$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/C0D6D353C935E0FE15C81690DCA11D31ED250300.mft File: C0D6D353C935E0FE15C81690DCA11D31ED250300.mft (raw, json) Hash identifier: mk9etXjED1d53sPrC5i6NU+HS6ac+t0TpQxHEMGk+o4= Subject key identifier: A9:76:30:54:C1:AD:9F:2B:54:C4:B4:82:29:73:E9:B6:29:8D:DA:73 Authority key identifier: C0:D6:D3:53:C9:35:E0:FE:15:C8:16:90:DC:A1:1D:31:ED:25:03:00 Certificate issuer: /CN=c0d6d353c935e0fe15c81690dca11d31ed250300 Certificate serial: 595D53F1284F41CBAE1790F3B059EF5BD363022D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNbTU8k14P4VyBaQ3KEdMe0lAwA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/C0D6D353C935E0FE15C81690DCA11D31ED250300.mft Manifest number: 0C Signing time: Sun 20 Jul 2025 06:48:17 +0000 Manifest this update: Sun 20 Jul 2025 06:43:17 +0000 Manifest next update: Mon 21 Jul 2025 07:21:17 +0000 Files and hashes: 1: 323030313a3637383a313064303a3a2f34382d3438203d3e20323133363035.roa (hash: Rc6xidsdGh15ql3Ow7KrnpPwhjt8cOH5K4OZkWTDad0=) 2: 323030313a3637383a3132303a3a2f34382d3438203d3e20323133363035.roa (hash: 5q/M4lb8Ofpk3VIN4n2HLQvoxlI5gi3EJUTq2JtSuDA=) 3: 323030313a3637383a313064303a3a2f34382d3438203d3e20323130343430.roa (hash: OENIfL5LdwDXNnHydIuzLY0aPGCuWDVK5DktiJALMcg=) 4: 323030313a3637383a3132303a3a2f34382d3438203d3e20323130343430.roa (hash: V1PYIWEGKTBSZpsDsi4hBMAUOytWnRs9tofp7Cv0sO0=) 5: C0D6D353C935E0FE15C81690DCA11D31ED250300.crl (hash: mG1pqjT1niBsXt5bMYaICKsmndamT56InPvHsP18o5s=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/C0D6D353C935E0FE15C81690DCA11D31ED250300.crl rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/C0D6D353C935E0FE15C81690DCA11D31ED250300.mft rsync://rpki.ripe.net/repository/DEFAULT/wNbTU8k14P4VyBaQ3KEdMe0lAwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 07:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5d:53:f1:28:4f:41:cb:ae:17:90:f3:b0:59:ef:5b:d3:63:02:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0d6d353c935e0fe15c81690dca11d31ed250300 Validity Not Before: Jul 20 06:43:17 2025 GMT Not After : Jul 21 07:21:17 2025 GMT Subject: CN=A9763054C1AD9F2B54C4B4822973E9B6298DDA73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:57:07:10:e4:cd:51:34:5b:10:38:a7:83:5c: d1:f3:55:96:e2:b0:7b:22:d8:cc:e3:df:3d:8e:14: 17:fc:9a:55:c0:43:7f:bb:b8:9e:f3:b7:63:c0:cb: d0:88:67:26:f4:0f:0e:bd:0f:b6:e7:45:fc:3a:62: c2:b3:b4:2d:83:1b:41:22:70:ea:8c:1d:54:f5:32: 9c:d7:31:a9:f7:f3:c1:ce:d5:4f:b1:6c:7f:d3:11: 16:02:73:ac:13:7b:32:a1:52:6c:65:f3:18:94:6a: 97:07:69:9e:bd:8e:f5:30:88:fd:8e:ee:54:f6:c0: e1:47:6d:c6:6c:de:7d:4b:14:da:1f:2c:87:95:09: 42:5a:ca:c6:9d:24:e4:72:f4:d0:ae:40:fb:d7:e3: 19:16:c3:fd:ee:a3:fb:4b:96:db:f3:2b:2e:2b:57: 8a:a0:72:63:a6:b5:eb:77:21:9e:23:e1:86:56:64: b5:ef:e5:fc:b4:05:42:4b:10:36:16:e8:96:30:03: de:32:9b:20:36:a3:ab:46:b8:ea:52:5e:bd:71:55: c1:bc:76:bc:40:1d:a1:2c:0f:72:43:26:24:21:c3: 03:10:61:cd:40:45:24:c5:00:d1:5d:b4:86:2f:93: 45:a0:c6:58:c8:ca:87:60:cc:35:83:b7:d2:a6:67: 81:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:76:30:54:C1:AD:9F:2B:54:C4:B4:82:29:73:E9:B6:29:8D:DA:73 X509v3 Authority Key Identifier: keyid:C0:D6:D3:53:C9:35:E0:FE:15:C8:16:90:DC:A1:1D:31:ED:25:03:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/C0D6D353C935E0FE15C81690DCA11D31ED250300.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNbTU8k14P4VyBaQ3KEdMe0lAwA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/C0D6D353C935E0FE15C81690DCA11D31ED250300.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:2c:56:c6:0d:42:99:5d:9d:a0:4a:c8:a9:39:9f:19:05:89: 4a:ef:02:47:ca:2b:90:7c:41:fe:7b:13:61:93:75:2f:cf:74: e9:82:b1:8b:de:a2:ad:a0:23:9a:9a:73:f6:ad:02:4e:bf:97: db:0d:8c:e4:0d:61:15:d6:c0:5d:09:17:e8:b7:2e:bc:a5:8a: 7c:23:cc:be:44:35:b2:36:37:8d:86:fb:b4:9a:e0:7d:a0:c1: 0a:c5:db:b4:84:7b:06:9b:f2:05:8f:48:87:62:c5:76:6e:10: 59:62:89:f0:8d:76:38:70:4d:c1:8b:51:6c:73:7f:35:f1:90: bf:08:da:63:a1:18:e3:e5:d0:fe:96:e3:9c:ef:7d:62:86:1c: 4a:35:4d:a8:3e:ec:43:f1:66:a4:30:f6:d9:5a:f6:c9:0d:b3: 8d:ad:9b:88:4d:49:a5:78:10:98:c0:bf:f9:0a:af:73:0c:9a: 4f:41:91:c4:2f:5d:a7:a2:f3:e4:3d:22:bf:2c:38:12:82:68: c0:68:00:a4:73:88:d0:96:6a:8e:b2:91:cf:e3:c2:fb:fa:61: d5:6c:27:a4:c3:a0:e1:1a:e6:ff:83:14:93:c5:8d:9a:0e:f9: 8f:7f:69:f2:2f:d6:8f:37:d4:b9:d9:e9:2b:ec:38:ce:f9:95: 03:bb:07:c9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWV1T8ShPQcuuF5DzsFnvW9NjAi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzBkNmQzNTNjOTM1ZTBmZTE1YzgxNjkwZGNhMTFkMzFl ZDI1MDMwMDAeFw0yNTA3MjAwNjQzMTdaFw0yNTA3MjEwNzIxMTdaMDMxMTAvBgNV BAMTKEE5NzYzMDU0QzFBRDlGMkI1NEM0QjQ4MjI5NzNFOUI2Mjk4RERBNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBVwcQ5M1RNFsQOKeDXNHzVZbi sHsi2Mzj3z2OFBf8mlXAQ3+7uJ7zt2PAy9CIZyb0Dw69D7bnRfw6YsKztC2DG0Ei cOqMHVT1MpzXMan388HO1U+xbH/TERYCc6wTezKhUmxl8xiUapcHaZ69jvUwiP2O 7lT2wOFHbcZs3n1LFNofLIeVCUJaysadJORy9NCuQPvX4xkWw/3uo/tLltvzKy4r V4qgcmOmtet3IZ4j4YZWZLXv5fy0BUJLEDYW6JYwA94ymyA2o6tGuOpSXr1xVcG8 drxAHaEsD3JDJiQhwwMQYc1ARSTFANFdtIYvk0WgxljIyodgzDWDt9KmZ4FDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUqXYwVMGtnytUxLSCKXPptimN2nMwHwYDVR0j BBgwFoAUwNbTU8k14P4VyBaQ3KEdMe0lAwAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODc4YTE4NTYtODM0Ny00YjhmLWFmNTItZDMzMTZlOGEw NzY5LzAvQzBENkQzNTNDOTM1RTBGRTE1QzgxNjkwRENBMTFEMzFFRDI1MDMwMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dOYlRVOGsxNFA0VnlCYVEzS0VkTWUw bEF3QS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NzhhMTg1Ni04 MzQ3LTRiOGYtYWY1Mi1kMzMxNmU4YTA3NjkvMC9DMEQ2RDM1M0M5MzVFMEZFMTVD ODE2OTBEQ0ExMUQzMUVEMjUwMzAwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCxWxg1CmV2doErIqTmf GQWJSu8CR8orkHxB/nsTYZN1L8906YKxi96iraAjmppz9q0CTr+X2w2M5A1hFdbA XQkX6LcuvKWKfCPMvkQ1sjY3jYb7tJrgfaDBCsXbtIR7BpvyBY9Ih2LFdm4QWWKJ 8I12OHBNwYtRbHN/NfGQvwjaY6EY4+XQ/pbjnO99YoYcSjVNqD7sQ/FmpDD22Vr2 yQ2zja2biE1JpXgQmMC/+QqvcwyaT0GRxC9dp6Lz5D0ivyw4EoJowGgApHOI0JZq jrKRz+PC+/ph1WwnpMOg4Rrm/4MUk8WNmg75j39p8i/WjzfUudnpK+w4zvmVA7sH yQ== -----END CERTIFICATE-----Generated at Sun Jul 20 20:24:26 2025 by rpki-client