$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft File: B149F23A3E99C4760297DD7104B400C835D86D19.mft (raw, json) Hash identifier: sskn/zcC4wOc2L+UuU3QVQaPiFFIJPenlVodN1xdkDg= Subject key identifier: BE:88:6F:14:52:43:08:9D:9E:27:85:A9:51:E0:65:F9:10:A6:2E:27 Authority key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 Certificate issuer: /CN=B149F23A3E99C4760297DD7104B400C835D86D19 Certificate serial: 036B374EA10E37B06B36098B30BF6F60ACAF37E2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft Manifest number: 16 Signing time: Sun 07 Sep 2025 19:13:57 +0000 Manifest this update: Sun 07 Sep 2025 19:08:57 +0000 Manifest next update: Mon 08 Sep 2025 19:39:57 +0000 Files and hashes: 1: B7CB5B0421020EB641294ABAA8F3FB43C3A05473.cer (hash: DIlm6uTWdpKqx9+qrdKfp/5ptJfTD1BPsCD1OJCsAH8=) 2: 82DFDBC2299142D57F36C3896EE6073C080234FF.cer (hash: uBCsQhkjVeCVd0ue8vqIAlo8vQ5pe+GEr5BGZYHFxsM=) 3: B149F23A3E99C4760297DD7104B400C835D86D19.crl (hash: B8yHZy/5ZLCejiyDs/jAkIBbPgWbOf/FCjYCQmOXwa0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 09:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6b:37:4e:a1:0e:37:b0:6b:36:09:8b:30:bf:6f:60:ac:af:37:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B149F23A3E99C4760297DD7104B400C835D86D19 Validity Not Before: Sep 7 19:08:57 2025 GMT Not After : Sep 8 19:39:57 2025 GMT Subject: CN=BE886F145243089D9E2785A951E065F910A62E27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:15:87:61:2b:e5:b6:cd:7e:a1:6c:0d:63:d0: f1:d2:86:bf:97:2f:ac:b5:c5:d9:de:de:48:94:7e: bc:9f:91:3a:8e:61:77:e6:da:3c:6c:69:2a:62:43: a6:1f:43:51:88:21:28:d5:51:b9:65:c4:fc:94:6a: 2d:2c:ce:60:cc:e5:67:de:c9:c7:2e:42:5e:85:4e: 95:84:1c:67:10:1a:1b:8b:6b:37:95:2c:c7:ab:06: db:c8:86:2d:d1:48:83:67:d6:33:7e:1c:b7:a6:46: 56:59:7b:bb:af:d4:01:77:75:96:fb:be:87:86:22: ae:ab:7f:9f:e4:aa:b4:95:1c:71:21:a5:a8:a9:42: c5:2b:72:f1:fa:f9:ae:7e:a5:24:2e:bb:bd:17:d0: b5:a2:ed:30:5e:4f:41:6b:6a:99:2e:cc:ad:05:19: 4b:7b:e3:be:71:17:d2:97:e9:61:71:ad:b7:06:24: 24:fc:24:b6:fb:26:7b:dd:63:70:5b:0e:47:e7:c6: 17:97:88:ca:51:d5:69:a8:d2:7a:68:76:4a:13:33: 10:45:85:f7:9a:5b:82:5c:3d:49:2b:98:44:e9:56: 70:96:36:5a:e6:74:8f:bb:d9:9b:3e:64:18:77:b5: 45:60:f5:50:36:dc:c7:69:ee:b3:b9:d5:78:ad:87: ba:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:88:6F:14:52:43:08:9D:9E:27:85:A9:51:E0:65:F9:10:A6:2E:27 X509v3 Authority Key Identifier: keyid:B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d0:df:7a:8e:19:64:ab:65:bb:c2:34:f7:3e:40:6e:8a:13: f3:83:2c:28:f1:b1:e3:88:2f:3b:a2:b7:f8:8b:ca:89:3c:f0: 8a:62:bf:4b:0b:cd:e2:e0:15:d1:db:4b:7f:8a:28:78:1c:3b: 33:51:e6:1a:12:1d:0c:b9:de:e3:66:6b:0e:1d:95:72:7f:2f: ab:82:67:39:33:18:fb:d8:61:fd:33:6d:31:a3:2f:af:84:c1: af:cb:c9:94:1c:e9:43:54:2d:5d:36:71:1a:2c:2f:72:dc:b5: 9d:24:cc:f4:6e:bf:71:3f:1f:55:db:0e:75:84:8b:42:7a:7c: 8e:f9:d1:12:cf:0b:57:c4:39:97:2b:72:2a:4c:38:e9:fc:15: 6f:45:7d:8c:56:90:46:a2:af:d0:6e:3b:9e:d3:6d:55:6e:8a: 1d:5c:b3:2c:3b:41:4c:9d:4f:c5:47:c2:ce:5a:6c:30:32:e0: e6:30:39:11:02:ec:98:29:e5:c0:5b:45:1b:2a:6b:04:b8:8b: d0:d1:bd:40:0c:4e:ab:dc:61:9a:27:fe:e8:f2:b3:14:0b:91: 1a:00:d6:1c:1a:7e:b9:d5:75:da:6e:7d:d8:fc:9d:cc:55:9f: ac:5e:dd:8c:3a:a8:1b:2a:aa:63:d3:39:4e:63:ce:5d:55:3b: 63:36:9a:29 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUA2s3TqEON7BrNgmLML9vYKyvN+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgz NUQ4NkQxOTAeFw0yNTA5MDcxOTA4NTdaFw0yNTA5MDgxOTM5NTdaMDMxMTAvBgNV BAMTKEJFODg2RjE0NTI0MzA4OUQ5RTI3ODVBOTUxRTA2NUY5MTBBNjJFMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxFYdhK+W2zX6hbA1j0PHShr+X L6y1xdne3kiUfryfkTqOYXfm2jxsaSpiQ6YfQ1GIISjVUbllxPyUai0szmDM5Wfe yccuQl6FTpWEHGcQGhuLazeVLMerBtvIhi3RSINn1jN+HLemRlZZe7uv1AF3dZb7 voeGIq6rf5/kqrSVHHEhpaipQsUrcvH6+a5+pSQuu70X0LWi7TBeT0FrapkuzK0F GUt7475xF9KX6WFxrbcGJCT8JLb7JnvdY3BbDkfnxheXiMpR1Wmo0npodkoTMxBF hfeaW4JcPUkrmETpVnCWNlrmdI+72Zs+ZBh3tUVg9VA23Mdp7rO51Xith7rBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUvohvFFJDCJ2eJ4WpUeBl+RCmLicwHwYDVR0j BBgwFoAUsUnyOj6ZxHYCl91xBLQAyDXYbRkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj OWRjLzIvQjE0OUYyM0EzRTk5QzQ3NjAyOTdERDcxMDRCNDAwQzgzNUQ4NkQxOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEw NEI0MDBDODM1RDg2RDE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8yL0IxNDlGMjNB M0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAX0N96 jhlkq2W7wjT3PkBuihPzgywo8bHjiC87orf4i8qJPPCKYr9LC83i4BXR20t/iih4 HDszUeYaEh0Mud7jZmsOHZVyfy+rgmc5Mxj72GH9M20xoy+vhMGvy8mUHOlDVC1d NnEaLC9y3LWdJMz0br9xPx9V2w51hItCenyO+dESzwtXxDmXK3IqTDjp/BVvRX2M VpBGoq/Qbjue021VboodXLMsO0FMnU/FR8LOWmwwMuDmMDkRAuyYKeXAW0UbKmsE uIvQ0b1ADE6r3GGaJ/7o8rMUC5EaANYcGn651XXabn3Y/J3MVZ+sXt2MOqgbKqpj 0zlOY85dVTtjNpop -----END CERTIFICATE-----Generated at Sun Sep 7 23:28:42 2025 by rpki-client