$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json) Hash identifier: 9/7ROiO1VF4Jl1Z3UG1oJKMBm0oiYnpd8nnzwGn08NQ= Subject key identifier: 7C:3D:FD:69:4E:1B:5B:D8:21:47:1C:F0:D1:4A:2F:A9:83:B6:7A:22 Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Certificate serial: 07135E39556C2A3C4D54C2B1758FCA7A5F64B1E7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft Manifest number: 03D3 Signing time: Fri 06 Jun 2025 10:26:23 +0000 Manifest this update: Fri 06 Jun 2025 10:21:23 +0000 Manifest next update: Sat 07 Jun 2025 11:00:23 +0000 Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: hcCu2uEwSqsljLO+h/1waA5gsNEi1NY0HDLCb/LO3VU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 04:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:13:5e:39:55:6c:2a:3c:4d:54:c2:b1:75:8f:ca:7a:5f:64:b1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Validity Not Before: Jun 6 10:21:23 2025 GMT Not After : Jun 7 11:00:23 2025 GMT Subject: CN=7C3DFD694E1B5BD821471CF0D14A2FA983B67A22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:64:6c:2a:6c:fd:87:a4:ac:6c:36:3b:2e:d9: cc:28:24:86:b0:8b:7b:aa:a8:2c:53:7c:2c:cd:21: 07:7d:5b:d9:da:b3:0b:12:36:89:d7:a6:84:fb:b3: 6a:f5:fe:50:a4:f3:a9:8b:9d:9b:5b:a7:d8:a6:55: ec:f3:4d:08:31:a3:bd:82:59:a9:96:39:c2:3b:4c: 5f:62:62:fb:e2:01:7d:a6:6b:c0:96:7f:c8:75:87: 21:14:ec:17:22:63:f7:81:89:52:7a:4e:9f:bd:86: c5:17:74:97:21:f3:2e:f9:2c:4c:99:9e:8a:f1:74: 94:3b:17:92:da:fc:ae:b2:09:49:36:06:f5:48:68: 00:8c:b4:89:8d:36:91:60:89:e9:fc:5b:79:79:c9: 90:e2:4a:34:24:d3:21:a2:88:22:6a:ef:8e:75:fd: 1b:7c:54:d5:43:f2:d6:b5:24:df:64:e8:10:8b:58: 61:b9:8b:33:3e:06:a7:ee:fd:2b:2c:32:19:d3:9a: 4f:33:44:2c:db:a3:4a:a4:99:42:45:34:e1:b4:fb: f3:34:63:4e:88:fb:85:1d:82:33:3f:79:42:ab:78: ac:38:88:95:8b:8a:e5:3b:0e:7d:f1:b1:52:eb:3c: 7d:d5:96:b9:83:6c:a2:e4:b7:b6:a9:b5:93:3c:f5: 38:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3D:FD:69:4E:1B:5B:D8:21:47:1C:F0:D1:4A:2F:A9:83:B6:7A:22 X509v3 Authority Key Identifier: keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:a8:06:85:e2:a8:97:d6:71:31:0d:c7:d0:c5:25:2b:c6:ae: 37:c4:1f:fc:7f:68:5d:9d:e1:63:61:05:72:ed:3a:d1:55:32: 43:9c:fc:1f:fe:6a:2f:bc:ab:7d:b4:82:d5:3c:71:51:bd:72: 4b:5d:37:16:1a:85:5f:b5:99:24:0b:77:eb:a1:ba:1e:18:d8: c4:ea:97:54:7f:ef:1c:ad:6d:10:1b:6c:c7:6d:2c:4a:ca:a6: 70:8c:86:b7:69:4e:74:94:08:c4:8f:cb:41:e7:f5:4c:2b:50: 7f:ea:a3:f8:47:46:40:0a:21:e5:77:62:9b:20:49:57:7d:e7: 45:17:62:62:fb:31:89:89:ce:d5:d9:30:9b:eb:48:36:58:71: a6:ce:c4:3e:4f:62:1b:21:51:84:f0:a4:3b:c5:bc:5f:a0:65: 39:4b:1a:9e:65:f5:1c:89:d3:1a:f1:16:42:ef:5d:cd:4d:32: f3:71:12:fd:4b:83:c0:57:4b:e8:cf:50:e3:0b:45:af:41:a7: ea:e1:91:90:d4:26:1f:da:90:d5:bb:a7:44:fc:ab:73:2b:c2: 01:fe:af:8e:08:70:e6:c6:95:b6:9c:c8:ed:67:1f:56:ec:57: 11:37:ae:6c:93:20:87:a4:26:dc:8b:d4:4b:79:2b:77:b4:74: 8d:8f:6a:b0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBxNeOVVsKjxNVMKxdY/Kel9ksecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUx RDA0MEEzMDAeFw0yNTA2MDYxMDIxMjNaFw0yNTA2MDcxMTAwMjNaMDMxMTAvBgNV BAMTKDdDM0RGRDY5NEUxQjVCRDgyMTQ3MUNGMEQxNEEyRkE5ODNCNjdBMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiZGwqbP2HpKxsNjsu2cwoJIaw i3uqqCxTfCzNIQd9W9naswsSNonXpoT7s2r1/lCk86mLnZtbp9imVezzTQgxo72C WamWOcI7TF9iYvviAX2ma8CWf8h1hyEU7BciY/eBiVJ6Tp+9hsUXdJch8y75LEyZ norxdJQ7F5La/K6yCUk2BvVIaACMtImNNpFgien8W3l5yZDiSjQk0yGiiCJq7451 /Rt8VNVD8ta1JN9k6BCLWGG5izM+Bqfu/SssMhnTmk8zRCzbo0qkmUJFNOG0+/M0 Y06I+4UdgjM/eUKreKw4iJWLiuU7Dn3xsVLrPH3VlrmDbKLkt7aptZM89TgZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUfD39aU4bW9ghRxzw0UovqYO2eiIwHwYDVR0j BBgwFoAUDk68Qx41E/w/ZB24gOKy/h0ECjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzEvMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUxRDA0MEEzMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00YjFhLTQ2 ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC8wRTRFQkM0MzFFMzUxM0ZDM0Y2NDFEQjg4 MEUyQjJGRTFEMDQwQTMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzgxMTE1YmM2LTEwZjYtNGFmMy1iYTA5LThiNjg3YTU2ZmJmNS8xLzBFNEVCQzQz MUUzNTEzRkMzRjY0MURCODgwRTJCMkZFMUQwNDBBMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCqqAaF 4qiX1nExDcfQxSUrxq43xB/8f2hdneFjYQVy7TrRVTJDnPwf/movvKt9tILVPHFR vXJLXTcWGoVftZkkC3froboeGNjE6pdUf+8crW0QG2zHbSxKyqZwjIa3aU50lAjE j8tB5/VMK1B/6qP4R0ZACiHld2KbIElXfedFF2Ji+zGJic7V2TCb60g2WHGmzsQ+ T2IbIVGE8KQ7xbxfoGU5SxqeZfUcidMa8RZC713NTTLzcRL9S4PAV0voz1DjC0Wv Qafq4ZGQ1CYf2pDVu6dE/KtzK8IB/q+OCHDmxpW2nMjtZx9W7FcRN65skyCHpCbc i9RLeSt3tHSNj2qw -----END CERTIFICATE-----Generated at Fri Jun 6 22:10:08 2025 by rpki-client