$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft File: 47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json) Hash identifier: TsJ0T0ydWt5XjNgNk0r1CnqHl6CEPNd7fHN5OMF1gxg= Subject key identifier: 00:77:63:E5:49:E1:6A:AA:B8:9F:C7:2D:69:6C:F8:BB:33:70:66:55 Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 Certificate issuer: /CN=47E9555355C6B007AACD5D45BF41E3383E991641 Certificate serial: 584C7FAF1BFC824BB89F4BDD10BE65F657F87879 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft Manifest number: 03D7 Signing time: Sun 15 Jun 2025 09:03:48 +0000 Manifest this update: Sun 15 Jun 2025 08:58:48 +0000 Manifest next update: Mon 16 Jun 2025 11:07:48 +0000 Files and hashes: 1: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: 5eiDb02VQPek9Wp6kwQDosDxnimU+kyV5rcyPmdGMrA=) 2: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: 3ipGYMDZ54FZdaI4eg46OMa/ZV0a0Q3rHUY9RUekrv8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 07:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:4c:7f:af:1b:fc:82:4b:b8:9f:4b:dd:10:be:65:f6:57:f8:78:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641 Validity Not Before: Jun 15 08:58:48 2025 GMT Not After : Jun 16 11:07:48 2025 GMT Subject: CN=007763E549E16AAAB89FC72D696CF8BB33706655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0f:73:df:ff:d1:b6:aa:46:08:d6:f6:1f:16: 74:c3:ea:97:d8:dd:66:19:1c:61:2e:6c:82:f7:dd: 78:24:0e:70:f0:dd:25:f3:65:9a:e7:a7:e0:3b:15: 68:7d:81:eb:fd:d3:86:cb:85:bf:fd:3a:54:97:01: 68:2a:fd:9d:15:0e:fe:32:e3:67:d4:3d:6f:c0:db: 99:ae:14:8a:9a:f3:9f:2a:bc:5d:9a:9a:a7:21:26: 19:30:fa:38:06:95:3c:7c:28:95:66:16:a0:ce:a1: 33:7e:db:74:ac:da:fc:a4:7b:72:b8:a9:ce:f2:3c: 26:97:63:1b:f4:8e:ad:a6:11:a7:1a:f2:ed:56:47: 72:6e:7b:2d:12:dd:53:89:93:2f:54:8f:73:17:c4: 24:a5:d7:90:60:9c:1e:15:f1:b2:74:69:67:74:37: 8c:0b:d9:6d:d2:a3:76:a7:e0:e2:98:6d:45:f7:88: 17:40:60:22:16:63:3c:47:f7:ed:17:0b:0e:1f:2e: 57:ef:4a:80:8c:ae:82:6d:99:3b:ac:17:ba:16:a3: aa:1b:22:ac:a7:45:1c:b3:d0:70:7d:bd:d1:8e:02: 27:70:3d:d1:01:dc:71:a8:a8:75:80:9a:f7:4d:76: f2:f6:05:d9:cb:f2:32:fc:7a:cb:a3:6d:57:cd:39: bb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:77:63:E5:49:E1:6A:AA:B8:9F:C7:2D:69:6C:F8:BB:33:70:66:55 X509v3 Authority Key Identifier: keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:c5:96:08:41:83:bf:e8:fe:d9:8e:0f:a2:77:47:5b:d7:27: 71:c3:2d:73:23:87:47:31:87:1e:64:18:74:65:2e:f8:98:d6: 16:12:44:ca:b8:b4:d5:bc:0e:e6:dc:08:8b:3e:0c:a2:31:9e: 0c:57:7f:97:fb:02:8c:c4:4d:c1:52:ca:18:64:7e:c9:13:f0: 11:f1:f6:30:d8:91:71:0b:7c:4b:4d:bf:c5:d4:80:7d:08:bf: 89:bc:dd:90:35:1a:0d:a2:8d:b7:eb:e1:19:0d:d6:43:2d:5f: 62:56:ce:55:b7:b8:7d:d1:2c:23:42:af:db:87:4c:63:7e:d3: 1c:7f:37:ef:64:80:c4:29:24:5c:35:07:96:2d:19:cf:b8:5f: 9f:f4:e2:13:2b:11:ac:79:fd:fb:68:51:c0:99:ac:70:f7:d8: b1:eb:cd:69:46:53:29:dd:e9:34:fc:8e:8c:0e:f8:29:9f:a6: 19:b8:f4:ce:2d:8e:b5:18:bd:b2:94:f5:07:b1:7b:2d:99:ad: ea:54:6e:cf:8a:4d:ed:df:23:f3:dc:57:ed:0f:65:97:5c:6d: 53:94:c7:22:12:ce:0c:0c:74:be:92:50:b7:e0:3b:3e:cb:3a: 16:94:24:71:ca:5d:0b:c0:91:72:07:a3:c2:5f:fe:8e:2e:d8: 9f:b0:06:0b -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUWEx/rxv8gku4n0vdEL5l9lf4eHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgz RTk5MTY0MTAeFw0yNTA2MTUwODU4NDhaFw0yNTA2MTYxMTA3NDhaMDMxMTAvBgNV BAMTKDAwNzc2M0U1NDlFMTZBQUFCODlGQzcyRDY5NkNGOEJCMzM3MDY2NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJD3Pf/9G2qkYI1vYfFnTD6pfY 3WYZHGEubIL33XgkDnDw3SXzZZrnp+A7FWh9gev904bLhb/9OlSXAWgq/Z0VDv4y 42fUPW/A25muFIqa858qvF2amqchJhkw+jgGlTx8KJVmFqDOoTN+23Ss2vyke3K4 qc7yPCaXYxv0jq2mEaca8u1WR3Juey0S3VOJky9Uj3MXxCSl15BgnB4V8bJ0aWd0 N4wL2W3So3an4OKYbUX3iBdAYCIWYzxH9+0XCw4fLlfvSoCMroJtmTusF7oWo6ob IqynRRyz0HB9vdGOAidwPdEB3HGoqHWAmvdNdvL2BdnL8jL8esujbVfNObuRAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUAHdj5Unhaqq4n8ctaWz4uzNwZlUwHwYDVR0j BBgwFoAUR+lVU1XGsAeqzV1Fv0HjOD6ZFkEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzQvNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgzRTk5MTY0MS5j cmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJnLm5l dC9ycGtpL1JHbmV0LU9VL1ItbFZVMVhHc0FlcXpWMUZ2MEhqT0Q2WkZrRS5jZXIw gZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZTdkNTVmNy1lZTYwLTQwMDUt YmFkNy1iNDI4MThjZjUwZTgvNC80N0U5NTU1MzU1QzZCMDA3QUFDRDVENDVCRjQx RTMzODNFOTkxNjQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxcWWCEGDv+j+2Y4PondHW9cnccMtcyOH RzGHHmQYdGUu+JjWFhJEyri01bwO5twIiz4MojGeDFd/l/sCjMRNwVLKGGR+yRPw EfH2MNiRcQt8S02/xdSAfQi/ibzdkDUaDaKNt+vhGQ3WQy1fYlbOVbe4fdEsI0Kv 24dMY37THH8372SAxCkkXDUHli0Zz7hfn/TiEysRrHn9+2hRwJmscPfYsevNaUZT Kd3pNPyOjA74KZ+mGbj0zi2OtRi9spT1B7F7LZmt6lRuz4pN7d8j89xX7Q9ll1xt U5THIhLODAx0vpJQt+A7Pss6FpQkccpdC8CRcgejwl/+ji7Yn7AGCw== -----END CERTIFICATE-----Generated at Mon Jun 16 04:06:09 2025 by rpki-client