$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft File: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft (raw, json) Hash identifier: ZIi4pf3qaNkHGYIxdDQtelSZ9CpE6AyONJUj1xCuoK8= Subject key identifier: 7F:CF:E1:3A:09:16:FE:8F:40:B2:98:42:7B:5D:A8:B7:E4:DF:4B:EA Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 Certificate issuer: /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Certificate serial: 3B5AE8CDE2E3F8D5C1BEFC9C0F56C8C0E8498A54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft Manifest number: 037B Signing time: Sun 03 Aug 2025 22:25:57 +0000 Manifest this update: Sun 03 Aug 2025 22:20:57 +0000 Manifest next update: Tue 05 Aug 2025 01:29:57 +0000 Files and hashes: 1: 323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa (hash: 3wDhadYEfX0Hhy3fPxID0nH+bbX55tStnGOk9S2bMKU=) 2: AS202881.asa (hash: n7g3r7+FlCCQyP417H6Uudw0ZEIUQH6oYUZ2fSNBDRU=) 3: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl (hash: FO821xx7+bL9cOomXnz0FNSDGZvNaIH1L8r8Wa8Q4g0=) 4: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (hash: tHiNPLeborN3MzxDKSTEAgj3ZJMcJjV9OqmGVy4ABhE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 01:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:5a:e8:cd:e2:e3:f8:d5:c1:be:fc:9c:0f:56:c8:c0:e8:49:8a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Validity Not Before: Aug 3 22:20:57 2025 GMT Not After : Aug 5 01:29:57 2025 GMT Subject: CN=7FCFE13A0916FE8F40B298427B5DA8B7E4DF4BEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:27:1b:17:54:95:dc:ea:b0:09:8d:ae:61:de: 7e:e5:87:64:a8:2a:08:ab:2e:40:27:76:e0:90:38: fa:68:0c:4e:7e:13:8c:3b:b3:d4:bb:03:e0:92:1f: 2c:cf:a6:c7:f0:d4:79:6b:37:c8:8a:3e:8d:99:79: fa:c2:ff:4e:42:8b:64:07:ef:14:85:fe:d4:e7:cb: 41:03:62:1e:de:e6:2b:26:45:42:0e:9a:2d:8f:c2: aa:e2:e0:08:84:42:d9:41:32:5d:f7:84:3f:eb:15: d1:37:3e:09:09:cc:00:0c:9a:c0:d0:61:ff:e7:c9: d9:d6:1d:f4:fa:b0:c0:27:22:c6:63:28:51:02:0d: 3b:c3:b6:bb:0e:b6:62:d3:88:00:f4:95:01:77:22: c2:14:10:81:73:04:85:8a:7a:a5:18:79:aa:dc:3a: ba:a0:3f:d3:f4:c2:8c:08:57:df:11:b1:82:1f:25: b0:01:23:7b:89:4f:c9:96:76:7b:99:51:e3:65:b3: ff:f9:ff:f8:59:74:e7:f6:c2:53:40:21:0a:84:c7: bc:cf:b4:7b:0f:eb:67:29:51:f7:b0:37:48:21:a6: 39:04:b1:df:8a:d9:b4:9a:95:52:51:63:cc:06:37: 87:e9:18:a6:51:95:bc:d9:00:dd:a0:5f:cf:ec:8b: 86:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CF:E1:3A:09:16:FE:8F:40:B2:98:42:7B:5D:A8:B7:E4:DF:4B:EA X509v3 Authority Key Identifier: keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:39:7b:51:a7:30:aa:01:93:c6:69:05:52:a6:b8:8e:fd:2a: 4f:46:21:8c:7c:5c:97:1f:9b:9b:8d:de:cc:5d:65:3e:dd:eb: b7:65:77:b5:8e:90:e9:5f:bd:ec:3c:ed:3d:2b:20:51:48:94: dd:8d:6b:06:ce:b0:cb:f2:97:a2:2a:2d:07:7d:1c:a9:ba:a9: c9:01:ee:ef:05:81:f2:a4:a2:cb:37:be:19:e1:0c:52:0a:70: 9c:04:a9:3e:91:bc:bb:f2:e9:7f:6d:d3:bc:29:28:30:91:69: 76:e7:96:8b:d3:ba:7b:eb:bf:36:7d:9f:86:5e:b4:d6:ed:a3: e3:34:01:2d:00:61:05:5a:9c:95:f1:72:da:f7:b7:96:5b:f6: 55:ae:f3:78:ae:8f:fa:30:9a:1b:f7:04:e3:94:83:bd:53:54: e4:a2:f3:0d:12:08:21:8e:e2:04:c6:57:f6:ee:85:81:81:73: bf:fa:31:cd:bd:24:f3:29:18:62:7a:45:79:37:0c:83:9e:a8: e6:e3:23:3c:c6:3f:54:23:27:6f:92:82:bb:8e:cf:1c:28:9c: f4:0c:41:f0:ec:43:2d:3d:95:3a:8c:0c:e9:e6:b4:58:29:55: a2:ea:bb:d0:58:29:97:80:4c:6f:d8:6f:8d:27:e0:21:ee:03: ac:75:b8:1f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUO1rozeLj+NXBvvycD1bIwOhJilQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDY0Mjk3NWY1MzVmNDVmZDlmNmQ4ZmVhNjI2YmM2ZDI0 YmM5ZDhkODAeFw0yNTA4MDMyMjIwNTdaFw0yNTA4MDUwMTI5NTdaMDMxMTAvBgNV BAMTKDdGQ0ZFMTNBMDkxNkZFOEY0MEIyOTg0MjdCNURBOEI3RTRERjRCRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJxsXVJXc6rAJja5h3n7lh2So KgirLkAnduCQOPpoDE5+E4w7s9S7A+CSHyzPpsfw1HlrN8iKPo2ZefrC/05Ci2QH 7xSF/tTny0EDYh7e5ismRUIOmi2Pwqri4AiEQtlBMl33hD/rFdE3PgkJzAAMmsDQ Yf/nydnWHfT6sMAnIsZjKFECDTvDtrsOtmLTiAD0lQF3IsIUEIFzBIWKeqUYearc OrqgP9P0wowIV98RsYIfJbABI3uJT8mWdnuZUeNls//5//hZdOf2wlNAIQqEx7zP tHsP62cpUfewN0ghpjkEsd+K2bSalVJRY8wGN4fpGKZRlbzZAN2gX8/si4Y/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUf8/hOgkW/o9AsphCe12ot+TfS+owHwYDVR0j BBgwFoAU1kKXX1NfRf2fbY/qYmvG0kvJ2NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2 OTgwLzMvRDY0Mjk3NUY1MzVGNDVGRDlGNkQ4RkVBNjI2QkM2RDI0QkM5RDhEOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFrS1hYMU5mUmYyZmJZX3FZbXZHMGt2 SjJOZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMy9ENjQyOTc1RjUzNUY0NUZEOUY2 RDhGRUE2MjZCQzZEMjRCQzlEOEQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizl7UacwqgGTxmkFUqa4 jv0qT0YhjHxclx+bm43ezF1lPt3rt2V3tY6Q6V+97DztPSsgUUiU3Y1rBs6wy/KX oiotB30cqbqpyQHu7wWB8qSiyze+GeEMUgpwnASpPpG8u/Lpf23TvCkoMJFpdueW i9O6e+u/Nn2fhl601u2j4zQBLQBhBVqclfFy2ve3llv2Va7zeK6P+jCaG/cE45SD vVNU5KLzDRIIIY7iBMZX9u6FgYFzv/oxzb0k8ykYYnpFeTcMg56o5uMjPMY/VCMn b5KCu47PHCic9AxB8OxDLT2VOowM6ea0WClVouq70Fgpl4BMb9hvjSfgIe4DrHW4 Hw== -----END CERTIFICATE-----Generated at Mon Aug 4 11:00:06 2025 by rpki-client