$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft File: B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft (raw, json) Hash identifier: ic97VHM7C1jgM9E1YJ9nXaLYq8K2R26DYZAkzU/0Wz8= Subject key identifier: D1:F8:EA:12:2A:84:43:44:F7:3F:1B:AE:32:E2:96:FE:39:9B:BE:6A Authority key identifier: B7:D2:E8:6F:D3:DA:15:BD:13:4C:A2:15:5C:3A:9F:DA:71:8B:37:49 Certificate issuer: /CN=B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749 Certificate serial: 2FE2609C88615C783C3D9A3AAAA6D4F32344FBD3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft Manifest number: 84 Signing time: Mon 04 Aug 2025 15:44:44 +0000 Manifest this update: Mon 04 Aug 2025 15:39:44 +0000 Manifest next update: Tue 05 Aug 2025 16:07:44 +0000 Files and hashes: 1: B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl (hash: Xs94qr7NbmLJzNeVmS/y5NzyPEYA2lW/+FXYbfQXUDI=) 2: 326131343a373538303a6330303a3a2f34302d3438203d3e20313938303235.roa (hash: 3eo92HTpLxu+/Kjst/g+aIrgcCeedR/rWPVZHkoZXZY=) 3: 326131343a373538303a6330303a3a2f34302d3438203d3e20313531313934.roa (hash: IcJMioVXTHIBW9dWRoa7QtI8OxLl1FTCXI6aJvTPxUg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e2:60:9c:88:61:5c:78:3c:3d:9a:3a:aa:a6:d4:f3:23:44:fb:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749 Validity Not Before: Aug 4 15:39:44 2025 GMT Not After : Aug 5 16:07:44 2025 GMT Subject: CN=D1F8EA122A844344F73F1BAE32E296FE399BBE6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:a1:dd:00:db:2c:39:52:af:a6:3d:fa:67: 3f:d4:bd:2c:cb:d7:c0:1f:d0:54:2e:b1:5b:df:e1: 87:f7:1f:93:3b:de:b8:71:9b:e3:d3:a1:8f:a6:e0: bf:93:12:01:e3:07:c2:79:d7:4f:b4:a0:09:52:f1: d2:a2:1f:ea:80:49:e5:0e:32:ca:53:e0:d1:5b:88: 4f:6b:57:bc:69:38:df:7f:3c:88:4f:3a:65:b1:53: 84:9d:38:03:93:37:f2:32:d2:52:e0:13:00:36:de: ac:82:48:49:1e:c5:21:b1:e5:ed:3f:79:45:a9:0f: 46:5e:d4:3e:3c:74:db:d2:17:83:39:2a:fd:1f:12: d5:a1:17:be:ba:ec:42:0c:54:e9:6c:5f:a2:73:3c: d5:2a:2b:6a:97:e0:d5:f4:1a:c8:fa:77:a9:c3:85: d2:fa:13:52:f8:b6:7c:fa:c1:45:05:96:61:87:98: 38:9c:dc:f5:a5:28:74:eb:16:ec:da:19:d8:52:fb: ce:b3:9a:5f:80:a9:f8:80:88:f2:43:03:88:75:fd: 66:23:1d:37:bb:48:da:59:65:e3:6d:6f:11:6b:2f: 0a:59:25:3c:c5:94:0a:96:a5:74:21:4d:0c:53:98: 25:c9:c5:80:a6:74:9c:a9:9d:66:2d:2f:67:f5:65: ff:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F8:EA:12:2A:84:43:44:F7:3F:1B:AE:32:E2:96:FE:39:9B:BE:6A X509v3 Authority Key Identifier: keyid:B7:D2:E8:6F:D3:DA:15:BD:13:4C:A2:15:5C:3A:9F:DA:71:8B:37:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ef:6c:71:b5:65:0b:b3:96:23:8d:8d:00:14:e4:98:bd:ea: 54:94:71:1c:18:94:f0:09:20:4a:2c:c2:a8:d8:92:a8:c8:78: 72:28:e0:bc:3e:47:2b:ee:fe:37:4b:b1:89:2a:83:7c:25:f8: ac:40:31:22:24:6a:86:5a:90:fe:38:48:e3:d6:9f:f9:1b:2b: a4:94:ee:4b:ba:48:37:0c:f2:63:72:b5:f8:cd:20:e6:02:16: 9a:d2:41:d3:8d:9b:09:d2:8d:51:77:8e:ff:a7:23:10:c1:e7: 11:7c:25:1d:48:9e:36:33:c4:8e:6d:bf:27:42:54:7d:78:49: 00:c3:fe:1c:3a:d1:fb:65:58:78:1a:96:d2:5c:07:2e:4e:bd: 4d:64:00:35:4c:0f:01:05:9a:a8:97:eb:50:45:47:fe:54:3c: d7:38:57:bb:82:a6:f1:2c:e7:b7:12:de:f4:1c:ba:58:64:2b: 16:ca:97:92:0d:56:76:bf:ae:87:be:e3:af:c7:c4:02:26:9b: 97:ba:f2:ff:3e:c9:d8:f9:65:e8:85:59:99:d6:8c:8f:21:e4: cd:dc:22:32:b0:df:a4:00:c0:32:e4:84:6d:f4:ba:31:97:e9: 8d:7a:e7:93:58:16:36:39:ac:c7:e7:e0:94:6b:3e:2f:b0:ec: 21:4a:7d:52 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUL+JgnIhhXHg8PZo6qqbU8yNE+9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdEMkU4NkZEM0RBMTVCRDEzNENBMjE1NUMzQTlGREE3 MThCMzc0OTAeFw0yNTA4MDQxNTM5NDRaFw0yNTA4MDUxNjA3NDRaMDMxMTAvBgNV BAMTKEQxRjhFQTEyMkE4NDQzNDRGNzNGMUJBRTMyRTI5NkZFMzk5QkJFNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyK6HdANssOVKvpj36Zz/UvSzL 18Af0FQusVvf4Yf3H5M73rhxm+PToY+m4L+TEgHjB8J510+0oAlS8dKiH+qASeUO MspT4NFbiE9rV7xpON9/PIhPOmWxU4SdOAOTN/Iy0lLgEwA23qyCSEkexSGx5e0/ eUWpD0Ze1D48dNvSF4M5Kv0fEtWhF7667EIMVOlsX6JzPNUqK2qX4NX0Gsj6d6nD hdL6E1L4tnz6wUUFlmGHmDic3PWlKHTrFuzaGdhS+86zml+AqfiAiPJDA4h1/WYj HTe7SNpZZeNtbxFrLwpZJTzFlAqWpXQhTQxTmCXJxYCmdJypnWYtL2f1Zf8jAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU0fjqEiqEQ0T3PxuuMuKW/jmbvmowHwYDVR0j BBgwFoAUt9Lob9PaFb0TTKIVXDqf2nGLN0kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzZmZDRlYTEtYTI2Ni00ZGVhLWI0OGEtMTVkYTM1NDUy MTA5LzEvQjdEMkU4NkZEM0RBMTVCRDEzNENBMjE1NUMzQTlGREE3MThCMzc0OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CN0QyRTg2RkQzREExNUJEMTM0Q0EyMTU1 QzNBOUZEQTcxOEIzNzQ5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M2ZmQ0ZWExLWEyNjYtNGRlYS1iNDhhLTE1ZGEzNTQ1MjEwOS8xL0I3RDJFODZG RDNEQTE1QkQxMzRDQTIxNTVDM0E5RkRBNzE4QjM3NDkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCM72xx tWULs5YjjY0AFOSYvepUlHEcGJTwCSBKLMKo2JKoyHhyKOC8Pkcr7v43S7GJKoN8 JfisQDEiJGqGWpD+OEjj1p/5GyuklO5Lukg3DPJjcrX4zSDmAhaa0kHTjZsJ0o1R d47/pyMQwecRfCUdSJ42M8SObb8nQlR9eEkAw/4cOtH7ZVh4GpbSXAcuTr1NZAA1 TA8BBZqol+tQRUf+VDzXOFe7gqbxLOe3Et70HLpYZCsWypeSDVZ2v66HvuOvx8QC JpuXuvL/PsnY+WXohVmZ1oyPIeTN3CIysN+kAMAy5IRt9Loxl+mNeueTWBY2OazH 5+CUaz4vsOwhSn1S -----END CERTIFICATE-----Generated at Mon Aug 4 21:49:53 2025 by rpki-client