$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft File: 926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json) Hash identifier: PRPBEk2xIm3b5a0tyyzI9I6UTyBQr8qucr3iSWBjffc= Subject key identifier: 84:6C:77:EB:4A:1D:CA:30:FC:00:7E:89:61:50:DC:04:F0:3C:A2:E8 Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 Certificate issuer: /CN=926cb33722a3493216283dc80cae0ee9d58874f2 Certificate serial: 5B341C0EA67A03B456A1669EC174F9CFB1A4E26C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft Manifest number: 0504 Signing time: Tue 05 Aug 2025 00:20:26 +0000 Manifest this update: Tue 05 Aug 2025 00:15:26 +0000 Manifest next update: Wed 06 Aug 2025 03:03:26 +0000 Files and hashes: 1: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: G0pJKexFl5iJSj7RvTDDHGwylbeAPcm6mkIGuJ7MB4g=) 2: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: vwSEUgdFJ5PPtETvmVfTCVmULHvCJLz5jSqlSjdS13k=) 3: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: BXky12Q6wOOXf9G0ZLhikynja6naXMrBwbLKwXENq94=) 4: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: kkkt+CdVzC7OjY449gnOlMwgGCN8KNpK56RTONBzmFY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 03:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:34:1c:0e:a6:7a:03:b4:56:a1:66:9e:c1:74:f9:cf:b1:a4:e2:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2 Validity Not Before: Aug 5 00:15:26 2025 GMT Not After : Aug 6 03:03:26 2025 GMT Subject: CN=846C77EB4A1DCA30FC007E896150DC04F03CA2E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:57:8c:5d:8e:4e:3b:3b:c9:3d:87:5b:4d:ac: fc:2e:09:3c:f9:36:db:18:85:77:cc:d9:8f:bd:2d: 05:1c:6d:03:f3:f5:ef:a2:46:de:e4:0c:f6:48:7a: 15:88:e1:c4:d2:4d:1c:f9:33:31:59:e0:f1:57:23: 8f:61:d1:23:04:cd:e5:b1:9b:63:4b:a9:14:41:2b: 24:35:51:7c:ca:26:6e:fd:cf:f1:bd:be:d9:06:2d: ed:ad:ee:9f:35:cd:f6:5e:72:fa:9c:fc:d7:07:4d: bb:4e:e9:64:17:af:de:fb:97:46:65:5a:eb:34:2a: 9f:6a:e3:fc:2d:7d:05:55:15:74:be:07:dc:b1:7e: d4:dd:8f:5e:11:84:d0:61:5b:ab:aa:1f:1a:6a:23: 73:0b:d9:85:4c:a8:c4:2a:ee:b5:4f:45:0c:bd:f2: f1:31:05:6d:f0:16:cc:66:43:2f:f5:f5:6c:ab:56: 24:17:a7:6c:b7:78:57:27:4b:4d:b4:9f:53:c0:73: b0:f1:dc:5b:cc:30:d2:2c:43:8f:71:95:5c:07:b9: 2f:98:8f:a9:1d:48:af:00:0a:03:6a:d7:59:ed:96: 32:8f:77:60:83:ba:3b:d1:e5:2c:55:80:21:3c:d6: b6:80:ff:10:e7:9c:ef:42:c1:e3:90:3b:9d:25:a6: fd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6C:77:EB:4A:1D:CA:30:FC:00:7E:89:61:50:DC:04:F0:3C:A2:E8 X509v3 Authority Key Identifier: keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:69:55:da:99:54:a5:ca:8f:ba:ce:b3:e8:e6:72:7d:e7:b1: 07:e7:e4:68:4d:a8:6c:9f:15:a4:07:62:17:0a:51:47:d9:67: 6e:6a:91:cd:7e:f5:4d:bd:d3:d2:27:cf:7d:03:c9:5b:c9:70: 03:53:cc:9d:b8:78:1e:e4:54:1f:32:85:07:09:95:05:3e:c5: 3b:f9:c4:2f:08:47:2e:1f:3c:bd:d3:fe:99:1d:7d:e5:d9:cc: 74:87:be:74:55:d1:aa:1c:6f:16:da:ca:b1:64:88:da:92:32: 3d:4d:bf:7a:2c:e0:fd:b2:a7:20:b3:31:47:0c:6a:38:09:6c: 46:57:91:e3:16:75:9e:ab:c2:b7:95:fb:32:61:33:0a:82:29: ee:c5:52:44:12:8e:e2:8e:84:36:92:f3:78:64:31:97:4d:a4: d4:25:e5:5f:78:1b:6f:27:1a:7e:c9:8b:88:4c:39:9c:55:f8: 4d:fb:27:53:71:e5:33:87:bb:59:a8:01:cf:b6:00:b6:7b:9b: 5b:6f:f7:14:3a:c3:11:a6:19:1b:93:d7:87:02:88:72:b4:73: ff:3a:d0:8e:0e:d9:ca:8d:c1:f8:4d:19:84:3a:54:0c:df:64: 95:ff:90:e9:e1:a0:7a:f7:ef:f0:fa:72:54:eb:93:b6:d1:b4: 82:38:be:a8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWzQcDqZ6A7RWoWaewXT5z7Gk4mwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI2Y2IzMzcyMmEzNDkzMjE2MjgzZGM4MGNhZTBlZTlk NTg4NzRmMjAeFw0yNTA4MDUwMDE1MjZaFw0yNTA4MDYwMzAzMjZaMDMxMTAvBgNV BAMTKDg0NkM3N0VCNEExRENBMzBGQzAwN0U4OTYxNTBEQzA0RjAzQ0EyRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxV4xdjk47O8k9h1tNrPwuCTz5 NtsYhXfM2Y+9LQUcbQPz9e+iRt7kDPZIehWI4cTSTRz5MzFZ4PFXI49h0SMEzeWx m2NLqRRBKyQ1UXzKJm79z/G9vtkGLe2t7p81zfZecvqc/NcHTbtO6WQXr977l0Zl Wus0Kp9q4/wtfQVVFXS+B9yxftTdj14RhNBhW6uqHxpqI3ML2YVMqMQq7rVPRQy9 8vExBW3wFsxmQy/19WyrViQXp2y3eFcnS020n1PAc7Dx3FvMMNIsQ49xlVwHuS+Y j6kdSK8ACgNq11ntljKPd2CDujvR5SxVgCE81raA/xDnnO9CweOQO50lpv1/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUhGx360odyjD8AH6JYVDcBPA8ougwHwYDVR0j BBgwFoAUkmyzNyKjSTIWKD3IDK4O6dWIdPIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NlMDBjZjktMDRhNS00M2QxLThiODktZWRmYTYwY2Q4 ZDRhLzIvOTI2Q0IzMzcyMkEzNDkzMjE2MjgzREM4MENBRTBFRTlENTg4NzRGMi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2tteXpOeUtqU1RJV0tEM0lESzRPNmRX SWRQSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jY2UwMGNmOS0w NGE1LTQzZDEtOGI4OS1lZGZhNjBjZDhkNGEvMi85MjZDQjMzNzIyQTM0OTMyMTYy ODNEQzgwQ0FFMEVFOUQ1ODg3NEYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmlV2plUpcqPus6z6OZy feexB+fkaE2obJ8VpAdiFwpRR9lnbmqRzX71Tb3T0ifPfQPJW8lwA1PMnbh4HuRU HzKFBwmVBT7FO/nELwhHLh88vdP+mR195dnMdIe+dFXRqhxvFtrKsWSI2pIyPU2/ eizg/bKnILMxRwxqOAlsRleR4xZ1nqvCt5X7MmEzCoIp7sVSRBKO4o6ENpLzeGQx l02k1CXlX3gbbycafsmLiEw5nFX4TfsnU3HlM4e7WagBz7YAtnubW2/3FDrDEaYZ G5PXhwKIcrRz/zrQjg7Zyo3B+E0ZhDpUDN9klf+Q6eGgevfv8PpyVOuTttG0gji+ qA== -----END CERTIFICATE-----Generated at Tue Aug 5 20:18:08 2025 by rpki-client