$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft File: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft (raw, json) Hash identifier: hgx0mgsPZ4JIuJfxsLk4Gfc0h/hGudyjMd/VlDaSC3Y= Subject key identifier: 86:43:AB:68:DA:78:FD:9B:06:69:69:90:9F:97:3B:D6:19:57:99:21 Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 11C9EC16F33108E4E431D1759DA60F9E2D3CDF33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft Manifest number: FC Signing time: Mon 04 Aug 2025 02:12:18 +0000 Manifest this update: Mon 04 Aug 2025 02:07:18 +0000 Manifest next update: Tue 05 Aug 2025 04:08:18 +0000 Files and hashes: 1: 3134312e39382e34332e302f32342d3234203d3e2039333138.roa (hash: vFBdBlnnWQnqw/EQOfV9mi7/0u42NWKBiZsEOC5m9Es=) 2: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl (hash: XuAtR9aw0P/ivpPVX9UySYOJF+w2TIpV4FKA5mh8Oac=) 3: 3134312e39382e34322e302f32342d3234203d3e203236303432.roa (hash: +GT6tipOpP7a/jmS2jvS0OmHJ5lSewd2owWcI6P6Cp8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c9:ec:16:f3:31:08:e4:e4:31:d1:75:9d:a6:0f:9e:2d:3c:df:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Aug 4 02:07:18 2025 GMT Not After : Aug 5 04:08:18 2025 GMT Subject: CN=8643AB68DA78FD9B066969909F973BD619579921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:51:73:43:76:bb:f8:5e:a9:6d:d8:b9:10:63: 86:76:45:40:ab:d3:89:6e:37:45:5b:4c:83:6a:ba: f2:36:52:8e:c9:f5:a8:b1:cb:3c:08:21:4d:7b:30: a8:ea:78:4e:51:a7:f0:4c:3f:14:95:07:82:76:e2: 8a:c9:42:8f:30:39:3a:cc:2f:b6:fe:10:32:d2:f4: 24:6e:a5:c4:2a:c4:fe:4b:9b:d7:92:d4:da:87:09: 26:fe:8a:fa:5c:16:24:7b:8f:65:b1:6f:45:64:56: e8:55:e5:a0:47:0b:b6:ca:6e:ba:d7:e8:b3:01:0a: 01:e3:45:a9:fe:40:82:48:d3:aa:ee:8b:53:e2:91: eb:d1:97:81:d1:50:ca:6a:18:f9:50:13:65:e1:47: 80:60:6d:b3:97:9d:d8:dc:8c:b8:5c:18:ec:62:5c: f9:28:de:d0:ca:04:3f:cb:ae:d8:4e:69:7b:5b:9c: d7:cf:e2:7f:48:7b:5b:cd:d3:15:96:5e:9f:e3:ee: 8e:58:45:b8:16:68:49:d8:63:4a:d0:55:66:ed:0a: 16:52:d2:d0:6e:5c:9d:8c:4f:02:ee:f1:7b:04:53: 28:9e:1c:47:7c:10:3c:99:07:13:e5:2f:5c:86:d9: 67:70:c6:e1:75:bb:86:86:86:ee:a4:8d:b0:8b:47: f3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:43:AB:68:DA:78:FD:9B:06:69:69:90:9F:97:3B:D6:19:57:99:21 X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7c:dd:38:27:67:49:1c:a2:0d:22:7b:c6:9e:1b:e4:ac:28: 81:f3:22:38:5f:37:d2:0e:c2:8a:8e:ed:c6:e2:1a:ff:10:aa: e3:2c:a9:23:b0:27:7b:33:e8:19:c3:39:d7:9a:41:f6:83:13: 4d:b2:ea:15:75:1b:8d:7b:5d:94:bf:99:7d:f2:2d:bd:e7:0e: 92:3a:87:fb:8b:53:82:0a:c2:76:0e:8d:2e:02:3c:7f:b9:68: 9f:58:e9:08:b3:b3:c1:ba:9a:aa:6b:e9:c4:40:d8:6f:44:db: c8:f2:c3:1b:78:8c:ec:1a:bd:a4:74:55:a1:87:60:97:b8:b9: e3:cf:6c:b5:73:f3:4d:e5:e2:a5:8d:c2:c2:4f:e0:05:88:91: 8b:e4:0a:9c:b5:be:2f:83:ff:35:a9:20:a6:77:8c:46:3e:e5: b2:47:4d:3f:d6:b8:46:35:c8:9c:ac:37:2c:82:47:e2:61:0d: 61:3e:b5:e7:3b:0e:0b:28:48:96:78:06:b6:51:ae:93:cb:cd: 63:5a:40:70:17:c6:ea:07:38:6f:c8:3f:d9:3d:07:91:a5:0f: 19:92:4c:d5:2d:79:dd:e7:c1:42:bc:d7:8c:ea:ef:2d:c9:c0: 75:38:f4:5e:a9:cb:56:4c:b7:0c:3c:df:7b:d0:9b:fb:89:0d: 02:6e:13:28 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEcnsFvMxCOTkMdF1naYPni083zMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNTA4MDQwMjA3MThaFw0yNTA4MDUwNDA4MThaMDMxMTAvBgNV BAMTKDg2NDNBQjY4REE3OEZEOUIwNjY5Njk5MDlGOTczQkQ2MTk1Nzk5MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpUXNDdrv4Xqlt2LkQY4Z2RUCr 04luN0VbTINquvI2Uo7J9aixyzwIIU17MKjqeE5Rp/BMPxSVB4J24orJQo8wOTrM L7b+EDLS9CRupcQqxP5Lm9eS1NqHCSb+ivpcFiR7j2Wxb0VkVuhV5aBHC7bKbrrX 6LMBCgHjRan+QIJI06rui1PikevRl4HRUMpqGPlQE2XhR4BgbbOXndjcjLhcGOxi XPko3tDKBD/LrthOaXtbnNfP4n9Ie1vN0xWWXp/j7o5YRbgWaEnYY0rQVWbtChZS 0tBuXJ2MTwLu8XsEUyieHEd8EDyZBxPlL1yG2WdwxuF1u4aGhu6kjbCLR/NjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUhkOraNp4/ZsGaWmQn5c71hlXmSEwHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ODFiN2YwOC1k ZDk0LTRjZDAtYWEzOC04NTEyZjE1MmJkMzIvMC83RTUxQ0FDMUNFMkFGRTE5NThC MUZCNkE2MjM3NzE3QjBCNUQ0ODEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHzdOCdnSRyiDSJ7xp4b 5KwogfMiOF830g7Cio7txuIa/xCq4yypI7AnezPoGcM515pB9oMTTbLqFXUbjXtd lL+ZffItvecOkjqH+4tTggrCdg6NLgI8f7lon1jpCLOzwbqaqmvpxEDYb0TbyPLD G3iM7Bq9pHRVoYdgl7i5489stXPzTeXipY3Cwk/gBYiRi+QKnLW+L4P/NakgpneM Rj7lskdNP9a4RjXInKw3LIJH4mENYT615zsOCyhIlngGtlGuk8vNY1pAcBfG6gc4 b8g/2T0HkaUPGZJM1S153efBQrzXjOrvLcnAdTj0XqnLVky3DDzfe9Cb+4kNAm4T KA== -----END CERTIFICATE-----Generated at Mon Aug 4 11:12:14 2025 by rpki-client