$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft File: C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json) Hash identifier: OCUpqwu3t6Jl9ozVMEXhdfcbzApis8q0kf8tptD6CM4= Subject key identifier: 6A:4A:94:71:1E:6B:40:3E:20:D7:BF:DF:EE:3D:D1:21:77:EB:51:26 Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Certificate serial: 3D0FD743070A5F53FB458F838BF5090518F635C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft Manifest number: 04DE Signing time: Mon 04 Aug 2025 04:57:18 +0000 Manifest this update: Mon 04 Aug 2025 04:52:18 +0000 Manifest next update: Tue 05 Aug 2025 05:02:18 +0000 Files and hashes: 1: 3139332e3234362e342e302f32342d3234203d3e20313335343032.roa (hash: x5G3aikxww4wLRaoWnz2KkIIppe2I2SZAi3PiElvQpI=) 2: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: 3pORVfocHqarnsqwM793nrdIxMZCxCypYkq+seLhAgU=) 3: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: 0YKrfpMfKCNzbp9Y/eP+xG5rSQELOYFb+KnWBC9jbSE=) 4: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (hash: hv8+1ab3SlqVr0lUzuXGkIAi200jEC6ydrdZg2cy0KU=) 5: 3139332e3234362e3130322e302f32342d3234203d3e203630373831.roa (hash: DsxMlBpnaDBCTZCwZ+4l21L/Mim9agw8EK48LHeXcxw=) 6: 3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa (hash: DHsuIdClDCk2AbtF+6NodfNI3JEU6gbRKvoUSbt4bMQ=) 7: 3139332e3234362e3130332e302f32342d3234203d3e20333239303037.roa (hash: RPXnPhP3kmn+nLQChjFVjWqPvCzvvWp/RsN04Irw1Jo=) 8: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: C9UN/z7rRSIBHXCw3Mn5S1vnSskjCCo5azhWVB5o2V8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 05:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:0f:d7:43:07:0a:5f:53:fb:45:8f:83:8b:f5:09:05:18:f6:35:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Validity Not Before: Aug 4 04:52:18 2025 GMT Not After : Aug 5 05:02:18 2025 GMT Subject: CN=6A4A94711E6B403E20D7BFDFEE3DD12177EB5126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fc:bf:04:f5:79:51:98:16:23:e9:6d:58:13: 0c:b6:10:e7:08:0f:43:fe:61:36:db:15:4c:c9:d0: c5:dd:59:8f:9d:fd:53:97:f9:34:5a:1d:48:39:b8: 61:43:56:d5:5c:a9:7d:5f:03:f5:7c:ec:71:40:d6: ad:09:5e:f9:01:93:73:84:0a:94:f3:ae:d0:fe:5c: 31:5a:47:ca:98:aa:2c:26:b1:6f:db:d9:cf:e8:77: 43:14:23:df:e1:36:02:e9:eb:c0:7a:03:99:01:c1: 08:1c:4d:ba:45:af:95:0b:e6:fc:fd:1e:c4:cc:13: 27:d3:db:38:86:6e:ea:d3:f8:a0:11:46:eb:f6:17: e6:37:a9:95:7b:55:ac:58:7b:db:aa:5a:ec:fb:4a: 2b:a3:7f:ce:03:1c:63:8e:58:03:d9:74:57:41:80: da:ad:31:79:c9:7d:d9:71:02:a9:35:ce:48:56:28: fc:82:6e:56:05:16:a0:20:e0:39:59:e8:9f:21:db: bb:e2:6e:d0:ba:4b:83:4d:b7:9d:c6:2f:d9:a3:30: fd:1f:b2:2c:a9:29:cc:1b:b9:76:97:91:dc:fd:dd: 0f:92:02:aa:a3:a2:34:a9:cc:8b:82:68:19:4f:ac: a8:38:87:1b:89:61:70:3f:a7:5d:6e:2d:bd:e1:29: c9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4A:94:71:1E:6B:40:3E:20:D7:BF:DF:EE:3D:D1:21:77:EB:51:26 X509v3 Authority Key Identifier: keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:c6:a2:46:0c:8a:a0:d4:0c:4d:b4:f4:61:f1:56:42:18:be: 15:e2:66:46:aa:24:03:aa:ba:a9:03:17:15:6e:ee:5a:2e:1e: 90:0c:1e:03:61:94:07:79:2d:28:62:25:b1:b4:6e:70:12:de: 28:ac:3f:9d:63:68:a4:57:b2:43:75:01:d6:d0:bf:94:35:9f: b8:68:33:fe:3a:6a:51:8c:fb:48:f3:e7:76:32:92:45:6d:36: 4b:16:f3:9d:23:cc:10:fe:33:4d:60:e6:72:07:bf:e6:94:fc: 6c:58:2a:16:30:83:40:67:ba:b0:1c:af:35:d4:c9:0b:7d:5b: db:bd:d2:4c:95:70:7b:07:60:c9:33:79:45:f5:24:f5:83:cb: 64:c1:5a:8c:92:dd:99:43:31:1a:0c:2e:6f:1d:b4:a4:0d:f1: 55:7d:35:4b:2a:83:e4:65:b2:bb:89:1b:7c:e8:74:af:7d:72: ca:46:c0:be:d3:0d:b0:a1:65:96:fb:ac:8e:1b:ee:60:aa:54: 25:fd:cd:19:33:2a:54:5a:a2:c6:61:9a:c0:17:9b:05:ff:f3: f6:04:19:89:a9:26:3d:28:bb:4e:4d:d3:10:22:45:16:9a:57: 01:a9:29:2e:3b:d7:a7:96:0e:c2:fb:58:f7:e8:77:54:36:d6: a4:43:e9:2a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPQ/XQwcKX1P7RY+Di/UJBRj2NcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi NDk0YTdiZjAeFw0yNTA4MDQwNDUyMThaFw0yNTA4MDUwNTAyMThaMDMxMTAvBgNV BAMTKDZBNEE5NDcxMUU2QjQwM0UyMEQ3QkZERkVFM0REMTIxNzdFQjUxMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL/L8E9XlRmBYj6W1YEwy2EOcI D0P+YTbbFUzJ0MXdWY+d/VOX+TRaHUg5uGFDVtVcqX1fA/V87HFA1q0JXvkBk3OE CpTzrtD+XDFaR8qYqiwmsW/b2c/od0MUI9/hNgLp68B6A5kBwQgcTbpFr5UL5vz9 HsTMEyfT2ziGburT+KARRuv2F+Y3qZV7VaxYe9uqWuz7Siujf84DHGOOWAPZdFdB gNqtMXnJfdlxAqk1zkhWKPyCblYFFqAg4DlZ6J8h27vibtC6S4NNt53GL9mjMP0f siypKcwbuXaXkdz93Q+SAqqjojSpzIuCaBlPrKg4hxuJYXA/p11uLb3hKckXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUakqUcR5rQD4g17/f7j3RIXfrUSYwHwYDVR0j BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0 ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT VXA3OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOTBhOTM1YS1h NzRkLTRiOTgtOTQzMC1iYzdhZTVjMjRmMjgvMC9DNzlEMDJDNjE4ODYxQUQ0NUJB Rjc4Q0UzOTAyM0NCQ0I0OTRBN0JGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA18aiRgyKoNQMTbT0YfFW Qhi+FeJmRqokA6q6qQMXFW7uWi4ekAweA2GUB3ktKGIlsbRucBLeKKw/nWNopFey Q3UB1tC/lDWfuGgz/jpqUYz7SPPndjKSRW02SxbznSPMEP4zTWDmcge/5pT8bFgq FjCDQGe6sByvNdTJC31b273STJVwewdgyTN5RfUk9YPLZMFajJLdmUMxGgwubx20 pA3xVX01SyqD5GWyu4kbfOh0r31yykbAvtMNsKFllvusjhvuYKpUJf3NGTMqVFqi xmGawBebBf/z9gQZiakmPSi7Tk3TECJFFppXAakpLjvXp5YOwvtY9+h3VDbWpEPp Kg== -----END CERTIFICATE-----Generated at Mon Aug 4 18:13:16 2025 by rpki-client