$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft File: 2E2674263AECD572673F87614919CA492C79FAEA.mft (raw, json) Hash identifier: PVKZIRWBAQlw6fQd6t3MlLdgQ61TW/lSBGHrAUtU5yw= Subject key identifier: 1A:BE:2A:F4:B7:F5:37:AC:42:42:17:D7:80:66:9A:0E:F3:41:F2:F9 Authority key identifier: 2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA Certificate issuer: /CN=2e2674263aecd572673f87614919ca492c79faea Certificate serial: 3CF64339E92FBBC43968264F3B70308E81E30306 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft Manifest number: 013A Signing time: Thu 18 Sep 2025 12:45:29 +0000 Manifest this update: Thu 18 Sep 2025 12:40:29 +0000 Manifest next update: Fri 19 Sep 2025 12:56:29 +0000 Files and hashes: 1: 34352e36362e36302e302f32342d3234203d3e203332313637.roa (hash: Ox5N2o1ve/SVl8NpCWqJ1Xe7PoW/L1UXaaDEmMEC144=) 2: 2E2674263AECD572673F87614919CA492C79FAEA.crl (hash: P2bQ621r4abTEhJb8rOVz8koMY+NZRdR5/nPZCmKLMU=) 3: 34352e36362e36332e302f32342d3234203d3e20323134343332.roa (hash: bZNP+wA40wAyACtbN5qUmpIVm/KoebsR0HiX5BeNfUM=) 4: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: imRIoujslgfIw1o5CZvn1r7w9Uct08AIqiMVjfiL8o4=) 5: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: tU7tyCca1tIOx1hnSKjuKCDiTN546CQQQvHB6q/i7qk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Sep 2025 12:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f6:43:39:e9:2f:bb:c4:39:68:26:4f:3b:70:30:8e:81:e3:03:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2674263aecd572673f87614919ca492c79faea Validity Not Before: Sep 18 12:40:29 2025 GMT Not After : Sep 19 12:56:29 2025 GMT Subject: CN=1ABE2AF4B7F537AC424217D780669A0EF341F2F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a5:f9:20:3f:24:bd:9e:4a:48:7b:23:91:a8: 07:a9:e8:9c:88:bd:60:ed:c3:ae:a4:46:2e:a8:37: 69:35:e1:65:c3:ea:6f:bc:4a:0c:dc:00:d8:4f:bc: 9d:d5:25:3a:37:83:1c:52:8a:ff:1a:6a:89:b1:bc: a2:1a:55:5b:3b:0d:93:57:b8:b0:c7:09:0a:79:8b: 63:08:49:b2:48:b5:63:ee:b8:3a:63:f7:98:67:b9: 3a:04:df:d2:05:41:c8:b6:82:35:01:eb:83:a6:18: c7:ef:4b:6c:c6:0c:0d:fa:b9:f9:75:2e:43:ff:e1: 04:d8:bc:c9:45:60:36:66:b2:1b:33:58:2b:d9:ff: 26:ca:a6:00:b9:cf:c7:4a:35:26:03:4b:7f:9b:95: da:c6:e1:e7:23:5f:40:90:a9:32:09:1f:15:25:68: 80:9e:50:66:f3:b5:0e:29:be:70:8c:3e:f4:7c:d8: 28:3d:eb:ea:21:f6:0d:d6:88:89:f8:b2:18:63:55: d5:77:92:76:52:c6:84:93:70:91:26:dd:0f:58:25: 7c:1e:05:ab:95:91:a5:f3:dd:11:13:67:e0:d5:85: f3:d6:a1:7c:fa:d8:85:dd:71:9b:ae:1f:e1:aa:b5: 0e:2b:a6:f4:f5:e7:54:fb:03:1d:01:a9:a5:48:49: 50:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BE:2A:F4:B7:F5:37:AC:42:42:17:D7:80:66:9A:0E:F3:41:F2:F9 X509v3 Authority Key Identifier: keyid:2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:ef:29:c9:ca:a9:ee:0f:89:b4:df:2c:75:f5:a5:51:0a:09: 15:95:c1:2a:9d:af:49:49:c7:b3:85:a1:7a:2f:07:cd:9f:ed: 16:4e:d6:e6:1d:2c:22:08:4b:96:a8:ae:73:12:91:9e:c0:38: 17:10:36:93:80:ef:ae:c2:fd:2c:04:19:13:31:eb:63:ea:6c: de:e3:2f:fb:0c:a6:e5:af:99:c6:89:dc:f2:85:fc:b4:b2:eb: f9:88:73:a1:2e:7e:7a:ba:e9:e1:e0:9e:e5:22:d0:a4:1c:39: 67:3c:5b:d7:00:70:98:76:c8:6e:90:05:12:e0:af:2a:6b:bb: 65:e2:32:8d:52:3d:1a:44:08:66:4c:b7:d5:9e:44:81:a7:40: 52:33:c9:d8:3e:05:25:e6:df:d3:af:e2:fe:ac:3b:f5:49:0f: 05:fe:d7:0b:0f:1d:8e:bc:df:fd:21:b3:e7:19:95:d1:dc:c3: ff:38:b7:a8:01:f6:6c:fb:6e:cc:07:90:45:3d:4c:36:62:5b: 19:a0:85:68:2a:b1:ed:68:c9:0e:cb:6d:3b:f0:4a:cf:7e:38: 7e:c3:1e:02:d8:b3:2f:e8:f4:f3:c8:47:2e:54:eb:3b:6a:15: 34:45:91:91:b0:f2:0e:17:2b:96:b8:7e:7a:b4:76:16:b9:a8: 6b:51:69:75 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPPZDOekvu8Q5aCZPO3AwjoHjAwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmUyNjc0MjYzYWVjZDU3MjY3M2Y4NzYxNDkxOWNhNDky Yzc5ZmFlYTAeFw0yNTA5MTgxMjQwMjlaFw0yNTA5MTkxMjU2MjlaMDMxMTAvBgNV BAMTKDFBQkUyQUY0QjdGNTM3QUM0MjQyMTdENzgwNjY5QTBFRjM0MUYyRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3pfkgPyS9nkpIeyORqAep6JyI vWDtw66kRi6oN2k14WXD6m+8SgzcANhPvJ3VJTo3gxxSiv8aaomxvKIaVVs7DZNX uLDHCQp5i2MISbJItWPuuDpj95hnuToE39IFQci2gjUB64OmGMfvS2zGDA36ufl1 LkP/4QTYvMlFYDZmshszWCvZ/ybKpgC5z8dKNSYDS3+bldrG4ecjX0CQqTIJHxUl aICeUGbztQ4pvnCMPvR82Cg96+oh9g3WiIn4shhjVdV3knZSxoSTcJEm3Q9YJXwe BauVkaXz3RETZ+DVhfPWoXz62IXdcZuuH+GqtQ4rpvT151T7Ax0BqaVISVDnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUGr4q9Lf1N6xCQhfXgGaaDvNB8vkwHwYDVR0j BBgwFoAULiZ0Jjrs1XJnP4dhSRnKSSx5+uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmQ3YzIzMWUtYTMzYy00NTU1LWI0MmUtZDAyMDkzODQ5 Mjk5LzAvMkUyNjc0MjYzQUVDRDU3MjY3M0Y4NzYxNDkxOUNBNDkyQzc5RkFFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xpWjBKanJzMVhKblA0ZGhTUm5LU1N4 NS11by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZDdjMjMxZS1h MzNjLTQ1NTUtYjQyZS1kMDIwOTM4NDkyOTkvMC8yRTI2NzQyNjNBRUNENTcyNjcz Rjg3NjE0OTE5Q0E0OTJDNzlGQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw+8pycqp7g+JtN8sdfWl UQoJFZXBKp2vSUnHs4Whei8HzZ/tFk7W5h0sIghLlqiucxKRnsA4FxA2k4DvrsL9 LAQZEzHrY+ps3uMv+wym5a+Zxonc8oX8tLLr+YhzoS5+errp4eCe5SLQpBw5Zzxb 1wBwmHbIbpAFEuCvKmu7ZeIyjVI9GkQIZky31Z5EgadAUjPJ2D4FJebf06/i/qw7 9UkPBf7XCw8djrzf/SGz5xmV0dzD/zi3qAH2bPtuzAeQRT1MNmJbGaCFaCqx7WjJ DsttO/BKz344fsMeAtizL+j088hHLlTrO2oVNEWRkbDyDhcrlrh+erR2Frmoa1Fp dQ== -----END CERTIFICATE-----Generated at Thu Sep 18 23:22:01 2025 by rpki-client