A543F9A4E17B11FA984C48AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:73:47:e4:ec:e2:68:45:b7:6f:7e:96:d1:2f: f4:2e:37:76:d6:e0:23:5f:f4:ce:7b:98:96:21:cf: 89:3a:61:9e:c9:0c:82:53:f3:0a:0d:6e:d9:d9:45: 18:31:17:2b:8a:e7:78:9d:1b:c3:b7:55:86:d2:94: 96:74:da:bd:a1:bc:51:17:59:8c:cc:5d:4f:ed:37: 7c:ba:cd:13:c8:21:03:bb:78:62:6d:1f:a5:f8:d8: ae:8b:81:1b:3b:95:9f:0c:2a:18:97:54:e5:d4:1e: 9d:7a:39:c5:65:ab:cf:8f:d3:5c:a8:b5:40:b9:96: f2:13:b5:cc:ba:b3:22:be:a9:03:6b:70:1d:c3:4a: 74:34:fc:81:9f:22:12:92:85:28:3e:67:1f:9d:d9: 4c:11:6c:d2:97:21:1a:64:f8:e7:68:a2:2e:02:24: 1d:96:17:99:9a:d8:b9:a0:4f:1e:31:09:7b:8c:b9: f8:cb:a3:b7:b8:42:f0:40:3e:9c:b2:54:b1:97:7d: a8:9a:3a:3f:2b:5f:d7:1c:f5:e0:2d:87:2c:c2:7c: 2d:40:90:ba:ec:ad:af:32:1c:be:2e:e8:77:8a:89: fb:19:45:19:59:bb:eb:d1:88:29:b9:63:bb:2a:c7: 67:29:44:3d:30:68:b3:26:9a:7a:25:44:31:cb:e4: 76:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C0:6F:8D:A4:70:B6:30:A5:43:F9:A4:E1:7B:11:FA:98:4C:48:AE X509v3 Authority Key Identifier: keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:21:18:14:d5:9e:fb:7d:80:cc:b8:6b:fa:ae:7c:82:77:3e: f4:27:17:8b:9f:69:f8:97:03:93:68:ac:71:1a:41:28:b4:d3: 7c:33:41:c6:91:d4:c8:28:e6:cf:6d:2e:9e:15:cd:8f:55:8c: a2:82:bf:de:17:1e:ea:56:e7:16:d2:03:be:cb:c5:3b:fa:ea: 2d:85:48:06:38:38:f0:08:c3:de:11:09:99:ef:bb:c0:41:4f: 47:59:af:70:74:2c:ef:4e:19:d5:b9:8f:c8:1a:39:57:d3:dd: 7a:3f:1a:89:5d:55:e7:dc:98:b1:7d:d9:0c:af:13:5f:84:9c: 28:de:e8:de:9f:cc:fa:17:f3:c0:14:8f:2b:af:91:63:35:85: 7b:e4:40:1f:4e:9b:80:71:87:af:7e:6c:73:23:b4:5c:6f:56: 40:ae:ee:f6:e3:f4:87:0d:2b:a7:90:fb:f5:f0:aa:f4:1f:e9: e5:41:3a:66:24:7b:ef:8f:65:2b:c5:11:4e:97:ef:13:79:15: 6c:d7:b7:b7:b1:24:d3:dc:29:a4:ec:16:66:10:8b:b2:97:0f: bb:42:46:84:c7:b2:50:dc:c5:c4:93:b5:9f:bc:b9:6d:ec:a4: ff:72:53:d3:17:15:f3:51:a6:80:88:70:54:5c:47:ce:c9:55: 4c:c2:1a:ba -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHug8SdKSxasvcA9haTAhZnkt1vYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUx RDA0MEEzMDAeFw0yNTA2MTQyMzU2MzRaFw0yNTA2MTYwMzAwMzRaMDMxMTAvBgNV BAMTKDdCQzA2RjhEQTQ3MEI2MzBBNTQzRjlBNEUxN0IxMUZBOTg0QzQ4QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCc0fk7OJoRbdvfpbRL/QuN3bW 4CNf9M57mJYhz4k6YZ7JDIJT8woNbtnZRRgxFyuK53idG8O3VYbSlJZ02r2hvFEX WYzMXU/tN3y6zRPIIQO7eGJtH6X42K6LgRs7lZ8MKhiXVOXUHp16OcVlq8+P01yo tUC5lvITtcy6syK+qQNrcB3DSnQ0/IGfIhKShSg+Zx+d2UwRbNKXIRpk+Odooi4C JB2WF5ma2LmgTx4xCXuMufjLo7e4QvBAPpyyVLGXfaiaOj8rX9cc9eAthyzCfC1A kLrsra8yHL4u6HeKifsZRRlZu+vRiCm5Y7sqx2cpRD0waLMmmnolRDHL5HaFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUe8BvjaRwtjClQ/mk4XsR+phMSK4wHwYDVR0j BBgwFoAUDk68Qx41E/w/ZB24gOKy/h0ECjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzEvMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUxRDA0MEEzMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00YjFhLTQ2 ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC8wRTRFQkM0MzFFMzUxM0ZDM0Y2NDFEQjg4 MEUyQjJGRTFEMDQwQTMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzgxMTE1YmM2LTEwZjYtNGFmMy1iYTA5LThiNjg3YTU2ZmJmNS8xLzBFNEVCQzQz MUUzNTEzRkMzRjY0MURCODgwRTJCMkZFMUQwNDBBMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAKIRgU 1Z77fYDMuGv6rnyCdz70JxeLn2n4lwOTaKxxGkEotNN8M0HGkdTIKObPbS6eFc2P VYyigr/eFx7qVucW0gO+y8U7+uothUgGODjwCMPeEQmZ77vAQU9HWa9wdCzvThnV uY/IGjlX0916PxqJXVXn3JixfdkMrxNfhJwo3ujen8z6F/PAFI8rr5FjNYV75EAf TpuAcYevfmxzI7Rcb1ZAru724/SHDSunkPv18Kr0H+nlQTpmJHvvj2UrxRFOl+8T eRVs17e3sSTT3Cmk7BZmEIuylw+7QkaEx7JQ3MXEk7WfvLlt7KT/clPTFxXzUaaA iHBUXEfOyVVMwhq6 -----END CERTIFICATE-----Generated at Sun Jun 15 16:48:12 2025 by rpki-client