$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft File: 2E2674263AECD572673F87614919CA492C79FAEA.mft (raw, json) Hash identifier: ID4jtEztaRg8/mVQbQxPUQcCGXPXtB0+1FUhirE3R+M= Subject key identifier: E5:FA:E2:31:CA:48:9E:21:94:01:5D:85:3C:A3:88:1A:D4:AC:32:21 Authority key identifier: 2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA Certificate issuer: /CN=2e2674263aecd572673f87614919ca492c79faea Certificate serial: 4CC2D5CF76E2A9FA3AF028691070AA5D0B767421 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft Manifest number: BB Signing time: Sat 14 Jun 2025 18:47:54 +0000 Manifest this update: Sat 14 Jun 2025 18:42:54 +0000 Manifest next update: Sun 15 Jun 2025 20:25:54 +0000 Files and hashes: 1: 2E2674263AECD572673F87614919CA492C79FAEA.crl (hash: N9yzYfEO/X9VmTRd2lSk1pnnXGXIZWsKQtqNlzuu8mg=) 2: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: tU7tyCca1tIOx1hnSKjuKCDiTN546CQQQvHB6q/i7qk=) 3: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: imRIoujslgfIw1o5CZvn1r7w9Uct08AIqiMVjfiL8o4=) 4: 34352e36362e36332e302f32342d3234203d3e20383334.roa (hash: +lxugZDOPYeNvwOMe73TcSTp+67iTBoQ2Mh6vI2juqw=) 5: 34352e36362e36302e302f32342d3234203d3e20383334.roa (hash: cob4jPxF3rrMg6hwki6aZSVe0/iQEcIhptQTeWjOdMo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c2:d5:cf:76:e2:a9:fa:3a:f0:28:69:10:70:aa:5d:0b:76:74:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2674263aecd572673f87614919ca492c79faea Validity Not Before: Jun 14 18:42:54 2025 GMT Not After : Jun 15 20:25:54 2025 GMT Subject: CN=E5FAE231CA489E2194015D853CA3881AD4AC3221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f0:1d:d5:21:66:80:0d:1d:63:37:88:bd:bf: 4b:f1:5c:0c:91:4c:f6:a0:3e:e6:8f:a6:34:db:60: 5b:e5:82:ca:3d:57:ab:b1:78:58:f7:85:16:40:19: 9e:2c:71:de:5a:8e:62:06:41:b2:b4:22:00:40:7b: f3:56:d6:36:03:92:36:f9:37:0d:ab:58:c6:f1:e4: ce:88:a8:4b:79:70:e4:1b:83:88:2a:9e:14:85:43: 43:96:3d:a6:d5:a6:b6:79:05:4b:70:ea:2e:9f:93: 10:61:f6:43:d9:52:6a:4f:38:fc:f2:40:02:9d:7c: 7a:05:a6:f5:1e:ea:dc:6b:c0:fe:6a:af:a8:f0:2d: 26:b3:16:6d:cf:83:94:cd:0f:1a:87:2f:82:b7:18: c6:62:ad:f1:ce:46:fb:da:e6:52:06:5b:a1:8c:da: 7c:57:34:9a:81:55:9d:3c:9d:28:b1:91:14:0e:b2: 5d:0e:ad:e4:76:87:33:60:3b:71:90:60:d7:ed:8e: 9a:8b:7a:ac:e2:27:79:5a:49:cf:a9:e6:f4:7c:50: 83:f0:1a:22:43:98:bc:f4:54:fa:15:45:71:8f:33: 0f:d9:86:77:47:1b:d7:a8:82:7a:a3:8d:fc:38:10: 29:27:75:0e:4a:99:af:f5:27:0e:81:5c:24:8c:cc: 67:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FA:E2:31:CA:48:9E:21:94:01:5D:85:3C:A3:88:1A:D4:AC:32:21 X509v3 Authority Key Identifier: keyid:2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:8c:52:f6:ed:59:49:8c:bc:1f:25:d4:55:f4:7d:35:1d:8e: 33:e5:30:e5:02:ba:39:a2:a6:36:6d:20:e3:d5:02:9f:c1:53: c1:18:ca:7f:30:e1:48:4c:96:e7:10:df:8e:14:5c:b3:1d:c7: 93:43:22:76:ee:a6:06:d9:04:2f:f6:ba:6d:23:fc:c0:15:62: 38:0f:ce:bb:d9:ed:9c:f7:75:aa:07:5d:ac:c5:cf:0e:a7:94: e4:ef:4d:72:22:70:7a:0b:46:b2:d8:ea:c5:60:e8:76:0e:7f: 86:de:4a:b4:48:df:d6:b2:70:fb:b1:e9:df:91:20:38:e0:9e: 36:72:c5:3a:98:77:d5:a4:c7:22:31:ff:9c:82:97:89:9b:b0: bc:fe:c2:da:93:b6:53:f0:50:c1:b9:c1:71:bc:65:31:a9:2c: e8:d0:97:26:b0:fd:b6:e4:b4:8c:0c:22:f6:42:31:89:38:21: b5:00:73:29:c8:f4:81:34:b5:f9:7f:32:b0:60:44:2c:99:3a: 16:35:56:7d:75:74:80:aa:32:44:08:e0:19:80:7b:b6:b1:69: fb:26:5c:60:9a:af:16:e5:59:23:cd:48:66:d3:42:5b:a8:25: 98:f8:2a:65:85:68:b5:aa:63:c5:dd:0a:c8:31:48:09:0d:42: 25:06:3f:26 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTMLVz3biqfo68ChpEHCqXQt2dCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmUyNjc0MjYzYWVjZDU3MjY3M2Y4NzYxNDkxOWNhNDky Yzc5ZmFlYTAeFw0yNTA2MTQxODQyNTRaFw0yNTA2MTUyMDI1NTRaMDMxMTAvBgNV BAMTKEU1RkFFMjMxQ0E0ODlFMjE5NDAxNUQ4NTNDQTM4ODFBRDRBQzMyMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe8B3VIWaADR1jN4i9v0vxXAyR TPagPuaPpjTbYFvlgso9V6uxeFj3hRZAGZ4scd5ajmIGQbK0IgBAe/NW1jYDkjb5 Nw2rWMbx5M6IqEt5cOQbg4gqnhSFQ0OWPabVprZ5BUtw6i6fkxBh9kPZUmpPOPzy QAKdfHoFpvUe6txrwP5qr6jwLSazFm3Pg5TNDxqHL4K3GMZirfHORvva5lIGW6GM 2nxXNJqBVZ08nSixkRQOsl0OreR2hzNgO3GQYNftjpqLeqziJ3laSc+p5vR8UIPw GiJDmLz0VPoVRXGPMw/ZhndHG9eognqjjfw4ECkndQ5Kma/1Jw6BXCSMzGdjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU5friMcpIniGUAV2FPKOIGtSsMiEwHwYDVR0j BBgwFoAULiZ0Jjrs1XJnP4dhSRnKSSx5+uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmQ3YzIzMWUtYTMzYy00NTU1LWI0MmUtZDAyMDkzODQ5 Mjk5LzAvMkUyNjc0MjYzQUVDRDU3MjY3M0Y4NzYxNDkxOUNBNDkyQzc5RkFFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xpWjBKanJzMVhKblA0ZGhTUm5LU1N4 NS11by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZDdjMjMxZS1h MzNjLTQ1NTUtYjQyZS1kMDIwOTM4NDkyOTkvMC8yRTI2NzQyNjNBRUNENTcyNjcz Rjg3NjE0OTE5Q0E0OTJDNzlGQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3YxS9u1ZSYy8HyXUVfR9 NR2OM+Uw5QK6OaKmNm0g49UCn8FTwRjKfzDhSEyW5xDfjhRcsx3Hk0Midu6mBtkE L/a6bSP8wBViOA/Ou9ntnPd1qgddrMXPDqeU5O9NciJwegtGstjqxWDodg5/ht5K tEjf1rJw+7Hp35EgOOCeNnLFOph31aTHIjH/nIKXiZuwvP7C2pO2U/BQwbnBcbxl Maks6NCXJrD9tuS0jAwi9kIxiTghtQBzKcj0gTS1+X8ysGBELJk6FjVWfXV0gKoy RAjgGYB7trFp+yZcYJqvFuVZI81IZtNCW6glmPgqZYVotapjxd0KyDFICQ1CJQY/ Jg== -----END CERTIFICATE-----Generated at Sat Jun 14 22:23:47 2025 by rpki-client