$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft File: 1498141819112B8446C2D4A3111F53038F05DBE9.mft (raw, json) Hash identifier: nBkFGpWDfWEs0TGpOcnE7O4ZiKchcaLbl4OlBxS66xk= Subject key identifier: 13:67:8C:22:99:A9:63:31:EC:BB:C3:47:E7:6C:BB:28:30:FA:46:16 Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9 Certificate serial: 5D7BA7C8522E9AF8425CD909E24CDA4D3DFE19E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft Manifest number: 8E Signing time: Sun 07 Sep 2025 05:33:56 +0000 Manifest this update: Sun 07 Sep 2025 05:28:56 +0000 Manifest next update: Mon 08 Sep 2025 08:40:56 +0000 Files and hashes: 1: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (hash: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=) 2: 1498141819112B8446C2D4A3111F53038F05DBE9.crl (hash: KJLU5Wzm6CZw7Gd5bmh0sqDoHzfz8NjoqhQzenYGAWM=) 3: 3138352e39312e3131322e302f32342d3234203d3e2039333034.roa (hash: FBmWoOgHZKzCUczEDst+dylscH3cy9pnsw3RbPeSrfU=) 4: 3138352e39312e3131332e302f32342d3234203d3e20323134323038.roa (hash: qSSu/jTa9CtmAhgZlrJ1s4QldXeKp0EqfLu29FuP5Zs=) 5: 3138352e39312e3131352e302f32342d3234203d3e2034363337.roa (hash: ck91ILJJRhGrU5dcx7s2t1suhnGyLbRTekoZlADPXPE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 07:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:7b:a7:c8:52:2e:9a:f8:42:5c:d9:09:e2:4c:da:4d:3d:fe:19:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9 Validity Not Before: Sep 7 05:28:56 2025 GMT Not After : Sep 8 08:40:56 2025 GMT Subject: CN=13678C2299A96331ECBBC347E76CBB2830FA4616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c3:ed:fe:f8:e9:22:f7:62:41:f1:a9:39:60: 76:2b:dd:dc:7a:02:0b:d0:ba:af:1c:ad:72:45:33: 69:d1:81:36:2c:23:50:b9:81:12:60:58:2f:7f:da: a2:85:95:cf:d4:39:18:e9:a6:0b:78:72:6d:cb:f4: 61:22:8e:b0:2b:96:66:0c:19:99:d9:47:4a:b8:b6: b6:4d:0a:0d:75:58:bd:d9:ea:e0:72:ee:d6:20:0a: c7:ed:7a:03:fa:a3:0e:8d:c8:ab:66:6b:59:bc:1c: e3:ea:fe:36:eb:ab:5f:ca:ca:84:60:f2:30:6e:34: 92:11:00:78:11:3d:f7:6c:19:90:44:ad:e5:ea:76: c0:ca:c0:77:ed:8c:d3:28:37:26:48:58:59:31:7b: 1e:35:95:04:a4:e6:df:95:37:11:04:57:88:de:25: bb:14:37:49:bd:67:c9:87:ed:28:e1:26:c2:f5:03: e4:e7:f3:1d:66:2a:eb:6b:bf:6a:79:6e:59:69:ef: 03:af:68:65:ff:eb:de:60:ae:96:57:ba:0d:33:35: ae:ff:31:48:17:39:9f:2e:53:61:85:5e:68:b5:ee: 48:7a:5e:98:66:06:8e:12:03:6e:2f:55:f8:c7:48: 90:d2:a6:77:90:8a:72:97:c9:b4:65:87:a9:87:23: 9d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:67:8C:22:99:A9:63:31:EC:BB:C3:47:E7:6C:BB:28:30:FA:46:16 X509v3 Authority Key Identifier: keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5b:ea:99:2b:fc:ab:b3:bb:c3:16:df:15:52:d9:ea:bb:76: 71:f5:18:35:7f:b5:e7:1e:e1:c8:ac:99:19:14:7b:86:d4:e1: a8:1b:98:6a:7e:35:ab:43:4d:02:80:1c:37:5b:de:3b:e4:50: df:ad:a7:d6:43:10:ee:05:1b:43:a2:8c:24:af:51:9b:b5:3f: 46:c5:35:28:4e:81:23:e2:ff:32:ae:c5:6e:9d:15:a6:77:c0: dd:74:6a:d8:06:65:9d:e0:72:5c:4d:aa:3d:79:5e:63:4b:0a: 34:91:c2:78:55:08:a4:56:ef:ea:62:d8:3d:c8:e4:e1:e6:5c: ff:90:29:7b:d1:20:85:1f:4b:b7:52:75:53:75:9f:f2:41:7d: 16:94:67:8b:84:0b:65:c0:42:a5:7a:f3:d9:98:19:f0:fd:a2: a8:bb:ce:55:e1:e5:e7:01:67:ba:69:a0:6f:a1:e0:d4:5b:b4: 07:52:eb:d3:39:65:49:3b:8b:4f:78:6a:74:00:16:b7:fb:a7: 46:83:e4:f7:4c:29:08:65:ba:0b:44:55:54:bf:e5:49:2c:b3: 6f:f7:84:fc:7a:6b:be:79:6a:24:39:20:8b:d1:bb:38:9f:3b: fe:3a:2d:9d:42:f7:a5:8a:89:68:cc:d8:c4:a4:e6:fe:24:39: 9e:f6:2a:06 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXXunyFIumvhCXNkJ4kzaTT3+GekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5ODE0MTgxOTExMmI4NDQ2YzJkNGEzMTExZjUzMDM4 ZjA1ZGJlOTAeFw0yNTA5MDcwNTI4NTZaFw0yNTA5MDgwODQwNTZaMDMxMTAvBgNV BAMTKDEzNjc4QzIyOTlBOTYzMzFFQ0JCQzM0N0U3NkNCQjI4MzBGQTQ2MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSw+3++Oki92JB8ak5YHYr3dx6 AgvQuq8crXJFM2nRgTYsI1C5gRJgWC9/2qKFlc/UORjppgt4cm3L9GEijrArlmYM GZnZR0q4trZNCg11WL3Z6uBy7tYgCsftegP6ow6NyKtma1m8HOPq/jbrq1/KyoRg 8jBuNJIRAHgRPfdsGZBEreXqdsDKwHftjNMoNyZIWFkxex41lQSk5t+VNxEEV4je JbsUN0m9Z8mH7SjhJsL1A+Tn8x1mKutrv2p5bllp7wOvaGX/695grpZXug0zNa7/ MUgXOZ8uU2GFXmi17kh6XphmBo4SA24vVfjHSJDSpneQinKXybRlh6mHI50LAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUE2eMIpmpYzHsu8NH52y7KDD6RhYwHwYDVR0j BBgwFoAUFJgUGBkRK4RGwtSjER9TA48F2+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQtZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5 ODk3LzAvMTQ5ODE0MTgxOTExMkI4NDQ2QzJENEEzMTExRjUzMDM4RjA1REJFOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ZKZ1VHQmtSSzRSR3d0U2pFUjlUQTQ4 RjItay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOTA2NmY1ZC1l Y2MxLTQ5MjctOTVjMS1lMWE4ZGY4Zjk4OTcvMC8xNDk4MTQxODE5MTEyQjg0NDZD MkQ0QTMxMTFGNTMwMzhGMDVEQkU5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVvqmSv8q7O7wxbfFVLZ 6rt2cfUYNX+15x7hyKyZGRR7htThqBuYan41q0NNAoAcN1veO+RQ362n1kMQ7gUb Q6KMJK9Rm7U/RsU1KE6BI+L/Mq7Fbp0VpnfA3XRq2AZlneByXE2qPXleY0sKNJHC eFUIpFbv6mLYPcjk4eZc/5Ape9EghR9Lt1J1U3Wf8kF9FpRni4QLZcBCpXrz2ZgZ 8P2iqLvOVeHl5wFnummgb6Hg1Fu0B1Lr0zllSTuLT3hqdAAWt/unRoPk90wpCGW6 C0RVVL/lSSyzb/eE/HprvnlqJDkgi9G7OJ87/jotnUL3pYqJaMzYxKTm/iQ5nvYq Bg== -----END CERTIFICATE-----Generated at Sun Sep 7 13:53:45 2025 by rpki-client