$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft File: 1498141819112B8446C2D4A3111F53038F05DBE9.mft (raw, json) Hash identifier: yOHs7YiZIv4xtjA5/pmsxpLX1z1MT/L0xiyasoVal7g= Subject key identifier: 6E:D9:52:D7:9F:90:F3:BB:B2:D8:7D:C4:64:19:54:19:E0:F7:8D:EA Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9 Certificate serial: 43CD1E4A12ACD6E6A3E95EF56E0CDB30844F46D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft Manifest number: 4C Signing time: Mon 21 Jul 2025 16:31:52 +0000 Manifest this update: Mon 21 Jul 2025 16:26:52 +0000 Manifest next update: Tue 22 Jul 2025 20:00:52 +0000 Files and hashes: 1: 3138352e39312e3131322e302f32342d3234203d3e203136323736.roa (hash: 816LcoMP7IzyrdlbDQQeycStorYxYzCTT1WckHhtHIY=) 2: 3138352e39312e3131332e302f32342d3234203d3e20323134323038.roa (hash: qSSu/jTa9CtmAhgZlrJ1s4QldXeKp0EqfLu29FuP5Zs=) 3: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (hash: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=) 4: 1498141819112B8446C2D4A3111F53038F05DBE9.crl (hash: MlHNiVTBjTdkeL7vovLiAkhvEGOkvxUy5BMPzifdX9Q=) 5: 3138352e39312e3131352e302f32342d3234203d3e20383334.roa (hash: zzyNY9Z380nf52h8GF7GR/wABw1X/Wthebqe+5mqapg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:cd:1e:4a:12:ac:d6:e6:a3:e9:5e:f5:6e:0c:db:30:84:4f:46:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9 Validity Not Before: Jul 21 16:26:52 2025 GMT Not After : Jul 22 20:00:52 2025 GMT Subject: CN=6ED952D79F90F3BBB2D87DC464195419E0F78DEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:de:e6:3d:9b:fc:fd:02:ef:d2:c9:a9:7b:d0: ae:56:a6:09:fa:05:1d:26:cb:ce:39:37:5e:ff:b8: 8f:65:dd:c7:c3:a2:ec:10:6c:25:2d:f2:79:90:b5: 00:8c:a0:a6:59:03:6b:39:46:c8:51:b7:7b:b5:ae: 53:62:15:f2:b7:ef:05:81:16:c5:ca:4a:49:29:11: 56:a4:29:2e:59:e1:e1:a6:ce:83:dd:af:79:44:c4: 0f:83:26:8b:22:23:20:67:3f:1b:a0:58:b8:ad:d1: 12:d3:7b:65:78:6b:df:c8:16:0d:ab:cb:e4:4d:b2: 91:d4:ce:9f:d6:6f:f6:e9:6b:f4:0d:51:b9:9f:07: 27:80:24:b9:a9:dd:6e:6b:13:10:f0:a7:b8:cf:3f: 5d:47:8d:f4:b5:50:3a:36:d7:a2:3c:55:bf:b1:a6: 50:1b:02:e7:87:89:32:fd:4b:dc:f3:94:ed:90:24: 90:6b:b0:c3:56:99:18:87:63:dd:f1:c6:f0:39:15: 02:17:2c:87:35:33:49:cf:1f:3c:bf:c0:df:30:66: 3c:f7:ac:61:0c:0c:76:bf:f3:34:97:06:48:d7:07: 5e:ce:ea:5c:01:b8:9e:5d:e5:e3:f6:75:ce:05:32: 56:79:ae:1e:24:c8:6c:21:5a:ff:7c:1d:39:4b:53: f6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D9:52:D7:9F:90:F3:BB:B2:D8:7D:C4:64:19:54:19:E0:F7:8D:EA X509v3 Authority Key Identifier: keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:79:8f:0a:7b:ea:f1:7f:9b:54:de:84:a7:ab:71:2c:b1:17: 11:37:6a:88:4f:ee:b5:9a:69:aa:14:ac:bd:11:ea:a3:bf:df: a6:3e:7c:73:92:05:fa:e5:3f:57:e7:18:f5:1f:e0:b3:0b:8e: 0f:7d:02:a1:f1:92:ad:ff:4b:1b:f6:24:2a:a1:ce:64:88:83: 8e:36:48:2a:9d:c4:4b:32:d7:41:20:50:a7:bc:ff:00:1e:ae: f4:5f:d6:9c:cf:10:58:27:71:02:33:2c:cd:f1:8e:f7:8c:d7: fc:54:3f:62:0e:38:d1:c5:8c:37:69:06:ac:c5:cc:66:63:d5: 45:2c:31:94:be:d7:a7:5e:8e:d2:c8:e7:e7:77:5d:83:20:fb: e9:90:e7:44:a0:96:7b:f0:3b:72:14:2e:99:b1:3d:2b:24:70: d5:ad:42:bf:9f:cb:6f:fa:23:e5:ff:c5:52:b3:0d:d1:2c:d2: 39:c4:37:d0:47:da:16:63:6c:7f:15:de:7c:d9:7d:ac:35:20: 69:0a:40:18:03:14:96:f2:c8:5d:b6:2b:ad:f4:69:08:53:91: b2:d1:a8:c8:88:83:97:e2:c7:d9:e2:a4:72:cd:d6:38:83:d6: bf:ff:41:49:3c:35:59:c8:c2:a0:79:4a:33:d6:e9:7e:cc:bf: 87:01:96:17 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQ80eShKs1uaj6V71bgzbMIRPRtAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5ODE0MTgxOTExMmI4NDQ2YzJkNGEzMTExZjUzMDM4 ZjA1ZGJlOTAeFw0yNTA3MjExNjI2NTJaFw0yNTA3MjIyMDAwNTJaMDMxMTAvBgNV BAMTKDZFRDk1MkQ3OUY5MEYzQkJCMkQ4N0RDNDY0MTk1NDE5RTBGNzhERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK3uY9m/z9Au/Syal70K5Wpgn6 BR0my845N17/uI9l3cfDouwQbCUt8nmQtQCMoKZZA2s5RshRt3u1rlNiFfK37wWB FsXKSkkpEVakKS5Z4eGmzoPdr3lExA+DJosiIyBnPxugWLit0RLTe2V4a9/IFg2r y+RNspHUzp/Wb/bpa/QNUbmfByeAJLmp3W5rExDwp7jPP11HjfS1UDo216I8Vb+x plAbAueHiTL9S9zzlO2QJJBrsMNWmRiHY93xxvA5FQIXLIc1M0nPHzy/wN8wZjz3 rGEMDHa/8zSXBkjXB17O6lwBuJ5d5eP2dc4FMlZ5rh4kyGwhWv98HTlLU/ZRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUbtlS15+Q87uy2H3EZBlUGeD3jeowHwYDVR0j BBgwFoAUFJgUGBkRK4RGwtSjER9TA48F2+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQtZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5 ODk3LzAvMTQ5ODE0MTgxOTExMkI4NDQ2QzJENEEzMTExRjUzMDM4RjA1REJFOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ZKZ1VHQmtSSzRSR3d0U2pFUjlUQTQ4 RjItay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOTA2NmY1ZC1l Y2MxLTQ5MjctOTVjMS1lMWE4ZGY4Zjk4OTcvMC8xNDk4MTQxODE5MTEyQjg0NDZD MkQ0QTMxMTFGNTMwMzhGMDVEQkU5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnmPCnvq8X+bVN6Ep6tx LLEXETdqiE/utZppqhSsvRHqo7/fpj58c5IF+uU/V+cY9R/gswuOD30CofGSrf9L G/YkKqHOZIiDjjZIKp3ESzLXQSBQp7z/AB6u9F/WnM8QWCdxAjMszfGO94zX/FQ/ Yg440cWMN2kGrMXMZmPVRSwxlL7Xp16O0sjn53ddgyD76ZDnRKCWe/A7chQumbE9 KyRw1a1Cv5/Lb/oj5f/FUrMN0SzSOcQ30EfaFmNsfxXefNl9rDUgaQpAGAMUlvLI XbYrrfRpCFORstGoyIiDl+LH2eKkcs3WOIPWv/9BSTw1WcjCoHlKM9bpfsy/hwGW Fw== -----END CERTIFICATE-----Generated at Tue Jul 22 04:15:18 2025 by rpki-client