$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft File: 926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json) Hash identifier: Vv0+QtjCUwBISm7W6VN0NDeizGTfxnSCxdGIl/cGiRw= Subject key identifier: FD:50:AD:00:26:1A:C1:29:DD:BF:44:AA:4C:F2:02:FC:6E:4D:FF:3C Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 Certificate issuer: /CN=926cb33722a3493216283dc80cae0ee9d58874f2 Certificate serial: 146A54AC5B105A9210DB02D198D15D497DB605F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft Manifest number: 04BE Signing time: Sat 14 Jun 2025 01:26:40 +0000 Manifest this update: Sat 14 Jun 2025 01:21:40 +0000 Manifest next update: Sun 15 Jun 2025 05:23:40 +0000 Files and hashes: 1: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: G0pJKexFl5iJSj7RvTDDHGwylbeAPcm6mkIGuJ7MB4g=) 2: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: kkkt+CdVzC7OjY449gnOlMwgGCN8KNpK56RTONBzmFY=) 3: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: vwSEUgdFJ5PPtETvmVfTCVmULHvCJLz5jSqlSjdS13k=) 4: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: 9r+GUihCRM+/Nm/eVGv2iujMoclldwh/rFphM94yeWI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 05:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:6a:54:ac:5b:10:5a:92:10:db:02:d1:98:d1:5d:49:7d:b6:05:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2 Validity Not Before: Jun 14 01:21:40 2025 GMT Not After : Jun 15 05:23:40 2025 GMT Subject: CN=FD50AD00261AC129DDBF44AA4CF202FC6E4DFF3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:46:ec:1b:38:ba:c0:81:9a:4d:61:9d:ff:f2: ff:52:ff:40:8c:98:d2:c1:0f:7c:0f:d0:c0:03:67: 0e:04:3e:77:0a:52:6b:4b:1d:12:65:4a:c4:24:96: b1:30:70:ab:b6:cc:29:af:c8:eb:34:76:67:04:c9: d4:32:33:ca:39:82:68:fa:89:86:2c:79:80:7b:b9: 7b:c4:4d:56:28:05:a2:c0:d6:a2:34:a6:86:7b:74: 67:55:98:31:81:6a:06:48:ec:61:1d:4d:ec:c9:d2: e3:ba:42:7a:eb:f9:af:b5:35:3d:5f:b5:29:4d:a4: cc:db:bd:d5:9f:64:b8:3c:97:b6:d8:30:ec:3e:49: a3:9f:7f:9a:57:2f:5a:e6:89:17:fd:59:fb:6f:71: 52:a0:e6:42:7d:57:aa:de:e4:b0:6e:65:b1:ae:17: ba:69:72:56:5d:b5:63:eb:df:58:d4:f6:18:ec:24: ac:01:40:ba:ee:1a:8c:5a:7c:a6:02:18:9c:55:3f: 26:7f:9b:a2:f9:ae:e7:69:65:66:99:6b:0b:f2:36: f3:5c:68:b0:5f:8b:92:55:f9:5f:6e:f0:72:34:5c: 7c:40:d3:22:40:7b:50:89:7f:49:3b:ad:87:bf:3d: 97:5f:a5:12:25:d8:70:c1:72:ff:b5:c9:51:9e:3b: 97:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:50:AD:00:26:1A:C1:29:DD:BF:44:AA:4C:F2:02:FC:6E:4D:FF:3C X509v3 Authority Key Identifier: keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:bf:00:cb:5f:a8:b7:39:f2:10:16:96:26:a7:a3:1e:1f:14: ce:70:1f:27:ba:b7:30:d4:ce:1f:7f:d5:de:8b:84:99:74:39: cc:b2:c9:21:33:48:54:02:25:0f:5a:89:c7:1a:4a:2e:12:40: 42:1f:15:c9:2b:3a:c7:77:a9:8a:61:e0:77:07:26:b5:60:f9: 06:ce:46:40:40:e6:84:75:78:f7:ff:94:f1:c5:f8:61:90:eb: aa:f4:7f:f9:b2:0f:db:0c:0d:b6:fd:a9:b4:31:1a:c5:63:30: 60:9a:5e:3d:e6:38:c6:df:ea:50:0a:f2:96:8e:0d:70:25:69: 1e:cf:40:77:51:98:2a:8c:8a:ca:37:83:2e:4b:b5:d7:6f:e0: a4:b7:35:43:ed:85:73:d4:04:28:3d:c2:07:c1:56:9e:ae:63: 8b:e4:09:e7:30:2d:9c:5a:88:fc:7b:f3:b5:f1:83:94:95:c7: f5:95:91:89:b3:ee:c3:11:00:ff:da:4c:cb:f2:75:8d:bc:b9: 77:1d:6d:45:19:4d:bf:81:51:a8:7f:ff:dd:e8:d3:47:74:92: 77:ec:6f:6f:33:0b:0f:a7:45:f1:aa:14:55:79:57:90:16:57: 99:84:53:73:42:4a:a8:0f:1e:1e:b9:fc:7c:c7:d8:f3:bb:e0: b3:fa:e8:86 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFGpUrFsQWpIQ2wLRmNFdSX22BfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI2Y2IzMzcyMmEzNDkzMjE2MjgzZGM4MGNhZTBlZTlk NTg4NzRmMjAeFw0yNTA2MTQwMTIxNDBaFw0yNTA2MTUwNTIzNDBaMDMxMTAvBgNV BAMTKEZENTBBRDAwMjYxQUMxMjlEREJGNDRBQTRDRjIwMkZDNkU0REZGM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwRuwbOLrAgZpNYZ3/8v9S/0CM mNLBD3wP0MADZw4EPncKUmtLHRJlSsQklrEwcKu2zCmvyOs0dmcEydQyM8o5gmj6 iYYseYB7uXvETVYoBaLA1qI0poZ7dGdVmDGBagZI7GEdTezJ0uO6Qnrr+a+1NT1f tSlNpMzbvdWfZLg8l7bYMOw+SaOff5pXL1rmiRf9WftvcVKg5kJ9V6re5LBuZbGu F7ppclZdtWPr31jU9hjsJKwBQLruGoxafKYCGJxVPyZ/m6L5rudpZWaZawvyNvNc aLBfi5JV+V9u8HI0XHxA0yJAe1CJf0k7rYe/PZdfpRIl2HDBcv+1yVGeO5dFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/VCtACYawSndv0SqTPIC/G5N/zwwHwYDVR0j BBgwFoAUkmyzNyKjSTIWKD3IDK4O6dWIdPIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NlMDBjZjktMDRhNS00M2QxLThiODktZWRmYTYwY2Q4 ZDRhLzIvOTI2Q0IzMzcyMkEzNDkzMjE2MjgzREM4MENBRTBFRTlENTg4NzRGMi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2tteXpOeUtqU1RJV0tEM0lESzRPNmRX SWRQSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jY2UwMGNmOS0w NGE1LTQzZDEtOGI4OS1lZGZhNjBjZDhkNGEvMi85MjZDQjMzNzIyQTM0OTMyMTYy ODNEQzgwQ0FFMEVFOUQ1ODg3NEYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKb8Ay1+otznyEBaWJqej Hh8UznAfJ7q3MNTOH3/V3ouEmXQ5zLLJITNIVAIlD1qJxxpKLhJAQh8VySs6x3ep imHgdwcmtWD5Bs5GQEDmhHV49/+U8cX4YZDrqvR/+bIP2wwNtv2ptDEaxWMwYJpe PeY4xt/qUArylo4NcCVpHs9Ad1GYKoyKyjeDLku112/gpLc1Q+2Fc9QEKD3CB8FW nq5ji+QJ5zAtnFqI/HvztfGDlJXH9ZWRibPuwxEA/9pMy/J1jby5dx1tRRlNv4FR qH//3ejTR3SSd+xvbzMLD6dF8aoUVXlXkBZXmYRTc0JKqA8eHrn8fMfY87vgs/ro hg== -----END CERTIFICATE-----Generated at Sat Jun 14 20:23:16 2025 by rpki-client