$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft File: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft (raw, json) Hash identifier: tqOyVaM5quQUu5VDmvUTBX6ri5oHYVB10t94bfkBeIQ= Subject key identifier: CD:67:29:E7:6F:9C:89:4F:D0:DE:CB:92:15:5A:D8:E8:C2:90:D0:7F Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 4C7B5B0D42478D95AF72AF759B496900E37BF8E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft Manifest number: ED Signing time: Wed 23 Jul 2025 19:12:05 +0000 Manifest this update: Wed 23 Jul 2025 19:07:05 +0000 Manifest next update: Thu 24 Jul 2025 21:57:05 +0000 Files and hashes: 1: 3134312e39382e34332e302f32342d3234203d3e2039333138.roa (hash: vFBdBlnnWQnqw/EQOfV9mi7/0u42NWKBiZsEOC5m9Es=) 2: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl (hash: 5wMbZ1Oct3EHXgStpTJyTf2wcqx0FGomWUrIF65OeMc=) 3: 3134312e39382e34322e302f32342d3234203d3e203236303432.roa (hash: +GT6tipOpP7a/jmS2jvS0OmHJ5lSewd2owWcI6P6Cp8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 21:57:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:7b:5b:0d:42:47:8d:95:af:72:af:75:9b:49:69:00:e3:7b:f8:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Jul 23 19:07:05 2025 GMT Not After : Jul 24 21:57:05 2025 GMT Subject: CN=CD6729E76F9C894FD0DECB92155AD8E8C290D07F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ff:27:c5:1f:ca:05:b3:c5:e0:d1:71:7c:23: 01:70:eb:7f:ac:d3:d7:9f:66:e9:d6:28:9e:e1:44: 56:a2:52:38:79:8d:c3:b7:a7:88:1b:8d:8e:37:93: 93:46:e8:f0:16:5b:05:6c:16:e9:e3:02:ed:10:d6: 1a:c1:81:b3:52:9b:39:13:9c:c6:db:c6:20:a2:dc: a0:71:b2:09:b4:eb:89:a8:4c:d5:05:88:96:ac:13: 43:06:e5:60:7c:19:88:e1:12:f6:2e:5e:40:45:a1: 08:b1:2f:61:cb:39:1a:4c:36:bf:b5:f7:a1:52:cb: 57:f0:e4:93:bc:50:50:c9:da:f7:70:f1:96:6c:73: b4:6b:ab:2e:b6:fe:c8:1d:b7:33:ba:e9:71:5e:d6: 9a:5c:c8:e5:75:61:9e:a7:a5:5d:10:87:03:5b:3c: e7:61:f5:5e:42:14:12:88:99:22:98:69:ca:f2:36: 50:a3:21:d8:32:a5:94:02:9d:19:c3:57:f4:54:99: 09:1f:0c:99:19:e8:93:3d:34:e8:f0:c0:a6:ea:78: bc:e6:0f:e8:d3:63:74:c5:0d:63:d4:c2:31:de:a0: 71:56:1c:78:20:a6:72:ba:61:e5:d0:77:03:9c:3e: 34:90:18:a9:05:c3:6b:7a:38:12:35:c3:e6:9e:53: b0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:67:29:E7:6F:9C:89:4F:D0:DE:CB:92:15:5A:D8:E8:C2:90:D0:7F X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:33:1c:b0:26:3d:65:a7:ee:b5:2c:5c:73:f2:f6:b0:99:58: d2:69:ef:65:8b:e2:f9:e9:dd:a1:c8:45:c5:5f:b0:5b:14:bd: c5:0b:46:4f:e6:1b:77:00:fa:85:d2:8d:32:48:c1:5e:04:f5: 56:6a:09:55:f2:44:54:3a:09:a4:fd:fa:6b:97:1a:07:5a:d9: f3:1c:1d:2b:e5:ac:57:51:83:d7:10:f0:27:56:60:e4:f0:63: d3:c5:3f:4c:4c:f8:4f:fa:25:13:87:37:dc:23:11:ec:f6:fd: 1a:2c:ee:e3:8a:e7:b9:8f:90:ed:02:5c:64:22:8d:e1:3c:66: 27:39:4d:95:31:26:aa:dd:0a:c5:e3:d4:fb:04:09:ee:48:33: 14:54:d5:a9:07:12:f8:33:73:24:54:13:15:16:40:fb:b8:1f: 05:d1:39:ac:5a:c1:f4:0e:f9:69:c9:0a:98:79:0e:2b:b0:f2: c6:83:b1:f5:31:48:3a:37:93:ae:84:6e:3a:89:72:c6:a4:34: 60:cb:91:ec:47:7d:a0:6b:2c:3e:53:e5:8f:06:96:66:a8:48: 61:a6:95:90:3b:ca:dd:4b:a5:5e:c5:96:97:39:f8:80:7e:2d: 64:31:05:13:02:79:3e:3e:9d:ea:5a:9d:81:d2:82:d5:74:f0: 23:1d:20:66 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTHtbDUJHjZWvcq91m0lpAON7+OIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNTA3MjMxOTA3MDVaFw0yNTA3MjQyMTU3MDVaMDMxMTAvBgNV BAMTKENENjcyOUU3NkY5Qzg5NEZEMERFQ0I5MjE1NUFEOEU4QzI5MEQwN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv/yfFH8oFs8Xg0XF8IwFw63+s 09efZunWKJ7hRFaiUjh5jcO3p4gbjY43k5NG6PAWWwVsFunjAu0Q1hrBgbNSmzkT nMbbxiCi3KBxsgm064moTNUFiJasE0MG5WB8GYjhEvYuXkBFoQixL2HLORpMNr+1 96FSy1fw5JO8UFDJ2vdw8ZZsc7Rrqy62/sgdtzO66XFe1ppcyOV1YZ6npV0QhwNb POdh9V5CFBKImSKYacryNlCjIdgypZQCnRnDV/RUmQkfDJkZ6JM9NOjwwKbqeLzm D+jTY3TFDWPUwjHeoHFWHHggpnK6YeXQdwOcPjSQGKkFw2t6OBI1w+aeU7CZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzWcp52+ciU/Q3suSFVrY6MKQ0H8wHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ODFiN2YwOC1k ZDk0LTRjZDAtYWEzOC04NTEyZjE1MmJkMzIvMC83RTUxQ0FDMUNFMkFGRTE5NThC MUZCNkE2MjM3NzE3QjBCNUQ0ODEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDMcsCY9ZafutSxcc/L2 sJlY0mnvZYvi+endochFxV+wWxS9xQtGT+YbdwD6hdKNMkjBXgT1VmoJVfJEVDoJ pP36a5caB1rZ8xwdK+WsV1GD1xDwJ1Zg5PBj08U/TEz4T/olE4c33CMR7Pb9Gizu 44rnuY+Q7QJcZCKN4TxmJzlNlTEmqt0KxePU+wQJ7kgzFFTVqQcS+DNzJFQTFRZA +7gfBdE5rFrB9A75ackKmHkOK7DyxoOx9TFIOjeTroRuOolyxqQ0YMuR7Ed9oGss PlPljwaWZqhIYaaVkDvK3UulXsWWlzn4gH4tZDEFEwJ5Pj6d6lqdgdKC1XTwIx0g Zg== -----END CERTIFICATE-----Generated at Thu Jul 24 11:49:38 2025 by rpki-client