$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json) Hash identifier: 3kvHx9DTu3YXWfkynmKhjOIEfFnjgIyORiFvqhjBeW4= Subject key identifier: E4:70:07:50:1D:FE:E4:52:B6:CB:AE:13:6D:DE:25:D1:53:CC:A0:4C Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Certificate serial: 077712A77B9F631146EF58D5EF4B6D7BA2DC3FA8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft Manifest number: C5 Signing time: Wed 23 Jul 2025 17:27:29 +0000 Manifest this update: Wed 23 Jul 2025 17:22:29 +0000 Manifest next update: Thu 24 Jul 2025 20:49:29 +0000 Files and hashes: 1: 326131343a373538303a6432303a3a2f34342d3438203d3e20313939333130.roa (hash: MgcoEmS08l4kBvePsItue5HuyPIuQGylETDDY3NTtWk=) 2: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: u/JR7/M6BcKICssdDR7j/sPwWvJTPX2G+FFLBgXrUyU=) 3: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: jIRO9mS3d6dPjcdQf+OkOGr/dNujGogdrEuPEpLgZJI=) 4: 326131343a373538303a6431303a3a2f34342d3434203d3e20313939333130.roa (hash: d85Du7DNvyLWzCRKR6UAK4BxtZR8aY0O/ltb7NM7kI0=) 5: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: 3Tx7IaFILQ2pFLtfLV0dVZ8ip7BUkHGJQ387RxcRIfE=) 6: 326131343a373538303a6430303a3a2f34342d3434203d3e20313939333130.roa (hash: aLNGjeKxhB+lb52UO94MmUGLP8+twH+NGpyj/wZMn3g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 20:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:77:12:a7:7b:9f:63:11:46:ef:58:d5:ef:4b:6d:7b:a2:dc:3f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Validity Not Before: Jul 23 17:22:29 2025 GMT Not After : Jul 24 20:49:29 2025 GMT Subject: CN=E47007501DFEE452B6CBAE136DDE25D153CCA04C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f2:02:8a:83:14:d0:6d:f8:c2:0a:05:f8:0d: 4e:ed:04:4b:2c:84:cc:c3:2e:4b:92:2a:d4:2b:fd: 13:d6:31:39:04:f6:e3:cd:7d:01:06:e4:ea:6e:8e: a8:de:68:a7:3e:a2:a5:26:68:c5:0a:7d:81:03:73: 9f:18:26:17:f1:2c:a1:8a:d5:93:25:76:ce:d6:c7: 6f:1a:59:a0:74:86:3c:c3:2d:0b:2e:47:0d:9d:b8: ed:dc:24:e1:e3:67:a0:f1:6d:39:d8:53:92:02:45: ff:fe:fe:61:81:38:70:6a:04:3d:9c:d5:bd:80:e4: 6a:cb:0d:f5:e1:c6:f2:c4:b2:63:aa:fc:4a:0d:f2: 19:d2:2a:12:bb:6b:10:48:b0:19:7f:98:b4:89:55: 8b:db:22:98:7a:f7:54:f6:9e:4d:c7:ef:4a:0c:29: 46:3e:a7:b2:7f:b8:64:db:63:58:c9:90:69:20:7f: 19:fd:81:5f:af:60:90:72:15:50:28:c5:04:d8:0e: c9:57:65:00:ec:85:f0:18:4b:c6:5c:99:7c:32:41: fc:85:6f:a9:25:2d:c4:96:36:0f:f8:4e:ad:a2:92: a2:1b:a5:31:a2:34:78:77:26:84:d4:57:be:6d:fd: 2b:67:4c:4e:6c:8f:28:e1:cf:4a:43:19:aa:7f:0b: cb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:70:07:50:1D:FE:E4:52:B6:CB:AE:13:6D:DE:25:D1:53:CC:A0:4C X509v3 Authority Key Identifier: keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:16:7d:e6:d2:1e:40:3c:b2:d8:8d:2a:59:bf:b6:d9:35:96: 58:b0:ae:bb:40:8e:e9:31:20:1b:c3:8e:7d:0f:5a:b7:0b:44: 11:fc:cf:9e:ed:14:54:db:d7:81:d2:25:82:58:61:b5:c5:d7: 3b:9a:e1:8c:a4:ba:7c:13:9e:91:c3:3f:8c:7a:dd:98:85:af: a5:cb:7f:1c:46:c2:fa:74:5d:3e:6e:a4:01:0d:a9:85:34:af: 90:35:92:77:53:39:0e:09:ec:cf:8f:71:86:0d:f2:ce:6e:ac: 75:d8:d5:4e:a1:62:1d:1a:a3:6c:81:c1:ce:be:c5:4f:37:da: 79:1b:73:2b:ec:61:ae:e0:d7:c2:85:fb:a3:34:95:03:43:06: ec:6b:9c:ff:43:22:0b:e0:72:7b:bc:89:6e:54:5d:c7:49:5a: a8:4d:2d:d2:76:cd:62:98:45:77:a8:a9:52:19:e2:b3:ce:09: 13:23:32:de:e9:29:d2:98:b4:00:9c:34:5e:90:e9:d4:b9:9f: 7a:9a:8b:9e:a3:f6:b2:bc:23:29:f7:5c:40:47:8d:d2:fe:3e: 1a:66:a3:a9:19:de:6a:9a:68:a3:90:30:65:98:80:8f:f5:dc: 3c:95:05:8f:43:38:6a:f1:05:67:02:bb:41:92:75:1c:87:46: 54:d1:20:68 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUB3cSp3ufYxFG71jV70tte6LcP6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUw RjgxOTZFQjAeFw0yNTA3MjMxNzIyMjlaFw0yNTA3MjQyMDQ5MjlaMDMxMTAvBgNV BAMTKEU0NzAwNzUwMURGRUU0NTJCNkNCQUUxMzZEREUyNUQxNTNDQ0EwNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY8gKKgxTQbfjCCgX4DU7tBEss hMzDLkuSKtQr/RPWMTkE9uPNfQEG5OpujqjeaKc+oqUmaMUKfYEDc58YJhfxLKGK 1ZMlds7Wx28aWaB0hjzDLQsuRw2duO3cJOHjZ6DxbTnYU5ICRf/+/mGBOHBqBD2c 1b2A5GrLDfXhxvLEsmOq/EoN8hnSKhK7axBIsBl/mLSJVYvbIph691T2nk3H70oM KUY+p7J/uGTbY1jJkGkgfxn9gV+vYJByFVAoxQTYDslXZQDshfAYS8ZcmXwyQfyF b6klLcSWNg/4Tq2ikqIbpTGiNHh3JoTUV75t/StnTE5sjyjhz0pDGap/C8u/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU5HAHUB3+5FK2y64Tbd4l0VPMoEwwHwYDVR0j BBgwFoAUE+GpmPd9fB/ylVwLaI/r/g+BluswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE1NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFm YWIyLzEvMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUwRjgxOTZFQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xM0UxQTk5OEY3N0Q3QzFGRjI5NTVDMEI2 ODhGRUJGRTBGODE5NkVCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAxNTc2NDdjLTkxZDYtNGEwNC04YTkxLWQxNTM4NWQxZmFiMi8xLzEzRTFBOTk4 Rjc3RDdDMUZGMjk1NUMwQjY4OEZFQkZFMEY4MTk2RUIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANFn3m 0h5APLLYjSpZv7bZNZZYsK67QI7pMSAbw459D1q3C0QR/M+e7RRU29eB0iWCWGG1 xdc7muGMpLp8E56Rwz+Met2Yha+ly38cRsL6dF0+bqQBDamFNK+QNZJ3UzkOCezP j3GGDfLObqx12NVOoWIdGqNsgcHOvsVPN9p5G3Mr7GGu4NfChfujNJUDQwbsa5z/ QyIL4HJ7vIluVF3HSVqoTS3Sds1imEV3qKlSGeKzzgkTIzLe6SnSmLQAnDRekOnU uZ96moueo/ayvCMp91xAR43S/j4aZqOpGd5qmmijkDBlmICP9dw8lQWPQzhq8QVn ArtBknUch0ZU0SBo -----END CERTIFICATE-----Generated at Thu Jul 24 14:08:04 2025 by rpki-client