$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft File: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json) Hash identifier: wDCocVK+azZ/4brnwdL9PpcIGLK8AuSOgDCuE6Cca/Q= Subject key identifier: A7:F4:8F:A7:A7:43:60:E1:71:E8:F1:3F:25:D0:1A:73:DF:CC:9C:E3 Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 463C2E15D16F95BCE8E57AB40FDEEC0A678FCA16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft Manifest number: 0140 Signing time: Fri 25 Jul 2025 09:12:06 +0000 Manifest this update: Fri 25 Jul 2025 09:07:06 +0000 Manifest next update: Sat 26 Jul 2025 11:12:06 +0000 Files and hashes: 1: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: WSscCCguLIM1euW37i9IbV4Hm6fDR/8JdCtokt9HRVs=) 2: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: 8/mMTd8OI6hx+rEazKaA5i9flVTt9So8wwSfFF6xpVo=) 3: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (hash: ohyXGo6Fwg3029u2hdROae+jQf4VI2skgvLUXH3jI8w=) 4: 3139342e33342e3235342e302f32342d3234203d3e20313532363732.roa (hash: hKPfS0qlA4vPTLhw9nwXVGJzFe2/vcx6+01rQ/Eesqo=) 5: 3138352e3231332e3235312e302f32342d3234203d3e203632323430.roa (hash: r8RD1SHQl6OybEgdZXTaDzaRDBKJoFWuS6Yc77FVHmo=) 6: 3139342e33342e3235352e302f32342d3234203d3e20383334.roa (hash: 9Nay8jCVOB7MKBbd6t/oX++dJQIYhzLuqo54ZgkMc3E=) 7: 38352e3131372e3232382e302f32342d3234203d3e20323135303236.roa (hash: WUrbTcKV2+qO0uflme+Vda37GmhrcRAgBhkN6Ok9SGQ=) 8: 3138352e3231332e3235302e302f32342d3234203d3e20323132323338.roa (hash: ygSJr7gJnzCgddZdASy6lFYbTZobnImgktqUZvda03k=) 9: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: tD+eYvXQsGkCcpnz6s7EBRYpOf8Iu4vdb3Qy27wUI6g=) 10: 3138352e3231332e3234382e302f32342d3234203d3e203136323736.roa (hash: YVFopn7jbA0T8pFEsoI9hYTL9xS+8ZrOGuFkjL/rBgk=) 11: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: 4O3foUV7f18NUYJQaeBYgK+aW1lr+7o+ea8CcQjVzCw=) 12: 38352e3131372e3232392e302f32342d3234203d3e20323132323338.roa (hash: qWG9h0hKE/+rc67V6b0QtNqJKNBV/dmrN+3owun/5GY=) 13: 3139342e33342e3235322e302f32342d3234203d3e20313335343032.roa (hash: PzY2ZjUPUkaqIDtZu9fHD0rPK6Exx+TMbdxcEJS1upA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 11:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:3c:2e:15:d1:6f:95:bc:e8:e5:7a:b4:0f:de:ec:0a:67:8f:ca:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Jul 25 09:07:06 2025 GMT Not After : Jul 26 11:12:06 2025 GMT Subject: CN=A7F48FA7A74360E171E8F13F25D01A73DFCC9CE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3e:1d:96:b8:0d:ba:a5:ac:71:45:ea:43:1b: cb:10:86:c3:6a:88:8c:0f:5d:6f:2b:22:7c:df:c4: 2b:5a:d9:c3:7d:92:96:54:74:f4:4f:dd:92:e7:b2: 8d:ac:ca:5b:e6:fc:c8:24:a4:98:65:43:03:64:c8: 93:f8:05:96:25:67:61:05:b2:6e:e4:05:99:0f:47: 12:30:8b:3f:5d:50:de:ff:bd:63:73:09:22:52:2d: ca:f2:38:ba:87:52:e1:81:2a:e1:96:37:66:f1:38: 19:79:90:e6:9b:06:1a:c7:c9:8a:d1:4d:61:86:bb: 47:4c:b7:1d:3a:c6:7b:c1:2f:be:c5:22:28:76:70: fa:b1:25:f8:37:34:06:b9:13:f6:5a:aa:d9:52:fa: bf:e6:37:36:f1:72:af:7e:4b:d4:d9:19:32:ac:2c: 06:65:a1:f3:65:b4:cd:35:55:88:f2:60:d1:86:3e: 62:6c:20:d8:a5:cd:ca:7f:15:23:8f:74:04:2e:a2: 56:d3:98:2f:a0:0b:68:d8:0c:5b:ab:44:f7:ba:67: 48:ba:26:fd:53:fb:70:2f:1c:52:17:b9:6e:b3:51: d8:4a:71:d3:ff:21:a7:45:f9:f9:71:35:87:3f:24: 4f:62:a1:00:79:24:03:de:ef:a5:50:94:31:64:14: 71:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F4:8F:A7:A7:43:60:E1:71:E8:F1:3F:25:D0:1A:73:DF:CC:9C:E3 X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:e4:1d:f3:6f:20:07:ee:d7:22:e9:02:f5:40:65:06:15:4e: b6:ea:80:d6:7d:49:4c:bc:2b:7f:fc:12:ee:cb:f2:80:fe:cb: 3c:fe:ed:3d:fb:4e:99:c7:66:be:1d:75:45:29:ea:ea:7d:03: b1:60:47:7c:99:4b:b2:a6:47:55:f4:e2:39:e1:ac:e5:1d:52: 2f:31:39:7d:d6:23:e5:f4:92:6f:f1:dc:09:8c:29:11:07:a1: 29:a1:2d:fe:4f:d4:91:1c:e6:44:52:b5:84:09:7f:ba:e5:09: 35:2d:1f:28:b1:74:d4:76:5b:d0:6b:15:79:87:fd:fe:0d:fb: ed:c2:37:24:2f:d0:e3:fa:1c:c9:f4:f6:34:6c:0c:7f:20:b5: 8b:db:29:8d:b9:e4:6c:51:04:9d:89:97:b8:4e:04:64:2b:6b: 70:5a:e4:a7:91:a6:56:93:09:a3:51:24:83:28:19:23:e9:01: b9:60:60:aa:d6:a8:a3:5b:4c:e8:fa:31:21:7b:19:42:9e:07: c8:4f:68:d9:fc:0c:8c:b6:d0:26:1d:d9:d4:97:b4:7c:d7:01: 8a:29:e6:e6:ea:68:8d:58:86:36:7f:7a:1b:8d:55:4a:62:bd: 68:36:b1:95:cd:a0:9e:83:76:bf:6a:c0:8b:3e:f0:0d:46:07: db:07:19:3d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURjwuFdFvlbzo5Xq0D97sCmePyhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNTA3MjUwOTA3MDZaFw0yNTA3MjYxMTEyMDZaMDMxMTAvBgNV BAMTKEE3RjQ4RkE3QTc0MzYwRTE3MUU4RjEzRjI1RDAxQTczREZDQzlDRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnPh2WuA26paxxRepDG8sQhsNq iIwPXW8rInzfxCta2cN9kpZUdPRP3ZLnso2sylvm/MgkpJhlQwNkyJP4BZYlZ2EF sm7kBZkPRxIwiz9dUN7/vWNzCSJSLcryOLqHUuGBKuGWN2bxOBl5kOabBhrHyYrR TWGGu0dMtx06xnvBL77FIih2cPqxJfg3NAa5E/ZaqtlS+r/mNzbxcq9+S9TZGTKs LAZlofNltM01VYjyYNGGPmJsINilzcp/FSOPdAQuolbTmC+gC2jYDFurRPe6Z0i6 Jv1T+3AvHFIXuW6zUdhKcdP/IadF+flxNYc/JE9ioQB5JAPe76VQlDFkFHERAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUp/SPp6dDYOFx6PE/JdAac9/MnOMwHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTEzZGRhNi03 YWRlLTQ0NWQtOGM2ZS00NDhhNzhlNDhjYTEvMS8wRDdGRkFFMzAwREVGMDg3NkJG ODQ4OTBGQjZFQTE3QkU4NDFBNEQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeQd828gB+7XIukC9UBl BhVOtuqA1n1JTLwrf/wS7svygP7LPP7tPftOmcdmvh11RSnq6n0DsWBHfJlLsqZH VfTiOeGs5R1SLzE5fdYj5fSSb/HcCYwpEQehKaEt/k/UkRzmRFK1hAl/uuUJNS0f KLF01HZb0GsVeYf9/g377cI3JC/Q4/ocyfT2NGwMfyC1i9spjbnkbFEEnYmXuE4E ZCtrcFrkp5GmVpMJo1EkgygZI+kBuWBgqtaoo1tM6PoxIXsZQp4HyE9o2fwMjLbQ Jh3Z1Je0fNcBiinm5upojViGNn96G41VSmK9aDaxlc2gnoN2v2rAiz7wDUYH2wcZ PQ== -----END CERTIFICATE-----Generated at Sat Jul 26 01:50:35 2025 by rpki-client