$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: zM6zQPAEmL3gKxKGZKm0jFEi6XE0WWdsGSwi73+wF/g= Subject key identifier: 3E:1F:1E:EF:E3:85:D1:F5:C8:8E:76:CF:48:1B:86:99:2B:7A:AF:D3 Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 5D4C162B58993E140B1B5D5427903839A1454110 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 0285 Signing time: Mon 21 Jul 2025 17:38:05 +0000 Manifest this update: Mon 21 Jul 2025 17:33:05 +0000 Manifest next update: Tue 22 Jul 2025 20:27:05 +0000 Files and hashes: 1: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: Fv+5Gq0UjmU7r9uDgU6VNfKOGxefr6z+1RznTh71tes=) 2: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: RA+L2a9rUnQEkE0h3dE9SdgUVHKokLJZl3eEmnwupDU=) 3: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: dUzgpny38MghrKpugSdB9dzvd5zDywxo+PBsCyfJHn4=) 4: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: kUd+OV7q9DAowS2L3/fdq/oS4HUMTFtScny+gWU7CG0=) 5: 326131343a316563373a663030653a3a2f34382d3438203d3e203336383332.roa (hash: 0dTOq5r3nzcU4nhnM0SPSmfHWBkaaGJU3KJhAxTcvLU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 20:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4c:16:2b:58:99:3e:14:0b:1b:5d:54:27:90:38:39:a1:45:41:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Jul 21 17:33:05 2025 GMT Not After : Jul 22 20:27:05 2025 GMT Subject: CN=3E1F1EEFE385D1F5C88E76CF481B86992B7AAFD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:48:7c:7c:0f:94:84:89:ec:7d:13:f8:f8:c2: 04:16:2f:d9:96:c9:40:1f:5e:6e:29:34:20:32:6f: b5:f6:d1:79:ab:c8:ee:4c:3f:f8:99:1e:07:0f:ef: fb:2b:c9:0a:30:7a:b9:3b:80:a1:3b:46:47:93:6f: 3c:3c:b5:9f:07:79:55:73:a2:6f:5c:45:0b:3e:1e: d8:7c:f5:27:ad:c8:a5:bb:30:19:c8:82:fa:55:13: 45:d4:dd:5a:21:fc:a9:40:01:98:78:27:14:e3:23: f4:66:f2:8d:92:6d:e2:2b:91:92:37:c3:65:c8:54: 22:4a:aa:f8:2d:77:03:8c:c3:c2:de:1d:07:47:92: f7:07:57:01:bf:82:ae:93:ce:f7:e6:49:a7:ff:29: db:ef:93:aa:6d:09:ae:d4:fa:67:34:7e:88:ca:4d: 98:45:58:1f:8d:16:12:82:f9:39:ab:7f:36:56:66: 8c:5b:30:e1:30:a6:fc:e0:5b:8e:2b:3d:3a:5a:8a: f5:ab:fd:92:a2:a8:84:77:c0:c1:3f:9d:bb:79:a9: 35:12:d2:72:90:34:eb:2a:25:2b:15:96:00:b5:0f: c2:69:2a:c0:11:97:bd:89:fa:37:8b:6b:6c:07:48: c0:77:30:2f:0d:23:91:87:d2:a9:e3:a1:9a:76:e1: 01:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1F:1E:EF:E3:85:D1:F5:C8:8E:76:CF:48:1B:86:99:2B:7A:AF:D3 X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:2c:07:86:60:9b:15:bd:33:5c:e9:8f:13:80:0d:0b:b7:34: 95:b2:bf:ca:35:09:7b:e1:7d:47:19:e6:81:06:e9:66:6b:ac: 17:a2:da:b3:7e:c2:ee:c0:f4:4e:33:d4:ff:a7:2e:ed:42:f5: 8e:fa:2a:5c:72:99:39:a7:e2:96:d2:ed:b0:9a:68:f3:78:74: 28:b2:8c:39:a6:fe:b2:23:0c:f5:b2:d8:b2:60:2a:37:b4:c6: a1:15:be:d3:d0:08:e9:86:d0:11:dc:de:86:27:4e:d5:42:74: ad:37:55:a6:3c:b7:22:70:de:35:13:9a:08:f8:df:62:77:6f: 72:9a:72:1f:1a:7c:72:68:4f:14:28:32:6e:33:d9:8b:e2:8a: c7:f6:04:d9:e9:ad:3c:aa:22:6f:8b:33:e0:8b:ea:33:c8:f8: a0:20:63:59:c5:0a:bd:68:b2:9c:7f:12:5e:a9:d3:98:40:b0: fb:84:5e:a3:92:3d:d6:e7:90:08:4d:d6:a1:8d:01:4f:4c:28: bf:ea:c2:51:50:1f:1a:fd:d0:f7:c3:43:41:ec:43:b9:32:4b: 37:8c:c2:9b:35:71:c6:b0:a7:dc:62:96:a2:d6:8f:89:9d:51: 92:e7:83:e8:28:4f:24:24:57:cf:d3:8f:1d:7a:4e:cb:64:74: 99:a8:2e:c1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXUwWK1iZPhQLG11UJ5A4OaFFQRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNTA3MjExNzMzMDVaFw0yNTA3MjIyMDI3MDVaMDMxMTAvBgNV BAMTKDNFMUYxRUVGRTM4NUQxRjVDODhFNzZDRjQ4MUI4Njk5MkI3QUFGRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4SHx8D5SEiex9E/j4wgQWL9mW yUAfXm4pNCAyb7X20XmryO5MP/iZHgcP7/sryQowerk7gKE7RkeTbzw8tZ8HeVVz om9cRQs+Hth89SetyKW7MBnIgvpVE0XU3Voh/KlAAZh4JxTjI/Rm8o2SbeIrkZI3 w2XIVCJKqvgtdwOMw8LeHQdHkvcHVwG/gq6TzvfmSaf/Kdvvk6ptCa7U+mc0fojK TZhFWB+NFhKC+TmrfzZWZoxbMOEwpvzgW44rPTpaivWr/ZKiqIR3wME/nbt5qTUS 0nKQNOsqJSsVlgC1D8JpKsARl72J+jeLa2wHSMB3MC8NI5GH0qnjoZp24QENAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUPh8e7+OF0fXIjnbPSBuGmSt6r9MwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAWLAeG YJsVvTNc6Y8TgA0LtzSVsr/KNQl74X1HGeaBBulma6wXotqzfsLuwPROM9T/py7t QvWO+ipccpk5p+KW0u2wmmjzeHQosow5pv6yIwz1stiyYCo3tMahFb7T0AjphtAR 3N6GJ07VQnStN1WmPLcicN41E5oI+N9id29ymnIfGnxyaE8UKDJuM9mL4orH9gTZ 6a08qiJvizPgi+ozyPigIGNZxQq9aLKcfxJeqdOYQLD7hF6jkj3W55AITdahjQFP TCi/6sJRUB8a/dD3w0NB7EO5Mks3jMKbNXHGsKfcYpai1o+JnVGS54PoKE8kJFfP 048dek7LZHSZqC7B -----END CERTIFICATE-----Generated at Tue Jul 22 11:54:19 2025 by rpki-client