$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft File: 1498141819112B8446C2D4A3111F53038F05DBE9.mft (raw, json) Hash identifier: 56mm29aIVcdkPljE7zUfa2lsqyec6C1/ZHtG7tINw2s= Subject key identifier: B1:21:C2:95:6E:AE:94:AE:9A:9A:3A:36:31:09:53:31:3E:0F:C0:EA Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9 Certificate serial: 1250DE57B84C762AA3469C28FB20AAFA179E3111 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft Manifest number: 0C Signing time: Fri 06 Jun 2025 19:47:32 +0000 Manifest this update: Fri 06 Jun 2025 19:42:32 +0000 Manifest next update: Sat 07 Jun 2025 23:02:32 +0000 Files and hashes: 1: 3138352e39312e3131352e302f32342d3234203d3e20313337353137.roa (hash: X1+DKmCz9fjQ0YFjOBy8DCDKUifeMBU5Rwd+VfLqCPU=) 2: 1498141819112B8446C2D4A3111F53038F05DBE9.crl (hash: Ja+YRV/GEvQfl/iltT9qHekdiGkw4O1fkJalMx0bZlM=) 3: 3138352e39312e3131322e302f32342d3234203d3e203136323736.roa (hash: 816LcoMP7IzyrdlbDQQeycStorYxYzCTT1WckHhtHIY=) 4: 3138352e39312e3131332e302f32342d3234203d3e20383334.roa (hash: wUHDND9ukOVNaQ+NWAsi1lWfuN4h8Pf5bBrTJ0wUGT4=) 5: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (hash: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:50:de:57:b8:4c:76:2a:a3:46:9c:28:fb:20:aa:fa:17:9e:31:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9 Validity Not Before: Jun 6 19:42:32 2025 GMT Not After : Jun 7 23:02:32 2025 GMT Subject: CN=B121C2956EAE94AE9A9A3A36310953313E0FC0EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e5:8b:a8:d9:e5:f9:e7:b2:65:86:cb:b6:06: 32:32:e9:29:4b:46:18:4d:90:38:d3:dd:30:84:6f: 84:8d:29:f2:c6:dd:d1:32:c1:46:67:7a:36:26:5f: 27:1c:3e:f0:d4:11:1a:fc:f0:5c:1c:c2:ca:84:5e: 55:73:30:b5:ce:34:96:4b:82:c9:c5:e0:b5:31:7d: 02:b9:7d:25:5e:78:fe:f6:ba:8e:a3:a5:41:5c:ac: bb:f1:e0:90:f8:c7:a6:82:33:39:cb:32:e3:b5:7c: d9:4f:d6:51:c2:ce:6d:d6:89:29:93:38:05:a6:da: b4:e0:3e:13:37:68:33:a3:c6:9b:ee:34:e2:69:69: b5:ad:cf:d7:6e:2c:fe:09:d0:07:bf:ba:75:60:f8: 03:02:39:e0:79:40:8d:eb:25:3f:61:a2:9b:bb:e3: 17:dd:7a:a6:a1:1a:1b:b7:5d:a3:dd:2e:ca:0a:fb: f5:42:4f:e2:63:fc:ac:44:02:24:18:ae:7f:47:f9: 39:d2:3f:e6:77:69:0e:9e:f9:2a:db:3c:bd:8b:ff: 63:c7:67:40:36:0e:ea:74:91:e0:94:0b:ad:22:93: 1c:c3:ea:d2:08:de:d5:19:0a:e5:65:d0:09:bd:09: 34:50:23:0d:4c:b7:35:4e:65:35:e7:77:77:ec:8d: 83:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:21:C2:95:6E:AE:94:AE:9A:9A:3A:36:31:09:53:31:3E:0F:C0:EA X509v3 Authority Key Identifier: keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:5f:7a:a9:71:b4:52:ef:64:03:70:e7:4a:13:66:f7:08:52: c6:6a:18:59:bb:df:b5:6d:aa:ef:72:8f:ca:26:e6:06:2f:c9: b2:05:d1:c9:25:1e:76:3d:33:90:09:b8:41:71:f7:1d:4d:b0: 77:b2:66:17:53:8e:96:f0:05:d7:00:67:7e:b3:d8:01:6d:de: bb:29:fa:c0:f5:d3:32:07:15:3e:9b:d1:31:01:64:77:60:81: 58:29:18:e4:78:0e:b5:0f:18:ba:e3:a4:80:60:e3:36:fa:3f: f7:17:4a:bf:c5:33:0c:6b:fd:09:a9:fd:1a:cd:4c:b6:b0:e7: 26:44:5c:7c:1f:c8:c8:5a:a6:6e:ae:09:98:7a:50:30:47:e4: 57:15:c5:35:55:c1:68:5f:18:65:d7:74:3a:d2:d2:6a:6b:b9: a7:72:3b:1a:3c:76:bc:a7:fb:50:ea:44:b7:85:2b:86:08:73: 08:fa:bc:05:2f:5c:cf:f9:40:85:e3:b1:ed:17:fe:dc:38:ab: 6d:6d:a7:48:fa:b6:f3:9e:b3:ce:94:ee:25:18:19:3e:c1:e1: a8:4d:57:af:6c:b7:a8:5a:e5:c5:2d:87:85:d3:49:a5:8e:79: c5:87:3e:e8:44:b9:7d:f2:5b:5d:ef:1b:a8:58:ec:69:e1:60: b0:af:e1:7c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUElDeV7hMdiqjRpwo+yCq+heeMREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5ODE0MTgxOTExMmI4NDQ2YzJkNGEzMTExZjUzMDM4 ZjA1ZGJlOTAeFw0yNTA2MDYxOTQyMzJaFw0yNTA2MDcyMzAyMzJaMDMxMTAvBgNV BAMTKEIxMjFDMjk1NkVBRTk0QUU5QTlBM0EzNjMxMDk1MzMxM0UwRkMwRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx5Yuo2eX557Jlhsu2BjIy6SlL RhhNkDjT3TCEb4SNKfLG3dEywUZnejYmXyccPvDUERr88FwcwsqEXlVzMLXONJZL gsnF4LUxfQK5fSVeeP72uo6jpUFcrLvx4JD4x6aCMznLMuO1fNlP1lHCzm3WiSmT OAWm2rTgPhM3aDOjxpvuNOJpabWtz9duLP4J0Ae/unVg+AMCOeB5QI3rJT9hopu7 4xfdeqahGhu3XaPdLsoK+/VCT+Jj/KxEAiQYrn9H+TnSP+Z3aQ6e+SrbPL2L/2PH Z0A2Dup0keCUC60ikxzD6tII3tUZCuVl0Am9CTRQIw1MtzVOZTXnd3fsjYM1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUsSHClW6ulK6amjo2MQlTMT4PwOowHwYDVR0j BBgwFoAUFJgUGBkRK4RGwtSjER9TA48F2+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQtZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5 ODk3LzAvMTQ5ODE0MTgxOTExMkI4NDQ2QzJENEEzMTExRjUzMDM4RjA1REJFOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ZKZ1VHQmtSSzRSR3d0U2pFUjlUQTQ4 RjItay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOTA2NmY1ZC1l Y2MxLTQ5MjctOTVjMS1lMWE4ZGY4Zjk4OTcvMC8xNDk4MTQxODE5MTEyQjg0NDZD MkQ0QTMxMTFGNTMwMzhGMDVEQkU5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFF96qXG0Uu9kA3DnShNm 9whSxmoYWbvftW2q73KPyibmBi/JsgXRySUedj0zkAm4QXH3HU2wd7JmF1OOlvAF 1wBnfrPYAW3euyn6wPXTMgcVPpvRMQFkd2CBWCkY5HgOtQ8YuuOkgGDjNvo/9xdK v8UzDGv9Can9Gs1MtrDnJkRcfB/IyFqmbq4JmHpQMEfkVxXFNVXBaF8YZdd0OtLS amu5p3I7Gjx2vKf7UOpEt4UrhghzCPq8BS9cz/lAheOx7Rf+3DirbW2nSPq2856z zpTuJRgZPsHhqE1Xr2y3qFrlxS2HhdNJpY55xYc+6ES5ffJbXe8bqFjsaeFgsK/h fA== -----END CERTIFICATE-----Generated at Fri Jun 6 22:41:27 2025 by rpki-client