$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json) Hash identifier: pk5Nx3tcLJ/5RXUqbB05zLQy7EFAvWGLJ9m8T5pB8hA= Subject key identifier: 5C:0D:CD:03:59:6F:3E:21:51:F5:42:A8:61:32:A5:1A:8C:7D:C5:94 Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Certificate serial: 03E9E47D55242802119B1ADDD460A23AE325C7B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft Manifest number: F2 Signing time: Sat 19 Jul 2025 22:49:53 +0000 Manifest this update: Sat 19 Jul 2025 22:44:53 +0000 Manifest next update: Mon 21 Jul 2025 02:43:53 +0000 Files and hashes: 1: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: V68OTPvdVrjyfMG7PbEX/J6sKI6nZM/k28lWhN+GWS8=) 2: 326131343a333863303a3a2f34382d3438203d3e20323135323438.roa (hash: lS1Iql8MBgdrATO78dHDXVjUA4qYq6WwDN1XR+tCAz8=) 3: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: +yFHbjFdcl3OkH9bM82B/wbQvRBlEBGqJ0LTOyulC0Q=) 4: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: kUiBrX3+9cuSC9lMhoz9V2p165UrI0C31waBU1/3ZFc=) 5: AS215248.asa (hash: GFt+WeOjsAQoZKjYNcrA7zUmVSH7b01JtVj28qjRWk8=) 6: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: aQBGW4UwEpZw1viUGTiicR7R7bF3eHxKluau3FSxHVQ=) 7: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: RPFyh+9f4VeLKwhSKFsibkww2V1WrimAJUdSq1OTL10=) 8: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: M972A2zux5bp2vtM/yV/ifXNBlJMRB7g6qDIDzpgNsU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 02:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:e9:e4:7d:55:24:28:02:11:9b:1a:dd:d4:60:a2:3a:e3:25:c7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Validity Not Before: Jul 19 22:44:53 2025 GMT Not After : Jul 21 02:43:53 2025 GMT Subject: CN=5C0DCD03596F3E2151F542A86132A51A8C7DC594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:be:59:f7:5e:b0:86:8e:ba:14:ca:52:53:5e: 59:79:ad:a2:28:1d:23:c9:b3:16:ff:86:97:ed:ff: b1:35:d3:31:74:49:ba:c1:64:64:0c:9d:e8:c2:a9: 0e:59:ab:42:0b:04:fb:75:78:7e:1c:1c:e1:e6:4c: 21:e2:ee:ab:1a:27:6f:c2:f3:7e:18:2d:48:d3:f0: 55:db:21:41:53:39:8b:eb:66:a6:88:22:4e:80:b8: b7:42:00:8b:e4:cd:1e:26:f2:b3:b2:f9:d4:32:cd: 6e:65:d4:e9:a8:0d:ca:c3:57:33:98:b9:c9:23:b8: 45:e1:1b:67:c0:47:8b:b4:18:d7:22:d1:68:c4:d5: f2:e0:0f:b2:1c:50:70:3a:ce:60:d0:51:ef:9d:bf: b8:50:61:fa:02:ad:75:05:53:a8:07:19:a1:71:60: 99:40:02:09:28:7b:c4:c3:58:2f:17:c2:35:4f:d3: 8f:27:8c:3d:40:71:5c:e3:5d:65:2f:d8:05:1e:ec: 9e:4e:ce:63:d2:81:e7:6d:bf:69:70:de:24:f0:08: af:ab:a3:bf:26:35:3a:a9:28:ab:62:e7:94:05:d0: 16:d5:6b:ed:25:ae:5c:f8:73:c6:0d:4a:f6:f2:06: f5:fe:71:e0:ae:d8:b6:b5:1f:2f:e0:6d:1c:c3:21: 19:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0D:CD:03:59:6F:3E:21:51:F5:42:A8:61:32:A5:1A:8C:7D:C5:94 X509v3 Authority Key Identifier: keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:37:56:a9:a7:a8:cd:9b:4c:e6:3e:44:bb:89:db:05:a8:a9: 42:a8:e7:4b:8e:97:e8:59:6a:30:83:55:3d:3c:e8:e4:54:08: bf:91:c2:4d:39:9c:7c:ef:ee:7b:c8:89:b2:b1:ef:24:43:66: 83:9d:42:8a:16:48:88:1b:18:b0:ed:0c:5f:38:bc:8c:97:d6: fd:b2:06:92:b6:c8:de:8e:2a:03:56:43:e0:99:ca:a2:50:ce: 97:35:8d:e9:7a:25:af:d3:95:22:fe:0d:77:ec:48:ac:81:0f: be:4c:b2:e8:3c:94:37:e1:f9:9f:5e:d1:15:2b:58:22:47:a9: 07:da:64:ba:0e:3d:f2:a9:30:44:1c:ed:76:71:15:ca:9c:69: fe:b6:2e:78:07:bb:9f:42:ac:a3:ef:7b:77:6c:af:6e:e5:e5: b3:b0:68:04:37:3b:29:4d:6e:23:ec:4f:51:69:a4:47:a3:65: f9:05:d8:37:9b:5e:44:a8:b3:ea:a4:0b:65:48:67:b8:a4:48: f4:9d:c3:ae:97:27:89:79:05:88:97:44:a4:0c:a3:7b:ce:ee: aa:b0:e5:71:29:6c:4a:a2:8a:b4:40:c5:5b:0c:1a:50:d9:1b: 6d:2d:2c:27:48:80:ba:24:62:1a:3d:e1:d7:52:c5:36:45:e7: e7:1c:33:bc -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUA+nkfVUkKAIRmxrd1GCiOuMlx7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3 ZTc5N2I2ODAeFw0yNTA3MTkyMjQ0NTNaFw0yNTA3MjEwMjQzNTNaMDMxMTAvBgNV BAMTKDVDMERDRDAzNTk2RjNFMjE1MUY1NDJBODYxMzJBNTFBOEM3REM1OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUvln3XrCGjroUylJTXll5raIo HSPJsxb/hpft/7E10zF0SbrBZGQMnejCqQ5Zq0ILBPt1eH4cHOHmTCHi7qsaJ2/C 834YLUjT8FXbIUFTOYvrZqaIIk6AuLdCAIvkzR4m8rOy+dQyzW5l1OmoDcrDVzOY uckjuEXhG2fAR4u0GNci0WjE1fLgD7IcUHA6zmDQUe+dv7hQYfoCrXUFU6gHGaFx YJlAAgkoe8TDWC8XwjVP048njD1AcVzjXWUv2AUe7J5OzmPSgedtv2lw3iTwCK+r o78mNTqpKKti55QF0BbVa+0lrlz4c8YNSvbyBvX+ceCu2La1Hy/gbRzDIRn/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUXA3NA1lvPiFR9UKoYTKlGox9xZQwHwYDVR0j BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1 NWUyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZDE5ZGIyMC00 NjUzLTQ4ZDQtOGZjNC01ODBkMTM2OWI3YzQvMC81Q0RDMDRCQjIzRUFBNENFQ0M3 OTFERkUwNEJCMDI4QjdFNzk3QjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzdWqaeozZtM5j5Eu4nb BaipQqjnS46X6FlqMINVPTzo5FQIv5HCTTmcfO/ue8iJsrHvJENmg51CihZIiBsY sO0MXzi8jJfW/bIGkrbI3o4qA1ZD4JnKolDOlzWN6Xolr9OVIv4Nd+xIrIEPvkyy 6DyUN+H5n17RFStYIkepB9pkug498qkwRBztdnEVypxp/rYueAe7n0Kso+97d2yv buXls7BoBDc7KU1uI+xPUWmkR6Nl+QXYN5teRKiz6qQLZUhnuKRI9J3DrpcniXkF iJdEpAyje87uqrDlcSlsSqKKtEDFWwwaUNkbbS0sJ0iAuiRiGj3h11LFNkXn5xwz vA== -----END CERTIFICATE-----Generated at Sun Jul 20 16:22:24 2025 by rpki-client