$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: iZAAqGgjmRfo411CQCFwt8s57f6dydVgBHrjHTLRaF4= Subject key identifier: 62:D8:86:9B:87:FD:36:44:D9:DB:7C:1E:3F:1E:32:45:69:22:28:E1 Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 1596E3557D31B23F7647ADC125ABC5C9CF228CFE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 02C3 Signing time: Sat 06 Sep 2025 03:34:33 +0000 Manifest this update: Sat 06 Sep 2025 03:29:33 +0000 Manifest next update: Sun 07 Sep 2025 05:48:33 +0000 Files and hashes: 1: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: kUd+OV7q9DAowS2L3/fdq/oS4HUMTFtScny+gWU7CG0=) 2: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: JzOjXvsE5zQbsfTINFy0kycEJT5DbIoa/21NvGWLS7Y=) 3: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: dUzgpny38MghrKpugSdB9dzvd5zDywxo+PBsCyfJHn4=) 4: 326131343a316563373a663030653a3a2f34382d3438203d3e203336383332.roa (hash: 0dTOq5r3nzcU4nhnM0SPSmfHWBkaaGJU3KJhAxTcvLU=) 5: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: RA+L2a9rUnQEkE0h3dE9SdgUVHKokLJZl3eEmnwupDU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 05:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:96:e3:55:7d:31:b2:3f:76:47:ad:c1:25:ab:c5:c9:cf:22:8c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Sep 6 03:29:33 2025 GMT Not After : Sep 7 05:48:33 2025 GMT Subject: CN=62D8869B87FD3644D9DB7C1E3F1E3245692228E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:fd:29:48:5e:53:22:b2:a0:cd:1a:4d:d5: 8c:c6:44:2b:5a:ca:cf:9f:60:72:8f:2b:34:6d:e4: 3b:fd:79:32:d9:20:6b:1d:09:6d:4b:ea:07:fb:10: db:81:56:57:43:1f:d7:9b:71:c1:c5:11:ad:cb:fb: 2c:6c:d4:98:b6:ff:d7:78:bd:52:6f:1a:e2:5a:60: 5a:96:63:40:5e:30:a1:94:3c:ba:8b:40:3b:bf:a0: ab:d4:76:eb:b5:29:df:a4:46:ca:7f:8b:83:eb:a0: 4a:59:14:39:b0:aa:cd:d2:d6:e8:e7:c5:39:71:07: 8f:ec:5c:87:83:1f:1c:41:a6:0c:8e:66:b0:67:94: 05:bc:b2:66:51:c5:6f:8c:57:03:db:09:01:c4:c3: 58:f3:b6:9a:d8:cf:8d:ad:a6:f8:ec:7b:c2:b2:84: a9:53:0c:53:c4:1e:4c:91:3f:8c:da:a3:34:79:53: e3:a8:e1:fc:25:96:13:db:82:70:10:31:eb:19:41: b5:7c:44:45:a1:c1:0b:ba:d4:63:77:b2:77:32:74: ac:5e:62:f5:9b:b8:7e:6c:91:d8:7f:14:7a:a9:20: 81:61:4b:08:ef:8a:53:42:74:1b:ec:54:3f:f1:12: 06:76:27:91:24:3c:40:d9:ec:6f:05:50:99:d9:0b: 59:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D8:86:9B:87:FD:36:44:D9:DB:7C:1E:3F:1E:32:45:69:22:28:E1 X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:8b:f5:a7:96:90:a8:be:27:55:a3:2c:45:11:ed:21:a5:36: 53:07:71:01:51:7e:21:c9:3d:1a:80:2f:0a:dc:07:aa:f3:d3: bf:0b:72:16:e0:06:79:fc:64:28:36:ae:91:45:d6:e3:18:d3: 2d:30:7a:48:72:3f:a7:0d:17:f3:21:9a:50:28:d1:65:99:ad: 9a:3f:9e:c2:d3:6b:3d:95:7d:47:03:d7:97:8b:7d:40:72:ae: 50:1e:ef:7a:f3:23:d1:27:a0:a6:14:37:d5:e7:ed:16:43:19: 5d:4b:2d:e3:99:af:a9:b4:8b:61:47:4c:80:5a:3a:e4:f0:81: b6:f3:5c:6b:41:ab:1c:a8:47:a7:36:aa:6b:57:8b:55:50:46: e9:46:e4:d9:9f:60:48:70:c2:15:b4:83:68:87:bc:72:61:d1: 02:1f:d9:72:4e:65:e8:e5:88:77:50:bd:ef:ad:d2:d0:50:7c: bc:84:53:d0:77:f2:2a:cd:7c:4e:29:b0:b7:c7:8b:d0:f7:d9: 2d:1e:ff:7e:38:f5:74:cc:da:77:97:01:1b:be:2c:2d:37:86: 42:3a:9a:f9:ef:14:90:9d:ba:71:40:df:76:c6:4a:d6:19:57: f1:07:57:83:4c:cc:a3:5b:1f:e2:f7:c6:8c:07:d6:4f:7a:35: a1:1d:9a:61 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFZbjVX0xsj92R63BJavFyc8ijP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNTA5MDYwMzI5MzNaFw0yNTA5MDcwNTQ4MzNaMDMxMTAvBgNV BAMTKDYyRDg4NjlCODdGRDM2NDREOURCN0MxRTNGMUUzMjQ1NjkyMjI4RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxYP0pSF5TIrKgzRpN1YzGRCta ys+fYHKPKzRt5Dv9eTLZIGsdCW1L6gf7ENuBVldDH9ebccHFEa3L+yxs1Ji2/9d4 vVJvGuJaYFqWY0BeMKGUPLqLQDu/oKvUduu1Kd+kRsp/i4ProEpZFDmwqs3S1ujn xTlxB4/sXIeDHxxBpgyOZrBnlAW8smZRxW+MVwPbCQHEw1jztprYz42tpvjse8Ky hKlTDFPEHkyRP4zaozR5U+Oo4fwllhPbgnAQMesZQbV8REWhwQu61GN3sncydKxe YvWbuH5skdh/FHqpIIFhSwjvilNCdBvsVD/xEgZ2J5EkPEDZ7G8FUJnZC1mzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUYtiGm4f9NkTZ23wePx4yRWkiKOEwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCi/Wn lpCovidVoyxFEe0hpTZTB3EBUX4hyT0agC8K3Aeq89O/C3IW4AZ5/GQoNq6RRdbj GNMtMHpIcj+nDRfzIZpQKNFlma2aP57C02s9lX1HA9eXi31Acq5QHu968yPRJ6Cm FDfV5+0WQxldSy3jma+ptIthR0yAWjrk8IG281xrQascqEenNqprV4tVUEbpRuTZ n2BIcMIVtINoh7xyYdECH9lyTmXo5Yh3UL3vrdLQUHy8hFPQd/IqzXxOKbC3x4vQ 99ktHv9+OPV0zNp3lwEbviwtN4ZCOpr57xSQnbpxQN92xkrWGVfxB1eDTMyjWx/i 98aMB9ZPejWhHZph -----END CERTIFICATE-----Generated at Sat Sep 6 17:26:43 2025 by rpki-client