$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft File: E19302BE91C9D4211CDF4AFF091055A173B3593B.mft (raw, json) Hash identifier: 6MBCr45Cy7B8VKFHftqobEiUOJU6a03sHlqdO4v7Xvg= Subject key identifier: DE:44:B7:2F:CE:88:FE:59:ED:DF:31:B7:A0:DC:41:65:26:D8:2B:98 Authority key identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B Certificate issuer: /CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Certificate serial: 1CAD86331B471464292A8F8DA628D14D6240F626 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft Manifest number: 2E Signing time: Tue 05 Aug 2025 12:09:59 +0000 Manifest this update: Tue 05 Aug 2025 12:04:59 +0000 Manifest next update: Wed 06 Aug 2025 13:31:59 +0000 Files and hashes: 1: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: 7m4uBl7pjkxamzWCFShzOT8dP3zXIx3Ew/sIEJmrOk4=) 2: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: BOG3fQtugkiXpKS/p2fTg16ei6qBO6dg8xuWYfodSgU=) 3: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: p0V0EhuR94jsdFZ1UsjzKoR4Va7GATjKkx+PVQ3cRs4=) 4: E19302BE91C9D4211CDF4AFF091055A173B3593B.crl (hash: DlO+mjNta17DzUcRJUfP4TOr8Yj+VcBeNRcuVk2CYqI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 23:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ad:86:33:1b:47:14:64:29:2a:8f:8d:a6:28:d1:4d:62:40:f6:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19302BE91C9D4211CDF4AFF091055A173B3593B Validity Not Before: Aug 5 12:04:59 2025 GMT Not After : Aug 6 13:31:59 2025 GMT Subject: CN=DE44B72FCE88FE59EDDF31B7A0DC416526D82B98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4c:08:28:7b:15:ca:3b:44:c9:3f:5d:f6:be: e6:22:a4:5c:cb:d4:1f:81:c9:92:19:6f:b9:3e:b3: 0f:16:0e:9a:c1:12:af:35:32:75:48:40:eb:b5:65: 80:1e:12:aa:3d:2c:bb:3b:0d:2c:d4:3a:59:b7:2c: 86:a2:99:54:8d:22:1c:94:ad:69:45:90:7d:bd:60: 44:c4:dc:09:cc:23:15:52:65:c1:89:71:ed:97:3a: d3:ad:66:19:be:0b:8a:63:ed:09:80:6b:9c:e6:ba: 89:98:6c:23:c2:4f:3c:f9:69:c5:12:85:42:d1:28: bf:43:4b:e0:7f:21:b5:92:fd:19:2a:58:0f:d0:f8: 58:53:84:d4:67:45:37:48:5a:7b:7a:37:d3:62:fd: 34:ef:f8:aa:6f:98:6c:13:23:23:f4:e6:fc:81:54: fa:f6:dd:4c:16:fb:8f:5a:71:d2:01:4b:6c:fe:24: 0a:d1:8f:75:e2:c5:22:ce:a8:2d:cc:22:38:01:cc: ca:6e:a8:91:53:c3:5d:87:31:9f:66:33:a6:83:72: 73:13:14:71:f1:97:05:ae:7a:07:bd:f3:12:b7:f9: f9:03:cc:40:60:2c:cf:80:f4:d1:34:a3:37:b9:ee: 7a:4c:a6:8b:8d:57:f6:2d:57:ec:34:1b:53:5a:0f: 5c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:44:B7:2F:CE:88:FE:59:ED:DF:31:B7:A0:DC:41:65:26:D8:2B:98 X509v3 Authority Key Identifier: keyid:E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:01:34:fa:62:b9:a9:3c:2c:22:58:c8:80:14:69:a7:13:2b: f3:11:f0:82:f8:84:71:1f:2b:ce:cc:c3:99:da:bc:f6:59:22: c1:4e:49:a1:2a:8f:4b:ff:42:a6:fa:10:54:b8:35:55:29:44: db:cc:4a:b9:77:e8:ed:f0:2a:a9:08:93:1c:c1:ad:a1:e3:98: b9:a3:82:ef:7a:75:dd:64:32:3d:1a:45:fb:ed:db:c7:2a:57: ca:3d:86:48:65:93:2e:90:c4:6a:7c:73:2a:a0:c6:b9:40:67: 35:92:09:4d:14:9f:12:fc:ea:aa:04:67:22:d6:3b:30:4d:72: 53:47:d8:b1:81:7c:a7:5b:27:a3:55:36:10:28:2a:fd:00:ba: 06:32:3c:53:9d:7c:46:7c:e7:43:e2:ef:c7:a5:9a:eb:38:71: f3:b0:d7:fd:bd:ca:0a:e2:b6:47:99:2a:8b:dc:b6:fd:bd:fe: 80:70:f8:c1:8f:62:d6:e2:0f:7e:44:c1:36:58:ec:d4:5e:00: 19:41:03:48:1d:0e:58:08:1a:a1:97:00:f1:f0:5d:c9:88:54: a8:ee:8e:75:fd:ce:aa:85:7d:ad:5d:46:19:c8:e7:b3:eb:eb: 90:c8:07:fc:f7:f5:3d:91:89:2c:13:83:6f:56:ec:43:eb:e2: 74:e3:03:09 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIUHK2GMxtHFGQpKo+NpijRTWJA9iYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5MzAyQkU5MUM5RDQyMTFDREY0QUZGMDkxMDU1QTE3 M0IzNTkzQjAeFw0yNTA4MDUxMjA0NTlaFw0yNTA4MDYxMzMxNTlaMDMxMTAvBgNV BAMTKERFNDRCNzJGQ0U4OEZFNTlFRERGMzFCN0EwREM0MTY1MjZEODJCOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXTAgoexXKO0TJP132vuYipFzL 1B+ByZIZb7k+sw8WDprBEq81MnVIQOu1ZYAeEqo9LLs7DSzUOlm3LIaimVSNIhyU rWlFkH29YETE3AnMIxVSZcGJce2XOtOtZhm+C4pj7QmAa5zmuomYbCPCTzz5acUS hULRKL9DS+B/IbWS/RkqWA/Q+FhThNRnRTdIWnt6N9Ni/TTv+KpvmGwTIyP05vyB VPr23UwW+49acdIBS2z+JArRj3XixSLOqC3MIjgBzMpuqJFTw12HMZ9mM6aDcnMT FHHxlwWuege98xK3+fkDzEBgLM+A9NE0oze57npMpouNV/YtV+w0G1NaD1w/AgMB AAGjggKGMIICgjAdBgNVHQ4EFgQU3kS3L86I/lnt3zG3oNxBZSbYK5gwHwYDVR0j BBgwFoAU4ZMCvpHJ1CEc30r/CRBVoXOzWTswDgYDVR0PAQH/BAQDAgeAMIGXBgNV HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNm NTBlOC8xMC9FMTkzMDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNC LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0UxOTMwMkJFOTFDOUQ0MjExQ0RGNEFG RjA5MTA1NUExNzNCMzU5M0IuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYB BQUHMAuGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC8xMC9FMTkz MDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA xAE0+mK5qTwsIljIgBRppxMr8xHwgviEcR8rzszDmdq89lkiwU5JoSqPS/9CpvoQ VLg1VSlE28xKuXfo7fAqqQiTHMGtoeOYuaOC73p13WQyPRpF++3bxypXyj2GSGWT LpDEanxzKqDGuUBnNZIJTRSfEvzqqgRnItY7ME1yU0fYsYF8p1sno1U2ECgq/QC6 BjI8U518RnznQ+Lvx6Wa6zhx87DX/b3KCuK2R5kqi9y2/b3+gHD4wY9i1uIPfkTB Nljs1F4AGUEDSB0OWAgaoZcA8fBdyYhUqO6Odf3OqoV9rV1GGcjns+vrkMgH/Pf1 PZGJLBODb1bsQ+vidOMDCQ== -----END CERTIFICATE-----Generated at Tue Aug 5 17:10:25 2025 by rpki-client