$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft File: C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json) Hash identifier: CN69CphVxs926k3OyFAw/KkU2odTMxnbuyD2H+UrySE= Subject key identifier: C5:D5:56:C4:7C:9B:98:0B:B1:FE:1E:1C:72:23:44:C0:27:C8:FC:B9 Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Certificate serial: 662E2E585F95E9106D1E42DDC9C4DC7072A9121A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft Manifest number: 04CA Signing time: Sat 19 Jul 2025 22:26:49 +0000 Manifest this update: Sat 19 Jul 2025 22:21:49 +0000 Manifest next update: Mon 21 Jul 2025 00:20:49 +0000 Files and hashes: 1: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: 3pORVfocHqarnsqwM793nrdIxMZCxCypYkq+seLhAgU=) 2: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: C9UN/z7rRSIBHXCw3Mn5S1vnSskjCCo5azhWVB5o2V8=) 3: 3139332e3234362e342e302f32342d3234203d3e20313335343032.roa (hash: x5G3aikxww4wLRaoWnz2KkIIppe2I2SZAi3PiElvQpI=) 4: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: sM/+fnDXjkHj7EbkbGq/7lP7GeTLLyyPxv5lmFW5v0Q=) 5: 3139332e3234362e3130332e302f32342d3234203d3e20333239303037.roa (hash: RPXnPhP3kmn+nLQChjFVjWqPvCzvvWp/RsN04Irw1Jo=) 6: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (hash: hv8+1ab3SlqVr0lUzuXGkIAi200jEC6ydrdZg2cy0KU=) 7: 3139332e3234362e3130322e302f32342d3234203d3e203630373831.roa (hash: DsxMlBpnaDBCTZCwZ+4l21L/Mim9agw8EK48LHeXcxw=) 8: 3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa (hash: DHsuIdClDCk2AbtF+6NodfNI3JEU6gbRKvoUSbt4bMQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 00:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:2e:2e:58:5f:95:e9:10:6d:1e:42:dd:c9:c4:dc:70:72:a9:12:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Validity Not Before: Jul 19 22:21:49 2025 GMT Not After : Jul 21 00:20:49 2025 GMT Subject: CN=C5D556C47C9B980BB1FE1E1C722344C027C8FCB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cc:87:f7:dd:80:a0:4a:a8:db:11:fd:90:bd: b8:3e:8a:85:12:71:31:c8:14:3b:fe:13:53:bd:91: 32:22:20:4f:96:32:72:41:b9:98:a8:4f:34:8c:05: 4f:75:5a:5a:12:20:a5:81:1f:f2:bd:ef:76:14:ca: 67:aa:b4:de:7c:dd:3a:0e:1f:13:6c:54:38:fe:79: 2e:16:79:22:6c:75:39:7b:7a:01:c0:10:3c:71:ea: fe:3b:a3:ff:29:95:14:05:e3:e6:27:a5:2a:02:2e: 51:89:d9:a2:4f:50:a4:e9:32:7a:d5:04:64:75:11: c1:7c:b1:27:9b:a3:a8:d4:e7:e8:e2:5f:d9:89:25: 69:ff:46:fd:ea:86:a1:ab:6d:24:be:27:71:f6:14: e4:21:6d:b0:54:57:28:84:15:e1:57:96:45:76:08: bc:88:24:e2:6a:9b:a6:b8:52:eb:e7:66:d0:fb:90: 95:c0:9c:44:d7:11:4c:ad:2f:23:45:04:4e:47:78: f1:de:2c:e9:3e:64:d5:8f:f6:6b:fd:82:63:a2:a2: 04:b6:c7:84:2b:a4:f1:35:69:79:37:77:80:51:df: 3a:80:f9:c4:47:a7:e2:0a:71:3b:65:31:37:12:bb: 93:5e:07:da:dd:f3:f4:a8:89:a9:e8:e0:06:80:64: fe:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D5:56:C4:7C:9B:98:0B:B1:FE:1E:1C:72:23:44:C0:27:C8:FC:B9 X509v3 Authority Key Identifier: keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a2:0d:1a:b8:b9:4f:e7:47:d4:e2:3c:59:85:9c:31:82:a5: fc:84:9e:3f:be:01:9a:1c:9e:80:c7:7a:e4:3b:93:10:8e:fd: 7e:c2:48:fe:7c:0c:b6:59:18:13:52:36:f3:12:b7:e0:d6:24: 6d:2a:4c:e0:48:65:d2:c6:23:a5:80:93:2e:d0:29:5e:3e:dd: 41:20:d3:99:57:10:46:90:c1:47:ff:60:cb:bd:03:13:c1:d3: 6d:c5:77:f4:97:3e:b5:3b:8f:33:b5:c5:b5:11:3e:8f:61:48: bc:09:f5:03:fe:5a:20:e8:0e:03:e5:8c:0b:f1:43:21:3e:3e: a3:01:e5:bd:55:af:13:f1:14:d3:11:d6:da:ae:74:ed:4a:fc: fb:3b:5f:1d:eb:f3:ef:86:aa:b8:8f:e4:9c:d3:6c:75:9e:24: 42:ea:fc:55:fb:28:44:c9:f8:06:09:de:d4:8c:83:e5:70:fa: 64:27:6b:4f:0c:39:99:5d:fb:24:4b:b3:d8:b5:19:93:3e:ae: 25:12:80:68:14:d9:c5:96:c4:11:5f:9a:e0:bb:23:18:bf:0b: 52:c2:79:ff:45:57:9a:17:6d:21:98:c0:50:05:10:8d:c1:b0: cb:b7:b7:3c:5d:5c:fd:e1:8d:46:55:07:76:43:f7:2b:39:a7: 31:11:a2:14 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZi4uWF+V6RBtHkLdycTccHKpEhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi NDk0YTdiZjAeFw0yNTA3MTkyMjIxNDlaFw0yNTA3MjEwMDIwNDlaMDMxMTAvBgNV BAMTKEM1RDU1NkM0N0M5Qjk4MEJCMUZFMUUxQzcyMjM0NEMwMjdDOEZDQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8zIf33YCgSqjbEf2Qvbg+ioUS cTHIFDv+E1O9kTIiIE+WMnJBuZioTzSMBU91WloSIKWBH/K973YUymeqtN583ToO HxNsVDj+eS4WeSJsdTl7egHAEDxx6v47o/8plRQF4+YnpSoCLlGJ2aJPUKTpMnrV BGR1EcF8sSebo6jU5+jiX9mJJWn/Rv3qhqGrbSS+J3H2FOQhbbBUVyiEFeFXlkV2 CLyIJOJqm6a4UuvnZtD7kJXAnETXEUytLyNFBE5HePHeLOk+ZNWP9mv9gmOiogS2 x4QrpPE1aXk3d4BR3zqA+cRHp+IKcTtlMTcSu5NeB9rd8/Soiano4AaAZP4tAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUxdVWxHybmAux/h4cciNEwCfI/LkwHwYDVR0j BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0 ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT VXA3OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOTBhOTM1YS1h NzRkLTRiOTgtOTQzMC1iYzdhZTVjMjRmMjgvMC9DNzlEMDJDNjE4ODYxQUQ0NUJB Rjc4Q0UzOTAyM0NCQ0I0OTRBN0JGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6INGri5T+dH1OI8WYWc MYKl/ISeP74BmhyegMd65DuTEI79fsJI/nwMtlkYE1I28xK34NYkbSpM4Ehl0sYj pYCTLtApXj7dQSDTmVcQRpDBR/9gy70DE8HTbcV39Jc+tTuPM7XFtRE+j2FIvAn1 A/5aIOgOA+WMC/FDIT4+owHlvVWvE/EU0xHW2q507Ur8+ztfHevz74aquI/knNNs dZ4kQur8VfsoRMn4Bgne1IyD5XD6ZCdrTww5mV37JEuz2LUZkz6uJRKAaBTZxZbE EV+a4LsjGL8LUsJ5/0VXmhdtIZjAUAUQjcGwy7e3PF1c/eGNRlUHdkP3KzmnMRGi FA== -----END CERTIFICATE-----Generated at Sun Jul 20 16:20:36 2025 by rpki-client