$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft File: 2E2674263AECD572673F87614919CA492C79FAEA.mft (raw, json) Hash identifier: 51rR3UBBGz5A6qiwDz/6dd7qwXU/lxjVah1OgA/qhFk= Subject key identifier: BF:6F:D3:88:75:4B:0E:E1:80:AD:EA:32:A6:4E:55:01:A1:B5:14:C7 Authority key identifier: 2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA Certificate issuer: /CN=2e2674263aecd572673f87614919ca492c79faea Certificate serial: 1A9F7C1FD1F25410B42D2054D2DA9AF20622FDD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft Manifest number: F3 Signing time: Sat 26 Jul 2025 21:12:07 +0000 Manifest this update: Sat 26 Jul 2025 21:07:07 +0000 Manifest next update: Sun 27 Jul 2025 21:13:07 +0000 Files and hashes: 1: 2E2674263AECD572673F87614919CA492C79FAEA.crl (hash: 1Aq6jZO5ZPKjhSztpZwLLQCsH3Kx1DLHnJYKpFDbj+8=) 2: 34352e36362e36302e302f32342d3234203d3e20383334.roa (hash: cob4jPxF3rrMg6hwki6aZSVe0/iQEcIhptQTeWjOdMo=) 3: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: tU7tyCca1tIOx1hnSKjuKCDiTN546CQQQvHB6q/i7qk=) 4: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: imRIoujslgfIw1o5CZvn1r7w9Uct08AIqiMVjfiL8o4=) 5: 34352e36362e36332e302f32342d3234203d3e20383334.roa (hash: +lxugZDOPYeNvwOMe73TcSTp+67iTBoQ2Mh6vI2juqw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 21:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:9f:7c:1f:d1:f2:54:10:b4:2d:20:54:d2:da:9a:f2:06:22:fd:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2674263aecd572673f87614919ca492c79faea Validity Not Before: Jul 26 21:07:07 2025 GMT Not After : Jul 27 21:13:07 2025 GMT Subject: CN=BF6FD388754B0EE180ADEA32A64E5501A1B514C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:44:46:19:c8:e1:a2:5f:18:af:fe:07:d2:de: b7:e0:fc:86:a8:e4:05:96:a0:4d:49:ed:9c:6d:f9: f9:d2:9f:73:1e:0c:64:a5:b4:b2:bd:d8:a4:4b:97: e8:62:a3:b1:49:44:48:db:39:0d:a2:5a:c6:3e:5f: 82:22:fb:6b:8f:32:2e:68:a0:78:f1:b4:13:43:0b: 30:80:c6:6a:6f:7a:d1:b7:13:ee:2a:04:fa:de:2f: b2:ae:c8:66:c6:64:86:12:0a:ff:67:cc:43:4f:48: fe:b2:26:3c:96:fb:db:4e:a4:ae:34:f2:a3:a9:49: 56:bf:03:c3:c0:58:72:ad:42:2c:73:15:3e:ae:9d: 66:4d:75:f2:61:60:6f:ed:1a:ef:4d:ce:5b:c3:28: b0:1b:8d:98:32:2e:6e:9c:91:87:a8:71:05:f0:99: 03:8c:9b:9d:2c:67:aa:b3:94:14:59:85:48:bc:47: f5:e0:e4:60:27:df:cc:76:07:2c:dc:aa:61:9e:ca: 6b:9b:ab:83:f5:0a:b7:f1:d9:42:22:5d:9c:c2:e7: 3d:dd:64:f7:1d:dd:fe:73:c0:bb:db:89:2a:fc:e0: e9:a2:35:7e:b5:41:a1:77:f1:e3:38:8c:ef:e9:d4: 07:10:d4:db:de:3a:08:ca:4f:e2:cf:cc:f5:34:c7: 05:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6F:D3:88:75:4B:0E:E1:80:AD:EA:32:A6:4E:55:01:A1:B5:14:C7 X509v3 Authority Key Identifier: keyid:2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f1:ef:82:96:ce:71:ae:9b:b1:12:73:8c:46:b8:a6:89:c9:31: f2:d4:f7:1c:f4:6d:38:b5:5d:9a:59:94:cc:fb:bd:5f:ee:24: 33:34:33:5d:c2:35:43:f2:65:00:90:2a:cc:b8:a7:ef:7f:0a: f5:2a:5a:9e:f5:7a:1f:ad:f6:e3:ca:7e:21:22:75:5b:5c:f4: 83:6f:5e:72:f7:97:74:a2:ae:39:87:5d:d2:3d:da:b1:36:34: 0d:aa:2e:9d:8d:be:0c:60:eb:bc:d7:12:ec:5b:49:2e:67:56: 7c:d4:a1:a5:6e:3a:83:66:2e:cd:05:dd:af:3b:8c:c9:fa:f3: 6b:f0:f2:fb:c1:63:3e:7d:58:4d:3d:fd:6c:df:4c:0d:58:3a: 6b:6a:34:a9:15:68:8f:f6:a8:4b:6c:eb:6f:98:82:42:e5:b7: 55:8e:7f:05:a2:86:30:9a:b0:47:fa:45:f5:f6:48:ce:7f:62: 39:5c:07:59:8c:b3:3f:a0:84:88:89:ba:3b:fd:c7:97:43:ce: 83:28:6e:f4:17:eb:3b:07:e3:23:e6:02:1c:e8:8f:0c:9e:9e: 31:10:e1:0b:cc:f2:03:7a:f8:df:63:68:ce:e5:73:d8:62:97: 36:b3:59:ef:6f:02:fe:0b:cd:c9:a0:f2:b0:93:88:33:19:c5: ef:b8:9e:19 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGp98H9HyVBC0LSBU0tqa8gYi/dAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmUyNjc0MjYzYWVjZDU3MjY3M2Y4NzYxNDkxOWNhNDky Yzc5ZmFlYTAeFw0yNTA3MjYyMTA3MDdaFw0yNTA3MjcyMTEzMDdaMDMxMTAvBgNV BAMTKEJGNkZEMzg4NzU0QjBFRTE4MEFERUEzMkE2NEU1NTAxQTFCNTE0QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClREYZyOGiXxiv/gfS3rfg/Iao 5AWWoE1J7Zxt+fnSn3MeDGSltLK92KRLl+hio7FJREjbOQ2iWsY+X4Ii+2uPMi5o oHjxtBNDCzCAxmpvetG3E+4qBPreL7KuyGbGZIYSCv9nzENPSP6yJjyW+9tOpK40 8qOpSVa/A8PAWHKtQixzFT6unWZNdfJhYG/tGu9NzlvDKLAbjZgyLm6ckYeocQXw mQOMm50sZ6qzlBRZhUi8R/Xg5GAn38x2ByzcqmGeymubq4P1Crfx2UIiXZzC5z3d ZPcd3f5zwLvbiSr84OmiNX61QaF38eM4jO/p1AcQ1NveOgjKT+LPzPU0xwVZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUv2/TiHVLDuGAreoypk5VAaG1FMcwHwYDVR0j BBgwFoAULiZ0Jjrs1XJnP4dhSRnKSSx5+uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmQ3YzIzMWUtYTMzYy00NTU1LWI0MmUtZDAyMDkzODQ5 Mjk5LzAvMkUyNjc0MjYzQUVDRDU3MjY3M0Y4NzYxNDkxOUNBNDkyQzc5RkFFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xpWjBKanJzMVhKblA0ZGhTUm5LU1N4 NS11by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZDdjMjMxZS1h MzNjLTQ1NTUtYjQyZS1kMDIwOTM4NDkyOTkvMC8yRTI2NzQyNjNBRUNENTcyNjcz Rjg3NjE0OTE5Q0E0OTJDNzlGQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA8e+Cls5xrpuxEnOMRrim ickx8tT3HPRtOLVdmlmUzPu9X+4kMzQzXcI1Q/JlAJAqzLin738K9SpanvV6H632 48p+ISJ1W1z0g29ecveXdKKuOYdd0j3asTY0DaounY2+DGDrvNcS7FtJLmdWfNSh pW46g2YuzQXdrzuMyfrza/Dy+8FjPn1YTT39bN9MDVg6a2o0qRVoj/aoS2zrb5iC QuW3VY5/BaKGMJqwR/pF9fZIzn9iOVwHWYyzP6CEiIm6O/3Hl0POgyhu9BfrOwfj I+YCHOiPDJ6eMRDhC8zyA3r432NozuVz2GKXNrNZ728C/gvNyaDysJOIMxnF77ie GQ== -----END CERTIFICATE-----Generated at Sun Jul 27 08:39:17 2025 by rpki-client