$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json) Hash identifier: 2Auc6zbTBeYS+QttDyu5E9JySIvJ8kr861kSSR1l4ws= Subject key identifier: D6:E1:B3:6F:E1:E1:A7:F5:DD:19:41:4D:DE:66:73:EF:72:C2:66:E7 Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Certificate serial: 1E1DF3EC1AC1D813258C1B0129DB271F1C2B0D21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft Manifest number: 04CF Signing time: Thu 24 Jul 2025 01:37:05 +0000 Manifest this update: Thu 24 Jul 2025 01:32:05 +0000 Manifest next update: Fri 25 Jul 2025 02:53:05 +0000 Files and hashes: 1: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: Z4v3j/eCwLpgS1LPi83r4rcMBKym5WNGfkgU8reMda0=) 2: 3134362e3234372e35392e302f32342d3234203d3e203234383531.roa (hash: cISB3c/lX6ECxkwGaCM313qUlrkmfGXNHg9Sn5Duu/E=) 3: 3134362e3234372e35312e302f32342d3234203d3e203234383531.roa (hash: zRn95fZoa98Dxgk18rTQZPg3Vz861tTnSVUdcy0yTb0=) 4: 3134362e3234372e36322e302f32342d3234203d3e203234383531.roa (hash: 3irJhAGcE48vEZNOxKTwKsy4d69RVyIL6ZEClAmlLA0=) 5: 3134362e3234372e34382e302f32332d3234203d3e203234383531.roa (hash: CYrx2Q8+pBHAyk1lGd5Mg9MkvR7v5zfpX8Vn/ABu+6Q=) 6: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: y4OGbSGooI8V9euRtHx6jpjRwWGZstdSARXhTQ70Yxg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 23:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:1d:f3:ec:1a:c1:d8:13:25:8c:1b:01:29:db:27:1f:1c:2b:0d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Validity Not Before: Jul 24 01:32:05 2025 GMT Not After : Jul 25 02:53:05 2025 GMT Subject: CN=D6E1B36FE1E1A7F5DD19414DDE6673EF72C266E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:93:7e:7f:cf:54:40:fd:85:2d:cd:6c:f6:7f: 48:d7:96:85:ec:81:1f:22:b5:73:e2:21:5a:98:3b: 71:a1:61:28:3d:6e:d0:f4:9c:29:59:2c:dd:91:5e: 24:b1:ed:1b:6d:c8:f4:76:d7:41:f8:2b:55:37:54: 03:e7:e9:f4:63:8f:b8:25:ad:4e:c9:39:ba:64:1c: 5b:c2:9c:79:10:b3:5e:49:c1:e1:b9:96:e4:80:a5: e8:be:17:10:8d:4f:0d:5b:b1:5d:bc:5b:57:c9:e3: 02:de:a0:1f:dd:3a:02:43:69:14:60:69:7d:57:78: 94:a2:c0:7d:d0:fb:17:14:06:5c:d8:c1:cd:50:09: 1b:8c:b6:5f:bc:55:c3:cc:4f:39:5b:3e:7d:36:79: 16:da:6f:91:33:9a:6a:e7:df:12:21:15:66:14:07: 79:db:38:39:7b:e3:69:ca:b8:ee:5b:97:7f:fc:aa: 99:de:48:f7:42:92:9a:1e:6a:ba:d5:55:1d:38:05: 1b:4d:06:23:04:09:6d:f3:60:72:a4:5e:a8:d6:39: 26:69:8c:e1:3e:16:81:36:07:fd:db:44:bc:6e:09: 2e:e5:45:61:a8:7d:af:1f:df:f1:9e:73:c8:7b:b9: 91:82:92:88:a1:bc:c6:46:6a:98:bc:0b:26:6d:95: b9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E1:B3:6F:E1:E1:A7:F5:DD:19:41:4D:DE:66:73:EF:72:C2:66:E7 X509v3 Authority Key Identifier: keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:61:72:47:68:9d:d3:a1:af:21:79:ea:d9:1b:c2:88:b1:18: 84:b0:8c:0f:c1:3c:1c:25:71:bd:e7:53:08:47:42:c9:48:b5: f2:a1:29:30:0c:da:68:aa:07:f0:fb:fb:e2:50:de:53:8b:91: 37:42:4d:e5:8c:42:6b:5a:d7:13:b8:7a:a1:e6:ce:9b:b8:24: a8:46:f9:2e:2b:42:d9:4b:8e:b5:20:3b:8e:27:77:79:84:86: 62:fa:81:ee:c2:54:38:53:92:d7:c8:e6:f9:9b:f1:b8:93:2b: 43:ba:9e:e3:cc:8c:15:53:47:7e:f4:62:8f:e4:07:87:5a:7c: 63:ff:6a:bb:1a:d5:e3:6b:ba:e2:f6:cb:46:d0:1f:aa:1e:8b: c6:38:83:b0:e1:b7:ae:3f:0b:cc:98:d3:dd:6b:9e:a1:c9:85: 55:12:a4:62:99:e8:5c:83:73:3d:03:6f:1d:a7:bf:d4:24:7f: e4:c9:19:1c:56:9d:24:77:d3:46:64:64:e0:a5:44:9d:64:a5: c9:91:10:38:97:6e:ef:10:69:99:e5:6b:e6:8d:84:51:9a:ee: 09:7e:07:86:a1:4d:e0:73:0d:5c:77:ad:10:d8:4f:31:34:50: f2:8c:ff:05:e4:ef:68:a5:33:0a:f7:d8:d9:e6:67:1a:c2:d5: 87:4f:21:5e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHh3z7BrB2BMljBsBKdsnHxwrDSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTZjNTA5YmE0OGU1YjUwNDk0NTcyZTA1YzQ1YzU4ZTdl MTZkODdmYjAeFw0yNTA3MjQwMTMyMDVaFw0yNTA3MjUwMjUzMDVaMDMxMTAvBgNV BAMTKEQ2RTFCMzZGRTFFMUE3RjVERDE5NDE0RERFNjY3M0VGNzJDMjY2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDok35/z1RA/YUtzWz2f0jXloXs gR8itXPiIVqYO3GhYSg9btD0nClZLN2RXiSx7RttyPR210H4K1U3VAPn6fRjj7gl rU7JObpkHFvCnHkQs15JweG5luSApei+FxCNTw1bsV28W1fJ4wLeoB/dOgJDaRRg aX1XeJSiwH3Q+xcUBlzYwc1QCRuMtl+8VcPMTzlbPn02eRbab5Ezmmrn3xIhFWYU B3nbODl742nKuO5bl3/8qpneSPdCkpoearrVVR04BRtNBiMECW3zYHKkXqjWOSZp jOE+FoE2B/3bRLxuCS7lRWGofa8f3/Gec8h7uZGCkoihvMZGapi8CyZtlblTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU1uGzb+Hhp/XdGUFN3mZz73LCZucwHwYDVR0j BBgwFoAUpsUJukjltQSUVy4FxFxY5+Fth/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYtOTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1 NWM1LzEvQTZDNTA5QkE0OEU1QjUwNDk0NTcyRTA1QzQ1QzU4RTdFMTZEODdGQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BzVUp1a2psdFFTVVZ5NEZ4RnhZNS1G dGhfcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzhiYjQ0Ni05 MWMwLTQxMzgtYTMzYS1iNDc4NjVkZTU1YzUvMS9BNkM1MDlCQTQ4RTVCNTA0OTQ1 NzJFMDVDNDVDNThFN0UxNkQ4N0ZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWFyR2id06GvIXnq2RvC iLEYhLCMD8E8HCVxvedTCEdCyUi18qEpMAzaaKoH8Pv74lDeU4uRN0JN5YxCa1rX E7h6oebOm7gkqEb5LitC2UuOtSA7jid3eYSGYvqB7sJUOFOS18jm+ZvxuJMrQ7qe 48yMFVNHfvRij+QHh1p8Y/9quxrV42u64vbLRtAfqh6LxjiDsOG3rj8LzJjT3Wue ocmFVRKkYpnoXINzPQNvHae/1CR/5MkZHFadJHfTRmRk4KVEnWSlyZEQOJdu7xBp meVr5o2EUZruCX4HhqFN4HMNXHetENhPMTRQ8oz/BeTvaKUzCvfY2eZnGsLVh08h Xg== -----END CERTIFICATE-----Generated at Thu Jul 24 04:52:44 2025 by rpki-client