$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft File: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft (raw, json) Hash identifier: uJky8vABxGi4KWgBx2qemOkX8QK1u4/bEuTGy35FdHc= Subject key identifier: C1:4F:3B:01:BE:3F:3B:D3:FD:0C:AB:6C:D8:13:E8:2F:DF:64:9C:06 Authority key identifier: 94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C Certificate issuer: /CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Certificate serial: 6E0C4475480DE44118A8168651A1FF29F62AD667 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft Manifest number: 8F Signing time: Wed 23 Jul 2025 03:43:49 +0000 Manifest this update: Wed 23 Jul 2025 03:38:49 +0000 Manifest next update: Thu 24 Jul 2025 05:17:49 +0000 Files and hashes: 1: 326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa (hash: MnToG5/hHH9Scp/i63sn6+7U3FU6WhprF2dCg9QmzZ4=) 2: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl (hash: 6VxiTqoJdeL48Ltq7sT1haJQnstt1iDtzcum1y2uUFc=) 3: 326131343a373538343a333030323a3a2f34382d3438203d3e203530313034.roa (hash: Crxg8Afd9H4uvcM/AEMgGkuEVpajXoOdPvRiA2PLFc4=) 4: 326131343a373538343a333030313a3a2f34382d3438203d3e20313532333638.roa (hash: RycjpThYIZhrgAMUdYbKLisjcTcczyRyV0B6ob/yXcs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:0c:44:75:48:0d:e4:41:18:a8:16:86:51:a1:ff:29:f6:2a:d6:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Validity Not Before: Jul 23 03:38:49 2025 GMT Not After : Jul 24 05:17:49 2025 GMT Subject: CN=C14F3B01BE3F3BD3FD0CAB6CD813E82FDF649C06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:89:38:c0:df:d2:20:93:09:55:70:b0:ea:f7: 37:3c:8b:0f:f7:7c:af:ba:e2:0c:db:cb:b6:3e:27: 14:cc:7e:99:3e:26:c3:44:9c:ff:16:ce:aa:b1:24: 6a:17:f1:39:11:d6:25:4d:c0:d1:43:15:c1:34:7e: b0:1d:e9:43:97:9e:43:e9:67:58:77:30:f7:33:34: 57:11:22:a1:0c:53:17:45:05:35:3a:b2:4e:a7:e1: 8a:c0:e9:a1:3a:7c:32:40:2a:b1:97:fc:3f:18:07: 1f:15:d5:2f:ec:0e:3a:77:13:c7:d6:21:62:60:b7: 58:80:28:73:32:dc:80:d1:1c:ee:1a:a2:1b:29:4d: 7c:18:08:dd:90:22:0a:e1:08:e7:6d:b0:ee:da:54: 18:46:2e:f0:06:be:b4:68:07:57:8b:5f:08:9a:04: 5d:b0:a5:74:c7:e4:9c:df:b8:dc:65:8b:cb:f3:67: 56:71:0a:c6:44:c7:2b:fd:86:ae:d1:33:03:90:2e: f5:f7:24:a4:cc:45:38:f6:b7:e6:a3:7f:1c:7c:28: 2e:52:7e:86:48:72:17:0e:6c:37:a0:67:7c:93:8f: 08:e1:50:eb:e7:10:ff:9f:ba:11:02:81:e3:b3:71: 1c:5d:32:88:e3:86:00:b9:8e:e2:25:d1:6f:f9:68: b2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4F:3B:01:BE:3F:3B:D3:FD:0C:AB:6C:D8:13:E8:2F:DF:64:9C:06 X509v3 Authority Key Identifier: keyid:94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:90:63:70:3d:64:29:c1:09:a8:54:ba:3b:49:5b:83:37:ab: da:50:93:36:cd:ed:a9:65:70:b4:e9:94:e3:4f:23:49:46:15: 33:36:27:1b:1b:af:cb:43:d9:2d:d7:b8:25:93:d4:ad:80:2d: d9:60:17:f7:e8:42:4d:20:88:90:fc:e5:02:9b:45:ef:c3:58: ac:1c:ca:7a:b2:dd:11:b3:2b:d0:ca:53:e2:92:62:cb:c9:27: 71:d3:55:4f:22:7d:15:4b:65:23:60:2b:64:65:0a:ed:92:94: d4:c3:01:de:ea:3a:2b:4f:45:25:ff:db:07:73:e7:16:a9:bd: b2:0c:d1:11:a3:30:44:25:aa:ae:6d:2d:44:29:de:54:b7:4b: 00:43:63:53:e3:ff:0c:d5:8b:d1:75:d1:16:c5:e8:ce:f1:9b: da:9e:f6:28:4a:31:d5:72:49:fd:ad:a2:b1:08:d7:b2:1d:77: e1:ae:ba:ff:e8:9d:72:a8:06:e6:bd:51:d7:c2:47:54:8e:10: 3a:01:42:89:f8:13:2f:9f:45:ea:28:4d:be:1f:bc:4e:22:e6: 4e:15:42:ce:4d:18:75:ab:a6:46:d6:7b:47:27:f8:8e:a7:64: 9b:1f:64:8d:cd:c9:91:a7:6e:c8:1b:97:68:2d:cd:d2:d4:81: 96:62:0d:5e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbgxEdUgN5EEYqBaGUaH/KfYq1mcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkx QjI3QUQ5QzAeFw0yNTA3MjMwMzM4NDlaFw0yNTA3MjQwNTE3NDlaMDMxMTAvBgNV BAMTKEMxNEYzQjAxQkUzRjNCRDNGRDBDQUI2Q0Q4MTNFODJGREY2NDlDMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpiTjA39IgkwlVcLDq9zc8iw/3 fK+64gzby7Y+JxTMfpk+JsNEnP8WzqqxJGoX8TkR1iVNwNFDFcE0frAd6UOXnkPp Z1h3MPczNFcRIqEMUxdFBTU6sk6n4YrA6aE6fDJAKrGX/D8YBx8V1S/sDjp3E8fW IWJgt1iAKHMy3IDRHO4aohspTXwYCN2QIgrhCOdtsO7aVBhGLvAGvrRoB1eLXwia BF2wpXTH5JzfuNxli8vzZ1ZxCsZExyv9hq7RMwOQLvX3JKTMRTj2t+ajfxx8KC5S foZIchcObDegZ3yTjwjhUOvnEP+fuhECgeOzcRxdMojjhgC5juIl0W/5aLLVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUwU87Ab4/O9P9DKts2BPoL99knAYwHwYDVR0j BBgwFoAUlG3hXTS+riTinqFqP+HmWRsnrZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzcvOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkxQjI3QUQ5Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85NDZERTE1RDM0QkVBRTI0RTI5RUExNkEz RkUxRTY1OTFCMjdBRDlDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzFiZDMwNmI0LWU1YzMtNDhmOS1iMmVlLTM2YTliZGRlZDhjNC83Lzk0NkRFMTVE MzRCRUFFMjRFMjlFQTE2QTNGRTFFNjU5MUIyN0FEOUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5kGNw PWQpwQmoVLo7SVuDN6vaUJM2ze2pZXC06ZTjTyNJRhUzNicbG6/LQ9kt17glk9St gC3ZYBf36EJNIIiQ/OUCm0Xvw1isHMp6st0RsyvQylPikmLLySdx01VPIn0VS2Uj YCtkZQrtkpTUwwHe6jorT0Ul/9sHc+cWqb2yDNERozBEJaqubS1EKd5Ut0sAQ2NT 4/8M1YvRddEWxejO8ZvanvYoSjHVckn9raKxCNeyHXfhrrr/6J1yqAbmvVHXwkdU jhA6AUKJ+BMvn0XqKE2+H7xOIuZOFULOTRh1q6ZG1ntHJ/iOp2SbH2SNzcmRp27I G5doLc3S1IGWYg1e -----END CERTIFICATE-----Generated at Wed Jul 23 06:21:59 2025 by rpki-client