$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft File: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft (raw, json) Hash identifier: 5gFq2/vsnO/JficxHU0OHR9uLGtefpfU3CGxFHMwkgY= Subject key identifier: 3E:50:60:FE:A6:BC:5F:18:C8:75:6F:7B:DD:B1:FA:EC:D3:4E:C2:1A Authority key identifier: E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C Certificate issuer: /CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Certificate serial: 4D9DF00A0929EEDAC57B5ECA7B0305633001521A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft Manifest number: 40 Signing time: Sun 07 Sep 2025 19:01:00 +0000 Manifest this update: Sun 07 Sep 2025 18:56:00 +0000 Manifest next update: Mon 08 Sep 2025 22:28:00 +0000 Files and hashes: 1: 326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (hash: +BDNAKrmKMibTT2xQwMz+K+qOmE3P6UuU3BvjMVQ0iI=) 2: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (hash: aCq/jKA1GGay4DL6ZU284taMNq3/9u17cmIYZEHZP9Y=) 3: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl (hash: Gu77R8nRv2kUNR4eFtHh99yUctfuqUnDbzjYXAYF9z8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 09:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:9d:f0:0a:09:29:ee:da:c5:7b:5e:ca:7b:03:05:63:30:01:52:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C Validity Not Before: Sep 7 18:56:00 2025 GMT Not After : Sep 8 22:28:00 2025 GMT Subject: CN=3E5060FEA6BC5F18C8756F7BDDB1FAECD34EC21A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ea:85:04:23:ce:47:89:32:ee:87:d9:84:12: 45:29:a2:39:a3:57:cd:94:01:38:ab:c9:62:40:5b: 55:8f:83:5f:5e:46:c7:ab:1c:97:d0:05:7e:f6:35: 0f:59:31:b3:fb:07:e5:52:83:b2:58:a7:db:28:64: da:78:b0:20:4e:16:9f:de:b2:93:f4:fa:53:53:9f: 81:d5:fe:32:88:31:12:9c:0f:98:b7:a6:96:d3:35: 51:68:11:83:2e:95:10:0b:6e:73:b1:4c:91:7c:da: 91:50:6e:eb:6b:2a:4f:57:a1:ac:9f:72:96:9d:15: c8:af:4a:a3:34:61:9a:bb:c8:cb:96:1e:28:ff:ee: 6f:3b:bb:2d:bc:97:13:75:0e:a6:b0:a4:2c:bf:58: 35:a9:24:8c:3c:29:84:d3:5c:2f:e4:8d:46:36:a1: cb:9c:b3:ab:a4:55:61:18:db:00:f9:30:23:9e:44: 8b:ff:26:76:0f:37:0e:db:e9:f0:1a:26:14:7d:1f: a6:02:b5:8c:c1:de:8d:9e:81:93:e5:9a:ee:84:1b: 8f:9e:2e:bc:e1:6e:9d:93:56:9a:d1:c6:f3:8e:13: 4b:0d:0d:68:00:17:4d:d4:27:49:dd:4f:3f:62:0d: 9f:b3:50:b0:48:51:53:ef:53:e0:b5:67:f1:cd:e8: 27:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:50:60:FE:A6:BC:5F:18:C8:75:6F:7B:DD:B1:FA:EC:D3:4E:C2:1A X509v3 Authority Key Identifier: keyid:E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:85:4e:88:ea:44:e9:57:2e:1c:65:10:a8:a0:cd:13:f5:f7: 31:fc:0f:66:db:ba:83:18:7b:08:d8:fe:5e:39:c3:f8:7c:6d: c8:50:7d:44:54:98:06:13:1e:a1:7e:a1:c0:d9:a5:8a:55:e0: 0b:a5:73:70:d7:d9:af:5b:f2:ed:7c:e8:67:96:fa:80:cf:e3: 61:63:27:cb:ae:50:62:67:8c:03:a0:96:96:9a:66:64:52:8f: d3:c8:c3:90:81:27:7f:78:f5:04:fb:18:67:e5:1b:8e:58:4c: 40:ed:90:29:65:2e:af:a6:a7:25:96:da:48:d9:35:a8:c6:8a: ad:00:83:d7:d5:8b:38:5e:e5:4c:e7:f2:89:8c:3d:00:5d:89: bf:b5:e9:b4:a1:50:1c:24:c3:b7:16:8c:3b:b0:15:32:d7:64: 8d:01:12:95:50:85:6d:ec:19:a6:84:f5:31:ac:55:a0:34:c5: c4:92:b6:3e:41:36:81:7f:ae:9f:2b:43:74:94:0c:c6:52:02: 2c:72:12:15:d9:55:05:17:52:f3:72:89:59:dd:d5:62:9f:fe: 62:72:31:7b:47:20:ef:11:c7:20:53:18:ea:71:6d:c8:63:d6: 33:0a:c6:7a:87:b1:45:09:8e:f7:97:c5:4c:cf:41:6d:31:83: 8f:0d:0e:dc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTZ3wCgkp7trFe17KewMFYzABUhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYz RUFCQ0Y3QzAeFw0yNTA5MDcxODU2MDBaFw0yNTA5MDgyMjI4MDBaMDMxMTAvBgNV BAMTKDNFNTA2MEZFQTZCQzVGMThDODc1NkY3QkREQjFGQUVDRDM0RUMyMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO6oUEI85HiTLuh9mEEkUpojmj V82UATiryWJAW1WPg19eRserHJfQBX72NQ9ZMbP7B+VSg7JYp9soZNp4sCBOFp/e spP0+lNTn4HV/jKIMRKcD5i3ppbTNVFoEYMulRALbnOxTJF82pFQbutrKk9Xoayf cpadFcivSqM0YZq7yMuWHij/7m87uy28lxN1DqawpCy/WDWpJIw8KYTTXC/kjUY2 ocucs6ukVWEY2wD5MCOeRIv/JnYPNw7b6fAaJhR9H6YCtYzB3o2egZPlmu6EG4+e Lrzhbp2TVprRxvOOE0sNDWgAF03UJ0ndTz9iDZ+zULBIUVPvU+C1Z/HN6CfrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUPlBg/qa8XxjIdW973bH67NNOwhowHwYDVR0j BBgwFoAU6J+RXYa7nxPQ8inKeM1tnz6rz3wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzU4MzZlNjAtNmE5Mi00N2VmLTliOWItOTJhODRkNmQz NWJhLzEvRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYzRUFCQ0Y3Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FODlGOTE1RDg2QkI5RjEzRDBGMjI5Q0E3 OENENkQ5RjNFQUJDRjdDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M1ODM2ZTYwLTZhOTItNDdlZi05YjliLTkyYTg0ZDZkMzViYS8xL0U4OUY5MTVE ODZCQjlGMTNEMEYyMjlDQTc4Q0Q2RDlGM0VBQkNGN0MubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxhU6I 6kTpVy4cZRCooM0T9fcx/A9m27qDGHsI2P5eOcP4fG3IUH1EVJgGEx6hfqHA2aWK VeALpXNw19mvW/LtfOhnlvqAz+NhYyfLrlBiZ4wDoJaWmmZkUo/TyMOQgSd/ePUE +xhn5RuOWExA7ZApZS6vpqclltpI2TWoxoqtAIPX1Ys4XuVM5/KJjD0AXYm/tem0 oVAcJMO3Fow7sBUy12SNARKVUIVt7BmmhPUxrFWgNMXEkrY+QTaBf66fK0N0lAzG UgIschIV2VUFF1LzcolZ3dVin/5icjF7RyDvEccgUxjqcW3IY9YzCsZ6h7FFCY73 l8VMz0FtMYOPDQ7c -----END CERTIFICATE-----Generated at Sun Sep 7 23:27:16 2025 by rpki-client