$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: wzrEQWGoxD2ywnuJLS6KH+I5ynji+RxVRct8BSV33Pw= Subject key identifier: DD:0D:86:03:C2:1A:6E:48:60:13:72:66:07:32:5F:01:C0:E2:1C:2C Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 25F88C598F8F4598EEAEBDA4F9176F54B6DA23E4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: DD Signing time: Mon 21 Jul 2025 02:14:36 +0000 Manifest this update: Mon 21 Jul 2025 02:09:36 +0000 Manifest next update: Tue 22 Jul 2025 02:28:36 +0000 Files and hashes: 1: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: MorJ8/zqWP+ENMZ78Dfg8lahRlU/VfcwHwmQyMuE7hc=) 2: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: c2hpl8Ne9Fe28puQEoSrA7Ie9Q3XS0o2E9Yl+x++Km8=) 3: 326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa (hash: /ul2/wI6OjmF90yvjh37x7TtdkRoh3MUQv78SD8t7W0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 02:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f8:8c:59:8f:8f:45:98:ee:ae:bd:a4:f9:17:6f:54:b6:da:23:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Jul 21 02:09:36 2025 GMT Not After : Jul 22 02:28:36 2025 GMT Subject: CN=DD0D8603C21A6E486013726607325F01C0E21C2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:89:a0:40:6d:46:dd:8e:63:5b:6b:ca:94:50: 25:3b:bf:f4:d2:32:6b:1e:2a:83:9f:1f:e1:7e:2d: 49:90:33:c5:00:4f:b1:8d:42:28:7f:2d:57:03:bc: 06:94:91:16:ef:28:3b:19:11:b4:08:01:0d:b0:63: c6:f2:2a:f2:a9:2e:5c:a7:97:c4:f7:d4:6c:41:89: 09:b7:3e:0d:00:cf:e4:74:f6:80:5b:8b:3d:c9:6e: c3:71:a2:24:a1:34:e3:7c:9d:1c:c1:2f:67:84:77: 40:10:9f:ee:4c:08:ca:46:42:24:7c:a7:cb:46:2c: 71:4d:5c:52:df:7a:b3:99:40:f6:1d:10:5d:6d:4d: 5d:7d:39:93:31:ba:4a:e4:0f:c9:76:66:e6:fe:32: ee:6b:4d:07:b8:84:76:d4:fd:5a:c5:2d:12:a4:06: b4:42:b7:80:ef:b8:59:ad:cd:61:fa:0b:4b:10:90: 08:5d:8c:4d:c7:3d:86:c3:d7:14:88:7c:c9:d0:a9: 0b:00:b9:70:2c:94:b2:39:b8:bb:20:20:5f:96:7c: 6d:ae:3e:62:e2:1e:57:f6:0e:88:55:33:45:d5:df: 92:93:ad:50:55:dd:7e:15:56:91:c6:e9:59:23:0b: 9f:01:a3:b7:79:38:84:78:c9:78:54:18:b8:e3:a4: 15:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0D:86:03:C2:1A:6E:48:60:13:72:66:07:32:5F:01:C0:E2:1C:2C X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:81:c4:76:11:0f:58:80:3a:1e:59:e9:cb:1d:d0:de:da:bc: 74:45:23:c0:84:ea:e8:6f:49:80:18:87:73:6f:85:0e:4d:15: 7b:12:e6:16:77:34:33:a0:4e:af:20:a9:74:c7:42:09:a8:4a: 13:a5:bf:7c:25:91:f6:aa:7e:a6:c5:b0:c2:ed:1c:26:01:02: 7f:3f:8f:bd:8e:04:9c:b8:08:f0:f7:b6:0f:04:ca:08:9d:f9: 4f:57:39:5f:a1:22:da:c5:96:ff:09:4c:c3:1c:0a:e9:10:29: 55:1d:a8:d2:22:de:cb:68:ae:97:a1:7b:20:aa:06:9b:5d:b9: 72:53:07:87:89:c2:17:9a:78:e1:f8:c3:26:18:dd:72:73:ea: 68:1a:94:b5:60:e2:fb:5d:89:82:8e:df:d6:34:31:0e:06:0a: 9b:cb:e9:a7:b9:4b:ef:5c:d5:5e:30:36:d6:b2:96:a1:ef:d6: f9:60:bd:0e:aa:2c:4b:b8:cd:c5:fd:02:a2:a2:1e:a2:4a:b9: 45:c8:48:0d:91:24:99:aa:b7:19:15:32:64:f2:2f:5f:fe:22: 27:45:bb:55:1a:fe:78:ec:66:88:cb:3d:72:05:2a:71:ab:7e: c3:3d:b4:eb:5a:5c:8b:1d:df:c0:f4:9d:5d:97:de:df:22:d7: 1b:1c:b1:12 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJfiMWY+PRZjurr2k+RdvVLbaI+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNTA3MjEwMjA5MzZaFw0yNTA3MjIwMjI4MzZaMDMxMTAvBgNV BAMTKEREMEQ4NjAzQzIxQTZFNDg2MDEzNzI2NjA3MzI1RjAxQzBFMjFDMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCziaBAbUbdjmNba8qUUCU7v/TS MmseKoOfH+F+LUmQM8UAT7GNQih/LVcDvAaUkRbvKDsZEbQIAQ2wY8byKvKpLlyn l8T31GxBiQm3Pg0Az+R09oBbiz3JbsNxoiShNON8nRzBL2eEd0AQn+5MCMpGQiR8 p8tGLHFNXFLferOZQPYdEF1tTV19OZMxukrkD8l2Zub+Mu5rTQe4hHbU/VrFLRKk BrRCt4DvuFmtzWH6C0sQkAhdjE3HPYbD1xSIfMnQqQsAuXAslLI5uLsgIF+WfG2u PmLiHlf2DohVM0XV35KTrVBV3X4VVpHG6VkjC58Bo7d5OIR4yXhUGLjjpBXtAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU3Q2GA8IabkhgE3JmBzJfAcDiHCwwHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAagcR2 EQ9YgDoeWenLHdDe2rx0RSPAhOrob0mAGIdzb4UOTRV7EuYWdzQzoE6vIKl0x0IJ qEoTpb98JZH2qn6mxbDC7RwmAQJ/P4+9jgScuAjw97YPBMoInflPVzlfoSLaxZb/ CUzDHArpEClVHajSIt7LaK6XoXsgqgabXblyUweHicIXmnjh+MMmGN1yc+poGpS1 YOL7XYmCjt/WNDEOBgqby+mnuUvvXNVeMDbWspah79b5YL0OqixLuM3F/QKioh6i SrlFyEgNkSSZqrcZFTJk8i9f/iInRbtVGv547GaIyz1yBSpxq37DPbTrWlyLHd/A 9J1dl97fItcbHLES -----END CERTIFICATE-----Generated at Mon Jul 21 18:07:13 2025 by rpki-client