$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: Khaxo//68bPFrWFQny2GKKOyv9yimEsfyUVgOdnPtu4= Subject key identifier: 5C:F0:EB:1D:6B:92:34:15:61:B7:BA:FA:7D:B0:F7:B0:C3:39:7F:CC Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 418C8D90472A3E9AE70E748D5C76E43A1FD809F5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: 017D Signing time: Sun 07 Sep 2025 08:41:05 +0000 Manifest this update: Sun 07 Sep 2025 08:36:05 +0000 Manifest next update: Mon 08 Sep 2025 12:22:05 +0000 Files and hashes: 1: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: liZtkDCXL4DmjNQ78r1O/4djDEbWR26m7nKfEkWRmh4=) 2: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: LPWU5nhq+LZxZTYbp9uwBnjgu5iVUwv6FLb66MOimOg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 09:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8c:8d:90:47:2a:3e:9a:e7:0e:74:8d:5c:76:e4:3a:1f:d8:09:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Sep 7 08:36:05 2025 GMT Not After : Sep 8 12:22:05 2025 GMT Subject: CN=5CF0EB1D6B92341561B7BAFA7DB0F7B0C3397FCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c8:c7:f6:c7:dc:db:04:44:8f:37:9a:31:6a: 41:72:e1:eb:6c:b1:27:a3:cc:7c:5a:e1:39:4f:41: f4:ad:f9:24:5b:5b:f1:ad:62:ab:c0:26:59:aa:9b: 23:a0:34:93:2b:96:11:e1:0a:87:ec:f2:59:ce:98: 57:d0:43:6d:2e:6f:b3:31:79:ff:ca:5c:ff:6c:c3: 93:6e:f7:77:a4:eb:88:fa:ee:72:51:be:ce:c8:c8: ec:54:dd:f0:32:75:ff:cd:13:34:c9:6d:57:7c:b6: cf:02:02:3d:80:ca:b0:8e:d8:fc:73:b3:72:9f:dd: 26:c1:d6:1f:e4:90:be:8a:78:d4:61:30:d4:5d:ae: 5b:f9:3e:69:f6:5a:42:92:ec:11:c3:ba:18:f9:ac: 48:dc:8a:50:49:d4:3a:28:22:6a:cc:8b:9b:c6:91: 45:1c:0b:de:2d:e5:c3:72:ea:f9:f2:a8:34:b1:e4: 7a:09:28:c3:44:00:31:e2:8a:d8:75:0e:48:34:9c: 52:68:a7:f4:92:36:d3:ee:7b:c2:aa:f7:68:9e:e0: 5c:1c:ea:e2:bf:32:5f:c0:87:54:28:31:14:31:64: a4:de:74:9a:4d:98:b4:ab:41:de:20:e0:6e:59:a6: d1:d4:d0:44:db:75:63:e6:bd:63:92:f9:bf:c3:31: fa:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F0:EB:1D:6B:92:34:15:61:B7:BA:FA:7D:B0:F7:B0:C3:39:7F:CC X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:23:0b:37:82:30:28:6d:63:76:b9:3c:08:ab:8e:3d:73:04: 77:dd:42:4a:5d:2a:95:a6:a9:27:e4:48:a8:9e:46:1d:4d:0c: 88:e5:02:05:99:71:b1:22:78:23:ab:b8:86:c0:e0:bd:81:ef: 00:87:f3:d3:42:17:85:de:42:15:38:fa:d3:b0:03:e9:f5:14: 98:b6:16:af:a0:3b:09:04:a3:0e:df:86:ca:0e:36:69:18:3b: d3:f4:41:b4:d4:25:da:c4:e6:91:a5:0f:a4:2d:bc:c1:e2:40: 74:d0:d5:7a:63:22:f7:92:d2:1e:43:fd:4f:b1:1e:30:c1:dc: 37:65:56:83:3c:13:bf:8c:e1:13:23:ba:9d:e9:7c:b5:1c:2a: 8a:80:74:79:f7:df:cd:e9:b6:9e:1d:21:2f:5d:53:7a:da:aa: d1:92:85:29:20:b9:85:9c:45:bb:5c:ef:2c:c0:e8:09:7e:c3: 71:5a:86:50:21:56:d4:41:75:96:48:64:62:39:fe:f3:19:da: c9:4b:85:df:ee:68:90:a7:3c:52:83:96:4e:37:e8:e8:98:c9: ae:14:9b:06:bd:1b:c1:48:d4:a0:47:3b:63:61:32:da:33:2f: 53:d4:6e:c9:31:ec:ee:a1:5a:16:18:3a:db:41:f1:6c:92:31: 60:e5:ab:fc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQYyNkEcqPprnDnSNXHbkOh/YCfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNTA5MDcwODM2MDVaFw0yNTA5MDgxMjIyMDVaMDMxMTAvBgNV BAMTKDVDRjBFQjFENkI5MjM0MTU2MUI3QkFGQTdEQjBGN0IwQzMzOTdGQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqyMf2x9zbBESPN5oxakFy4ets sSejzHxa4TlPQfSt+SRbW/GtYqvAJlmqmyOgNJMrlhHhCofs8lnOmFfQQ20ub7Mx ef/KXP9sw5Nu93ek64j67nJRvs7IyOxU3fAydf/NEzTJbVd8ts8CAj2AyrCO2Pxz s3Kf3SbB1h/kkL6KeNRhMNRdrlv5Pmn2WkKS7BHDuhj5rEjcilBJ1DooImrMi5vG kUUcC94t5cNy6vnyqDSx5HoJKMNEADHiith1Dkg0nFJop/SSNtPue8Kq92ie4Fwc 6uK/Ml/Ah1QoMRQxZKTedJpNmLSrQd4g4G5ZptHU0ETbdWPmvWOS+b/DMfpTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXPDrHWuSNBVht7r6fbD3sMM5f8wwHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/Iws3 gjAobWN2uTwIq449cwR33UJKXSqVpqkn5EionkYdTQyI5QIFmXGxIngjq7iGwOC9 ge8Ah/PTQheF3kIVOPrTsAPp9RSYthavoDsJBKMO34bKDjZpGDvT9EG01CXaxOaR pQ+kLbzB4kB00NV6YyL3ktIeQ/1PsR4wwdw3ZVaDPBO/jOETI7qd6Xy1HCqKgHR5 99/N6baeHSEvXVN62qrRkoUpILmFnEW7XO8swOgJfsNxWoZQIVbUQXWWSGRiOf7z GdrJS4Xf7miQpzxSg5ZON+jomMmuFJsGvRvBSNSgRztjYTLaMy9T1G7JMezuoVoW GDrbQfFskjFg5av8 -----END CERTIFICATE-----Generated at Sun Sep 7 23:27:15 2025 by rpki-client