$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: OhRFP8KnBKEjw2SCVxyxEq425T0fI7Bd3cKlUkQ5Pbk= Subject key identifier: 13:88:AF:A8:B9:4D:D2:DB:BC:ED:18:1F:4A:91:2B:A2:87:F9:0A:C6 Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 4ACE07AE0D24422F70F0E5CBCAC232721E708936 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 0247 Signing time: Thu 05 Jun 2025 17:13:02 +0000 Manifest this update: Thu 05 Jun 2025 17:08:02 +0000 Manifest next update: Fri 06 Jun 2025 17:14:02 +0000 Files and hashes: 1: 326131343a316563373a663030653a3a2f34382d3438203d3e203336383332.roa (hash: 0dTOq5r3nzcU4nhnM0SPSmfHWBkaaGJU3KJhAxTcvLU=) 2: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: RA+L2a9rUnQEkE0h3dE9SdgUVHKokLJZl3eEmnwupDU=) 3: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: nZLiQJ9M51S9y5Fc4+2qvdaCuDbTfthbeowPuo/elRE=) 4: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: kUd+OV7q9DAowS2L3/fdq/oS4HUMTFtScny+gWU7CG0=) 5: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: dUzgpny38MghrKpugSdB9dzvd5zDywxo+PBsCyfJHn4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 17:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ce:07:ae:0d:24:42:2f:70:f0:e5:cb:ca:c2:32:72:1e:70:89:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Jun 5 17:08:02 2025 GMT Not After : Jun 6 17:14:02 2025 GMT Subject: CN=1388AFA8B94DD2DBBCED181F4A912BA287F90AC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8e:3b:aa:36:4b:ea:fd:9f:38:b6:72:a1:2f: 8d:55:cc:af:c0:89:33:a1:d0:25:9d:ea:c8:03:68: ce:c2:ee:98:c6:6d:59:ec:83:72:b2:4c:57:13:c9: bb:c3:11:9a:87:87:07:d5:d9:9a:25:4b:0d:b2:89: ac:f9:c3:f3:1c:f7:b1:9c:73:50:d8:05:23:ed:11: b6:2f:59:2e:cf:e4:c6:47:c6:a6:61:21:ea:6a:97: 6f:93:5c:97:e4:8b:7c:ce:72:9f:df:44:c1:f7:12: bb:37:15:a5:b0:0f:b0:a6:5f:5f:77:21:41:2f:50: 97:39:23:f5:b8:94:16:29:72:41:e4:00:8a:d8:b1: ff:6c:0e:3a:19:3c:87:44:94:93:a9:79:2d:d6:16: 38:79:a3:a9:25:18:89:7e:3f:86:40:60:d0:91:9c: 24:d9:70:62:9c:dd:b3:54:eb:de:77:6f:ab:fd:e6: ce:c7:e5:88:b0:04:54:73:75:6b:31:28:60:bd:6c: 4a:d0:bd:60:d5:b0:70:a0:95:93:33:3f:62:38:b4: 57:d4:3b:fb:a4:02:7f:7a:97:5a:a1:18:9e:27:75: 82:0b:9a:a3:7c:17:dd:1d:66:3f:22:75:f8:bd:4c: 84:76:df:23:7f:1c:a0:a1:e9:ab:50:a3:2c:f4:b7: 1e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:88:AF:A8:B9:4D:D2:DB:BC:ED:18:1F:4A:91:2B:A2:87:F9:0A:C6 X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:34:26:9d:89:05:e1:25:1d:be:85:e5:fc:cd:b0:b1:25:c0: 83:e3:8b:96:a4:aa:39:80:f4:91:ea:43:97:cd:2e:dc:94:5a: bb:4f:86:b3:be:d7:35:05:f3:e4:05:d7:fc:b1:ed:0b:a4:07: ac:cb:79:27:5c:74:7c:79:32:7d:f4:fd:82:6f:c1:62:be:d9: d4:67:aa:14:4a:96:65:6e:de:28:f7:48:5f:d6:72:1a:42:60: b1:e1:d8:5e:12:b4:ca:20:d6:6a:46:eb:8f:ed:44:6d:fb:6d: 0c:27:5b:e2:1c:a6:f8:f4:fa:09:4e:b2:6d:02:4e:95:45:c5: 40:2b:94:6f:6e:3a:44:60:a1:ad:34:61:33:57:cb:19:c5:90: 95:96:15:e5:41:e4:b1:a9:5c:6b:5b:41:89:9a:72:53:50:fa: 8d:6c:c5:a8:10:df:ea:c3:8a:29:a7:ec:30:46:bb:8e:3a:ad: cf:3d:62:2e:2f:aa:7f:23:58:47:d5:d2:ba:6d:c1:fb:9f:50: 01:d0:c4:2b:90:33:31:63:1a:8b:bc:bd:90:28:80:b3:a7:02: e5:3d:12:59:28:2f:f0:7f:02:d7:28:fe:fc:57:d2:4d:f2:71: 62:c6:0f:c9:3b:5b:76:8a:cc:6b:b4:91:b9:f0:b9:16:9e:d6: 1f:e8:8d:a9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSs4Hrg0kQi9w8OXLysIych5wiTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNTA2MDUxNzA4MDJaFw0yNTA2MDYxNzE0MDJaMDMxMTAvBgNV BAMTKDEzODhBRkE4Qjk0REQyREJCQ0VEMTgxRjRBOTEyQkEyODdGOTBBQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjjuqNkvq/Z84tnKhL41VzK/A iTOh0CWd6sgDaM7C7pjGbVnsg3KyTFcTybvDEZqHhwfV2ZolSw2yiaz5w/Mc97Gc c1DYBSPtEbYvWS7P5MZHxqZhIepql2+TXJfki3zOcp/fRMH3Ers3FaWwD7CmX193 IUEvUJc5I/W4lBYpckHkAIrYsf9sDjoZPIdElJOpeS3WFjh5o6klGIl+P4ZAYNCR nCTZcGKc3bNU6953b6v95s7H5YiwBFRzdWsxKGC9bErQvWDVsHCglZMzP2I4tFfU O/ukAn96l1qhGJ4ndYILmqN8F90dZj8idfi9TIR23yN/HKCh6atQoyz0tx6XAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUE4ivqLlN0tu87RgfSpEroof5CsYwHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgNCad iQXhJR2+heX8zbCxJcCD44uWpKo5gPSR6kOXzS7clFq7T4azvtc1BfPkBdf8se0L pAesy3knXHR8eTJ99P2Cb8FivtnUZ6oUSpZlbt4o90hf1nIaQmCx4dheErTKINZq RuuP7URt+20MJ1viHKb49PoJTrJtAk6VRcVAK5RvbjpEYKGtNGEzV8sZxZCVlhXl QeSxqVxrW0GJmnJTUPqNbMWoEN/qw4opp+wwRruOOq3PPWIuL6p/I1hH1dK6bcH7 n1AB0MQrkDMxYxqLvL2QKICzpwLlPRJZKC/wfwLXKP78V9JN8nFixg/JO1t2isxr tJG58LkWntYf6I2p -----END CERTIFICATE-----Generated at Fri Jun 6 11:24:39 2025 by rpki-client