$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json) Hash identifier: WTYDg6q0DTllYBj5jwHGL6Pu7mgDjE+hi/5lepnVI/A= Subject key identifier: 9C:1B:AB:47:57:95:E4:55:B2:A6:AE:14:20:1F:BD:01:43:AC:55:D9 Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Certificate serial: 5F77D138A76CCC8C323412A2EA81008F1457A36F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft Manifest number: 0100 Signing time: Sun 07 Sep 2025 06:09:28 +0000 Manifest this update: Sun 07 Sep 2025 06:04:28 +0000 Manifest next update: Mon 08 Sep 2025 08:04:28 +0000 Files and hashes: 1: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: 66ZK4WBUBkoJslmNABiJF4oomQNa792oanKO2bHmPzo=) 2: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: jIRO9mS3d6dPjcdQf+OkOGr/dNujGogdrEuPEpLgZJI=) 3: 326131343a373538303a6430303a3a2f34342d3434203d3e20313939333130.roa (hash: aLNGjeKxhB+lb52UO94MmUGLP8+twH+NGpyj/wZMn3g=) 4: 326131343a373538303a6431303a3a2f34342d3434203d3e20313939333130.roa (hash: d85Du7DNvyLWzCRKR6UAK4BxtZR8aY0O/ltb7NM7kI0=) 5: 326131343a373538303a6432303a3a2f34342d3438203d3e20313939333130.roa (hash: MgcoEmS08l4kBvePsItue5HuyPIuQGylETDDY3NTtWk=) 6: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: u/JR7/M6BcKICssdDR7j/sPwWvJTPX2G+FFLBgXrUyU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 08:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:77:d1:38:a7:6c:cc:8c:32:34:12:a2:ea:81:00:8f:14:57:a3:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Validity Not Before: Sep 7 06:04:28 2025 GMT Not After : Sep 8 08:04:28 2025 GMT Subject: CN=9C1BAB475795E455B2A6AE14201FBD0143AC55D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bb:82:0b:4e:67:2c:d1:91:ba:a0:44:2f:c4: 93:c8:b1:fa:59:ee:a7:43:c1:59:c7:5d:06:8b:84: c9:5f:5f:15:61:61:20:ee:87:3b:b8:73:7e:a3:0f: 86:c9:4e:71:0d:72:a4:22:ea:2f:e2:24:d2:fe:6c: f6:e8:83:e6:1d:c6:75:30:61:78:7a:f7:d1:fd:d6: 5c:18:d8:1a:45:eb:47:2f:d9:74:dc:66:ad:76:e5: 6f:73:ee:18:72:79:2c:bd:90:ab:ec:b1:59:59:8d: e8:3b:37:30:bd:c1:fe:7e:66:ec:de:3b:7a:e2:b6: 69:4c:f6:5c:57:a6:80:e1:cd:74:6a:4d:64:b7:e9: 7f:d2:d8:9c:d2:9f:de:dc:6a:06:cc:2b:01:bc:a3: 36:4d:ef:d2:57:40:bc:a1:5e:b4:d0:c2:37:72:cf: 86:ac:8c:73:97:f8:9b:a1:0d:fa:82:32:40:79:f6: fa:d4:00:41:e9:86:53:28:d4:6a:73:a1:70:1e:5b: 28:2a:a6:74:e2:64:a5:e1:3b:1e:9e:6f:28:bd:01: 10:ec:fe:ab:7d:eb:88:41:d2:14:96:97:e0:16:71: 11:24:f5:f3:a5:54:16:d1:4b:7d:18:32:8b:56:f0: 72:cc:6e:fc:1b:20:4a:0c:e1:74:4f:18:f2:c5:bf: aa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1B:AB:47:57:95:E4:55:B2:A6:AE:14:20:1F:BD:01:43:AC:55:D9 X509v3 Authority Key Identifier: keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e8:19:61:ed:4a:c4:2f:41:26:bf:66:dc:d0:9a:24:68:c5: 34:d4:89:a3:75:10:2d:77:b8:4b:73:64:85:83:3e:82:2b:ab: a6:c6:9f:1d:71:b6:95:0a:cd:83:05:24:78:5e:92:3b:94:d7: df:00:28:53:81:d5:c5:cc:74:08:ec:7c:7d:9c:f6:54:26:18: 0d:9f:6f:85:62:11:78:58:91:7b:6e:8d:79:d3:55:6a:6f:6f: aa:03:91:99:0f:5f:e0:e4:ee:02:08:bc:99:65:2d:d9:d0:16: 02:5c:c5:0a:a4:ca:aa:ba:e8:4d:bd:14:50:7b:62:f4:1c:80: 7a:93:cb:cc:16:6a:11:bf:09:f5:1a:42:c8:c4:2b:74:6a:b5: c4:9a:2e:7b:ac:a1:ab:27:33:e9:f3:89:58:86:db:bb:73:d4: 04:2b:55:f4:21:69:f4:1e:5f:a0:48:0b:5a:b7:9b:60:85:c1: 3d:70:41:b5:8a:24:78:fd:b8:8a:74:ca:a2:22:d1:10:7f:fa: 79:35:00:4e:9c:c6:e1:35:55:1a:a0:52:28:95:30:3e:bc:f3: 8f:36:26:5c:55:f9:76:47:37:51:67:55:70:31:58:69:d3:55: 31:40:09:06:bc:85:58:80:c2:66:64:5b:18:36:d3:67:2f:3a: 39:a4:a7:f7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUX3fROKdszIwyNBKi6oEAjxRXo28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUw RjgxOTZFQjAeFw0yNTA5MDcwNjA0MjhaFw0yNTA5MDgwODA0MjhaMDMxMTAvBgNV BAMTKDlDMUJBQjQ3NTc5NUU0NTVCMkE2QUUxNDIwMUZCRDAxNDNBQzU1RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2u4ILTmcs0ZG6oEQvxJPIsfpZ 7qdDwVnHXQaLhMlfXxVhYSDuhzu4c36jD4bJTnENcqQi6i/iJNL+bPbog+YdxnUw YXh699H91lwY2BpF60cv2XTcZq125W9z7hhyeSy9kKvssVlZjeg7NzC9wf5+Zuze O3ritmlM9lxXpoDhzXRqTWS36X/S2JzSn97cagbMKwG8ozZN79JXQLyhXrTQwjdy z4asjHOX+JuhDfqCMkB59vrUAEHphlMo1GpzoXAeWygqpnTiZKXhOx6ebyi9ARDs /qt964hB0hSWl+AWcREk9fOlVBbRS30YMotW8HLMbvwbIEoM4XRPGPLFv6qJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUnBurR1eV5FWypq4UIB+9AUOsVdkwHwYDVR0j BBgwFoAUE+GpmPd9fB/ylVwLaI/r/g+BluswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE1NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFm YWIyLzEvMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUwRjgxOTZFQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xM0UxQTk5OEY3N0Q3QzFGRjI5NTVDMEI2 ODhGRUJGRTBGODE5NkVCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAxNTc2NDdjLTkxZDYtNGEwNC04YTkxLWQxNTM4NWQxZmFiMi8xLzEzRTFBOTk4 Rjc3RDdDMUZGMjk1NUMwQjY4OEZFQkZFMEY4MTk2RUIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/6Blh 7UrEL0Emv2bc0JokaMU01ImjdRAtd7hLc2SFgz6CK6umxp8dcbaVCs2DBSR4XpI7 lNffAChTgdXFzHQI7Hx9nPZUJhgNn2+FYhF4WJF7bo1501Vqb2+qA5GZD1/g5O4C CLyZZS3Z0BYCXMUKpMqquuhNvRRQe2L0HIB6k8vMFmoRvwn1GkLIxCt0arXEmi57 rKGrJzPp84lYhtu7c9QEK1X0IWn0Hl+gSAtat5tghcE9cEG1iiR4/biKdMqiItEQ f/p5NQBOnMbhNVUaoFIolTA+vPOPNiZcVfl2RzdRZ1VwMVhp01UxQAkGvIVYgMJm ZFsYNtNnLzo5pKf3 -----END CERTIFICATE-----Generated at Sun Sep 7 23:32:26 2025 by rpki-client