$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: suiEJToV+ARpMwl9xiPiKiEP4Z6RM6kHf90CHWh3x8k= Subject key identifier: CA:EA:E7:B1:ED:4F:B3:AA:CE:7E:2B:56:DC:CE:BE:81:58:FE:3E:11 Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 0F7F975E31C0A4369A2930C51763EE34A75016C2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: 18 Signing time: Mon 21 Jul 2025 22:58:05 +0000 Manifest this update: Mon 21 Jul 2025 22:53:05 +0000 Manifest next update: Wed 23 Jul 2025 00:18:05 +0000 Files and hashes: 1: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: PoxwFIHy8kdey2mlHnL1hmx4hhF1/GhCPxY1mv6kDWE=) 2: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: mDLJOsWqCdeSFfrLOqO3IAvw+mSsPERsFGDnd4QsqGI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 00:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:7f:97:5e:31:c0:a4:36:9a:29:30:c5:17:63:ee:34:a7:50:16:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Jul 21 22:53:05 2025 GMT Not After : Jul 23 00:18:05 2025 GMT Subject: CN=CAEAE7B1ED4FB3AACE7E2B56DCCEBE8158FE3E11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:1a:65:6c:e3:5d:b8:32:54:46:b2:3e:0d:5c: 73:7a:1b:1a:5c:86:73:0f:f3:86:95:fa:9a:05:f3: 86:21:1e:96:1c:f9:c0:40:91:25:c5:e0:fc:1c:02: e7:38:c3:df:b8:51:91:53:8e:b5:14:6d:56:de:8d: 43:dd:1d:c6:96:35:4c:e9:72:56:a4:01:2c:5d:0e: 4a:a5:4b:f8:ef:98:6a:b8:dd:25:5e:da:a1:c3:52: 7d:8a:5c:cd:c8:c6:12:63:64:72:95:fc:3a:d9:39: 1d:46:e2:09:af:13:b2:e4:ef:e4:ba:0b:06:94:e8: 07:58:37:24:fc:f8:bc:fd:d9:0a:95:76:10:43:81: 2f:e3:79:ec:aa:b8:69:4e:02:d8:dd:f7:96:6f:b8: e7:82:d1:1c:c1:ae:6a:1e:bb:c1:fa:60:15:78:95: eb:a3:3c:69:31:71:f1:81:e6:7e:00:83:10:37:32: 89:4e:36:ff:c6:cc:9b:73:0c:34:9e:90:f2:36:56: 11:09:9f:5a:16:98:ae:ed:e7:1c:75:1a:6e:73:d1: e6:0e:a9:3d:3e:88:17:de:11:e5:88:f4:93:25:84: f4:7b:9e:31:13:17:d1:17:9d:bc:49:18:fa:be:58: 38:43:ee:91:3f:25:ca:f9:61:d2:31:73:42:b1:fe: 78:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EA:E7:B1:ED:4F:B3:AA:CE:7E:2B:56:DC:CE:BE:81:58:FE:3E:11 X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2a:a6:21:80:10:a3:6c:66:83:d1:4e:4e:e7:55:91:9d:5b: 38:43:e5:b8:da:00:27:54:9a:44:fe:ab:c6:89:25:ed:75:8e: e3:8f:3a:98:03:5a:c4:29:9c:12:fe:10:ea:74:e0:e9:d4:f1: c3:67:3e:94:1f:00:b7:7f:99:d2:c9:49:45:5a:2f:52:c6:8b: f0:d7:5f:4b:9d:98:09:e4:ac:0b:bf:65:c9:4d:81:bf:9b:ce: d2:8d:ab:10:f6:59:a9:2d:04:05:da:86:bc:3d:3f:2a:f5:cb: c6:af:a7:df:e9:13:29:7d:d8:fa:74:b1:0e:dd:bb:6b:1b:6f: 21:9d:55:cd:38:32:64:f4:c6:09:0c:53:a2:1e:bb:2d:04:3b: 5d:2f:6f:60:bb:da:5d:a9:9f:e1:c5:9d:0b:fb:6d:00:16:4f: e9:e1:ac:d5:9a:99:34:7a:0f:1f:c3:8b:a0:71:44:71:74:83: 0c:ea:6a:87:2f:3b:17:3c:f6:70:e2:49:22:2c:a3:84:83:a0: 2f:24:7d:6f:49:d4:6e:7d:94:c5:04:03:3b:5a:b3:80:a2:4c: cb:6a:28:5e:cd:aa:56:13:30:43:2c:19:6f:6a:02:98:b7:3d: e3:24:75:22:b6:7f:d0:36:19:33:17:f3:65:fd:45:08:93:bd: f2:70:27:74 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUD3+XXjHApDaaKTDFF2PuNKdQFsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNTA3MjEyMjUzMDVaFw0yNTA3MjMwMDE4MDVaMDMxMTAvBgNV BAMTKENBRUFFN0IxRUQ0RkIzQUFDRTdFMkI1NkRDQ0VCRTgxNThGRTNFMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1GmVs4124MlRGsj4NXHN6Gxpc hnMP84aV+poF84YhHpYc+cBAkSXF4PwcAuc4w9+4UZFTjrUUbVbejUPdHcaWNUzp clakASxdDkqlS/jvmGq43SVe2qHDUn2KXM3IxhJjZHKV/DrZOR1G4gmvE7Lk7+S6 CwaU6AdYNyT8+Lz92QqVdhBDgS/jeeyquGlOAtjd95ZvuOeC0RzBrmoeu8H6YBV4 leujPGkxcfGB5n4AgxA3MolONv/GzJtzDDSekPI2VhEJn1oWmK7t5xx1Gm5z0eYO qT0+iBfeEeWI9JMlhPR7njETF9EXnbxJGPq+WDhD7pE/Jcr5YdIxc0Kx/nj5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUyurnse1Ps6rOfitW3M6+gVj+PhEwHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAoKqYh gBCjbGaD0U5O51WRnVs4Q+W42gAnVJpE/qvGiSXtdY7jjzqYA1rEKZwS/hDqdODp 1PHDZz6UHwC3f5nSyUlFWi9Sxovw119LnZgJ5KwLv2XJTYG/m87SjasQ9lmpLQQF 2oa8PT8q9cvGr6ff6RMpfdj6dLEO3btrG28hnVXNODJk9MYJDFOiHrstBDtdL29g u9pdqZ/hxZ0L+20AFk/p4azVmpk0eg8fw4ugcURxdIMM6mqHLzsXPPZw4kkiLKOE g6AvJH1vSdRufZTFBAM7WrOAokzLaihezapWEzBDLBlvagKYtz3jJHUitn/QNhkz F/Nl/UUIk73ycCd0 -----END CERTIFICATE-----Generated at Tue Jul 22 11:52:23 2025 by rpki-client