$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft File: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft (raw, json) Hash identifier: qix29lmcvZrDNYaOPE8Ijtlr4HHsfqEwvYdKkI+I8Ok= Subject key identifier: FB:67:64:4E:9D:48:4F:0E:21:94:B4:77:25:77:51:8F:D6:75:69:98 Authority key identifier: E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C Certificate issuer: /CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Certificate serial: 4CEBCB3EDD6D3808F12688DCA2F04AC30C463DEA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft Manifest number: 06 Signing time: Sun 20 Jul 2025 19:12:52 +0000 Manifest this update: Sun 20 Jul 2025 19:07:52 +0000 Manifest next update: Mon 21 Jul 2025 22:43:52 +0000 Files and hashes: 1: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl (hash: VvCD6kYPGP2nAMUnROISjgLz31oql02lWE5b/4hyCgQ=) 2: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (hash: aCq/jKA1GGay4DL6ZU284taMNq3/9u17cmIYZEHZP9Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 15:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:eb:cb:3e:dd:6d:38:08:f1:26:88:dc:a2:f0:4a:c3:0c:46:3d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Validity Not Before: Jul 20 19:07:52 2025 GMT Not After : Jul 21 22:43:52 2025 GMT Subject: CN=FB67644E9D484F0E2194B4772577518FD6756998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:66:54:c0:09:b1:91:8e:de:21:a9:21:74: 36:5d:95:33:07:9d:ae:e7:5a:cc:7f:d1:ad:a5:11: 22:4c:7a:5a:2e:a9:9d:db:79:a8:0e:c0:a1:2d:e5: d4:fb:1e:54:34:55:12:21:74:95:12:0a:d1:37:e9: aa:85:c4:bc:f2:e8:4b:a6:a8:c4:f6:21:37:49:7e: b6:b6:be:69:ea:c9:6a:ab:64:d8:c0:e2:92:cd:d1: 0c:18:6e:58:8b:7e:10:78:b9:fd:76:dc:7d:68:32: 3a:b8:7a:45:ee:12:88:bd:08:1d:f2:19:ba:f9:5e: 99:b9:fd:51:dd:e9:2e:5f:fe:31:f4:4d:be:5b:e1: a6:c5:62:a8:a2:84:f5:ac:51:9d:2a:8c:3f:82:4c: 73:40:51:df:33:32:3c:22:02:20:90:3a:51:43:ea: 02:ac:e6:e7:c2:d7:99:3c:97:45:87:02:64:37:ca: 4f:18:64:10:ed:ab:44:ec:0f:7e:ac:a5:1b:91:46: af:39:4c:e8:42:17:d5:ed:ec:84:92:7a:2f:ac:5e: e5:81:fc:9b:8e:c3:0c:e7:fa:8e:4c:b8:f1:48:38: 34:66:88:84:db:b4:23:d0:8e:ff:dd:3a:86:fe:82: 84:c2:4f:f4:db:ea:42:a6:15:1d:9d:16:14:8b:05: ef:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:67:64:4E:9D:48:4F:0E:21:94:B4:77:25:77:51:8F:D6:75:69:98 X509v3 Authority Key Identifier: keyid:E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c0:51:84:05:68:de:97:fc:89:da:f2:1c:f2:a9:00:4e:da: 1b:84:48:e3:4e:10:38:75:d8:05:86:4a:7f:4c:14:06:e4:7f: 27:05:ef:6c:e1:0c:46:a5:a3:5f:7e:d4:41:d1:4a:b1:e1:94: 7f:3e:47:88:6c:65:fd:8b:f4:85:22:80:0b:14:61:67:6e:df: ee:76:89:05:1d:64:19:69:76:af:13:f1:d3:f4:b8:82:ce:f3: ff:fb:d0:5d:83:ed:c7:22:15:dd:cf:f8:e0:c9:44:a2:0a:83: c6:38:14:e6:20:07:b6:46:55:c3:2f:9f:9d:ad:34:9e:35:af: 7c:06:21:21:0f:66:b7:86:44:0e:f2:87:69:a9:18:99:40:21: ad:cd:c4:61:42:a8:d2:45:be:7a:c7:08:fa:ff:4a:b9:29:c6: 2b:dd:c8:de:8c:1f:4c:4d:25:4b:c3:cb:af:84:60:ec:15:0a: bd:ba:83:b3:01:8a:8e:25:86:c4:c5:49:e4:59:d7:2f:76:3e: cd:26:fa:36:d2:8c:46:d4:35:cf:e7:e0:74:eb:47:47:ca:15: 89:e3:c9:b0:9f:bb:d3:9a:17:79:59:a1:54:3e:28:e2:1e:98: 1e:c6:a6:2d:9f:f7:d6:a3:21:6d:b2:44:e0:87:6d:51:bd:6c: e9:b0:20:a3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTOvLPt1tOAjxJojcovBKwwxGPeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYz RUFCQ0Y3QzAeFw0yNTA3MjAxOTA3NTJaFw0yNTA3MjEyMjQzNTJaMDMxMTAvBgNV BAMTKEZCNjc2NDRFOUQ0ODRGMEUyMTk0QjQ3NzI1Nzc1MThGRDY3NTY5OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtiGZUwAmxkY7eIakhdDZdlTMH na7nWsx/0a2lESJMelouqZ3beagOwKEt5dT7HlQ0VRIhdJUSCtE36aqFxLzy6Eum qMT2ITdJfra2vmnqyWqrZNjA4pLN0QwYbliLfhB4uf123H1oMjq4ekXuEoi9CB3y Gbr5Xpm5/VHd6S5f/jH0Tb5b4abFYqiihPWsUZ0qjD+CTHNAUd8zMjwiAiCQOlFD 6gKs5ufC15k8l0WHAmQ3yk8YZBDtq0TsD36spRuRRq85TOhCF9Xt7ISSei+sXuWB /JuOwwzn+o5MuPFIODRmiITbtCPQjv/dOob+goTCT/Tb6kKmFR2dFhSLBe8TAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU+2dkTp1ITw4hlLR3JXdRj9Z1aZgwHwYDVR0j BBgwFoAU6J+RXYa7nxPQ8inKeM1tnz6rz3wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzU4MzZlNjAtNmE5Mi00N2VmLTliOWItOTJhODRkNmQz NWJhLzEvRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYzRUFCQ0Y3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FODlGOTE1RDg2QkI5RjEzRDBGMjI5Q0E3 OENENkQ5RjNFQUJDRjdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M1ODM2ZTYwLTZhOTItNDdlZi05YjliLTkyYTg0ZDZkMzViYS8xL0U4OUY5MTVE ODZCQjlGMTNEMEYyMjlDQTc4Q0Q2RDlGM0VBQkNGN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+wFGE BWjel/yJ2vIc8qkATtobhEjjThA4ddgFhkp/TBQG5H8nBe9s4QxGpaNfftRB0Uqx 4ZR/PkeIbGX9i/SFIoALFGFnbt/udokFHWQZaXavE/HT9LiCzvP/+9Bdg+3HIhXd z/jgyUSiCoPGOBTmIAe2RlXDL5+drTSeNa98BiEhD2a3hkQO8odpqRiZQCGtzcRh QqjSRb56xwj6/0q5KcYr3cjejB9MTSVLw8uvhGDsFQq9uoOzAYqOJYbExUnkWdcv dj7NJvo20oxG1DXP5+B060dHyhWJ48mwn7vTmhd5WaFUPijiHpgexqYtn/fWoyFt skTgh21RvWzpsCCj -----END CERTIFICATE-----Generated at Mon Jul 21 01:32:09 2025 by rpki-client