$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft File: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft (raw, json) Hash identifier: qTS4Uqrfp+aig7lGRf5hqE4TuSAkiHi60iTUx94ta6Q= Subject key identifier: 38:48:03:9D:39:49:1D:90:26:0E:16:6F:70:1C:A7:83:B0:DB:67:B5 Authority key identifier: 21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48 Certificate issuer: /CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48 Certificate serial: 5F8FC9614CD24E02DA2E68A0CECD77F96D79B447 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft Manifest number: 2F Signing time: Sun 07 Sep 2025 21:55:41 +0000 Manifest this update: Sun 07 Sep 2025 21:50:41 +0000 Manifest next update: Mon 08 Sep 2025 22:24:41 +0000 Files and hashes: 1: 326131343a373538303a6130313a3a2f34382d3438203d3e20323135353433.roa (hash: 9e2yjigX5+cNnGpC5dYpYp4x5beQHVuns4hEprR01WE=) 2: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl (hash: fP+KLor4h7L+13G2+FpAhueE4Trfs2k0z7xzLzQLqoI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 09:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:8f:c9:61:4c:d2:4e:02:da:2e:68:a0:ce:cd:77:f9:6d:79:b4:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48 Validity Not Before: Sep 7 21:50:41 2025 GMT Not After : Sep 8 22:24:41 2025 GMT Subject: CN=3848039D39491D90260E166F701CA783B0DB67B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2e:db:09:69:60:9c:4f:5e:21:ed:aa:ad:7b: 45:fa:aa:ea:6d:20:1b:e8:b9:ba:99:bf:be:ac:78: e9:37:d0:b4:98:ea:06:45:64:b0:21:f4:42:09:c0: 62:04:01:00:2f:f9:38:52:69:9a:03:de:b8:97:d5: a5:81:78:62:90:cd:b9:7a:37:49:1c:ed:42:3b:20: d1:b4:cd:1c:04:f2:43:0a:b9:64:d7:4e:03:7a:84: ea:24:66:0d:8d:3a:96:86:b2:79:49:6b:94:b7:5b: b2:4b:1d:59:1f:da:a4:f3:9e:31:d0:da:6c:67:43: 89:ff:77:c5:3f:fa:e8:9c:1f:5b:3b:22:e1:a2:87: b8:5c:62:88:c4:54:61:51:82:2c:ee:92:5c:5d:3a: c7:19:90:8e:68:5c:d2:ff:b2:8e:99:ea:15:c3:54: 08:6e:c4:3f:f0:31:d3:d7:72:43:da:3a:c9:66:fd: 97:4e:e2:d3:13:7d:cf:43:b5:54:62:c9:63:35:10: cc:35:ff:e3:fb:06:17:99:6d:37:52:29:c8:9e:e9: fb:ea:f1:24:15:23:7f:36:76:d4:66:de:c0:12:70: 8c:f2:83:f4:ba:cf:70:c1:7f:e3:93:8d:81:9d:9c: 6c:0f:e6:ea:47:35:22:a0:d8:f7:44:1d:ef:ff:9a: ed:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:48:03:9D:39:49:1D:90:26:0E:16:6F:70:1C:A7:83:B0:DB:67:B5 X509v3 Authority Key Identifier: keyid:21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:9f:7e:63:78:28:26:fe:1c:9e:7b:d2:70:9e:17:c2:d0:69: ae:8d:81:f2:29:ff:0c:bf:14:b2:a6:0b:95:a6:42:3b:9c:25: db:ba:ff:ba:2e:b6:1e:29:01:3f:70:0e:c6:db:e2:96:b8:2c: ee:6f:15:e8:d0:a1:7c:fe:ae:ba:f1:21:0d:0d:a7:02:8c:0f: 81:c6:27:e4:1d:3f:96:1a:a5:c7:cb:70:df:5c:44:d7:79:b7: d4:ee:24:df:7c:4b:73:dc:03:dc:8b:1b:fd:4f:9f:0f:48:02: 2a:c8:41:51:64:97:0e:d0:ab:85:57:75:9a:28:f3:f0:96:7c: 8e:2c:1b:14:ac:d5:9f:e5:13:83:b9:4c:a3:3f:18:fa:0b:0d: 59:07:d5:c0:15:04:a6:12:7d:da:31:63:90:c1:6f:1d:5b:f7: 4d:23:d9:67:61:6d:74:76:d6:75:4e:4e:2d:90:c5:5f:1a:42: 21:ba:6f:ce:36:bc:7f:7f:0e:50:ac:87:b1:45:ca:4c:8c:d6: e0:bf:40:1e:8d:66:6d:f6:fa:b3:2f:90:57:fa:f3:cd:68:d1: 54:d8:b2:26:f3:b6:f5:d2:d3:53:56:3a:db:25:f8:0c:13:10: 40:58:5a:b5:fa:59:20:f4:d4:ae:74:db:81:a5:cf:72:b4:ab: 71:0d:95:43 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUX4/JYUzSTgLaLmigzs13+W15tEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCNUNCMEJGQjU0MTgzQTYzMzQ4MjBENzA0RURCRjc5 QjA0Q0I0ODAeFw0yNTA5MDcyMTUwNDFaFw0yNTA5MDgyMjI0NDFaMDMxMTAvBgNV BAMTKDM4NDgwMzlEMzk0OTFEOTAyNjBFMTY2RjcwMUNBNzgzQjBEQjY3QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOLtsJaWCcT14h7aqte0X6qupt IBvoubqZv76seOk30LSY6gZFZLAh9EIJwGIEAQAv+ThSaZoD3riX1aWBeGKQzbl6 N0kc7UI7ING0zRwE8kMKuWTXTgN6hOokZg2NOpaGsnlJa5S3W7JLHVkf2qTznjHQ 2mxnQ4n/d8U/+uicH1s7IuGih7hcYojEVGFRgizuklxdOscZkI5oXNL/so6Z6hXD VAhuxD/wMdPXckPaOslm/ZdO4tMTfc9DtVRiyWM1EMw1/+P7BheZbTdSKcie6fvq 8SQVI382dtRm3sAScIzyg/S6z3DBf+OTjYGdnGwP5upHNSKg2PdEHe//mu1pAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUOEgDnTlJHZAmDhZvcByng7DbZ7UwHwYDVR0j BBgwFoAUIbXLC/tUGDpjNIINcE7b95sEy0gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBjYTI2NmEtZGY4My00YmIyLTgwMDctNGY4NWI4OTNk YzcwLzAvMjFCNUNCMEJGQjU0MTgzQTYzMzQ4MjBENzA0RURCRjc5QjA0Q0I0OC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMUI1Q0IwQkZCNTQxODNBNjMzNDgyMEQ3 MDRFREJGNzlCMDRDQjQ4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQwY2EyNjZhLWRmODMtNGJiMi04MDA3LTRmODViODkzZGM3MC8wLzIxQjVDQjBC RkI1NDE4M0E2MzM0ODIwRDcwNEVEQkY3OUIwNENCNDgubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADn35j eCgm/hyee9JwnhfC0GmujYHyKf8MvxSypguVpkI7nCXbuv+6LrYeKQE/cA7G2+KW uCzubxXo0KF8/q668SENDacCjA+BxifkHT+WGqXHy3DfXETXebfU7iTffEtz3APc ixv9T58PSAIqyEFRZJcO0KuFV3WaKPPwlnyOLBsUrNWf5RODuUyjPxj6Cw1ZB9XA FQSmEn3aMWOQwW8dW/dNI9lnYW10dtZ1Tk4tkMVfGkIhum/ONrx/fw5QrIexRcpM jNbgv0AejWZt9vqzL5BX+vPNaNFU2LIm87b10tNTVjrbJfgMExBAWFq1+lkg9NSu dNuBpc9ytKtxDZVD -----END CERTIFICATE-----Generated at Sun Sep 7 23:28:41 2025 by rpki-client