$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: kYRcCNJSNH6oMtJtUOCf/Qe1H/KC6cRFlAK//DiVsH4= Subject key identifier: 9E:B2:57:E7:99:18:A7:FD:AD:BF:A8:00:4C:45:86:48:FB:27:C7:9C Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 7FE2D1907A37013F3E15CEBB230E7B8C6623FAAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 015A Signing time: Tue 22 Jul 2025 02:46:54 +0000 Manifest this update: Tue 22 Jul 2025 02:41:54 +0000 Manifest next update: Wed 23 Jul 2025 04:27:54 +0000 Files and hashes: 1: 3134312e3139332e3232382e302f32342d3234203d3e20323134323038.roa (hash: p1kuPenqcy6Et0XPjwxcCLB+vpEy3ekHhe4EodnqolI=) 2: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: 0b6sszxsKulqMcqV3D3Yqcg5IxC3pSU5gc82mTsDYlA=) 3: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: DDeP4uYwqP8b0ON0e+nML7HE4UFDik7BChJ/x0EHl9Q=) 4: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: LgBSORN5h8sBQmzLG6Kx90Tfc06zlPFI1Rf0Mz2gwtI=) 5: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: aWzsWkNz9PJPPmM8i0/IefYTbT3Y07R53lZGD0EHqrg=) 6: 3231332e3235342e3137302e302f32342d3234203d3e20323038343833.roa (hash: gjwDheXZBS8eOtwo7Ja5xPFcujfV7TC07EH1z972oQ4=) 7: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: TDSLNd9plHJwOulPeBHo1vNBDKxJTlWmh9i0dzSd4do=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 04:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e2:d1:90:7a:37:01:3f:3e:15:ce:bb:23:0e:7b:8c:66:23:fa:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Jul 22 02:41:54 2025 GMT Not After : Jul 23 04:27:54 2025 GMT Subject: CN=9EB257E79918A7FDADBFA8004C458648FB27C79C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:11:85:2a:e3:92:47:6f:9f:9d:ea:5d:f2:d5: cd:dc:14:09:df:e0:28:2c:36:a5:9e:27:84:67:6a: 53:f1:f9:90:e2:18:cb:8c:20:ae:4b:04:54:47:95: 4f:c6:b3:25:b6:e8:3b:c9:17:e2:3a:e6:78:a3:df: 58:93:7c:58:11:10:1f:4c:12:1a:ee:d5:68:38:25: 9a:b9:06:e7:69:20:4d:3e:9b:f9:d4:8a:a8:70:34: 6e:48:4b:48:07:61:9b:3d:ab:77:66:f1:bc:82:70: 3d:b5:e2:25:ea:ab:e1:b1:61:04:bd:9b:0c:8e:b5: 9f:df:67:6f:a7:15:49:d9:a4:ed:d5:d2:ae:cc:7a: 8f:03:e9:b8:b7:7a:44:40:2f:6d:93:d3:29:79:a9: 15:90:a7:28:99:d6:c0:77:45:62:f5:e6:d6:04:71: 23:65:b9:e2:b4:15:ca:b1:77:8d:1e:af:2a:26:ba: 3f:07:ff:77:8e:ec:9a:45:9f:98:0d:98:68:43:e3: b8:cd:bd:7d:9f:d2:7b:ee:c8:55:8e:e6:ab:6d:87: 1b:b2:82:8b:f4:b2:a2:f9:09:13:23:c3:17:90:21: 57:d8:fd:54:98:5c:ac:c5:5a:8b:c2:78:16:0c:69: 23:15:68:8b:44:4d:8e:7d:47:48:b9:b2:8a:28:9b: bb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B2:57:E7:99:18:A7:FD:AD:BF:A8:00:4C:45:86:48:FB:27:C7:9C X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:59:5e:ac:89:6e:09:1e:6b:c0:40:8c:87:ee:ac:a5:4e:d3: 29:69:7e:dd:43:84:bb:80:fe:da:28:f3:d0:58:8b:67:4b:a4: a1:b8:13:f3:d9:eb:5e:44:cf:93:5f:fd:f5:e4:f9:2a:96:df: 81:19:3b:34:d7:72:2f:34:49:41:c6:59:6a:f4:a2:33:9f:40: 39:6d:28:ab:98:2c:06:3c:ff:fe:10:b2:51:6c:2f:87:f3:37: 87:16:4d:42:49:5e:50:70:87:51:26:a2:f3:e3:1f:c5:81:bd: 8c:94:7d:16:a8:51:75:ab:fb:b3:78:a1:c2:09:13:af:cb:20: 23:5f:b2:a2:84:c0:61:47:0e:30:1a:2a:98:73:09:93:e2:e4: 98:3a:38:7c:ad:2d:13:a7:b8:99:dd:48:ad:d3:86:b7:62:be: de:6d:99:54:14:93:1f:e3:c4:74:cc:85:6d:da:2c:a5:5e:31: f0:38:38:dc:93:5b:b8:5f:f3:0c:56:87:5c:e5:4b:51:ac:34: 3c:be:b6:24:06:67:d0:7e:62:89:08:ee:ea:cb:ae:80:dd:94: 6c:dd:19:a0:bd:e3:90:90:06:03:ad:fb:af:5e:be:f0:ca:8c: ce:49:02:86:13:ce:6e:06:90:67:7c:79:6c:bb:0e:fa:94:fc: 19:dd:14:6e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUf+LRkHo3AT8+Fc67Iw57jGYj+qowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNTA3MjIwMjQxNTRaFw0yNTA3MjMwNDI3NTRaMDMxMTAvBgNV BAMTKDlFQjI1N0U3OTkxOEE3RkRBREJGQTgwMDRDNDU4NjQ4RkIyN0M3OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4EYUq45JHb5+d6l3y1c3cFAnf 4CgsNqWeJ4RnalPx+ZDiGMuMIK5LBFRHlU/GsyW26DvJF+I65nij31iTfFgREB9M Ehru1Wg4JZq5BudpIE0+m/nUiqhwNG5IS0gHYZs9q3dm8byCcD214iXqq+GxYQS9 mwyOtZ/fZ2+nFUnZpO3V0q7Meo8D6bi3ekRAL22T0yl5qRWQpyiZ1sB3RWL15tYE cSNlueK0Fcqxd40eryomuj8H/3eO7JpFn5gNmGhD47jNvX2f0nvuyFWO5qtthxuy gov0sqL5CRMjwxeQIVfY/VSYXKzFWovCeBYMaSMVaItETY59R0i5sooom7vfAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUnrJX55kYp/2tv6gATEWGSPsnx5wwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAellerIluCR5rwECMh+6s pU7TKWl+3UOEu4D+2ijz0FiLZ0ukobgT89nrXkTPk1/99eT5KpbfgRk7NNdyLzRJ QcZZavSiM59AOW0oq5gsBjz//hCyUWwvh/M3hxZNQkleUHCHUSai8+MfxYG9jJR9 FqhRdav7s3ihwgkTr8sgI1+yooTAYUcOMBoqmHMJk+LkmDo4fK0tE6e4md1IrdOG t2K+3m2ZVBSTH+PEdMyFbdospV4x8Dg43JNbuF/zDFaHXOVLUaw0PL62JAZn0H5i iQju6suugN2UbN0ZoL3jkJAGA637r16+8MqMzkkChhPObgaQZ3x5bLsO+pT8Gd0U bg== -----END CERTIFICATE-----Generated at Tue Jul 22 11:47:37 2025 by rpki-client