$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft File: 47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json) Hash identifier: JpNjR6i08rkDMckKLoxCBjgaOjeT3K2KlMwu7/dBbGo= Subject key identifier: 9A:CE:A6:63:47:ED:76:06:A0:FF:E4:DD:30:7D:D7:D9:DB:53:51:B5 Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 Certificate issuer: /CN=47E9555355C6B007AACD5D45BF41E3383E991641 Certificate serial: 359D457255387AB7A2CAC62C82CFA08DA8088CB9 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft Manifest number: 040E Signing time: Thu 24 Jul 2025 01:57:46 +0000 Manifest this update: Thu 24 Jul 2025 01:52:46 +0000 Manifest next update: Fri 25 Jul 2025 02:48:46 +0000 Files and hashes: 1: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: 3CuKVTzzcDVwdtYnzal63GSNTwwWf/il7Uu0SET/Nt8=) 2: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: 3ipGYMDZ54FZdaI4eg46OMa/ZV0a0Q3rHUY9RUekrv8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 10:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:9d:45:72:55:38:7a:b7:a2:ca:c6:2c:82:cf:a0:8d:a8:08:8c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641 Validity Not Before: Jul 24 01:52:46 2025 GMT Not After : Jul 25 02:48:46 2025 GMT Subject: CN=9ACEA66347ED7606A0FFE4DD307DD7D9DB5351B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ca:7d:99:34:fc:fb:a1:ff:a6:9b:3e:e6:ed: 9c:44:ba:8e:5d:ae:db:7f:78:38:80:47:7a:93:45: 28:2f:df:d1:35:c1:c5:71:72:91:51:a5:d4:7c:2f: 07:89:c2:3c:ef:07:73:96:b3:a9:e3:9e:38:ab:33: 2b:b4:33:92:cb:5f:5c:e9:34:84:6b:24:d3:36:3e: 32:10:f3:e1:35:28:8b:a2:ca:13:f7:93:17:ba:5f: 0d:e5:b1:e7:0b:55:e4:52:2a:64:13:e4:23:b9:aa: 49:3d:d3:f4:ce:55:95:11:61:34:6a:a1:8b:5f:6c: 38:56:1e:6e:61:71:49:bd:d0:71:a3:2f:d0:ff:72: 47:ad:01:ad:4c:8c:91:19:b1:f4:01:9e:dc:e7:20: ca:de:e2:2f:a5:4d:6a:3b:d8:81:b0:9d:30:4f:21: 3e:5d:e6:63:2c:89:98:67:f1:6a:dc:24:25:fb:6c: 13:d8:b1:41:5f:fd:e3:a0:0b:22:15:03:b6:53:f8: f5:5d:aa:6d:c6:9b:f6:af:ef:07:5c:15:fe:58:48: ce:32:c0:c6:50:8c:6c:56:a3:93:64:ac:3d:63:ae: 25:26:0a:eb:63:88:de:5b:c1:94:51:d5:4e:6f:e5: 5f:0c:f7:dc:7e:51:27:2f:5e:ad:42:9f:c8:5f:9d: e3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CE:A6:63:47:ED:76:06:A0:FF:E4:DD:30:7D:D7:D9:DB:53:51:B5 X509v3 Authority Key Identifier: keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:ed:bc:56:20:63:05:25:c5:9c:a5:48:cb:f5:09:58:5c:7f: 5f:74:e4:09:21:90:ce:6d:5b:05:61:04:b5:1d:e5:8b:db:1c: be:20:6f:23:9a:93:73:02:62:dd:68:ea:79:1e:f3:f8:98:cf: 6c:35:83:9a:fc:3f:59:db:d4:e7:d8:dd:05:74:bc:7f:c6:bb: 91:db:e0:5b:d9:f1:ee:23:8d:63:5a:ab:10:e4:1e:8b:6e:10: 7c:50:38:47:e4:1f:26:27:12:0a:84:c1:d6:18:69:a9:2b:32: 24:39:76:e4:31:03:54:aa:a5:c9:4e:6f:42:90:b2:2a:dd:d5: 95:f1:81:b1:78:99:08:75:af:a5:f6:50:6c:a6:09:53:c3:32: 9c:8e:c7:0e:49:12:41:0c:77:d8:b8:a9:86:24:eb:6d:c5:9d: de:af:24:23:a6:ec:7a:70:af:64:30:b3:25:29:34:9c:3e:ae: f6:f6:32:be:37:6f:9e:1b:8e:dd:26:97:85:e8:36:de:fa:63: a6:a8:c9:fb:68:3c:f6:b9:1e:8d:b2:bd:53:f8:d9:13:b4:71: 4f:49:7f:10:c9:61:ff:28:a2:8c:69:8c:21:34:8b:6e:40:5c: b9:d9:57:f6:9f:c7:c3:cf:99:e8:af:30:77:23:35:71:1d:5c: e6:4c:48:ab -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUNZ1FclU4ereiysYsgs+gjagIjLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgz RTk5MTY0MTAeFw0yNTA3MjQwMTUyNDZaFw0yNTA3MjUwMjQ4NDZaMDMxMTAvBgNV BAMTKDlBQ0VBNjYzNDdFRDc2MDZBMEZGRTRERDMwN0REN0Q5REI1MzUxQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnyn2ZNPz7of+mmz7m7ZxEuo5d rtt/eDiAR3qTRSgv39E1wcVxcpFRpdR8LweJwjzvB3OWs6njnjirMyu0M5LLX1zp NIRrJNM2PjIQ8+E1KIuiyhP3kxe6Xw3lsecLVeRSKmQT5CO5qkk90/TOVZURYTRq oYtfbDhWHm5hcUm90HGjL9D/cketAa1MjJEZsfQBntznIMre4i+lTWo72IGwnTBP IT5d5mMsiZhn8WrcJCX7bBPYsUFf/eOgCyIVA7ZT+PVdqm3Gm/av7wdcFf5YSM4y wMZQjGxWo5NkrD1jriUmCutjiN5bwZRR1U5v5V8M99x+UScvXq1Cn8hfneNlAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUms6mY0ftdgag/+TdMH3X2dtTUbUwHwYDVR0j BBgwFoAUR+lVU1XGsAeqzV1Fv0HjOD6ZFkEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzQvNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgzRTk5MTY0MS5j cmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJnLm5l dC9ycGtpL1JHbmV0LU9VL1ItbFZVMVhHc0FlcXpWMUZ2MEhqT0Q2WkZrRS5jZXIw gZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZTdkNTVmNy1lZTYwLTQwMDUt YmFkNy1iNDI4MThjZjUwZTgvNC80N0U5NTU1MzU1QzZCMDA3QUFDRDVENDVCRjQx RTMzODNFOTkxNjQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGe28ViBjBSXFnKVIy/UJWFx/X3TkCSGQ zm1bBWEEtR3li9scviBvI5qTcwJi3WjqeR7z+JjPbDWDmvw/WdvU59jdBXS8f8a7 kdvgW9nx7iONY1qrEOQei24QfFA4R+QfJicSCoTB1hhpqSsyJDl25DEDVKqlyU5v QpCyKt3VlfGBsXiZCHWvpfZQbKYJU8MynI7HDkkSQQx32LiphiTrbcWd3q8kI6bs enCvZDCzJSk0nD6u9vYyvjdvnhuO3SaXheg23vpjpqjJ+2g89rkejbK9U/jZE7Rx T0l/EMlh/yiijGmMITSLbkBcudlX9p/Hw8+Z6K8wdyM1cR1c5kxIqw== -----END CERTIFICATE-----Generated at Thu Jul 24 04:54:27 2025 by rpki-client