$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft File: B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft (raw, json) Hash identifier: USRT1f5T7eEO603F+TIq7zcnUx822ux78aPyvGnWfPA= Subject key identifier: 1C:3C:8B:6B:4F:61:EE:4A:A6:06:F8:DA:7B:7F:BF:65:4B:B4:3F:9A Authority key identifier: B7:D2:E8:6F:D3:DA:15:BD:13:4C:A2:15:5C:3A:9F:DA:71:8B:37:49 Certificate issuer: /CN=B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749 Certificate serial: 148D6590AE1EFFB77EDD412B97E6BD9E52A17FB8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft Manifest number: 70 Signing time: Tue 22 Jul 2025 23:09:07 +0000 Manifest this update: Tue 22 Jul 2025 23:04:07 +0000 Manifest next update: Thu 24 Jul 2025 01:38:07 +0000 Files and hashes: 1: 326131343a373538303a6330303a3a2f34302d3438203d3e20313938303235.roa (hash: 3eo92HTpLxu+/Kjst/g+aIrgcCeedR/rWPVZHkoZXZY=) 2: 326131343a373538303a6330303a3a2f34302d3438203d3e20313531313934.roa (hash: IcJMioVXTHIBW9dWRoa7QtI8OxLl1FTCXI6aJvTPxUg=) 3: B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl (hash: 9fR8jdkZtKKyf8S6AjlUYW51LPKFvNZwUxsqEmB1eYk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:8d:65:90:ae:1e:ff:b7:7e:dd:41:2b:97:e6:bd:9e:52:a1:7f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749 Validity Not Before: Jul 22 23:04:07 2025 GMT Not After : Jul 24 01:38:07 2025 GMT Subject: CN=1C3C8B6B4F61EE4AA606F8DA7B7FBF654BB43F9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a5:8f:85:df:ab:00:65:f0:51:b0:4a:bc:5f: c9:49:6d:f8:8b:02:89:a9:44:04:a5:fe:ee:6a:a0: f6:ee:29:3e:22:63:ae:4e:9b:7e:59:8c:61:d9:7e: c3:9c:a9:78:49:b5:62:b4:c8:48:af:36:ed:de:60: 2a:50:a9:a5:b2:cc:93:79:70:3f:c6:4a:b0:66:00: 38:f8:f6:2a:4d:fe:50:fe:ed:72:be:9b:49:15:10: 0c:ec:3f:ad:b7:5a:a9:07:bd:d6:0f:01:61:a8:9b: 04:d4:1e:3a:6e:91:c9:16:e7:10:f8:45:86:2b:bf: be:1b:22:23:6c:fd:e5:c0:e2:65:e1:62:94:8d:b8: 73:d3:c0:9c:59:3c:0a:da:5d:18:eb:9a:d6:93:50: 8b:b7:64:1e:26:e7:ac:3d:d6:d8:99:4c:b9:bf:14: a5:2c:4c:a1:ef:aa:32:a6:b8:ca:7e:05:bb:ba:af: 52:7c:44:6b:71:cb:20:90:f9:b9:4a:29:00:b4:00: a9:f9:02:fe:09:e1:cf:ff:0a:f8:7d:d7:9f:91:c0: 3b:6d:da:d1:ce:73:b3:32:6e:49:6d:a3:aa:9c:2a: 7f:99:26:f1:68:6c:a5:31:ae:c7:6d:ab:f2:e7:24: 16:29:0e:f8:24:76:90:fc:cc:fe:0c:40:1a:17:f1: f4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3C:8B:6B:4F:61:EE:4A:A6:06:F8:DA:7B:7F:BF:65:4B:B4:3F:9A X509v3 Authority Key Identifier: keyid:B7:D2:E8:6F:D3:DA:15:BD:13:4C:A2:15:5C:3A:9F:DA:71:8B:37:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:1e:05:90:9d:08:43:d6:d5:ea:f3:b8:cb:7f:0a:ba:6a:9b: a3:b1:43:18:ad:54:49:2d:55:a7:4a:ca:ac:98:9d:d3:58:57: 61:41:91:b6:a4:79:92:5f:f5:eb:29:c7:0b:e1:8e:c1:3d:e9: f3:c4:da:39:56:3e:d0:40:f1:a6:97:90:de:ce:b5:f0:0c:d7: 80:14:ae:bd:1a:1d:87:3a:fe:b8:43:45:10:c5:f6:d3:23:d6: 67:ab:a4:bc:17:00:36:d3:27:c2:59:a9:98:d3:fe:c9:4b:b5: ce:e1:03:bc:6e:17:05:04:bd:8c:6c:e9:9f:a7:d9:34:de:58: 1c:b9:54:0b:6f:27:35:9d:6b:8e:26:f0:b7:7a:77:32:92:3d: 96:50:d5:12:59:84:97:bc:14:dd:bf:05:bd:ba:2e:8c:03:f1: 22:99:b9:a0:89:36:d9:97:30:c8:3c:41:25:05:54:1a:22:9a: e9:9f:25:60:d0:e0:19:e0:8f:8a:22:86:ff:35:ce:84:af:7d: 19:35:9e:e7:90:c8:5a:97:6e:3a:b5:1c:86:94:53:d8:bb:ac: b7:2a:b9:e9:be:75:3a:1a:c3:76:46:dd:c2:70:b2:4e:d7:4f: 81:30:86:8e:fa:29:c3:c7:32:08:30:9a:71:b6:df:e9:71:5a: 03:02:37:a0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFI1lkK4e/7d+3UErl+a9nlKhf7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdEMkU4NkZEM0RBMTVCRDEzNENBMjE1NUMzQTlGREE3 MThCMzc0OTAeFw0yNTA3MjIyMzA0MDdaFw0yNTA3MjQwMTM4MDdaMDMxMTAvBgNV BAMTKDFDM0M4QjZCNEY2MUVFNEFBNjA2RjhEQTdCN0ZCRjY1NEJCNDNGOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCepY+F36sAZfBRsEq8X8lJbfiL AompRASl/u5qoPbuKT4iY65Om35ZjGHZfsOcqXhJtWK0yEivNu3eYCpQqaWyzJN5 cD/GSrBmADj49ipN/lD+7XK+m0kVEAzsP623WqkHvdYPAWGomwTUHjpukckW5xD4 RYYrv74bIiNs/eXA4mXhYpSNuHPTwJxZPAraXRjrmtaTUIu3ZB4m56w91tiZTLm/ FKUsTKHvqjKmuMp+Bbu6r1J8RGtxyyCQ+blKKQC0AKn5Av4J4c//Cvh915+RwDtt 2tHOc7Mybklto6qcKn+ZJvFobKUxrsdtq/LnJBYpDvgkdpD8zP4MQBoX8fQPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUHDyLa09h7kqmBvjae3+/ZUu0P5owHwYDVR0j BBgwFoAUt9Lob9PaFb0TTKIVXDqf2nGLN0kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzZmZDRlYTEtYTI2Ni00ZGVhLWI0OGEtMTVkYTM1NDUy MTA5LzEvQjdEMkU4NkZEM0RBMTVCRDEzNENBMjE1NUMzQTlGREE3MThCMzc0OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CN0QyRTg2RkQzREExNUJEMTM0Q0EyMTU1 QzNBOUZEQTcxOEIzNzQ5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M2ZmQ0ZWExLWEyNjYtNGRlYS1iNDhhLTE1ZGEzNTQ1MjEwOS8xL0I3RDJFODZG RDNEQTE1QkQxMzRDQTIxNTVDM0E5RkRBNzE4QjM3NDkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCyHgWQ nQhD1tXq87jLfwq6apujsUMYrVRJLVWnSsqsmJ3TWFdhQZG2pHmSX/XrKccL4Y7B PenzxNo5Vj7QQPGml5DezrXwDNeAFK69Gh2HOv64Q0UQxfbTI9Znq6S8FwA20yfC WamY0/7JS7XO4QO8bhcFBL2MbOmfp9k03lgcuVQLbyc1nWuOJvC3encykj2WUNUS WYSXvBTdvwW9ui6MA/EimbmgiTbZlzDIPEElBVQaIprpnyVg0OAZ4I+KIob/Nc6E r30ZNZ7nkMhal246tRyGlFPYu6y3KrnpvnU6GsN2Rt3CcLJO10+BMIaO+inDxzII MJpxtt/pcVoDAjeg -----END CERTIFICATE-----Generated at Wed Jul 23 06:19:18 2025 by rpki-client