$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft File: 47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json) Hash identifier: rOip7kRJQtLL+PJveOX1ZLC3j4mdwT5EQlLp3ap47M4= Subject key identifier: 90:89:A4:AB:BA:C0:FE:F0:4B:54:64:33:06:9D:69:DA:BC:E4:28:EF Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 Certificate issuer: /CN=47E9555355C6B007AACD5D45BF41E3383E991641 Certificate serial: 75AA62DAD399C1AC3DE973B88E8AA01F3B615458 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft Manifest number: 044B Signing time: Sun 07 Sep 2025 22:11:57 +0000 Manifest this update: Sun 07 Sep 2025 22:06:57 +0000 Manifest next update: Tue 09 Sep 2025 00:21:57 +0000 Files and hashes: 1: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: 3ipGYMDZ54FZdaI4eg46OMa/ZV0a0Q3rHUY9RUekrv8=) 2: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: fHX2z3i7JTnfrijsFj2DiAs2O/k4tGL+mgTA7dDClZ0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 15:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:aa:62:da:d3:99:c1:ac:3d:e9:73:b8:8e:8a:a0:1f:3b:61:54:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641 Validity Not Before: Sep 7 22:06:57 2025 GMT Not After : Sep 9 00:21:57 2025 GMT Subject: CN=9089A4ABBAC0FEF04B546433069D69DABCE428EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0a:be:9b:ae:13:1e:03:09:f8:6b:9c:8c:4e: 8c:cc:0d:6c:1e:26:29:69:05:6b:30:ce:e5:5a:50: 01:8b:63:34:bc:3a:e3:52:7a:aa:8d:e9:d5:83:62: 1d:05:ab:17:0c:fe:eb:9d:59:36:aa:f0:3f:0b:0c: e0:06:3c:2c:e4:ae:07:90:c2:a7:ad:d9:63:e8:9f: ad:e8:92:b2:b5:9a:0a:45:8d:df:8f:e3:61:d7:9b: 1c:48:c6:c8:02:05:ca:fb:da:c6:a2:5f:39:59:31: d9:b2:52:84:ff:32:d8:b0:3a:e6:4f:98:03:64:50: 44:e0:0a:76:b2:2a:6f:17:e5:f4:73:78:f7:cd:8b: e7:88:e9:9a:51:85:f6:65:15:2d:c8:35:f7:32:f0: 43:aa:f9:d6:b2:60:7c:25:2d:68:ab:a3:05:b2:9d: 75:2e:d7:8d:6d:ec:6a:e9:44:24:ae:95:51:59:17: 6b:d6:02:96:94:1b:0b:0c:60:ea:48:b5:2f:49:2c: 4f:15:d9:12:41:61:86:b2:e0:76:4d:54:8c:02:28: 96:ad:7e:51:ac:49:47:e2:50:0d:97:26:0a:15:0e: 9c:17:65:5e:9e:4e:ae:75:83:d4:80:f6:24:d0:15: 0d:a6:9d:73:98:33:4b:e1:2b:f4:19:72:60:3f:26: d0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:89:A4:AB:BA:C0:FE:F0:4B:54:64:33:06:9D:69:DA:BC:E4:28:EF X509v3 Authority Key Identifier: keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:40:df:da:1d:b8:fd:84:6c:77:8d:3b:ce:37:ca:47:d9:a7: ae:c6:8d:c9:bc:96:5e:25:69:90:07:eb:db:27:57:9c:8c:20: 4b:db:50:4b:a9:f7:3a:f5:45:0b:2f:51:ab:7a:57:35:84:15: 52:8b:e8:2f:9e:f4:ea:26:d3:ee:be:7f:54:e7:78:36:77:ad: ad:91:77:78:b8:02:4d:a6:da:c9:34:05:66:aa:09:df:d2:7c: d3:b9:6d:a7:e7:9a:d0:0d:6a:8d:7f:f7:0d:71:bc:cb:f4:4a: 4a:05:cd:d3:97:50:ba:e2:21:9e:3f:c7:fe:07:67:63:5f:13: e3:aa:11:e9:c5:72:e5:fe:ba:aa:b6:09:40:09:7c:5a:24:c5: 92:0f:b0:fc:fd:b0:cc:6a:b0:de:7a:cb:32:de:2b:35:07:1f: ba:f5:bc:f3:49:a6:9b:be:1c:3d:ba:55:7a:fc:89:91:d8:d0: 9a:25:0b:0b:db:92:e4:f3:3f:d8:90:9b:33:40:d1:86:e2:e3: 68:92:8b:3a:de:b1:c1:10:fe:bb:b4:29:b1:f9:b6:8f:29:82: b6:07:fe:a1:10:e0:ca:6d:af:89:8a:5e:22:f3:80:2c:7f:63: 2d:d8:69:af:dd:42:ce:6d:6b:4c:d0:6c:98:6b:6e:2c:cb:8f: d1:e5:7f:d8 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUdapi2tOZwaw96XO4joqgHzthVFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgz RTk5MTY0MTAeFw0yNTA5MDcyMjA2NTdaFw0yNTA5MDkwMDIxNTdaMDMxMTAvBgNV BAMTKDkwODlBNEFCQkFDMEZFRjA0QjU0NjQzMzA2OUQ2OURBQkNFNDI4RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKCr6brhMeAwn4a5yMTozMDWwe JilpBWswzuVaUAGLYzS8OuNSeqqN6dWDYh0FqxcM/uudWTaq8D8LDOAGPCzkrgeQ wqet2WPon63okrK1mgpFjd+P42HXmxxIxsgCBcr72saiXzlZMdmyUoT/MtiwOuZP mANkUETgCnayKm8X5fRzePfNi+eI6ZpRhfZlFS3INfcy8EOq+dayYHwlLWirowWy nXUu141t7GrpRCSulVFZF2vWApaUGwsMYOpItS9JLE8V2RJBYYay4HZNVIwCKJat flGsSUfiUA2XJgoVDpwXZV6eTq51g9SA9iTQFQ2mnXOYM0vhK/QZcmA/JtAvAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUkImkq7rA/vBLVGQzBp1p2rzkKO8wHwYDVR0j BBgwFoAUR+lVU1XGsAeqzV1Fv0HjOD6ZFkEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzQvNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgzRTk5MTY0MS5j cmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJnLm5l dC9ycGtpL1JHbmV0LU9VL1ItbFZVMVhHc0FlcXpWMUZ2MEhqT0Q2WkZrRS5jZXIw gZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZTdkNTVmNy1lZTYwLTQwMDUt YmFkNy1iNDI4MThjZjUwZTgvNC80N0U5NTU1MzU1QzZCMDA3QUFDRDVENDVCRjQx RTMzODNFOTkxNjQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuEDf2h24/YRsd407zjfKR9mnrsaNybyW XiVpkAfr2ydXnIwgS9tQS6n3OvVFCy9Rq3pXNYQVUovoL5706ibT7r5/VOd4Nnet rZF3eLgCTabayTQFZqoJ39J807ltp+ea0A1qjX/3DXG8y/RKSgXN05dQuuIhnj/H /gdnY18T46oR6cVy5f66qrYJQAl8WiTFkg+w/P2wzGqw3nrLMt4rNQcfuvW880mm m74cPbpVevyJkdjQmiULC9uS5PM/2JCbM0DRhuLjaJKLOt6xwRD+u7Qpsfm2jymC tgf+oRDgym2viYpeIvOALH9jLdhpr91Czm1rTNBsmGtuLMuP0eV/2A== -----END CERTIFICATE-----Generated at Mon Sep 8 10:22:06 2025 by rpki-client