$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: d+MrM4G/9+wmgIGBKTLhkCh3HjFAITmbF9SSOKs+eN0= Subject key identifier: 35:2D:38:7E:BA:7B:22:C9:E0:92:1C:95:8C:82:C2:EA:6B:7F:5A:05 Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 15D55378DF54F236E444D0A2C41C9DA253BDC65A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 01D5 Signing time: Wed 23 Jul 2025 09:43:52 +0000 Manifest this update: Wed 23 Jul 2025 09:38:52 +0000 Manifest next update: Thu 24 Jul 2025 10:03:52 +0000 Files and hashes: 1: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: 0Augomo0JPTrdfBB/3ITj/ZgfSBftNdAdE/vOPCbcS0=) 2: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: 0gWAq1ovCrIPbHq0xSdR0ynK6Q0J1sy7mdNzYvD9+tI=) 3: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: 1o4m8PJbpPTt/WwCt8wMPBTEbmCl+8vcVtrKZbTYjFM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 02:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d5:53:78:df:54:f2:36:e4:44:d0:a2:c4:1c:9d:a2:53:bd:c6:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Jul 23 09:38:52 2025 GMT Not After : Jul 24 10:03:52 2025 GMT Subject: CN=352D387EBA7B22C9E0921C958C82C2EA6B7F5A05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:88:a8:99:f1:30:1f:07:f0:72:ef:20:be:c9: 1d:2c:61:9b:e2:30:5d:2c:6a:d7:c5:28:8a:7f:92: 40:60:84:df:1c:ac:ca:b7:43:da:d7:49:33:41:4e: 83:3d:03:41:5e:68:e4:21:f2:5c:b2:47:7f:b4:c6: 7a:42:8e:48:fc:28:0d:a1:37:ba:ff:ab:2c:cf:1c: 7e:ac:fc:d4:99:55:59:49:45:f4:c2:cd:e8:a8:08: c4:77:7a:24:0d:71:c5:3b:50:3a:03:1c:94:dd:86: ea:cc:ec:5c:80:38:4b:9f:96:ef:be:eb:5a:95:d1: 5c:28:1e:6f:c1:d1:ea:ed:19:09:69:2e:51:6a:6d: 05:13:7a:62:28:eb:b1:d3:2d:d1:0f:60:38:87:30: 4c:f4:51:23:a4:8e:fd:fb:75:29:f8:b3:9d:49:36: 90:bc:92:68:9d:97:dd:79:82:76:29:67:ee:dc:01: 9e:fc:f6:f8:f5:a2:e5:00:3f:bd:00:fd:f0:ff:71: 69:a2:08:da:4a:18:0b:6a:92:0f:e6:5c:81:39:fe: d9:70:17:98:4f:36:9a:2a:06:f0:6b:1f:df:c2:84: 1e:55:0e:c0:b5:4f:47:27:27:12:12:34:3c:48:17: 76:69:c3:93:5f:1f:b0:b0:58:4c:b5:ef:e6:39:e0: 96:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2D:38:7E:BA:7B:22:C9:E0:92:1C:95:8C:82:C2:EA:6B:7F:5A:05 X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:c9:f9:cf:92:2f:a4:2b:ff:8c:24:7d:93:f3:85:68:98:8e: c4:87:2d:4d:e1:70:f8:90:c0:25:a3:1c:01:e1:6b:6f:b1:f0: fe:be:48:b7:25:cb:69:8c:db:43:b1:3f:c9:52:ef:95:2e:04: a6:bf:a7:dc:12:71:62:83:40:72:32:87:57:81:bf:16:73:91: a2:b7:0a:9e:4c:0c:63:fc:fb:52:e3:97:fb:eb:41:5d:4d:bc: ce:a4:fd:24:b0:2c:88:c4:81:19:34:c3:64:d0:ef:03:96:1f: 0a:49:8e:a9:13:94:55:ae:b3:1a:5b:02:c2:37:65:f6:93:a1: 76:e7:86:87:9f:af:9c:0f:c3:73:71:3e:c5:b4:f0:4c:8b:74: bb:e2:3a:1d:31:72:93:76:55:ac:69:31:1b:85:cc:56:e4:44: 0e:82:d6:1b:f2:53:36:68:ab:a5:f6:02:de:89:e7:04:db:21: 7d:b6:ed:18:7f:9c:bf:a3:23:6f:13:00:ea:3e:b0:be:1f:c5: 2d:79:0f:22:f1:d2:cb:68:8a:d6:89:d8:ae:1d:92:3c:b2:06: 1d:2f:5b:99:d4:5f:7f:71:2a:c9:16:89:d8:bb:f5:9c:5d:d0: 58:28:e3:63:ce:0e:d8:8b:11:af:75:14:56:2f:91:44:3a:5b: 57:3e:2a:66 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFdVTeN9U8jbkRNCixBydolO9xlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNTA3MjMwOTM4NTJaFw0yNTA3MjQxMDAzNTJaMDMxMTAvBgNV BAMTKDM1MkQzODdFQkE3QjIyQzlFMDkyMUM5NThDODJDMkVBNkI3RjVBMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaiKiZ8TAfB/By7yC+yR0sYZvi MF0satfFKIp/kkBghN8crMq3Q9rXSTNBToM9A0FeaOQh8lyyR3+0xnpCjkj8KA2h N7r/qyzPHH6s/NSZVVlJRfTCzeioCMR3eiQNccU7UDoDHJTdhurM7FyAOEuflu++ 61qV0VwoHm/B0ertGQlpLlFqbQUTemIo67HTLdEPYDiHMEz0USOkjv37dSn4s51J NpC8kmidl915gnYpZ+7cAZ789vj1ouUAP70A/fD/cWmiCNpKGAtqkg/mXIE5/tlw F5hPNpoqBvBrH9/ChB5VDsC1T0cnJxISNDxIF3Zpw5NfH7CwWEy17+Y54JYdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUNS04frp7IsngkhyVjILC6mt/WgUwHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSyfnP ki+kK/+MJH2T84VomI7Ehy1N4XD4kMAloxwB4WtvsfD+vki3JctpjNtDsT/JUu+V LgSmv6fcEnFig0ByModXgb8Wc5GitwqeTAxj/PtS45f760FdTbzOpP0ksCyIxIEZ NMNk0O8Dlh8KSY6pE5RVrrMaWwLCN2X2k6F254aHn6+cD8NzcT7FtPBMi3S74jod MXKTdlWsaTEbhcxW5EQOgtYb8lM2aKul9gLeiecE2yF9tu0Yf5y/oyNvEwDqPrC+ H8UteQ8i8dLLaIrWidiuHZI8sgYdL1uZ1F9/cSrJFonYu/WcXdBYKONjzg7YixGv dRRWL5FEOltXPipm -----END CERTIFICATE-----Generated at Wed Jul 23 12:44:36 2025 by rpki-client