$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json) Hash identifier: OHWan09QJKeRnf/nmEdGhG75Qb1xOlHWq4T41Yx+0Ic= Subject key identifier: 01:65:E8:AB:5A:AE:8B:3B:95:21:A9:36:C5:A7:F1:58:9B:FC:49:1F Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 Certificate issuer: /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Certificate serial: 813271C2F01011A31A5B8BAF7CEBF50217F3C7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft Manifest number: 0C Signing time: Mon 08 Sep 2025 18:12:27 +0000 Manifest this update: Mon 08 Sep 2025 18:07:27 +0000 Manifest next update: Tue 09 Sep 2025 18:55:27 +0000 Files and hashes: 1: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: gbBkuCYbVeqQpuv1HtX05PjFIU/fZul2p+0UPQ4qDtU=) 2: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: 49tQr1GLN9QvPACiaQcXfaSDsuhRZJax3rEAyqF9fvs=) 3: 326131343a373538303a666666353a3a2f34382d3438203d3e20323037353239.roa (hash: 8GEpSwKR5aAKrW7JpZcQNrVUIUKVu8YVCYytf208qTw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 18:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81:32:71:c2:f0:10:11:a3:1a:5b:8b:af:7c:eb:f5:02:17:f3:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0 Validity Not Before: Sep 8 18:07:27 2025 GMT Not After : Sep 9 18:55:27 2025 GMT Subject: CN=0165E8AB5AAE8B3B9521A936C5A7F1589BFC491F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f3:e3:7c:b1:ab:d3:67:fc:e0:59:34:fa:72: bf:19:f2:cb:7b:97:7d:7a:68:92:e5:0e:7a:27:46: 0f:8d:82:3a:09:bd:86:98:c5:aa:a1:13:87:f0:38: 28:7f:cf:1a:32:7a:22:a3:a3:11:ce:00:a2:ba:5f: a3:e6:f9:77:09:da:dd:56:8e:0c:29:77:6c:fe:15: b7:11:53:5b:ee:17:3f:20:78:3b:bf:3c:1c:83:a9: fe:18:a3:53:62:62:25:1b:fc:60:15:a1:f1:87:c6: 1f:a2:f9:64:d2:f3:ee:84:25:c0:e3:84:69:9f:d2: 8b:43:97:e4:b0:46:77:6c:d2:df:df:ab:4f:7d:9a: 3a:45:df:47:e2:9b:e4:1f:a7:45:af:7a:cc:83:a2: bf:3d:bd:96:22:37:40:a5:cd:8f:d5:a0:09:65:b8: 31:0d:f2:29:a6:2c:ae:87:87:f5:ec:c5:50:19:f0: 9e:53:57:18:91:48:c8:13:6c:a8:76:58:3e:11:2c: 61:8a:ed:cd:d7:5b:d8:11:03:d3:ca:78:23:72:f7: 22:a7:66:67:fc:b1:00:23:15:52:57:71:25:7b:3c: 17:de:f8:62:75:a7:73:da:51:a8:87:23:81:06:d4: 33:a8:f1:12:c7:fe:01:9c:e7:23:1b:1f:07:1d:3f: 86:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:65:E8:AB:5A:AE:8B:3B:95:21:A9:36:C5:A7:F1:58:9B:FC:49:1F X509v3 Authority Key Identifier: keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:3f:94:21:a7:e8:fe:d0:57:83:e3:48:d6:5d:38:40:66:13: 0b:39:a2:7a:88:f9:86:53:e7:8d:a3:06:85:c9:b1:06:fb:fc: b9:d6:45:88:71:b6:32:01:87:8c:8b:af:bc:f1:10:ee:b9:2c: 34:da:33:9f:02:bb:fc:e8:8a:b6:7c:9c:df:c0:a3:62:5b:39: 36:e3:50:4d:5a:0b:9b:74:0a:f8:69:d7:22:d2:57:05:bc:4e: 37:37:72:1a:2e:6c:e5:85:c7:68:20:de:69:d5:b9:3b:86:8d: 0b:41:b9:fe:d5:6c:f5:ab:eb:a6:a8:4d:4c:9e:d6:11:5c:5a: cb:61:c2:e6:13:b3:c6:bb:fd:58:95:4a:3e:79:f2:ce:42:4d: 9c:7a:b0:c7:c4:e4:6c:d4:61:45:30:cf:de:0c:e1:1e:19:14: 46:ec:96:cd:0e:b3:1a:19:0d:d3:2f:29:8d:aa:63:0a:13:30: 3c:1f:db:5e:b2:83:ea:27:e5:22:75:76:0f:96:df:3f:00:99: 47:cb:cb:52:c9:8a:4e:4c:2c:99:96:8f:ed:b5:36:29:30:8a: c7:7c:b0:12:15:73:1c:d6:3a:91:d1:13:3e:24:87:f7:b3:e1: 2a:f6:e8:ec:ed:30:55:38:aa:36:b6:f3:48:25:19:e2:4f:b3: 4f:87:85:e3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUAIEyccLwEBGjGluLr3zr9QIX88cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZD ODg5MjNGMDAeFw0yNTA5MDgxODA3MjdaFw0yNTA5MDkxODU1MjdaMDMxMTAvBgNV BAMTKDAxNjVFOEFCNUFBRThCM0I5NTIxQTkzNkM1QTdGMTU4OUJGQzQ5MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC68+N8savTZ/zgWTT6cr8Z8st7 l316aJLlDnonRg+NgjoJvYaYxaqhE4fwOCh/zxoyeiKjoxHOAKK6X6Pm+XcJ2t1W jgwpd2z+FbcRU1vuFz8geDu/PByDqf4Yo1NiYiUb/GAVofGHxh+i+WTS8+6EJcDj hGmf0otDl+SwRnds0t/fq099mjpF30fim+Qfp0WvesyDor89vZYiN0ClzY/VoAll uDEN8immLK6Hh/XsxVAZ8J5TVxiRSMgTbKh2WD4RLGGK7c3XW9gRA9PKeCNy9yKn Zmf8sQAjFVJXcSV7PBfe+GJ1p3PaUaiHI4EG1DOo8RLH/gGc5yMbHwcdP4Y1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUAWXoq1quizuVIak2xafxWJv8SR8wHwYDVR0j BBgwFoAUICqC2m5zzkJi4Yuu1go/psiJI/AwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1 N2JiLzEvMjAyQTgyREE2RTczQ0U0MjYyRTE4QkFFRDYwQTNGQTZDODg5MjNGMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVE NjBBM0ZBNkM4ODkyM0YwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJiNGJiYTVlNTdiYi8xLzIwMkE4MkRB NkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBaP5Qh p+j+0FeD40jWXThAZhMLOaJ6iPmGU+eNowaFybEG+/y51kWIcbYyAYeMi6+88RDu uSw02jOfArv86Iq2fJzfwKNiWzk241BNWgubdAr4adci0lcFvE43N3IaLmzlhcdo IN5p1bk7ho0LQbn+1Wz1q+umqE1MntYRXFrLYcLmE7PGu/1YlUo+efLOQk2cerDH xORs1GFFMM/eDOEeGRRG7JbNDrMaGQ3TLymNqmMKEzA8H9tesoPqJ+UidXYPlt8/ AJlHy8tSyYpOTCyZlo/ttTYpMIrHfLASFXMc1jqR0RM+JIf3s+Eq9ujs7TBVOKo2 tvNIJRniT7NPh4Xj -----END CERTIFICATE-----Generated at Tue Sep 9 10:33:10 2025 by rpki-client