$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft File: 0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft (raw, json) Hash identifier: ey2C0gHxKgmIcUfE9Y9How4GYeM7FN9PkQ56YxENmL4= Subject key identifier: 00:50:5C:EF:6D:F6:4C:E6:BF:B3:CD:AE:06:C8:44:D2:A7:D0:15:ED Authority key identifier: 08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B Certificate issuer: /CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B Certificate serial: 0A0D5E4E07D0B202375927768C7EA5A477BD218D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft Manifest number: D2 Signing time: Sun 07 Sep 2025 12:15:17 +0000 Manifest this update: Sun 07 Sep 2025 12:10:17 +0000 Manifest next update: Mon 08 Sep 2025 12:37:17 +0000 Files and hashes: 1: 326131343a373538313a383030303a3a2f33362d3430203d3e203530333835.roa (hash: d6ms+CWZuDscVXHj6eNPGqO+N8MPtCRQHjxf1HtjfgA=) 2: 0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl (hash: i9BBAIAspmpSFtjdcGR8LPQJzVkp7xpYj6lLD1mhl4I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 09:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:0d:5e:4e:07:d0:b2:02:37:59:27:76:8c:7e:a5:a4:77:bd:21:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B Validity Not Before: Sep 7 12:10:17 2025 GMT Not After : Sep 8 12:37:17 2025 GMT Subject: CN=00505CEF6DF64CE6BFB3CDAE06C844D2A7D015ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6d:5e:a2:b0:ea:18:75:78:b0:3f:e6:5e:fa: 85:d0:18:c4:48:a9:e1:cf:c3:7d:04:75:ba:20:40: 5e:ea:73:12:bb:24:53:cf:f8:ed:1b:b5:c3:ec:37: 84:a5:63:07:2e:82:2f:ea:6c:f9:3b:ab:b8:ef:d5: 1b:6e:47:10:6c:86:15:9b:11:c8:d3:6f:e7:a5:f6: 86:a7:03:94:de:f7:93:10:cd:81:3f:95:ec:5e:b4: 79:38:75:ab:fa:05:18:f9:8e:63:d0:3a:a7:0f:4b: c2:99:c1:9e:47:25:8e:49:87:dd:9d:a8:88:14:38: 85:f2:f2:17:d2:b9:1d:d1:1b:27:49:07:87:93:1e: e3:e7:87:24:48:07:48:92:cb:6b:fb:91:bf:46:a6: b1:e5:a5:71:c1:13:c0:a6:93:1d:fb:b8:e9:b6:83: e8:1a:3b:8a:b5:52:82:be:4b:b7:26:06:a7:25:26: 20:df:1f:2a:a5:ed:b1:88:de:84:68:50:40:47:58: bb:b7:8f:32:6a:10:10:19:a2:d7:bf:e0:9d:02:4f: 7a:cb:e3:9f:42:b6:0a:6e:37:49:a1:e8:45:54:0c: dc:54:75:21:8e:30:9b:92:d2:5d:1c:7c:56:85:6b: 0a:57:07:86:a2:37:74:ee:28:5e:4e:b0:70:39:43: 35:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:50:5C:EF:6D:F6:4C:E6:BF:B3:CD:AE:06:C8:44:D2:A7:D0:15:ED X509v3 Authority Key Identifier: keyid:08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:20:8c:7f:58:c8:27:67:eb:6b:3f:23:e7:90:78:3b:59:97: b5:24:32:e5:b3:c9:44:d3:9a:3b:15:9a:3b:40:8d:fc:3b:1f: 79:b1:f5:99:ab:56:e2:63:fb:fa:17:6c:ef:41:ee:34:45:91: 06:26:6b:58:c9:85:75:31:b5:69:c5:f4:37:fd:22:82:bd:2a: 9b:ee:b8:36:b9:54:70:8d:5d:bf:43:78:0c:ad:63:0d:c3:39: b7:41:87:f0:b6:84:a3:eb:7a:df:f7:7d:9b:e5:d4:24:d4:dc: 3d:9a:90:b6:9e:15:1a:dc:aa:84:a5:06:7e:71:c1:38:c9:04: f2:dd:73:f2:4a:bf:bd:f5:5b:4a:9c:93:19:b3:93:2f:2c:43: 22:01:c6:0a:c3:fc:87:f6:29:ad:24:a9:f4:0a:34:bd:c8:37: 4b:52:8b:f7:7a:63:85:07:7e:b6:32:d5:03:91:aa:46:9f:91: 34:26:51:1c:66:08:b4:a3:d5:a2:55:bb:6b:c3:b9:d9:fa:8b: c2:60:d1:0d:77:a4:88:8c:e9:3c:b2:f7:da:47:8e:1d:3a:72: 67:ea:c9:3c:56:6b:e3:c9:1e:88:63:f1:68:5e:94:b9:f9:ae: 56:70:a3:6e:af:cf:5e:31:26:0f:a9:17:39:fe:9e:98:ea:c9: 3e:7b:d4:cb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCg1eTgfQsgI3WSd2jH6lpHe9IY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg3NDgwMTE2NERDOTVGMEFCOUNDRDRCRDMwNEEzRUY3 OEU5RjM5QjAeFw0yNTA5MDcxMjEwMTdaFw0yNTA5MDgxMjM3MTdaMDMxMTAvBgNV BAMTKDAwNTA1Q0VGNkRGNjRDRTZCRkIzQ0RBRTA2Qzg0NEQyQTdEMDE1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZbV6isOoYdXiwP+Ze+oXQGMRI qeHPw30EdbogQF7qcxK7JFPP+O0btcPsN4SlYwcugi/qbPk7q7jv1RtuRxBshhWb EcjTb+el9oanA5Te95MQzYE/lexetHk4dav6BRj5jmPQOqcPS8KZwZ5HJY5Jh92d qIgUOIXy8hfSuR3RGydJB4eTHuPnhyRIB0iSy2v7kb9GprHlpXHBE8Cmkx37uOm2 g+gaO4q1UoK+S7cmBqclJiDfHyql7bGI3oRoUEBHWLu3jzJqEBAZote/4J0CT3rL 459CtgpuN0mh6EVUDNxUdSGOMJuS0l0cfFaFawpXB4aiN3TuKF5OsHA5QzXJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUAFBc7232TOa/s82uBshE0qfQFe0wHwYDVR0j BBgwFoAUCHSAEWTclfCrnM1L0wSj73jp85swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2M4ZTRlMTEtM2FjYS00MzA1LWFjZDQtZjA1ZTZjOTA5 MTE1LzEvMDg3NDgwMTE2NERDOTVGMEFCOUNDRDRCRDMwNEEzRUY3OEU5RjM5Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wODc0ODAxMTY0REM5NUYwQUI5Q0NENEJE MzA0QTNFRjc4RTlGMzlCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNjOGU0ZTExLTNhY2EtNDMwNS1hY2Q0LWYwNWU2YzkwOTExNS8xLzA4NzQ4MDEx NjREQzk1RjBBQjlDQ0Q0QkQzMDRBM0VGNzhFOUYzOUIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkIIx/ WMgnZ+trPyPnkHg7WZe1JDLls8lE05o7FZo7QI38Ox95sfWZq1biY/v6F2zvQe40 RZEGJmtYyYV1MbVpxfQ3/SKCvSqb7rg2uVRwjV2/Q3gMrWMNwzm3QYfwtoSj63rf 932b5dQk1Nw9mpC2nhUa3KqEpQZ+ccE4yQTy3XPySr+99VtKnJMZs5MvLEMiAcYK w/yH9imtJKn0CjS9yDdLUov3emOFB362MtUDkapGn5E0JlEcZgi0o9WiVbtrw7nZ +ovCYNENd6SIjOk8svfaR44dOnJn6sk8VmvjyR6IY/FoXpS5+a5WcKNur89eMSYP qRc5/p6Y6sk+e9TL -----END CERTIFICATE-----Generated at Sun Sep 7 23:32:27 2025 by rpki-client