$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json) Hash identifier: xCfr4rOIA9XOQyhcewasYH0fhevo/qXk13lA2Ef8Xoc= Subject key identifier: E7:B2:6A:51:CF:A4:9B:C5:F1:DC:3A:E6:DE:A0:1E:8F:36:F3:34:AC Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Certificate serial: 7933086CC47F6DE8C193B39CCCD50840C0E4BF62 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft Manifest number: 0469 Signing time: Tue 09 Sep 2025 15:35:55 +0000 Manifest this update: Tue 09 Sep 2025 15:30:55 +0000 Manifest next update: Wed 10 Sep 2025 17:18:55 +0000 Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: Pg2vy9UOU/BtezG022JT7swnAk2/52mh1eGWMUhXrpA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 17:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:33:08:6c:c4:7f:6d:e8:c1:93:b3:9c:cc:d5:08:40:c0:e4:bf:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Validity Not Before: Sep 9 15:30:55 2025 GMT Not After : Sep 10 17:18:55 2025 GMT Subject: CN=E7B26A51CFA49BC5F1DC3AE6DEA01E8F36F334AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b9:f2:9b:80:72:a2:c1:db:31:02:db:55:37: 53:35:35:71:68:91:af:7b:41:72:9e:cb:6d:1d:85: 08:7f:ea:92:b3:20:71:38:eb:2b:2f:ef:6b:dc:08: c5:9b:97:96:a9:a7:96:02:12:fd:c4:ec:60:b2:ea: 15:92:94:ab:54:cc:79:fd:ff:a1:18:89:d0:73:94: 57:03:73:ff:53:62:4d:c4:f9:58:16:cc:2d:98:0c: ce:0e:a8:70:df:ad:ee:5a:b2:6e:48:74:fc:e8:42: 3e:ea:1e:73:98:7b:84:34:ad:e4:17:c6:30:27:5f: 70:b5:67:a5:eb:8b:3f:94:f3:86:e2:49:29:3c:3e: 05:1c:8b:47:c2:74:7e:cb:72:af:00:d1:d0:bc:7d: a5:63:0f:29:f0:2a:fb:0f:67:40:bf:74:7e:b4:0a: 6c:18:56:07:dd:fb:80:28:2e:04:5e:b7:e7:00:22: f8:58:d4:56:6b:63:b9:7a:53:c1:8b:ac:10:ed:c7: 5c:b3:fd:db:67:7f:07:79:25:d8:d3:81:f0:99:29: 1a:e2:7b:3e:31:c6:7c:ee:e1:86:ca:1e:93:63:02: 84:cc:a5:73:c8:a7:8e:60:1f:aa:31:bc:2a:04:d1: 14:83:c7:0d:fb:c9:d8:af:9d:11:c5:33:53:75:9b: d6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B2:6A:51:CF:A4:9B:C5:F1:DC:3A:E6:DE:A0:1E:8F:36:F3:34:AC X509v3 Authority Key Identifier: keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:61:90:70:6a:a3:f4:4e:cd:a7:c8:34:22:f0:a6:ef:e6:29: 76:85:0f:f1:74:8f:be:ed:95:d0:ec:9c:3e:40:aa:9b:54:ae: 36:c9:db:95:94:af:fc:aa:74:c5:95:08:09:c8:01:03:fe:6b: cd:46:c1:f8:a6:48:2f:6b:42:06:55:d6:ce:c6:00:9a:44:d5: 55:c8:26:e9:62:7f:a3:d1:8a:7c:23:41:23:51:f8:00:89:e0: 48:19:97:22:34:8b:3e:63:e3:bd:42:c3:3a:1a:42:b0:96:24: 54:b2:01:ae:60:0f:67:62:79:6c:ea:36:60:69:f6:70:7e:50: b1:90:5e:59:87:31:3e:75:9f:43:7f:f8:d9:d1:67:73:37:50: 8b:68:91:e6:f6:14:db:59:1d:93:6b:0f:02:53:3d:83:2e:19: 0a:32:b8:33:9c:e3:9e:37:6d:b2:39:93:9f:76:2e:ee:f7:60: db:a1:9d:9d:19:69:7c:a1:14:97:5a:6f:e9:aa:a1:6f:16:99: c9:36:d8:35:03:34:c3:06:82:9c:e1:bb:08:3d:7b:79:e8:17: 0c:f5:eb:b1:a1:f7:76:0a:ad:eb:d1:7c:7d:77:ba:48:76:60: 7f:7d:05:ad:37:ca:40:4c:13:18:05:70:ce:38:96:ea:1d:ea: e8:27:d4:28 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUeTMIbMR/bejBk7OczNUIQMDkv2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUx RDA0MEEzMDAeFw0yNTA5MDkxNTMwNTVaFw0yNTA5MTAxNzE4NTVaMDMxMTAvBgNV BAMTKEU3QjI2QTUxQ0ZBNDlCQzVGMURDM0FFNkRFQTAxRThGMzZGMzM0QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdufKbgHKiwdsxAttVN1M1NXFo ka97QXKey20dhQh/6pKzIHE46ysv72vcCMWbl5app5YCEv3E7GCy6hWSlKtUzHn9 /6EYidBzlFcDc/9TYk3E+VgWzC2YDM4OqHDfre5asm5IdPzoQj7qHnOYe4Q0reQX xjAnX3C1Z6Xriz+U84biSSk8PgUci0fCdH7Lcq8A0dC8faVjDynwKvsPZ0C/dH60 CmwYVgfd+4AoLgRet+cAIvhY1FZrY7l6U8GLrBDtx1yz/dtnfwd5JdjTgfCZKRri ez4xxnzu4YbKHpNjAoTMpXPIp45gH6oxvCoE0RSDxw37ydivnRHFM1N1m9bTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU57JqUc+km8Xx3Drm3qAejzbzNKwwHwYDVR0j BBgwFoAUDk68Qx41E/w/ZB24gOKy/h0ECjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzEvMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUxRDA0MEEzMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00YjFhLTQ2 ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC8wRTRFQkM0MzFFMzUxM0ZDM0Y2NDFEQjg4 MEUyQjJGRTFEMDQwQTMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzgxMTE1YmM2LTEwZjYtNGFmMy1iYTA5LThiNjg3YTU2ZmJmNS8xLzBFNEVCQzQz MUUzNTEzRkMzRjY0MURCODgwRTJCMkZFMUQwNDBBMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAUYZBw aqP0Ts2nyDQi8Kbv5il2hQ/xdI++7ZXQ7Jw+QKqbVK42yduVlK/8qnTFlQgJyAED /mvNRsH4pkgva0IGVdbOxgCaRNVVyCbpYn+j0Yp8I0EjUfgAieBIGZciNIs+Y+O9 QsM6GkKwliRUsgGuYA9nYnls6jZgafZwflCxkF5ZhzE+dZ9Df/jZ0WdzN1CLaJHm 9hTbWR2Taw8CUz2DLhkKMrgznOOeN22yOZOfdi7u92DboZ2dGWl8oRSXWm/pqqFv FpnJNtg1AzTDBoKc4bsIPXt56BcM9euxofd2Cq3r0Xx9d7pIdmB/fQWtN8pATBMY BXDOOJbqHeroJ9Qo -----END CERTIFICATE-----Generated at Wed Sep 10 05:29:04 2025 by rpki-client