$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft File: 47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json) Hash identifier: /q6soSNpjQzoXJZwZH7IiDsWj7d7rGsb9pCu712cGxI= Subject key identifier: CC:6D:38:CE:A2:00:D6:30:84:8B:9A:20:9E:DB:20:28:F7:59:28:87 Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 Certificate issuer: /CN=47E9555355C6B007AACD5D45BF41E3383E991641 Certificate serial: 0F66C629541F2DAC083621DCEF17109E825E7428 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft Manifest number: 0421 Signing time: Thu 07 Aug 2025 05:18:50 +0000 Manifest this update: Thu 07 Aug 2025 05:13:50 +0000 Manifest next update: Fri 08 Aug 2025 07:07:50 +0000 Files and hashes: 1: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: u69QE5S5w1fJXIVFBs8fFmSbUSn5GAfB0DfXMhDWKPY=) 2: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: 3ipGYMDZ54FZdaI4eg46OMa/ZV0a0Q3rHUY9RUekrv8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 12:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:66:c6:29:54:1f:2d:ac:08:36:21:dc:ef:17:10:9e:82:5e:74:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641 Validity Not Before: Aug 7 05:13:50 2025 GMT Not After : Aug 8 07:07:50 2025 GMT Subject: CN=CC6D38CEA200D630848B9A209EDB2028F7592887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:24:00:08:61:2a:4e:2f:a8:4d:05:65:75:09: 20:43:c6:ed:f2:52:e5:92:37:c0:71:ef:b6:21:72: 5a:0a:2a:4f:df:71:ba:51:58:cf:76:18:01:09:7b: 63:47:41:f9:47:49:83:20:17:1f:fe:c6:e5:f3:ec: 26:eb:a7:dd:fa:e6:e9:ad:73:b2:cf:aa:df:ff:95: 83:67:f3:d2:64:82:a3:59:12:7a:b3:3b:b3:24:4d: d3:fe:63:67:50:05:1a:52:dd:2e:e5:d9:63:08:66: 82:1a:f0:88:81:1c:0b:4a:20:a7:9c:26:d7:34:16: de:93:6f:a5:5c:2c:5f:a0:87:57:93:df:0d:49:d3: 4d:71:23:e9:1d:6d:a7:49:67:8a:2e:66:75:c9:ec: c3:21:43:00:b5:32:d9:08:12:8a:38:92:87:72:11: 20:04:48:b3:4e:05:eb:82:5c:d7:1f:4e:79:e5:d5: 7b:7d:f2:91:17:c0:f1:c7:f1:64:93:57:4b:10:e2: ef:0a:a8:f2:22:fc:1c:91:9a:67:72:b8:a0:96:9e: d4:23:b1:4d:48:9e:be:2a:6d:1c:9f:a9:3b:dd:4f: 41:5f:c6:85:f5:bc:9f:7f:6a:74:58:66:d3:2f:c7: 10:d9:4d:35:32:bf:49:22:9b:f3:84:13:78:47:2b: 57:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6D:38:CE:A2:00:D6:30:84:8B:9A:20:9E:DB:20:28:F7:59:28:87 X509v3 Authority Key Identifier: keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:7d:d7:92:fc:7d:89:41:52:a1:91:13:9b:f6:43:4a:14:0f: 29:eb:24:85:b9:25:bd:87:e7:8b:2c:50:8c:23:f1:fd:d4:29: 17:51:9f:98:8f:1d:e3:0a:43:af:41:be:cd:5e:b7:5d:0c:ec: 34:41:fa:50:01:f9:94:c0:4f:f6:50:a0:0f:23:e1:f5:d1:f1: c5:96:51:d7:b2:0f:82:de:cf:29:a4:5e:c3:42:cd:30:6c:92: 63:38:cc:f8:be:47:11:38:00:99:aa:55:5f:86:35:cf:f9:74: 24:c3:b4:8c:29:c0:ed:35:df:54:d9:74:ac:d6:9f:8c:ff:04: 03:a4:06:c9:4f:53:9d:e3:c4:e1:17:87:ff:1d:68:53:8c:d6: 2c:a2:84:42:53:58:50:2e:b2:9c:50:f9:57:ca:71:6d:5f:88: 06:a8:2a:28:22:0e:6d:d6:fe:80:72:09:02:d3:d0:1e:ce:be: 65:4a:51:e5:8f:db:55:04:e7:a4:9e:a6:e4:59:46:6e:e9:e4: 22:6e:72:39:f5:da:8e:e0:5a:e3:34:65:9a:0e:89:65:ad:83: 6a:86:ac:99:a9:62:38:84:2e:63:17:5c:e6:0e:5a:ff:b4:02: 8c:08:0f:c9:54:ab:76:b9:a7:ab:34:d7:db:2c:fa:fe:e9:38: 13:ed:76:0a -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUD2bGKVQfLawINiHc7xcQnoJedCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgz RTk5MTY0MTAeFw0yNTA4MDcwNTEzNTBaFw0yNTA4MDgwNzA3NTBaMDMxMTAvBgNV BAMTKENDNkQzOENFQTIwMEQ2MzA4NDhCOUEyMDlFREIyMDI4Rjc1OTI4ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJAAIYSpOL6hNBWV1CSBDxu3y UuWSN8Bx77YhcloKKk/fcbpRWM92GAEJe2NHQflHSYMgFx/+xuXz7Cbrp9365umt c7LPqt//lYNn89JkgqNZEnqzO7MkTdP+Y2dQBRpS3S7l2WMIZoIa8IiBHAtKIKec Jtc0Ft6Tb6VcLF+gh1eT3w1J001xI+kdbadJZ4ouZnXJ7MMhQwC1MtkIEoo4kody ESAESLNOBeuCXNcfTnnl1Xt98pEXwPHH8WSTV0sQ4u8KqPIi/ByRmmdyuKCWntQj sU1Inr4qbRyfqTvdT0FfxoX1vJ9/anRYZtMvxxDZTTUyv0kim/OEE3hHK1cHAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUzG04zqIA1jCEi5ogntsgKPdZKIcwHwYDVR0j BBgwFoAUR+lVU1XGsAeqzV1Fv0HjOD6ZFkEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzQvNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgzRTk5MTY0MS5j cmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJnLm5l dC9ycGtpL1JHbmV0LU9VL1ItbFZVMVhHc0FlcXpWMUZ2MEhqT0Q2WkZrRS5jZXIw gZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZTdkNTVmNy1lZTYwLTQwMDUt YmFkNy1iNDI4MThjZjUwZTgvNC80N0U5NTU1MzU1QzZCMDA3QUFDRDVENDVCRjQx RTMzODNFOTkxNjQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV33Xkvx9iUFSoZETm/ZDShQPKeskhbkl vYfniyxQjCPx/dQpF1GfmI8d4wpDr0G+zV63XQzsNEH6UAH5lMBP9lCgDyPh9dHx xZZR17IPgt7PKaRew0LNMGySYzjM+L5HETgAmapVX4Y1z/l0JMO0jCnA7TXfVNl0 rNafjP8EA6QGyU9TnePE4ReH/x1oU4zWLKKEQlNYUC6ynFD5V8pxbV+IBqgqKCIO bdb+gHIJAtPQHs6+ZUpR5Y/bVQTnpJ6m5FlGbunkIm5yOfXajuBa4zRlmg6JZa2D aoasmaliOIQuYxdc5g5a/7QCjAgPyVSrdrmnqzTX2yz6/uk4E+12Cg== -----END CERTIFICATE-----Generated at Thu Aug 7 07:31:44 2025 by rpki-client