$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft File: E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json) Hash identifier: zU3kQAzgsXvtbpwNpQWX3zn371m1bRUliW+QK+S64zg= Subject key identifier: AB:89:EC:D7:04:74:12:2A:24:AF:2F:A8:A6:C8:DC:DD:E1:63:DF:E9 Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Certificate serial: 5953EFD8D7DBD0A89E59CB2E2B4506D78C81DF37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft Manifest number: C1 Signing time: Wed 23 Jul 2025 01:12:01 +0000 Manifest this update: Wed 23 Jul 2025 01:07:01 +0000 Manifest next update: Thu 24 Jul 2025 05:08:01 +0000 Files and hashes: 1: 326130663a356663303a646561643a3a2f34382d3438203d3e203339363733.roa (hash: gO+lPcmBJ3b3FFlaD55CICvRL4LDSg56OGDANGd62H4=) 2: 39312e3230392e35382e302f32342d3234203d3e203634323637.roa (hash: vVPhAwxMoGbJX95BZTqrmZCi086rlFMNDRhMBQEniYs=) 3: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: o8CgerOLfFhbTWkLZAokg1HPnTxN2TqSppw/XomBvhs=) 4: 39312e3230392e34302e302f32342d3234203d3e203232343237.roa (hash: na/qAaTdIJ7PT1YXsvaqUnpzD/nkfVV0HbNT3JlIn2w=) 5: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: UjFw0WQQLm//XoiWgykA8VWz+amzh0YCKaelwGihPq4=) 6: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: Qj8pflv8KszWoeUIqOpeKQUtZrsbyJDTmnxefpUjjlo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:53:ef:d8:d7:db:d0:a8:9e:59:cb:2e:2b:45:06:d7:8c:81:df:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Validity Not Before: Jul 23 01:07:01 2025 GMT Not After : Jul 24 05:08:01 2025 GMT Subject: CN=AB89ECD70474122A24AF2FA8A6C8DCDDE163DFE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2b:8d:b1:8e:19:c4:c2:fe:7f:8e:ce:55:7c: 65:cb:82:18:4a:6c:7f:80:12:ea:8c:34:c9:eb:78: d8:0a:b1:9f:87:b5:b6:a0:fa:4c:4b:4c:a9:bf:c3: b3:21:5b:de:6b:47:4e:ed:dd:ad:4f:50:5c:27:d2: 7a:e7:55:33:24:4f:6f:6f:a3:11:0d:7a:d3:1a:9b: 0f:bc:1f:46:85:67:e0:f9:98:e7:82:4f:98:f1:b1: 2d:fa:f3:e9:4e:b0:78:b4:79:f5:d0:be:03:17:cf: 06:7f:a4:94:cc:d8:f8:e6:49:e6:25:fb:6c:43:36: f1:15:cb:8e:9c:4c:26:8b:da:fa:22:4b:7f:9f:5e: 73:ee:bd:44:13:71:19:8c:e3:7c:1c:eb:8b:41:84: 5e:f8:44:2d:6e:7b:74:be:65:50:b9:dd:6d:0f:ac: 52:7b:16:03:b1:03:15:9d:9c:8d:ef:62:61:84:7c: c9:b0:08:8d:5c:14:de:e9:2f:44:a4:f7:c7:32:f0: e4:22:1f:32:4e:96:8f:07:4d:f8:d3:21:4f:55:ae: 4d:13:a5:c5:c9:7e:b9:c1:3a:a4:77:9a:99:cc:d9: 8b:38:53:d4:39:02:fe:9c:61:e6:68:0e:16:4e:85: e3:48:f2:86:4f:1a:46:b8:d5:71:a7:b1:9b:36:02: 46:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:89:EC:D7:04:74:12:2A:24:AF:2F:A8:A6:C8:DC:DD:E1:63:DF:E9 X509v3 Authority Key Identifier: keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:9a:fc:a6:ba:2c:28:30:78:2f:bb:a3:af:59:1a:70:3d:c2: 38:97:88:62:5b:58:86:a5:83:18:41:b2:95:29:40:d1:65:b4: 70:c4:8e:af:ce:81:b4:25:1e:b7:3b:d5:95:53:9e:82:ff:b9: 8a:a1:76:1f:f2:8d:6f:92:9a:c2:4a:2c:1b:e5:b3:72:ea:d0: 31:23:27:0e:88:3e:d0:9f:f1:be:53:fe:16:62:95:00:c2:a2: fd:6f:8a:57:65:92:ca:d9:5b:75:3f:b8:1b:96:d5:94:a7:72: 50:36:21:77:db:68:69:28:a1:84:1f:82:ae:35:5b:a7:05:d2: e3:07:c1:fb:ae:04:2e:db:7a:57:8b:9a:3c:f2:b3:73:70:15: 0c:60:b2:eb:12:62:f7:26:7e:c9:28:40:8b:7f:43:a9:1e:50: 55:7d:4c:6d:99:e0:01:16:e8:db:9b:10:a8:95:d0:10:ed:aa: 7c:8c:08:ea:64:0d:8e:d8:ef:6d:77:de:98:95:d4:17:52:10: 2c:ce:8f:55:d2:10:ad:89:c1:3b:2f:d3:af:9d:34:d2:51:e8: 0d:cd:a5:fc:3f:83:f1:36:59:a1:c1:32:c2:e2:90:11:86:29: 5a:35:51:bb:c4:53:7b:d6:55:0f:68:59:9f:fb:94:56:f4:a1: 40:f8:28:d5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWVPv2Nfb0KieWcsuK0UG14yB3zcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3 NjI2MDBlNjAeFw0yNTA3MjMwMTA3MDFaFw0yNTA3MjQwNTA4MDFaMDMxMTAvBgNV BAMTKEFCODlFQ0Q3MDQ3NDEyMkEyNEFGMkZBOEE2QzhEQ0RERTE2M0RGRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFK42xjhnEwv5/js5VfGXLghhK bH+AEuqMNMnreNgKsZ+Htbag+kxLTKm/w7MhW95rR07t3a1PUFwn0nrnVTMkT29v oxENetMamw+8H0aFZ+D5mOeCT5jxsS368+lOsHi0efXQvgMXzwZ/pJTM2PjmSeYl +2xDNvEVy46cTCaL2voiS3+fXnPuvUQTcRmM43wc64tBhF74RC1ue3S+ZVC53W0P rFJ7FgOxAxWdnI3vYmGEfMmwCI1cFN7pL0Sk98cy8OQiHzJOlo8HTfjTIU9Vrk0T pcXJfrnBOqR3mpnM2Ys4U9Q5Av6cYeZoDhZOheNI8oZPGka41XGnsZs2AkanAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUq4ns1wR0Eiokry+opsjc3eFj3+kwHwYDVR0j BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1 N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ bUFPWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjBiZTNlMS04 NTRlLTQ2NjItOTJlOC0wMjg5NTBmZjU3ZmUvMC9FMjA1RUJGMDY1RkM0OTI5RjE4 MDI2NjJBRTYyRDdGOTc2MjYwMEU2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpr8prosKDB4L7ujr1ka cD3COJeIYltYhqWDGEGylSlA0WW0cMSOr86BtCUetzvVlVOegv+5iqF2H/KNb5Ka wkosG+WzcurQMSMnDog+0J/xvlP+FmKVAMKi/W+KV2WSytlbdT+4G5bVlKdyUDYh d9toaSihhB+CrjVbpwXS4wfB+64ELtt6V4uaPPKzc3AVDGCy6xJi9yZ+yShAi39D qR5QVX1MbZngARbo25sQqJXQEO2qfIwI6mQNjtjvbXfemJXUF1IQLM6PVdIQrYnB Oy/Tr5000lHoDc2l/D+D8TZZocEywuKQEYYpWjVRu8RTe9ZVD2hZn/uUVvShQPgo 1Q== -----END CERTIFICATE-----Generated at Wed Jul 23 06:10:56 2025 by rpki-client