$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: NERkND7S/TlsQaMRSvaCfqmQduRvVpvsQUmep0QraMs= Subject key identifier: C6:76:91:1E:B5:DB:30:CD:9D:7D:B0:97:3E:4B:C3:E9:D3:82:55:4C Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 64F2C3C0B3D5C661F9ABAC44230951A84FAD679F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: 5A Signing time: Tue 09 Sep 2025 12:56:05 +0000 Manifest this update: Tue 09 Sep 2025 12:51:05 +0000 Manifest next update: Wed 10 Sep 2025 16:14:05 +0000 Files and hashes: 1: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: PoxwFIHy8kdey2mlHnL1hmx4hhF1/GhCPxY1mv6kDWE=) 2: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: FcXD8L4xuUH1WcLIMdKpP+o2SGJljXzuu4wNercoFLc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 16:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f2:c3:c0:b3:d5:c6:61:f9:ab:ac:44:23:09:51:a8:4f:ad:67:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Sep 9 12:51:05 2025 GMT Not After : Sep 10 16:14:05 2025 GMT Subject: CN=C676911EB5DB30CD9D7DB0973E4BC3E9D382554C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f8:b2:ff:6e:45:db:82:14:3d:20:ea:94:da: ef:32:aa:04:d4:3f:97:a1:cf:c1:0e:38:28:1d:55: 03:53:99:06:73:d7:9f:8a:8d:00:21:c6:80:65:b8: aa:6d:2d:1d:f7:55:47:e2:db:04:ee:41:41:f9:79: 11:35:6f:2e:f2:bb:ad:9f:18:27:a2:54:9b:f6:ba: 63:2b:b3:3a:6c:e9:1b:b5:3c:90:3c:69:0f:30:b8: 99:95:6f:76:d7:52:45:fa:d2:0e:d9:35:0c:15:fe: 67:06:ea:47:27:32:a8:1a:92:ce:3a:29:f8:0e:71: 47:c2:14:d8:29:59:c9:1c:92:f0:1b:d2:1f:fc:3f: c8:21:3e:1f:68:e0:de:f2:6a:52:87:97:c1:24:91: 9c:63:d5:bb:d6:54:3f:c0:b0:00:13:95:ec:ca:65: f3:e1:95:0a:4e:03:75:78:e8:b6:e7:a9:0a:dd:08: 9c:a2:7a:18:75:4c:db:94:ca:58:d1:51:a1:df:1e: 02:d4:10:d5:d3:64:0d:11:ab:e4:21:b2:18:f3:a9: 85:2c:3d:98:5d:30:21:9b:93:e4:1d:a7:c7:23:ed: 17:4c:00:ba:bf:03:5c:4a:db:d4:b8:0d:2e:23:82: 22:d6:69:81:c4:06:d9:3a:86:1e:78:bc:01:76:1c: 1f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:76:91:1E:B5:DB:30:CD:9D:7D:B0:97:3E:4B:C3:E9:D3:82:55:4C X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:40:29:33:db:b3:b9:41:71:14:11:91:77:f7:bb:f9:85:df: 19:03:98:6c:c9:b8:c4:61:8f:5a:5a:1b:eb:89:ff:92:88:8d: 28:aa:db:91:fc:37:d9:fc:a2:72:04:1b:5c:d3:25:76:34:63: 8a:36:6a:70:5c:3b:d1:59:b8:27:91:94:fa:57:78:1e:7b:bb: 6d:2f:90:8d:94:44:4b:92:86:f2:cc:ce:f1:4e:b9:36:eb:d7: 6c:7b:f5:85:3e:0d:53:b6:92:9a:45:d3:1c:f6:3d:6a:a2:ad: 9b:b4:11:92:85:27:14:26:a4:59:f7:3c:72:d2:c0:48:b6:d9: 7e:86:cb:8e:a4:0e:82:81:8d:1d:50:ab:60:85:7a:4e:2b:c5: 12:d1:71:4d:3f:2e:d1:35:f6:bf:db:87:9d:9e:eb:5a:36:fb: bf:af:6e:c1:4a:68:dc:f0:25:f9:b6:7a:42:a9:90:99:f5:81: 83:d1:ab:2a:45:dd:91:e4:07:6b:23:12:02:78:71:e4:fa:ed: c6:11:43:4e:07:6d:bb:41:4c:2d:e6:a7:58:5f:76:d8:7d:92: a5:a5:6d:a8:96:32:f3:73:d9:b4:8c:4d:c1:fb:b7:07:95:43: bc:12:f4:29:7d:b9:22:4a:83:0f:8d:2e:6d:5b:6a:4d:17:7b: eb:53:73:7e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZPLDwLPVxmH5q6xEIwlRqE+tZ58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNTA5MDkxMjUxMDVaFw0yNTA5MTAxNjE0MDVaMDMxMTAvBgNV BAMTKEM2NzY5MTFFQjVEQjMwQ0Q5RDdEQjA5NzNFNEJDM0U5RDM4MjU1NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP+LL/bkXbghQ9IOqU2u8yqgTU P5ehz8EOOCgdVQNTmQZz15+KjQAhxoBluKptLR33VUfi2wTuQUH5eRE1by7yu62f GCeiVJv2umMrszps6Ru1PJA8aQ8wuJmVb3bXUkX60g7ZNQwV/mcG6kcnMqgaks46 KfgOcUfCFNgpWckckvAb0h/8P8ghPh9o4N7yalKHl8EkkZxj1bvWVD/AsAATlezK ZfPhlQpOA3V46LbnqQrdCJyiehh1TNuUyljRUaHfHgLUENXTZA0Rq+QhshjzqYUs PZhdMCGbk+Qdp8cj7RdMALq/A1xK29S4DS4jgiLWaYHEBtk6hh54vAF2HB9vAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUxnaRHrXbMM2dfbCXPkvD6dOCVUwwHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBrQCkz 27O5QXEUEZF397v5hd8ZA5hsybjEYY9aWhvrif+SiI0oqtuR/DfZ/KJyBBtc0yV2 NGOKNmpwXDvRWbgnkZT6V3gee7ttL5CNlERLkobyzM7xTrk269dse/WFPg1TtpKa RdMc9j1qoq2btBGShScUJqRZ9zxy0sBIttl+hsuOpA6CgY0dUKtghXpOK8US0XFN Py7RNfa/24ednutaNvu/r27BSmjc8CX5tnpCqZCZ9YGD0asqRd2R5AdrIxICeHHk +u3GEUNOB227QUwt5qdYX3bYfZKlpW2oljLzc9m0jE3B+7cHlUO8EvQpfbkiSoMP jS5tW2pNF3vrU3N+ -----END CERTIFICATE-----Generated at Wed Sep 10 03:34:25 2025 by rpki-client