$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json) Hash identifier: hr52OT8q9yLDdZfNhXe0rSDJma4/0vDD7TiYcLl1A0o= Subject key identifier: 97:B6:E1:EA:15:2B:22:60:82:0C:AE:07:35:81:3A:A5:A6:C9:F6:F1 Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Certificate serial: 33F68E20735EDF2D25799935E65EE7CE3A6116B3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft Manifest number: 041E Signing time: Fri 25 Jul 2025 00:42:04 +0000 Manifest this update: Fri 25 Jul 2025 00:37:04 +0000 Manifest next update: Sat 26 Jul 2025 04:09:04 +0000 Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: SRxoBLiLqNMY3AfnSg8sTEqRnOq+4YX//HCJQ4d5uoY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 04:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f6:8e:20:73:5e:df:2d:25:79:99:35:e6:5e:e7:ce:3a:61:16:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Validity Not Before: Jul 25 00:37:04 2025 GMT Not After : Jul 26 04:09:04 2025 GMT Subject: CN=97B6E1EA152B2260820CAE0735813AA5A6C9F6F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:99:f5:ac:36:7b:1d:d3:d2:85:22:72:46:c2: 19:9d:aa:f4:a1:9f:08:75:27:56:28:50:55:32:17: c8:89:10:e2:0f:a8:9e:fd:cd:8c:6f:37:be:c3:d2: 39:f8:0e:5e:1d:5b:1a:20:99:81:13:3d:e0:26:c5: b7:c7:0b:7b:71:3d:58:1c:58:7a:98:76:09:00:5b: 0c:98:4f:cc:83:c2:50:26:c8:25:b2:2b:51:03:c9: 29:59:26:17:5b:5d:84:0f:e4:9e:38:c2:23:be:63: 8b:9b:d6:f4:f7:e7:4e:29:ed:77:2f:76:35:39:40: 17:c3:18:ab:2b:c7:ba:52:5e:97:06:dc:7d:39:83: e0:3d:e8:7b:85:19:77:da:27:32:e8:3f:a4:0c:5f: b3:9d:fc:a0:2c:c2:42:43:6f:ea:19:39:34:3d:d1: 3f:33:d2:6f:f7:92:f3:44:e2:56:12:89:d0:b3:9e: d9:77:d9:53:9a:62:12:60:d3:48:3d:b4:ff:01:b5: 42:18:eb:47:ca:5e:96:f4:7e:35:c7:3b:c4:e8:d6: d6:aa:3f:e0:40:41:26:c8:60:21:bd:69:67:f9:64: 9d:5a:4f:a4:ae:bd:4e:e4:3d:29:55:0c:4c:bc:4a: a7:56:69:ff:c5:37:b6:ba:5c:78:dd:f6:2c:03:b9: c5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B6:E1:EA:15:2B:22:60:82:0C:AE:07:35:81:3A:A5:A6:C9:F6:F1 X509v3 Authority Key Identifier: keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:d5:42:d1:37:ce:22:ec:7f:71:98:9b:29:f1:3e:ac:68:d1: 33:ed:8f:59:db:b1:a4:12:34:0d:81:6d:27:9d:1b:96:4b:7c: 58:1b:a3:a3:d1:10:84:73:0e:c0:46:73:45:98:25:65:f2:22: 28:b5:fb:da:c8:9a:b6:f5:ad:5f:72:f6:bf:34:a8:85:7c:c5: 6f:5c:af:39:55:d4:df:74:7e:24:06:e2:6a:30:46:0b:d8:1c: 61:9f:bf:40:8d:0d:4e:e3:e2:a1:9f:09:76:65:a9:df:e9:3d: be:d9:2f:46:50:3b:cb:be:70:a0:f5:cb:51:23:3f:8f:57:bc: 2d:f8:be:dc:e6:2f:0f:35:b6:f0:e8:26:63:fd:44:16:66:5c: 30:ab:43:0d:29:61:1a:a8:be:42:76:b2:ea:88:f7:b3:28:ab: 31:e8:0b:2c:19:45:85:57:62:5b:dd:35:59:7a:c0:6b:57:ce: 55:a8:9c:02:31:4c:d0:92:c6:d2:dc:77:c1:69:dc:d3:aa:2d: db:e1:3e:61:f4:41:f5:29:76:89:f6:04:44:25:7c:35:8f:ed: 11:1d:ec:23:3d:27:ea:2b:3b:dd:fd:dd:54:d0:c8:47:ae:76: 06:ba:8a:1d:2a:b3:ed:a2:9f:ab:18:26:8d:3d:18:c3:01:39: 14:c7:0b:a6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUM/aOIHNe3y0leZk15l7nzjphFrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUx RDA0MEEzMDAeFw0yNTA3MjUwMDM3MDRaFw0yNTA3MjYwNDA5MDRaMDMxMTAvBgNV BAMTKDk3QjZFMUVBMTUyQjIyNjA4MjBDQUUwNzM1ODEzQUE1QTZDOUY2RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/mfWsNnsd09KFInJGwhmdqvSh nwh1J1YoUFUyF8iJEOIPqJ79zYxvN77D0jn4Dl4dWxogmYETPeAmxbfHC3txPVgc WHqYdgkAWwyYT8yDwlAmyCWyK1EDySlZJhdbXYQP5J44wiO+Y4ub1vT3504p7Xcv djU5QBfDGKsrx7pSXpcG3H05g+A96HuFGXfaJzLoP6QMX7Od/KAswkJDb+oZOTQ9 0T8z0m/3kvNE4lYSidCzntl32VOaYhJg00g9tP8BtUIY60fKXpb0fjXHO8To1taq P+BAQSbIYCG9aWf5ZJ1aT6SuvU7kPSlVDEy8SqdWaf/FN7a6XHjd9iwDucVLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUl7bh6hUrImCCDK4HNYE6pabJ9vEwHwYDVR0j BBgwFoAUDk68Qx41E/w/ZB24gOKy/h0ECjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzEvMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUxRDA0MEEzMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00YjFhLTQ2 ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC8wRTRFQkM0MzFFMzUxM0ZDM0Y2NDFEQjg4 MEUyQjJGRTFEMDQwQTMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzgxMTE1YmM2LTEwZjYtNGFmMy1iYTA5LThiNjg3YTU2ZmJmNS8xLzBFNEVCQzQz MUUzNTEzRkMzRjY0MURCODgwRTJCMkZFMUQwNDBBMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC+1ULR N84i7H9xmJsp8T6saNEz7Y9Z27GkEjQNgW0nnRuWS3xYG6Oj0RCEcw7ARnNFmCVl 8iIotfvayJq29a1fcva/NKiFfMVvXK85VdTfdH4kBuJqMEYL2Bxhn79AjQ1O4+Kh nwl2Zanf6T2+2S9GUDvLvnCg9ctRIz+PV7wt+L7c5i8PNbbw6CZj/UQWZlwwq0MN KWEaqL5CdrLqiPezKKsx6AssGUWFV2Jb3TVZesBrV85VqJwCMUzQksbS3HfBadzT qi3b4T5h9EH1KXaJ9gREJXw1j+0RHewjPSfqKzvd/d1U0MhHrnYGuoodKrPtop+r GCaNPRjDATkUxwum -----END CERTIFICATE-----Generated at Fri Jul 25 13:14:12 2025 by rpki-client