$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft File: 926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json) Hash identifier: NoW/V+RpkNbkS7tGFnPTze/p/7FtHlHQLYUG+MLq2lY= Subject key identifier: AF:87:B0:CC:89:D8:CF:CF:04:B3:D7:61:B7:4E:0B:2E:74:A7:72:17 Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 Certificate issuer: /CN=926cb33722a3493216283dc80cae0ee9d58874f2 Certificate serial: 04AE4DD07CBFE0C6D3CEF3D4E7B5A39D0716A8BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft Manifest number: 051A Signing time: Thu 21 Aug 2025 12:39:31 +0000 Manifest this update: Thu 21 Aug 2025 12:34:31 +0000 Manifest next update: Fri 22 Aug 2025 14:33:31 +0000 Files and hashes: 1: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: kkkt+CdVzC7OjY449gnOlMwgGCN8KNpK56RTONBzmFY=) 2: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: Mw8u6bUjEQ1T0wiM1fQGIJ4I8mCgw8d62d8eo+Kfi6E=) 3: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: G0pJKexFl5iJSj7RvTDDHGwylbeAPcm6mkIGuJ7MB4g=) 4: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: vwSEUgdFJ5PPtETvmVfTCVmULHvCJLz5jSqlSjdS13k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Aug 2025 14:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ae:4d:d0:7c:bf:e0:c6:d3:ce:f3:d4:e7:b5:a3:9d:07:16:a8:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2 Validity Not Before: Aug 21 12:34:31 2025 GMT Not After : Aug 22 14:33:31 2025 GMT Subject: CN=AF87B0CC89D8CFCF04B3D761B74E0B2E74A77217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2a:06:f0:df:c7:86:38:66:0d:bc:a5:72:52: fb:dd:49:96:d2:14:ab:66:e0:63:77:8d:7c:dc:00: 91:9c:39:3f:dc:b9:7e:b9:a2:a6:cb:ea:81:56:0f: c4:bb:c0:90:5e:a7:ca:aa:28:44:14:25:ba:63:72: bc:2a:0a:ea:ff:03:d8:fc:50:9f:88:53:ab:76:64: 25:00:a2:cd:cc:69:35:44:fc:b9:99:1f:17:b1:06: 13:0f:7f:73:93:70:56:69:56:70:b3:1c:93:7b:4d: 74:7b:a1:f6:d9:5c:0f:96:00:48:62:77:18:01:3c: a7:dc:1d:a5:6f:ae:21:d6:ad:18:39:97:57:bb:b5: 00:95:56:19:23:20:27:32:18:87:83:e6:ae:3c:65: 5d:15:f7:9c:54:c2:e7:7b:0d:4c:e9:a1:85:2c:25: e6:df:7f:1b:ad:cc:b7:ad:f4:51:1c:6d:ce:dd:f1: 14:74:f3:f7:cd:53:b5:94:63:19:d1:c6:9e:7b:7a: a7:73:59:fb:d5:9f:9c:bc:56:2b:0d:18:43:d2:af: dd:ab:49:e2:0d:4a:ea:0a:bb:11:a1:26:7e:91:fa: a4:6f:44:84:58:39:5d:06:9d:6f:cd:f4:5a:93:40: 18:29:2b:cc:7b:4a:dd:16:74:79:ca:59:10:9e:2b: 0f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:87:B0:CC:89:D8:CF:CF:04:B3:D7:61:B7:4E:0B:2E:74:A7:72:17 X509v3 Authority Key Identifier: keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2d:db:3a:4f:79:3f:fe:a2:aa:2d:e6:31:83:14:bf:21:d7: 10:72:e9:08:eb:7c:0a:4b:60:c3:5b:1c:3d:fc:49:f5:46:e8: ba:9f:88:00:fd:a7:5e:4c:48:24:71:0f:27:85:08:ba:15:86: f8:f1:5a:49:df:b4:d4:d2:de:98:9e:ba:1f:d1:35:fa:24:66: 21:dc:05:61:8e:76:56:58:13:2e:cb:0e:76:8a:67:ff:01:4b: 42:6e:cb:a5:55:7d:88:34:37:3e:4d:ca:0e:58:66:2a:47:c2: a9:90:c4:cf:d4:c5:04:6b:f1:86:6f:27:14:11:9a:c4:92:08: ba:fa:1b:a8:74:40:1b:12:cd:5e:60:68:df:43:70:cc:05:4b: 62:7b:ad:53:49:f9:ae:1a:78:9d:17:8a:05:47:d5:1a:9a:e1: 2f:18:7b:f6:2d:31:ad:91:f0:c6:75:c4:2d:24:31:db:28:6a: cc:c1:74:19:5a:99:c8:53:5f:8e:95:b8:37:d3:3d:0b:16:8b: 57:e1:52:f3:60:f8:eb:5e:f6:43:e5:09:5c:09:43:a0:3f:92: 90:23:f9:b9:03:2c:b3:da:2a:06:64:96:31:4f:a2:1c:10:8b: cc:bc:da:80:d4:85:a5:b0:cb:36:4e:68:38:43:4f:39:21:47: 81:98:ca:a3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBK5N0Hy/4MbTzvPU57WjnQcWqLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI2Y2IzMzcyMmEzNDkzMjE2MjgzZGM4MGNhZTBlZTlk NTg4NzRmMjAeFw0yNTA4MjExMjM0MzFaFw0yNTA4MjIxNDMzMzFaMDMxMTAvBgNV BAMTKEFGODdCMENDODlEOENGQ0YwNEIzRDc2MUI3NEUwQjJFNzRBNzcyMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCKgbw38eGOGYNvKVyUvvdSZbS FKtm4GN3jXzcAJGcOT/cuX65oqbL6oFWD8S7wJBep8qqKEQUJbpjcrwqCur/A9j8 UJ+IU6t2ZCUAos3MaTVE/LmZHxexBhMPf3OTcFZpVnCzHJN7TXR7ofbZXA+WAEhi dxgBPKfcHaVvriHWrRg5l1e7tQCVVhkjICcyGIeD5q48ZV0V95xUwud7DUzpoYUs JebffxutzLet9FEcbc7d8RR08/fNU7WUYxnRxp57eqdzWfvVn5y8VisNGEPSr92r SeINSuoKuxGhJn6R+qRvRIRYOV0GnW/N9FqTQBgpK8x7St0WdHnKWRCeKw+nAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUr4ewzInYz88Es9dht04LLnSnchcwHwYDVR0j BBgwFoAUkmyzNyKjSTIWKD3IDK4O6dWIdPIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NlMDBjZjktMDRhNS00M2QxLThiODktZWRmYTYwY2Q4 ZDRhLzIvOTI2Q0IzMzcyMkEzNDkzMjE2MjgzREM4MENBRTBFRTlENTg4NzRGMi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2tteXpOeUtqU1RJV0tEM0lESzRPNmRX SWRQSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jY2UwMGNmOS0w NGE1LTQzZDEtOGI4OS1lZGZhNjBjZDhkNGEvMi85MjZDQjMzNzIyQTM0OTMyMTYy ODNEQzgwQ0FFMEVFOUQ1ODg3NEYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjS3bOk95P/6iqi3mMYMU vyHXEHLpCOt8Cktgw1scPfxJ9Uboup+IAP2nXkxIJHEPJ4UIuhWG+PFaSd+01NLe mJ66H9E1+iRmIdwFYY52VlgTLssOdopn/wFLQm7LpVV9iDQ3Pk3KDlhmKkfCqZDE z9TFBGvxhm8nFBGaxJIIuvobqHRAGxLNXmBo30NwzAVLYnutU0n5rhp4nReKBUfV GprhLxh79i0xrZHwxnXELSQx2yhqzMF0GVqZyFNfjpW4N9M9CxaLV+FS82D46172 Q+UJXAlDoD+SkCP5uQMss9oqBmSWMU+iHBCLzLzagNSFpbDLNk5oOENPOSFHgZjK ow== -----END CERTIFICATE-----Generated at Fri Aug 22 08:20:34 2025 by rpki-client