$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: 4OItwut9Tu30CRK4NfDw0h3m23iQcZ+OyMVKHp4ukqA= Subject key identifier: B9:D5:63:3A:D0:B5:12:4F:E3:17:88:E2:A2:90:18:B2:47:AD:B0:2B Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 0709135A885D6C918517473B53C660431313CCD3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: 1A Signing time: Wed 23 Jul 2025 10:28:06 +0000 Manifest this update: Wed 23 Jul 2025 10:23:06 +0000 Manifest next update: Thu 24 Jul 2025 13:34:06 +0000 Files and hashes: 1: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: JJxvSLxXE9/mc2o8JwHbIizgcZB/qXCpI1mNatuyWjE=) 2: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: PoxwFIHy8kdey2mlHnL1hmx4hhF1/GhCPxY1mv6kDWE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 13:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:09:13:5a:88:5d:6c:91:85:17:47:3b:53:c6:60:43:13:13:cc:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Jul 23 10:23:06 2025 GMT Not After : Jul 24 13:34:06 2025 GMT Subject: CN=B9D5633AD0B5124FE31788E2A29018B247ADB02B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:20:eb:8b:ce:da:8b:f1:d4:e7:27:0c:eb:78: 6a:0c:e3:52:90:20:4e:3f:34:d5:b6:7a:d1:21:c9: 6c:6c:34:ed:46:c4:3a:c9:2c:5c:39:7c:77:f0:26: db:0f:cc:91:8b:de:1e:cb:67:c1:de:22:76:11:2b: c8:42:51:18:60:dc:e7:79:c5:f2:d6:60:2a:54:29: 44:22:3f:fd:de:a6:6e:72:dc:84:c8:ae:e5:de:71: 9a:8a:ea:de:95:94:ac:6a:54:ae:cb:32:bc:73:c1: 3b:32:99:24:14:9a:02:09:4b:7d:2e:4f:27:81:b3: 96:9e:d2:f4:90:56:2c:b4:e8:67:cc:24:df:b5:f8: 34:28:09:69:ba:f3:6e:7f:83:0f:67:c6:b6:81:28: 2e:b9:83:f4:92:27:4a:a0:f8:d4:74:71:e4:74:79: 96:f0:1f:27:47:54:50:43:15:32:68:5f:a3:4d:86: 26:a4:d4:1a:bc:6e:1c:66:2d:62:ee:7c:61:1b:61: 3d:61:07:45:64:86:ad:1d:81:09:a0:88:1f:69:54: 9b:26:4f:ed:09:cc:bd:7c:3a:17:60:a2:b1:43:0c: 06:2f:68:c1:93:61:dd:2e:fc:83:80:53:a7:df:09: 1a:1c:1b:7d:0c:cd:f1:71:9e:2b:7f:27:e9:32:ba: 04:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D5:63:3A:D0:B5:12:4F:E3:17:88:E2:A2:90:18:B2:47:AD:B0:2B X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:5f:95:c9:c1:49:81:dc:e2:57:dd:6d:37:20:d5:35:cf:29: c0:59:2a:3a:5d:b1:30:06:22:8a:82:df:a1:56:4d:83:59:fd: 55:fc:d0:e0:f7:5b:68:01:36:72:93:7d:8e:f0:49:2a:24:5e: 02:c9:bb:98:9b:e6:08:65:be:31:ca:9c:0b:e8:b4:ef:79:2a: 41:78:ed:04:1d:98:1c:7c:e9:f7:3e:e8:20:f2:2b:41:77:44: 60:09:14:74:5d:e2:56:97:1f:f8:c1:58:ab:a5:4f:9c:f8:02: 0c:61:93:49:d2:a4:82:1c:ca:85:09:8a:67:5d:38:35:07:c4: 62:a4:04:4e:1d:c3:bf:8c:35:a6:66:52:e3:3f:55:ac:e4:89: 0e:59:95:02:55:fc:9a:24:1a:c1:20:f9:f6:13:78:d9:76:be: 7b:ae:ed:87:2f:6b:99:9a:12:c1:c9:03:1c:19:35:fc:44:6b: ae:49:44:57:8d:00:19:4d:d4:ec:ed:ee:20:d5:0d:00:4a:31: 6f:57:3c:21:76:e5:e9:70:dd:d6:a5:0f:09:0b:e2:36:af:31: 65:8d:af:1c:1b:1e:50:c3:07:1d:44:f4:b6:2e:a6:98:fc:6c: 9b:6e:ba:05:48:d8:89:33:26:0a:08:19:19:9c:65:c8:7b:21: 81:3c:5a:46 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBwkTWohdbJGFF0c7U8ZgQxMTzNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNTA3MjMxMDIzMDZaFw0yNTA3MjQxMzM0MDZaMDMxMTAvBgNV BAMTKEI5RDU2MzNBRDBCNTEyNEZFMzE3ODhFMkEyOTAxOEIyNDdBREIwMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAIOuLztqL8dTnJwzreGoM41KQ IE4/NNW2etEhyWxsNO1GxDrJLFw5fHfwJtsPzJGL3h7LZ8HeInYRK8hCURhg3Od5 xfLWYCpUKUQiP/3epm5y3ITIruXecZqK6t6VlKxqVK7LMrxzwTsymSQUmgIJS30u TyeBs5ae0vSQViy06GfMJN+1+DQoCWm6825/gw9nxraBKC65g/SSJ0qg+NR0ceR0 eZbwHydHVFBDFTJoX6NNhiak1Bq8bhxmLWLufGEbYT1hB0Vkhq0dgQmgiB9pVJsm T+0JzL18OhdgorFDDAYvaMGTYd0u/IOAU6ffCRocG30MzfFxnit/J+kyugSfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUudVjOtC1Ek/jF4jiopAYsketsCswHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAoX5XJ wUmB3OJX3W03INU1zynAWSo6XbEwBiKKgt+hVk2DWf1V/NDg91toATZyk32O8Ekq JF4CybuYm+YIZb4xypwL6LTveSpBeO0EHZgcfOn3Pugg8itBd0RgCRR0XeJWlx/4 wVirpU+c+AIMYZNJ0qSCHMqFCYpnXTg1B8RipAROHcO/jDWmZlLjP1Ws5IkOWZUC VfyaJBrBIPn2E3jZdr57ru2HL2uZmhLByQMcGTX8RGuuSURXjQAZTdTs7e4g1Q0A SjFvVzwhduXpcN3WpQ8JC+I2rzFlja8cGx5QwwcdRPS2LqaY/GybbroFSNiJMyYK CBkZnGXIeyGBPFpG -----END CERTIFICATE-----Generated at Thu Jul 24 04:53:49 2025 by rpki-client