$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft File: B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft (raw, json) Hash identifier: Q6Mt2/9iesWTcLscRH3lTTcbo1XJ6TaRtp9fiwq8pr8= Subject key identifier: 25:C3:86:E8:C7:8D:33:8F:39:12:E6:39:B7:4B:EB:BA:92:DB:15:D4 Authority key identifier: B7:D2:E8:6F:D3:DA:15:BD:13:4C:A2:15:5C:3A:9F:DA:71:8B:37:49 Certificate issuer: /CN=B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749 Certificate serial: 186E754A5C830386BF0F7D2759A10889AA4AA126 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft Manifest number: 46 Signing time: Sat 14 Jun 2025 22:34:54 +0000 Manifest this update: Sat 14 Jun 2025 22:29:54 +0000 Manifest next update: Sun 15 Jun 2025 22:37:54 +0000 Files and hashes: 1: B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl (hash: 9hqXZslfSVeuHGT4vdBRIfSk2grmq6YMDO6352l1gzY=) 2: 326131343a373538303a6330303a3a2f34302d3438203d3e20313531313934.roa (hash: IcJMioVXTHIBW9dWRoa7QtI8OxLl1FTCXI6aJvTPxUg=) 3: 326131343a373538303a6330303a3a2f34302d3438203d3e20313938303235.roa (hash: 3eo92HTpLxu+/Kjst/g+aIrgcCeedR/rWPVZHkoZXZY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 16:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:6e:75:4a:5c:83:03:86:bf:0f:7d:27:59:a1:08:89:aa:4a:a1:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749 Validity Not Before: Jun 14 22:29:54 2025 GMT Not After : Jun 15 22:37:54 2025 GMT Subject: CN=25C386E8C78D338F3912E639B74BEBBA92DB15D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8b:a7:88:57:bf:fb:83:a5:fa:a5:62:39:3f: 1c:39:bf:45:23:af:20:32:7b:b7:d3:93:c4:ae:38: a5:68:24:78:43:2c:9e:47:55:37:68:13:62:41:00: 49:02:1b:8b:3e:70:06:e1:e5:69:fb:63:5e:8d:54: 90:81:9c:cd:cc:c6:bf:4c:dd:6c:b3:df:88:dc:f2: cf:0f:3d:9b:60:eb:4e:5e:24:57:e5:59:99:03:97: 0c:87:f6:09:ab:e0:09:81:b4:70:c4:ff:32:fe:ad: cc:3f:e8:b9:67:13:1c:87:f4:5a:4d:6d:36:5a:3e: a3:e6:1f:5e:15:f3:68:b2:27:e3:fe:73:4d:78:a9: 72:80:e2:89:dd:61:47:88:16:3d:b4:0b:7a:6b:fe: 31:48:7d:f8:7b:7f:d8:39:d2:15:8b:6e:47:b8:85: a8:d5:a6:4e:2f:5e:28:44:77:33:19:6f:0f:45:3f: a7:39:99:01:90:16:27:af:4e:3d:d5:4e:80:dc:fd: c1:27:c4:c2:67:30:19:15:62:00:64:45:4c:0e:60: 3b:e6:c0:92:f9:81:1e:b5:2c:56:a2:db:09:de:8f: 86:26:f4:34:14:7a:6d:86:84:7a:5a:86:0b:7c:a0: f7:7a:25:15:c2:bc:cb:9a:1a:aa:4e:e9:52:54:6e: f0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C3:86:E8:C7:8D:33:8F:39:12:E6:39:B7:4B:EB:BA:92:DB:15:D4 X509v3 Authority Key Identifier: keyid:B7:D2:E8:6F:D3:DA:15:BD:13:4C:A2:15:5C:3A:9F:DA:71:8B:37:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:77:ba:9c:b9:66:58:a3:5a:e3:9b:4a:b9:82:4b:a0:ef:b3: 59:b9:fc:17:60:82:2d:4b:9b:66:41:c2:a7:83:63:52:94:37: 95:95:84:47:0a:0b:be:11:16:81:08:bf:d2:73:2b:7e:86:ec: 8c:47:83:ce:f6:c1:30:b3:4b:c1:a5:81:f6:63:7c:ff:df:69: 5d:be:44:8c:9a:59:20:b7:27:d8:9e:d7:9b:f1:d6:7c:9d:c2: 48:6a:4e:0a:2b:e1:da:4f:54:b8:f3:23:f7:f6:1f:24:ca:6f: 7c:e5:f9:d8:84:48:df:e2:25:86:94:4c:82:b8:73:f5:1c:97: b9:db:ee:4d:0e:2a:c1:02:66:86:29:5d:d3:a6:91:bd:80:1b: fc:8c:39:35:7c:71:2b:9d:35:5f:97:15:1e:18:b9:f0:e2:91: 26:ea:bf:3d:04:71:ea:70:5a:5f:a4:17:1e:4e:d6:37:db:38: 36:c2:19:a6:02:bf:ed:b9:09:0f:d2:9d:7f:7a:53:72:5f:d8: 7a:bc:73:8c:27:e3:90:c2:b6:92:e0:74:8f:10:9a:2c:27:cd: 71:76:bc:89:25:53:93:97:c8:4b:c3:b4:b6:93:a5:9d:fe:19: 43:1c:eb:7b:89:d7:96:6b:b1:cd:4f:2c:40:68:f3:cf:91:4c: 9b:69:57:35 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGG51SlyDA4a/D30nWaEIiapKoSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdEMkU4NkZEM0RBMTVCRDEzNENBMjE1NUMzQTlGREE3 MThCMzc0OTAeFw0yNTA2MTQyMjI5NTRaFw0yNTA2MTUyMjM3NTRaMDMxMTAvBgNV BAMTKDI1QzM4NkU4Qzc4RDMzOEYzOTEyRTYzOUI3NEJFQkJBOTJEQjE1RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYi6eIV7/7g6X6pWI5Pxw5v0Uj ryAye7fTk8SuOKVoJHhDLJ5HVTdoE2JBAEkCG4s+cAbh5Wn7Y16NVJCBnM3Mxr9M 3Wyz34jc8s8PPZtg605eJFflWZkDlwyH9gmr4AmBtHDE/zL+rcw/6LlnExyH9FpN bTZaPqPmH14V82iyJ+P+c014qXKA4ondYUeIFj20C3pr/jFIffh7f9g50hWLbke4 hajVpk4vXihEdzMZbw9FP6c5mQGQFievTj3VToDc/cEnxMJnMBkVYgBkRUwOYDvm wJL5gR61LFai2wnej4Ym9DQUem2GhHpahgt8oPd6JRXCvMuaGqpO6VJUbvA/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJcOG6MeNM485EuY5t0vrupLbFdQwHwYDVR0j BBgwFoAUt9Lob9PaFb0TTKIVXDqf2nGLN0kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzZmZDRlYTEtYTI2Ni00ZGVhLWI0OGEtMTVkYTM1NDUy MTA5LzEvQjdEMkU4NkZEM0RBMTVCRDEzNENBMjE1NUMzQTlGREE3MThCMzc0OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CN0QyRTg2RkQzREExNUJEMTM0Q0EyMTU1 QzNBOUZEQTcxOEIzNzQ5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M2ZmQ0ZWExLWEyNjYtNGRlYS1iNDhhLTE1ZGEzNTQ1MjEwOS8xL0I3RDJFODZG RDNEQTE1QkQxMzRDQTIxNTVDM0E5RkRBNzE4QjM3NDkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyd7qc uWZYo1rjm0q5gkug77NZufwXYIItS5tmQcKng2NSlDeVlYRHCgu+ERaBCL/Scyt+ huyMR4PO9sEws0vBpYH2Y3z/32ldvkSMmlkgtyfYnteb8dZ8ncJIak4KK+HaT1S4 8yP39h8kym985fnYhEjf4iWGlEyCuHP1HJe52+5NDirBAmaGKV3TppG9gBv8jDk1 fHErnTVflxUeGLnw4pEm6r89BHHqcFpfpBceTtY32zg2whmmAr/tuQkP0p1/elNy X9h6vHOMJ+OQwraS4HSPEJosJ81xdryJJVOTl8hLw7S2k6Wd/hlDHOt7ideWa7HN TyxAaPPPkUybaVc1 -----END CERTIFICATE-----Generated at Sun Jun 15 07:34:20 2025 by rpki-client