$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft File: 307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json) Hash identifier: XoD24Ac8XtKgt62Vjy3q/Z0hAY+zQ8+8eDvYfUf7rpM= Subject key identifier: DF:2A:25:E7:EE:86:FB:28:8D:A7:EA:04:2F:A4:D6:06:B3:DF:67:EC Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 Certificate issuer: /CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Certificate serial: 7D9E9ECF26DDA644CE4C29F8714A796D5A43B4BC Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft Manifest number: 0A Signing time: Sun 27 Jul 2025 11:57:40 +0000 Manifest this update: Sun 27 Jul 2025 11:52:40 +0000 Manifest next update: Mon 28 Jul 2025 13:26:40 +0000 Files and hashes: 1: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: SA6WzuH0MbXay9cKZ1dqWiOSeZ+mNPS6aKkHv4sWixE=) 2: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: aBp6U2aVMH3hSM5eeFVi+p63pJd0WYDoQYC72uEJ/w8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 06:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:9e:9e:cf:26:dd:a6:44:ce:4c:29:f8:71:4a:79:6d:5a:43:b4:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0 Validity Not Before: Jul 27 11:52:40 2025 GMT Not After : Jul 28 13:26:40 2025 GMT Subject: CN=DF2A25E7EE86FB288DA7EA042FA4D606B3DF67EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:91:83:c9:df:84:5c:e9:4c:3f:9d:90:de: 01:79:31:d8:ea:55:58:b6:48:e9:bf:0b:b8:88:48: 0a:d5:3d:18:ad:eb:54:a5:a7:93:65:b4:c9:72:3d: 16:24:6f:0b:76:d9:0c:d1:a6:19:c4:2d:87:b3:a6: 64:b0:71:f0:0b:da:5a:15:de:e2:f4:54:54:75:3d: 2c:c6:39:ba:b9:b9:fe:be:8d:bb:bb:53:4b:2d:a2: 72:6d:f0:85:3d:34:0b:01:5b:4e:8f:0f:a1:b1:87: 36:d5:17:c0:28:82:76:8a:85:4a:4e:8d:3b:de:54: 93:29:6a:84:84:91:3e:12:d4:6e:26:f0:f0:29:37: 72:b7:bc:24:ef:de:55:7d:ef:5b:a6:e6:6e:b9:1b: 22:a3:de:5e:0e:dd:c1:40:65:d1:16:49:d9:a7:ee: 6a:49:e5:a7:61:0e:3c:2d:55:bd:19:73:ae:e9:29: 09:8f:13:67:e0:92:9a:d8:3c:3c:f1:11:f4:5a:82: 59:10:73:dd:e6:4b:c9:bd:4f:56:48:79:cb:24:e5: 41:2f:38:69:d7:70:69:07:c4:d2:28:80:9a:b7:b0: 69:8b:e1:0b:38:a6:ec:e3:e7:63:40:ec:91:24:04: e1:a8:d6:e4:d0:2a:75:e7:32:10:3f:d3:bf:35:2a: 18:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2A:25:E7:EE:86:FB:28:8D:A7:EA:04:2F:A4:D6:06:B3:DF:67:EC X509v3 Authority Key Identifier: keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6c:d7:9a:f3:ae:32:ad:0e:7c:c5:0e:ed:0f:8e:0f:98:7d: f1:23:d0:13:3f:3e:bc:e3:a0:84:42:e1:36:ef:f3:e6:06:b0: d5:77:ab:7e:42:0b:38:58:99:af:64:2a:45:dd:41:6d:9d:b3: fd:ff:4d:aa:9b:81:1d:01:04:43:cf:c2:24:0c:21:37:c2:72: 3d:a3:35:8e:ca:8a:3e:0f:20:6a:86:4b:1d:b2:a0:8f:88:bf: 4a:85:8d:cb:2f:24:e5:6a:45:14:00:ac:e9:0d:24:01:be:3a: eb:d1:c7:40:de:c5:96:61:7d:e2:4b:21:d7:4c:77:1e:e7:34: 15:db:e2:c3:12:e7:94:6b:90:b9:74:2a:b3:b7:c1:ab:cd:2b: f9:1e:e9:a9:4d:6f:b3:6b:cc:32:2c:12:b1:5d:39:2f:70:14: 64:87:f7:1c:a4:27:0e:e1:f1:dd:dc:57:09:38:70:7d:35:ce: 86:c1:72:1d:72:f2:fc:7e:f8:b3:02:0e:16:0f:07:29:0d:15: 3c:e9:50:17:14:1e:56:ca:7f:b3:21:cc:33:30:e6:4f:3b:99: f6:40:bc:52:c0:71:45:98:fb:c8:74:f8:7f:f4:00:60:95:7f: d6:66:74:9f:c3:83:f3:7d:67:c3:64:8e:b2:c5:bc:0d:bf:00: 5b:f5:16:0b -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUfZ6ezybdpkTOTCn4cUp5bVpDtLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVC NEU5RTBGMDAeFw0yNTA3MjcxMTUyNDBaFw0yNTA3MjgxMzI2NDBaMDMxMTAvBgNV BAMTKERGMkEyNUU3RUU4NkZCMjg4REE3RUEwNDJGQTRENjA2QjNERjY3RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6pJGDyd+EXOlMP52Q3gF5Mdjq VVi2SOm/C7iISArVPRit61Slp5NltMlyPRYkbwt22QzRphnELYezpmSwcfAL2loV 3uL0VFR1PSzGObq5uf6+jbu7U0stonJt8IU9NAsBW06PD6GxhzbVF8AognaKhUpO jTveVJMpaoSEkT4S1G4m8PApN3K3vCTv3lV971um5m65GyKj3l4O3cFAZdEWSdmn 7mpJ5adhDjwtVb0Zc67pKQmPE2fgkprYPDzxEfRaglkQc93mS8m9T1ZIecsk5UEv OGnXcGkHxNIogJq3sGmL4Qs4puzj52NA7JEkBOGo1uTQKnXnMhA/0781KhjNAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU3yol5+6G+yiNp+oEL6TWBrPfZ+wwHwYDVR0j BBgwFoAUMHRW4DoR27SEQ+k1OJWLFbTp4PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzEvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5RTBGMC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzA3NDU2RTAzQTExREJCNDg0NDNFOTM1Mzg5NThCMTVCNEU5 RTBGMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMS8zMDc0NTZFMDNBMTFEQkI0ODQ0 M0U5MzUzODk1OEIxNUI0RTlFMEYwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmzXmvOuMq0OfMUO7Q+O D5h98SPQEz8+vOOghELhNu/z5gaw1XerfkILOFiZr2QqRd1BbZ2z/f9NqpuBHQEE Q8/CJAwhN8JyPaM1jsqKPg8gaoZLHbKgj4i/SoWNyy8k5WpFFACs6Q0kAb4669HH QN7FlmF94ksh10x3Huc0FdviwxLnlGuQuXQqs7fBq80r+R7pqU1vs2vMMiwSsV05 L3AUZIf3HKQnDuHx3dxXCThwfTXOhsFyHXLy/H74swIOFg8HKQ0VPOlQFxQeVsp/ syHMMzDmTzuZ9kC8UsBxRZj7yHT4f/QAYJV/1mZ0n8OD831nw2SOssW8Db8AW/UW Cw== -----END CERTIFICATE-----Generated at Sun Jul 27 14:54:27 2025 by rpki-client