$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft File: 2E2674263AECD572673F87614919CA492C79FAEA.mft (raw, json) Hash identifier: fdMHVfH/CT9bG8mZftlw1ue18DVsp+88aBhQmus1Ozs= Subject key identifier: F4:EE:61:1B:BD:29:64:C0:CE:30:CD:06:F9:19:FF:69:D0:41:73:9C Authority key identifier: 2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA Certificate issuer: /CN=2e2674263aecd572673f87614919ca492c79faea Certificate serial: 5FD4D9A2296792B991AF620E5E5373E17B1AD64B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft Manifest number: 0100 Signing time: Tue 05 Aug 2025 11:37:21 +0000 Manifest this update: Tue 05 Aug 2025 11:32:21 +0000 Manifest next update: Wed 06 Aug 2025 14:35:21 +0000 Files and hashes: 1: 34352e36362e36332e302f32342d3234203d3e20383334.roa (hash: +lxugZDOPYeNvwOMe73TcSTp+67iTBoQ2Mh6vI2juqw=) 2: 2E2674263AECD572673F87614919CA492C79FAEA.crl (hash: y43F27A60bgFBX02Qj2gG0NlQ6BdZG5tuvFDKP0Ez6Y=) 3: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: tU7tyCca1tIOx1hnSKjuKCDiTN546CQQQvHB6q/i7qk=) 4: 34352e36362e36302e302f32342d3234203d3e203332313637.roa (hash: Ox5N2o1ve/SVl8NpCWqJ1Xe7PoW/L1UXaaDEmMEC144=) 5: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: imRIoujslgfIw1o5CZvn1r7w9Uct08AIqiMVjfiL8o4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 14:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d4:d9:a2:29:67:92:b9:91:af:62:0e:5e:53:73:e1:7b:1a:d6:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2674263aecd572673f87614919ca492c79faea Validity Not Before: Aug 5 11:32:21 2025 GMT Not After : Aug 6 14:35:21 2025 GMT Subject: CN=F4EE611BBD2964C0CE30CD06F919FF69D041739C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:74:36:52:dd:38:f4:e0:5a:bf:bc:66:f2:43: 06:7d:04:69:5d:53:ab:3e:3a:4e:05:77:1b:ce:20: ff:f6:05:5e:cc:9f:9d:05:26:c1:3a:88:9d:7e:ee: b1:7b:2f:f8:d7:cb:22:20:99:f5:ee:84:e1:6c:12: a1:02:c9:a5:86:f5:c7:65:ea:a3:6a:33:d5:0f:6d: a0:ff:c6:95:a8:12:93:88:81:9e:b9:15:74:aa:95: 42:cf:75:f6:10:d2:34:a5:52:33:92:79:86:57:46: eb:7d:df:14:a8:a1:6e:24:04:b7:a2:2b:6c:bc:98: a5:69:8d:b2:fe:5c:b3:0d:34:2a:d0:e5:a6:4e:46: fd:9c:d2:aa:2e:c3:c0:4e:98:bc:78:a7:22:39:26: 8f:5c:35:38:16:75:bc:39:f9:51:01:7a:cf:59:66: 71:a3:b9:e3:7d:fe:2f:f5:0d:8a:14:98:0b:cd:66: 1b:34:ed:26:41:61:8f:72:37:f3:d5:ef:b6:4d:fa: cd:e4:c2:09:e0:8f:fe:3d:b5:88:45:e7:cb:93:b7: 95:f0:06:a2:69:4d:16:70:af:73:27:7f:d0:d1:5b: 36:90:f7:f6:62:bc:68:f3:9c:a7:75:f3:66:ab:43: 48:6b:00:97:8d:4d:21:10:17:ff:18:d5:80:78:ae: da:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:EE:61:1B:BD:29:64:C0:CE:30:CD:06:F9:19:FF:69:D0:41:73:9C X509v3 Authority Key Identifier: keyid:2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:cc:89:b4:4c:2f:7e:0e:2c:fd:e1:61:e4:75:f0:7f:fd:d8: 90:79:a4:e1:b8:29:35:36:19:57:36:a4:98:b8:7e:de:2e:53: 25:50:87:fb:b8:64:e6:8e:03:54:b2:b1:85:c8:bf:b2:71:8e: 31:6f:72:a8:5e:57:6f:e3:ba:08:16:7f:22:74:ca:a9:58:09: 11:01:48:a6:9a:68:ce:8a:94:1b:8f:53:9f:87:a0:11:41:2e: d9:dd:93:54:de:39:ac:86:a7:cb:b0:6f:2f:19:f8:89:a1:00: e9:8f:96:90:5b:60:27:ef:98:29:7d:3d:b4:32:de:5d:aa:3b: 2a:38:b7:56:27:a8:86:1b:b7:bd:f8:a1:00:31:ce:d2:d5:a8: 7d:e6:04:5e:a8:c6:75:4f:81:a9:2f:24:05:e8:fc:16:dd:9e: 14:b4:3c:e6:80:cf:59:6b:c5:ee:9c:27:cd:f3:95:d6:69:64: f6:b9:06:9c:4a:5d:71:af:0b:3a:db:c5:81:33:e6:2b:b9:92: 44:46:f7:4c:7b:60:01:5b:09:b7:84:d1:c0:0b:b7:25:93:0a: 2e:70:9b:fb:75:2f:65:27:a7:47:60:6d:ea:f0:b8:60:d1:2a: 6f:f1:85:59:f0:01:79:4d:2e:9b:78:05:2e:c9:14:dc:6b:9e: c1:bb:3b:88 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUX9TZoilnkrmRr2IOXlNz4Xsa1kswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmUyNjc0MjYzYWVjZDU3MjY3M2Y4NzYxNDkxOWNhNDky Yzc5ZmFlYTAeFw0yNTA4MDUxMTMyMjFaFw0yNTA4MDYxNDM1MjFaMDMxMTAvBgNV BAMTKEY0RUU2MTFCQkQyOTY0QzBDRTMwQ0QwNkY5MTlGRjY5RDA0MTczOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJdDZS3Tj04Fq/vGbyQwZ9BGld U6s+Ok4FdxvOIP/2BV7Mn50FJsE6iJ1+7rF7L/jXyyIgmfXuhOFsEqECyaWG9cdl 6qNqM9UPbaD/xpWoEpOIgZ65FXSqlULPdfYQ0jSlUjOSeYZXRut93xSooW4kBLei K2y8mKVpjbL+XLMNNCrQ5aZORv2c0qouw8BOmLx4pyI5Jo9cNTgWdbw5+VEBes9Z ZnGjueN9/i/1DYoUmAvNZhs07SZBYY9yN/PV77ZN+s3kwgngj/49tYhF58uTt5Xw BqJpTRZwr3Mnf9DRWzaQ9/ZivGjznKd182arQ0hrAJeNTSEQF/8Y1YB4rtoRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU9O5hG70pZMDOMM0G+Rn/adBBc5wwHwYDVR0j BBgwFoAULiZ0Jjrs1XJnP4dhSRnKSSx5+uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmQ3YzIzMWUtYTMzYy00NTU1LWI0MmUtZDAyMDkzODQ5 Mjk5LzAvMkUyNjc0MjYzQUVDRDU3MjY3M0Y4NzYxNDkxOUNBNDkyQzc5RkFFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xpWjBKanJzMVhKblA0ZGhTUm5LU1N4 NS11by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZDdjMjMxZS1h MzNjLTQ1NTUtYjQyZS1kMDIwOTM4NDkyOTkvMC8yRTI2NzQyNjNBRUNENTcyNjcz Rjg3NjE0OTE5Q0E0OTJDNzlGQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2syJtEwvfg4s/eFh5HXw f/3YkHmk4bgpNTYZVzakmLh+3i5TJVCH+7hk5o4DVLKxhci/snGOMW9yqF5Xb+O6 CBZ/InTKqVgJEQFIpppozoqUG49Tn4egEUEu2d2TVN45rIany7BvLxn4iaEA6Y+W kFtgJ++YKX09tDLeXao7Kji3Vieohhu3vfihADHO0tWofeYEXqjGdU+BqS8kBej8 Ft2eFLQ85oDPWWvF7pwnzfOV1mlk9rkGnEpdca8LOtvFgTPmK7mSREb3THtgAVsJ t4TRwAu3JZMKLnCb+3UvZSenR2Bt6vC4YNEqb/GFWfABeU0um3gFLskU3Guewbs7 iA== -----END CERTIFICATE-----Generated at Tue Aug 5 16:41:14 2025 by rpki-client