$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: teiC3cBDiU7gqQuL7txt/0EEB3mM04sOm7gPAKg7Qoo= Subject key identifier: 1B:D2:D1:84:02:B2:3B:7A:AC:78:3A:8B:6D:7A:7A:64:4B:7C:55:9A Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 181CECEC60BDFCD8DDBB051CED6967E019F94F93 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: 0152 Signing time: Wed 06 Aug 2025 04:06:46 +0000 Manifest this update: Wed 06 Aug 2025 04:01:46 +0000 Manifest next update: Thu 07 Aug 2025 05:52:46 +0000 Files and hashes: 1: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: 4vamKMXf2RvCSSvWaplmpMchuB4v7K0cvyu/cq7TYxI=) 2: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: liZtkDCXL4DmjNQ78r1O/4djDEbWR26m7nKfEkWRmh4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 05:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:1c:ec:ec:60:bd:fc:d8:dd:bb:05:1c:ed:69:67:e0:19:f9:4f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Aug 6 04:01:46 2025 GMT Not After : Aug 7 05:52:46 2025 GMT Subject: CN=1BD2D18402B23B7AAC783A8B6D7A7A644B7C559A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:69:39:9a:64:20:a9:fa:42:cf:73:fa:35: cf:a5:43:5e:f6:2f:cf:61:10:c3:6a:8b:07:28:bc: 8b:7d:41:a4:16:d7:29:04:14:74:5d:cf:78:67:a1: eb:8c:4f:c9:10:d0:ab:51:66:e0:d2:5f:98:11:9d: d6:9e:2e:6a:79:3f:ae:a5:62:45:5c:c9:14:29:6c: 57:b5:54:c3:58:7a:e3:0b:0e:17:e7:5b:fa:5a:04: a4:62:5d:2b:2c:28:ae:5d:02:21:c9:05:81:06:e8: 8f:26:61:98:ed:f7:50:70:bf:a2:ac:3e:f6:2e:92: 68:dd:eb:f0:7f:13:84:e5:75:7d:12:5e:95:12:5f: 96:32:49:93:56:da:01:59:fa:63:72:a6:0f:47:a7: 2e:51:61:5d:3a:02:99:ed:8a:29:66:27:76:4e:fa: eb:86:25:e9:f9:c2:ea:97:80:43:43:77:6a:e3:b9: 9e:b8:b2:d9:c5:8b:8f:3d:c2:c1:b4:e8:bd:b2:4a: cf:54:9a:5a:7f:08:5d:9e:c8:f0:06:2a:90:5c:87: 0c:19:cd:bf:fc:08:24:58:f9:a0:76:18:a5:69:71: 03:e4:06:25:1d:5c:ce:5c:7d:96:61:e0:61:53:e0: 04:cd:7a:f1:cd:4a:61:b6:79:da:0a:a2:01:05:7c: 5a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D2:D1:84:02:B2:3B:7A:AC:78:3A:8B:6D:7A:7A:64:4B:7C:55:9A X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:46:6d:a0:a6:df:73:a5:37:29:ba:71:b8:4c:89:f1:7b:c7: f9:22:c0:e7:1b:ec:3e:85:f8:ab:c3:ef:b1:1c:6c:c2:ed:ad: 0f:ce:e7:1f:85:b7:a7:f5:6c:22:0a:3c:23:8b:74:d2:45:f6: b1:36:73:fd:ba:59:b1:c2:2e:47:e6:2c:1a:2f:d9:d4:36:af: 0b:c6:85:f1:3e:d7:5d:fc:5b:7a:17:47:98:b4:72:48:88:96: ba:27:07:3b:f7:f8:b1:43:6b:1f:8b:5d:cb:cf:1d:db:ea:74: eb:3e:bb:e6:db:ad:b3:e3:cb:2b:0a:54:2e:e6:41:c5:80:a6: 00:4a:0a:07:2d:94:8d:1f:2b:cf:a1:e0:e5:26:1c:a1:71:e2: 63:ce:14:b2:de:2b:8c:e2:f3:82:3f:b7:ed:e7:1f:1b:7a:f9: 2d:9e:ed:e5:d6:57:23:b4:9d:6a:0f:f7:d2:a8:89:44:c0:84: e1:1c:7f:8a:63:16:10:4e:dc:c7:38:5c:87:b9:2f:63:51:56: f8:3f:94:a3:d9:08:47:f0:f0:f0:52:b2:bc:55:61:ca:b7:25: 69:53:e9:c5:c8:84:60:30:c1:e3:72:e8:df:2d:b9:3e:6a:ed: b3:e7:23:b9:dc:ee:78:15:d2:90:aa:f8:94:7e:a7:76:e6:72: c3:20:51:09 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGBzs7GC9/NjduwUc7Wln4Bn5T5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNTA4MDYwNDAxNDZaFw0yNTA4MDcwNTUyNDZaMDMxMTAvBgNV BAMTKDFCRDJEMTg0MDJCMjNCN0FBQzc4M0E4QjZEN0E3QTY0NEI3QzU1OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6G2k5mmQgqfpCz3P6Nc+lQ172 L89hEMNqiwcovIt9QaQW1ykEFHRdz3hnoeuMT8kQ0KtRZuDSX5gRndaeLmp5P66l YkVcyRQpbFe1VMNYeuMLDhfnW/paBKRiXSssKK5dAiHJBYEG6I8mYZjt91Bwv6Ks PvYukmjd6/B/E4TldX0SXpUSX5YySZNW2gFZ+mNypg9Hpy5RYV06ApntiilmJ3ZO +uuGJen5wuqXgENDd2rjuZ64stnFi489wsG06L2ySs9Umlp/CF2eyPAGKpBchwwZ zb/8CCRY+aB2GKVpcQPkBiUdXM5cfZZh4GFT4ATNevHNSmG2edoKogEFfFqDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUG9LRhAKyO3qseDqLbXp6ZEt8VZowHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMRm2g pt9zpTcpunG4TInxe8f5IsDnG+w+hfirw++xHGzC7a0Pzucfhben9WwiCjwji3TS RfaxNnP9ulmxwi5H5iwaL9nUNq8LxoXxPtdd/Ft6F0eYtHJIiJa6Jwc79/ixQ2sf i13Lzx3b6nTrPrvm262z48srClQu5kHFgKYASgoHLZSNHyvPoeDlJhyhceJjzhSy 3iuM4vOCP7ft5x8bevktnu3l1lcjtJ1qD/fSqIlEwIThHH+KYxYQTtzHOFyHuS9j UVb4P5Sj2QhH8PDwUrK8VWHKtyVpU+nFyIRgMMHjcujfLbk+au2z5yO53O54FdKQ qviUfqd25nLDIFEJ -----END CERTIFICATE-----Generated at Wed Aug 6 16:01:50 2025 by rpki-client