$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft File: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json) Hash identifier: 48pKWvApqWVCnu1IJMr1LcXzyBehKYnJiZXgxIE7bjU= Subject key identifier: 76:3C:AA:A9:2F:2B:1C:1D:8B:2A:E5:F9:96:C0:07:B5:9E:42:B3:60 Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Certificate serial: 5ED3CF2671AD39D2B29D6B8E8DACDBF2F4D33C40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft Manifest number: 043E Signing time: Mon 21 Jul 2025 19:36:54 +0000 Manifest this update: Mon 21 Jul 2025 19:31:54 +0000 Manifest next update: Tue 22 Jul 2025 22:51:54 +0000 Files and hashes: 1: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: 4jq0qwMJqWtfRUuzz3vPyKHtua4FM5/8Y3cvVGfTKBM=) 2: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: MBTQi0HOcbTwY/4fQl+vTOHLOQ2FmR/EhBIZ6Dj3u14=) 3: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: EQc8ZSWRYu3w3yABE1KT+uLZnchUtUDhUBMKc9gsz8U=) 4: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: lxi2m0tJ4IwcIv1Qu/mxuwgzf8BGdtHdxfKNM9mKZEQ=) 5: 34362e3138332e32392e302f32342d3234203d3e20313734.roa (hash: +2zC2IoOcCso/mftEuke8EnaYM8a1UxQtmNUmYAEM7o=) 6: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: ii72WRjo+pDoTtYybgLKaFsOG8JUV0CPdunTnf7/tAg=) 7: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: pxnqedD3kuwz1m+9x0q4e9R46P3xXGAP6tM7JZr4zqQ=) 8: 34362e3138332e33312e302f32342d3234203d3e20383334.roa (hash: xUsUi3YtopFm9VP8hMqKJ5OknqKCy1oSAbxFuFcm2oA=) 9: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: kCySCwW6IO61RHIuAq14M1hmm1Soy9LW9ENlKwYILm0=) 10: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: U6sIE1tc5XNg8Vw7jnbxLLCNANnB9wH3voxb1FhuZwc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 22:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d3:cf:26:71:ad:39:d2:b2:9d:6b:8e:8d:ac:db:f2:f4:d3:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Validity Not Before: Jul 21 19:31:54 2025 GMT Not After : Jul 22 22:51:54 2025 GMT Subject: CN=763CAAA92F2B1C1D8B2AE5F996C007B59E42B360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f0:45:28:c7:1a:6a:38:1b:92:45:98:da:06: d9:9e:73:92:ac:7a:57:5a:d6:51:9e:4a:4c:84:77: bb:02:93:01:51:3e:96:ee:12:24:09:ba:8d:c0:f0: 08:4b:3f:1e:56:37:31:80:50:37:4d:e6:80:d8:ce: 87:3b:50:92:f5:13:d8:a3:36:e4:de:6d:4e:1d:0f: 85:a9:26:c9:12:c4:46:1e:0f:00:47:c6:48:5a:02: 0e:4a:5f:50:0b:2c:07:3a:1a:18:23:e3:05:94:16: 3d:e1:8f:d9:df:67:9c:50:69:a7:8a:4b:69:f9:22: b8:57:3b:ee:e1:3d:2b:7c:b7:64:56:d3:73:9d:39: ff:84:ac:73:cc:4b:42:c6:94:71:a3:33:fd:74:a6: 38:69:35:4a:eb:0a:ad:61:c0:c1:f2:24:af:08:71: d6:3a:69:eb:67:1b:87:5a:06:ea:5f:47:2e:12:c4: 50:6d:89:11:ae:5d:f0:de:f3:74:30:b1:88:b9:87: 89:1c:bf:ee:18:bf:a2:e1:13:c2:e3:dd:fd:b4:60: 7d:b8:2c:1e:c3:c1:d8:8e:11:58:34:8a:64:38:70: 6a:a8:09:f2:41:ed:6e:05:bb:67:2a:1a:af:f6:6c: 28:e2:7d:88:cc:63:6f:35:a8:fd:14:b9:83:d6:e2: c0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3C:AA:A9:2F:2B:1C:1D:8B:2A:E5:F9:96:C0:07:B5:9E:42:B3:60 X509v3 Authority Key Identifier: keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:a2:ec:66:09:c0:fd:6b:41:d9:b6:91:5c:f9:c5:9b:3f:77: 02:18:91:47:03:50:6a:83:44:a3:b1:e3:9d:4b:30:06:0a:37: 2e:3f:a5:29:70:b8:04:ad:2f:54:f3:12:ba:40:68:87:1e:f0: 46:b1:76:67:fd:86:12:0d:42:ce:b7:50:53:08:5b:9a:56:15: 94:73:2f:69:60:da:64:06:3e:d9:4b:61:c2:07:7a:4d:03:4e: c0:42:15:98:d5:52:ff:b1:c7:8b:01:99:c7:5a:71:59:88:31: d6:39:d4:eb:cf:b3:98:0f:38:de:77:9d:f5:e8:0d:93:9b:14: b9:3f:cb:7f:4e:9c:e0:5a:5e:e5:95:84:b7:ac:1f:9c:70:e0: 00:d8:03:21:1f:24:ec:42:34:e5:a1:2e:38:aa:80:6b:c1:1a: d2:34:ea:0f:e2:51:93:9d:da:65:51:c3:90:99:c1:75:b8:f6: f9:9a:a8:12:6a:d2:61:93:90:6f:c4:26:86:11:13:c2:76:7a: d5:87:11:92:56:8a:76:5b:a3:14:0f:08:fb:b6:38:fa:d4:a4: 1d:b2:17:49:53:ab:ec:85:cc:6e:c7:51:e0:18:77:47:53:35: 0c:e4:67:3d:a9:24:11:db:fb:75:a4:3d:4f:f5:dc:e2:b4:c2: 8b:42:d8:0d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXtPPJnGtOdKynWuOjazb8vTTPEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj YzY3N2IwMDAeFw0yNTA3MjExOTMxNTRaFw0yNTA3MjIyMjUxNTRaMDMxMTAvBgNV BAMTKDc2M0NBQUE5MkYyQjFDMUQ4QjJBRTVGOTk2QzAwN0I1OUU0MkIzNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz8EUoxxpqOBuSRZjaBtmec5Ks elda1lGeSkyEd7sCkwFRPpbuEiQJuo3A8AhLPx5WNzGAUDdN5oDYzoc7UJL1E9ij NuTebU4dD4WpJskSxEYeDwBHxkhaAg5KX1ALLAc6Ghgj4wWUFj3hj9nfZ5xQaaeK S2n5IrhXO+7hPSt8t2RW03OdOf+ErHPMS0LGlHGjM/10pjhpNUrrCq1hwMHyJK8I cdY6aetnG4daBupfRy4SxFBtiRGuXfDe83QwsYi5h4kcv+4Yv6LhE8Lj3f20YH24 LB7DwdiOEVg0imQ4cGqoCfJB7W4Fu2cqGq/2bCjifYjMY281qP0UuYPW4sB7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUdjyqqS8rHB2LKuX5lsAHtZ5Cs2AwHwYDVR0j BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0 Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4 bmV3QS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xNmFjYjlhMC02 ZDFlLTRhZTQtOTE3Ny1kOTM4ZTk4MDQzOTUvMC8yNEU1Mzc4OEJENEVGQTIzQjFB ODIwN0I3RTc0QThFMUNDNjc3QjAwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6LsZgnA/WtB2baRXPnF mz93AhiRRwNQaoNEo7HjnUswBgo3Lj+lKXC4BK0vVPMSukBohx7wRrF2Z/2GEg1C zrdQUwhbmlYVlHMvaWDaZAY+2Uthwgd6TQNOwEIVmNVS/7HHiwGZx1pxWYgx1jnU 68+zmA843ned9egNk5sUuT/Lf06c4Fpe5ZWEt6wfnHDgANgDIR8k7EI05aEuOKqA a8Ea0jTqD+JRk53aZVHDkJnBdbj2+ZqoEmrSYZOQb8QmhhETwnZ61YcRklaKdluj FA8I+7Y4+tSkHbIXSVOr7IXMbsdR4Bh3R1M1DORnPakkEdv7daQ9T/Xc4rTCi0LY DQ== -----END CERTIFICATE-----Generated at Tue Jul 22 12:29:52 2025 by rpki-client