$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16c2751b-f9a5-4e9e-a4b8-658310ce4ad3/1/82DFDBC2299142D57F36C3896EE6073C080234FF.mft File: 82DFDBC2299142D57F36C3896EE6073C080234FF.mft (raw, json) Hash identifier: vknw9GXYhRhuxMTxacti/F6vU9jMbMeYSefqLsTmJJE= Subject key identifier: E2:20:C2:7C:6D:B4:EB:41:51:E6:1D:9C:2E:31:6D:83:C7:6D:7D:FF Authority key identifier: 82:DF:DB:C2:29:91:42:D5:7F:36:C3:89:6E:E6:07:3C:08:02:34:FF Certificate issuer: /CN=82DFDBC2299142D57F36C3896EE6073C080234FF Certificate serial: 1EDBCD73BD07611A871FF1FFC8A2E851E633EA9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/82DFDBC2299142D57F36C3896EE6073C080234FF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16c2751b-f9a5-4e9e-a4b8-658310ce4ad3/1/82DFDBC2299142D57F36C3896EE6073C080234FF.mft Manifest number: 0E Signing time: Mon 08 Sep 2025 14:34:31 +0000 Manifest this update: Mon 08 Sep 2025 14:29:31 +0000 Manifest next update: Tue 09 Sep 2025 17:30:31 +0000 Files and hashes: 1: 326131343a373538333a663430303a3a2f34342d3438203d3e20323130333532.roa (hash: tytw/whu3Cal8fEpNZNkq3aQf4vARomvus40Tku1K6M=) 2: 82DFDBC2299142D57F36C3896EE6073C080234FF.crl (hash: xw4C3uoiuzpHgVo4cKa/6xG9j3pb/vUTy2MDUrARKmI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16c2751b-f9a5-4e9e-a4b8-658310ce4ad3/1/82DFDBC2299142D57F36C3896EE6073C080234FF.crl rsync://rsync.paas.rpki.ripe.net/repository/16c2751b-f9a5-4e9e-a4b8-658310ce4ad3/1/82DFDBC2299142D57F36C3896EE6073C080234FF.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/82DFDBC2299142D57F36C3896EE6073C080234FF.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 14:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:db:cd:73:bd:07:61:1a:87:1f:f1:ff:c8:a2:e8:51:e6:33:ea:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82DFDBC2299142D57F36C3896EE6073C080234FF Validity Not Before: Sep 8 14:29:31 2025 GMT Not After : Sep 9 17:30:31 2025 GMT Subject: CN=E220C27C6DB4EB4151E61D9C2E316D83C76D7DFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:7d:51:8e:85:7a:3b:09:d8:26:e8:df:19:cd: 0c:25:5c:0b:13:9e:36:cb:fe:8a:10:89:f4:fc:e1: 4f:30:2a:b4:76:76:7e:59:8a:6b:fe:b6:8f:fe:dd: 99:e7:1e:df:ac:6f:65:ad:60:b0:53:95:fb:65:0c: 0f:11:55:27:9e:37:ae:2c:08:77:8a:b3:d9:fc:d7: f5:d7:5b:9a:1c:4d:8a:80:30:3e:d3:cd:f1:57:36: 15:5a:f6:b8:c1:1c:77:07:5e:45:ac:2f:ae:2b:99: 25:c3:aa:69:a3:37:fa:07:e2:7d:0d:62:50:1c:62: 98:d7:ff:40:a7:ff:57:d4:61:21:49:a1:37:d0:ec: 6a:39:c8:94:a7:d5:ec:49:0e:f0:39:16:6c:8a:d8: 5b:57:f2:d8:02:4b:ca:2a:aa:3b:45:02:57:fc:04: ca:b2:1c:89:ef:d8:de:56:9a:f0:b8:96:69:c7:84: 76:c7:d6:0b:cb:c8:28:06:75:4f:a1:d5:b2:2f:46: 62:41:db:d7:65:d8:70:64:70:d0:5d:fb:d6:c6:b6: 12:dc:a5:da:74:3f:29:1a:2b:b6:2c:83:96:9e:5e: e8:02:e2:56:50:29:7a:cd:9b:6b:26:b8:97:bc:78: f7:a6:f3:00:b0:f1:c0:a2:dd:e6:c2:1b:47:ab:c4: 8e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:20:C2:7C:6D:B4:EB:41:51:E6:1D:9C:2E:31:6D:83:C7:6D:7D:FF X509v3 Authority Key Identifier: keyid:82:DF:DB:C2:29:91:42:D5:7F:36:C3:89:6E:E6:07:3C:08:02:34:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16c2751b-f9a5-4e9e-a4b8-658310ce4ad3/1/82DFDBC2299142D57F36C3896EE6073C080234FF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/82DFDBC2299142D57F36C3896EE6073C080234FF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16c2751b-f9a5-4e9e-a4b8-658310ce4ad3/1/82DFDBC2299142D57F36C3896EE6073C080234FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a9:68:61:05:1e:68:67:9b:2e:6b:7f:92:85:03:ed:b9:f0: 89:90:9f:61:d8:22:02:f2:88:ea:14:60:45:10:57:c7:f6:e9: b8:59:f0:f9:00:91:a6:31:ee:42:2a:83:39:15:20:ed:14:2a: 08:94:cd:c7:a6:64:58:98:f2:82:9d:29:eb:c1:89:b4:12:09: 41:f3:d7:48:47:69:6a:82:99:41:77:2e:b3:79:a7:54:85:0f: b9:ac:15:72:ff:99:cb:ad:70:46:97:f5:ae:cf:62:73:85:db: 80:f6:83:c4:c5:8f:01:9a:f6:42:30:06:40:ab:9d:a3:dd:38: 88:46:bc:85:79:4f:c0:09:93:bb:c6:42:54:b0:a7:d0:b0:90: 12:6b:0c:a1:cb:75:9d:ee:f7:be:b0:52:f1:3e:74:48:21:ed: b2:1a:35:2d:9f:f7:d1:c3:a3:dc:de:89:ab:5c:04:6d:31:88: 32:c8:81:10:f8:ac:10:e1:e9:81:30:a3:ce:27:41:7b:e7:0f: 06:dd:b5:70:49:31:ac:ec:8b:87:1a:52:d6:8e:86:c5:93:9b: e3:24:02:fd:f5:bc:29:59:9a:54:2f:20:ec:7f:cf:9b:87:36: 7e:74:54:8c:b0:8b:a8:2f:b1:e3:32:30:b0:51:73:d6:8a:fd: a1:0f:a5:df -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHtvNc70HYRqHH/H/yKLoUeYz6pwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJERkRCQzIyOTkxNDJENTdGMzZDMzg5NkVFNjA3M0Mw ODAyMzRGRjAeFw0yNTA5MDgxNDI5MzFaFw0yNTA5MDkxNzMwMzFaMDMxMTAvBgNV BAMTKEUyMjBDMjdDNkRCNEVCNDE1MUU2MUQ5QzJFMzE2RDgzQzc2RDdERkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2fVGOhXo7Cdgm6N8ZzQwlXAsT njbL/ooQifT84U8wKrR2dn5Zimv+to/+3ZnnHt+sb2WtYLBTlftlDA8RVSeeN64s CHeKs9n81/XXW5ocTYqAMD7TzfFXNhVa9rjBHHcHXkWsL64rmSXDqmmjN/oH4n0N YlAcYpjX/0Cn/1fUYSFJoTfQ7Go5yJSn1exJDvA5FmyK2FtX8tgCS8oqqjtFAlf8 BMqyHInv2N5WmvC4lmnHhHbH1gvLyCgGdU+h1bIvRmJB29dl2HBkcNBd+9bGthLc pdp0PykaK7Ysg5aeXugC4lZQKXrNm2smuJe8ePem8wCw8cCi3ebCG0erxI5PAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU4iDCfG2060FR5h2cLjFtg8dtff8wHwYDVR0j BBgwFoAUgt/bwimRQtV/NsOJbuYHPAgCNP8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZjMjc1MWItZjlhNS00ZTllLWE0YjgtNjU4MzEwY2U0 YWQzLzEvODJERkRCQzIyOTkxNDJENTdGMzZDMzg5NkVFNjA3M0MwODAyMzRGRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi84MkRGREJDMjI5OTE0MkQ1N0YzNkMzODk2 RUU2MDczQzA4MDIzNEZGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE2YzI3NTFiLWY5YTUtNGU5ZS1hNGI4LTY1ODMxMGNlNGFkMy8xLzgyREZEQkMy Mjk5MTQyRDU3RjM2QzM4OTZFRTYwNzNDMDgwMjM0RkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADqWhh BR5oZ5sua3+ShQPtufCJkJ9h2CIC8ojqFGBFEFfH9um4WfD5AJGmMe5CKoM5FSDt FCoIlM3HpmRYmPKCnSnrwYm0EglB89dIR2lqgplBdy6zeadUhQ+5rBVy/5nLrXBG l/Wuz2JzhduA9oPExY8BmvZCMAZAq52j3TiIRryFeU/ACZO7xkJUsKfQsJASawyh y3Wd7ve+sFLxPnRIIe2yGjUtn/fRw6Pc3omrXARtMYgyyIEQ+KwQ4emBMKPOJ0F7 5w8G3bVwSTGs7IuHGlLWjobFk5vjJAL99bwpWZpULyDsf8+bhzZ+dFSMsIuoL7Hj MjCwUXPWiv2hD6Xf -----END CERTIFICATE-----Generated at Mon Sep 8 21:28:34 2025 by rpki-client