$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft File: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft (raw, json) Hash identifier: pTz7DSojmA9D5V2cAhg7lDnCwr+u9shiYoVs7qHlda4= Subject key identifier: 1B:A7:CB:FA:D2:3D:B7:55:DE:99:FF:9D:80:01:1E:C5:ED:07:C6:78 Authority key identifier: E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C Certificate issuer: /CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Certificate serial: 43BA2DD9378E7EDBEC511029151CF6A9D6DAB5AD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft Manifest number: 1A Signing time: Mon 04 Aug 2025 16:43:17 +0000 Manifest this update: Mon 04 Aug 2025 16:38:17 +0000 Manifest next update: Tue 05 Aug 2025 18:03:17 +0000 Files and hashes: 1: 326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (hash: +BDNAKrmKMibTT2xQwMz+K+qOmE3P6UuU3BvjMVQ0iI=) 2: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (hash: aCq/jKA1GGay4DL6ZU284taMNq3/9u17cmIYZEHZP9Y=) 3: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl (hash: SekNSuyDSt8IAqkN8OmWy5qxxsswTLlSfxa0MinUTTk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ba:2d:d9:37:8e:7e:db:ec:51:10:29:15:1c:f6:a9:d6:da:b5:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Validity Not Before: Aug 4 16:38:17 2025 GMT Not After : Aug 5 18:03:17 2025 GMT Subject: CN=1BA7CBFAD23DB755DE99FF9D80011EC5ED07C678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9c:16:09:6b:e2:87:c1:cb:f5:ee:83:90:e2: 74:88:9e:92:19:64:c2:19:5f:20:fe:9c:57:3d:ab: 83:b2:61:32:ac:85:c4:f1:f3:d7:36:15:22:55:2d: 0b:a6:91:06:a8:a0:ad:60:d4:eb:dc:1a:19:5f:3c: ae:cb:39:0f:c2:42:58:21:bd:d8:e9:f9:e2:07:75: c0:36:b0:68:08:6b:c7:94:f6:1f:d9:9a:fb:d2:20: 00:e6:f2:a9:60:d4:d9:e9:3e:a4:45:bb:3d:0c:64: 23:ca:84:f3:67:60:b8:91:4c:68:ba:df:0e:6a:dd: b1:b5:63:15:e4:44:dd:2e:32:e3:4e:36:d7:53:9a: b6:14:f3:54:e0:ea:23:82:da:d3:9e:c7:b5:b4:dc: be:16:a7:25:f3:8e:04:2a:fc:7a:79:c0:50:f2:93: 5d:67:11:90:d7:13:fa:fe:75:70:bc:2a:13:4f:c4: 17:15:19:b3:1b:c5:84:f9:7d:ed:c0:6c:08:4c:f0: 71:e1:19:dd:53:a6:9d:cb:90:bf:17:8b:a2:68:4a: 6f:6c:2b:92:1c:f8:41:db:1f:9b:91:a9:43:50:6a: 5d:49:83:d3:fc:2a:e8:0d:5d:c1:eb:29:f2:d9:7a: 11:1d:6d:3d:33:88:eb:45:7d:12:c4:94:7e:8b:ce: 14:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A7:CB:FA:D2:3D:B7:55:DE:99:FF:9D:80:01:1E:C5:ED:07:C6:78 X509v3 Authority Key Identifier: keyid:E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:66:3a:52:12:9f:30:a1:15:fa:93:fd:66:5a:58:9e:31:3f: 18:1a:df:74:2c:a3:a8:b5:7a:37:17:bc:43:95:54:43:6f:4a: 1a:93:94:0a:9d:4e:41:de:49:19:28:3b:39:3d:80:d6:4f:1e: 48:d0:4d:c7:96:82:2e:cc:f6:f8:67:5e:76:73:bf:b5:a4:e4: de:3e:5d:df:52:18:bf:cc:fe:be:ca:18:ea:e8:9e:5d:09:36: 97:4d:1f:cb:d1:6c:f8:8f:4f:b9:ec:4f:98:2c:83:17:7c:0b: 2c:0b:ce:57:fc:ab:6c:3d:cc:2a:98:77:35:f2:2f:04:e2:b5: b7:10:c1:b8:b7:6d:41:e2:d7:85:c4:e7:61:2e:9d:c0:11:9c: 08:09:f2:c6:73:7f:19:d8:f6:f8:fa:a6:b1:83:2c:0e:41:6f: 7d:b3:84:52:97:e2:8a:db:ce:95:e0:f6:7c:db:bf:f8:fb:dd: 05:59:aa:85:4a:08:3e:3b:df:84:82:f3:96:60:5a:13:12:07: ae:82:de:6a:40:23:e1:ca:dd:0a:85:4a:08:96:08:95:c7:af: d5:a0:fb:cd:30:08:41:e0:51:d1:2e:cf:ad:ca:f9:b2:6b:d0: da:8e:7a:df:5c:5a:da:e5:f2:de:94:c6:7e:a0:1c:81:c4:55: b9:9e:ae:d9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQ7ot2TeOftvsURApFRz2qdbata0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYz RUFCQ0Y3QzAeFw0yNTA4MDQxNjM4MTdaFw0yNTA4MDUxODAzMTdaMDMxMTAvBgNV BAMTKDFCQTdDQkZBRDIzREI3NTVERTk5RkY5RDgwMDExRUM1RUQwN0M2NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZnBYJa+KHwcv17oOQ4nSInpIZ ZMIZXyD+nFc9q4OyYTKshcTx89c2FSJVLQumkQaooK1g1OvcGhlfPK7LOQ/CQlgh vdjp+eIHdcA2sGgIa8eU9h/ZmvvSIADm8qlg1NnpPqRFuz0MZCPKhPNnYLiRTGi6 3w5q3bG1YxXkRN0uMuNONtdTmrYU81Tg6iOC2tOex7W03L4WpyXzjgQq/Hp5wFDy k11nEZDXE/r+dXC8KhNPxBcVGbMbxYT5fe3AbAhM8HHhGd1Tpp3LkL8Xi6JoSm9s K5Ic+EHbH5uRqUNQal1Jg9P8KugNXcHrKfLZehEdbT0ziOtFfRLElH6LzhTnAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUG6fL+tI9t1Xemf+dgAEexe0HxngwHwYDVR0j BBgwFoAU6J+RXYa7nxPQ8inKeM1tnz6rz3wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzU4MzZlNjAtNmE5Mi00N2VmLTliOWItOTJhODRkNmQz NWJhLzEvRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYzRUFCQ0Y3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FODlGOTE1RDg2QkI5RjEzRDBGMjI5Q0E3 OENENkQ5RjNFQUJDRjdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M1ODM2ZTYwLTZhOTItNDdlZi05YjliLTkyYTg0ZDZkMzViYS8xL0U4OUY5MTVE ODZCQjlGMTNEMEYyMjlDQTc4Q0Q2RDlGM0VBQkNGN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTZjpS Ep8woRX6k/1mWlieMT8YGt90LKOotXo3F7xDlVRDb0oak5QKnU5B3kkZKDs5PYDW Tx5I0E3HloIuzPb4Z152c7+1pOTePl3fUhi/zP6+yhjq6J5dCTaXTR/L0Wz4j0+5 7E+YLIMXfAssC85X/KtsPcwqmHc18i8E4rW3EMG4t21B4teFxOdhLp3AEZwICfLG c38Z2Pb4+qaxgywOQW99s4RSl+KK286V4PZ827/4+90FWaqFSgg+O9+EgvOWYFoT Egeugt5qQCPhyt0KhUoIlgiVx6/VoPvNMAhB4FHRLs+tyvmya9DajnrfXFra5fLe lMZ+oByBxFW5nq7Z -----END CERTIFICATE-----Generated at Mon Aug 4 21:43:57 2025 by rpki-client