$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft File: 5E5179BB1757068D7028510FEEB1177AA7CC8818.mft (raw, json) Hash identifier: XirSBbIE+4StPLBRHePzaee1EAod0mxvljHHJemWaos= Subject key identifier: CD:49:58:42:18:61:40:E6:5D:EF:D6:CC:CB:69:6A:53:0D:2E:BA:97 Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18 Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818 Certificate serial: 2DA3B244CEDBDD961CE7E345DDF1494293677B5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft Manifest number: 04E8 Signing time: Wed 23 Jul 2025 21:22:05 +0000 Manifest this update: Wed 23 Jul 2025 21:17:05 +0000 Manifest next update: Fri 25 Jul 2025 01:04:05 +0000 Files and hashes: 1: 5E5179BB1757068D7028510FEEB1177AA7CC8818.crl (hash: c5x4T8aG4EActtVFSnDlsEdT6Y55ql4gfQrErKaHghg=) 2: 38332e3135302e3231362e302f32322d3234203d3e203631333137.roa (hash: 57aAYCaE5TgSVJlVlCOXKPFo7D7BRt8yiBp9fnzIrpI=) 3: 38332e3135302e3231382e302f32342d3234203d3e20313939343135.roa (hash: yCFgEcnTSAhMVf29HMHp04B1k4DqC3mlqJPDdmg8wFQ=) 4: 38332e3135302e3231392e302f32342d3234203d3e203533333430.roa (hash: woOa8XrslJUNd/zhwfkw+8SfH4VdemvQujuqkpyzwss=) 5: 38332e3135302e3231372e302f32342d3234203d3e20323132353034.roa (hash: k8RY7QTEncAN/MOxUGAuMRRlssrdtl7ahwCsdlVrRY0=) 6: 38332e3135302e3231362e302f32342d3234203d3e203630353538.roa (hash: JKcEyzkTVqyttDFURXSxmaVQ+BAZuAcc4gW4DE+3N8E=) 7: 3139322e3130392e31302e302f32342d3234203d3e203239383032.roa (hash: zPOJooX1SbIfEdoUfLmfFj+bOWKjqS7oznOqpFqjTp4=) 8: 3139322e3130392e31312e302f32342d3234203d3e203136323736.roa (hash: qRWEBAMqR9/oXRv8A+nfXFduPkpHZgx8k4TEVcf/LOk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 23:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a3:b2:44:ce:db:dd:96:1c:e7:e3:45:dd:f1:49:42:93:67:7b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818 Validity Not Before: Jul 23 21:17:05 2025 GMT Not After : Jul 25 01:04:05 2025 GMT Subject: CN=CD495842186140E65DEFD6CCCB696A530D2EBA97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c4:57:eb:a1:44:d6:2b:15:3b:b3:a2:29:36: 28:d0:d8:10:9b:92:bd:6b:d3:eb:89:86:33:85:0a: 2c:be:c5:3a:03:56:e8:34:5a:9b:ae:b4:c9:33:64: 1c:d4:4c:05:0c:40:b2:c8:5e:61:43:84:40:53:ba: 30:a5:ac:3c:5a:66:2f:80:b3:71:eb:c7:c0:bc:80: 65:54:64:df:85:be:5d:2c:cc:42:34:8c:40:a4:23: b0:19:71:3d:8e:77:56:e1:04:ca:c1:04:bf:2c:b1: cd:fa:a9:eb:d1:e7:ee:ca:85:e2:ef:8b:0e:3a:a5: 30:a5:31:aa:00:a3:30:2d:e5:bd:ff:72:ef:03:b4: d4:7e:63:36:52:df:49:0e:05:02:6d:a3:ac:c5:f2: 5f:98:04:2e:a0:0a:b9:f1:76:c3:41:27:71:d6:24: 70:6e:93:fd:fb:78:f9:f2:fd:37:a6:9f:b9:eb:3f: e3:9f:aa:dc:df:82:f4:a1:62:e6:f9:9f:f8:d2:55: 7f:8e:ba:c2:c1:71:20:f1:17:a3:5f:a6:d9:d4:90: dd:65:27:0c:79:81:35:2a:1c:a0:71:76:18:df:d1: 4a:03:d9:a1:bd:95:15:5d:d3:6d:1c:f8:bf:2f:6a: 51:60:8a:a4:e1:d9:79:67:39:33:90:29:75:b9:ef: d3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:49:58:42:18:61:40:E6:5D:EF:D6:CC:CB:69:6A:53:0D:2E:BA:97 X509v3 Authority Key Identifier: keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:54:95:fa:56:c3:c6:dc:89:c4:84:4b:b6:cd:de:39:d4:d1: 2d:5b:15:34:1d:26:f1:99:07:8c:c0:6a:6d:f4:e5:a2:17:75: 24:41:04:92:8b:24:73:70:e8:24:03:f5:2f:4c:b5:cf:97:2b: 45:29:a4:31:37:04:23:eb:db:85:0e:48:78:83:33:3f:03:04: ea:3d:a1:69:56:7f:4c:d1:e7:ca:83:64:83:73:74:62:6f:84: ec:18:df:34:17:b6:f0:6c:b2:b3:c6:b0:09:4e:a3:79:98:62: 77:5c:16:f8:73:c5:2c:06:af:54:52:2a:f7:9d:76:2e:6e:fe: df:01:9e:75:0b:ed:b6:9c:e3:52:2e:d0:ac:53:9d:e1:1c:58: 92:d9:23:95:e1:86:d6:52:b5:0d:73:be:f3:9c:85:cc:f0:e9: df:4b:20:5f:f4:55:b2:57:77:e3:dc:1a:59:de:27:df:c5:e5: f7:29:b0:6e:7f:3f:b6:03:de:b8:49:99:5f:9c:b8:a7:76:eb: e4:59:6c:a9:28:ea:28:85:9b:8d:b8:02:84:f1:a0:70:19:84: fc:77:6d:2c:73:b3:33:d5:a9:2e:e5:53:38:7d:a9:54:b0:52: 7a:27:9a:d6:9c:2a:0f:e6:39:c3:20:dd:44:f0:32:ae:6c:6f: f0:29:98:a2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULaOyRM7b3ZYc5+NF3fFJQpNne1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWU1MTc5YmIxNzU3MDY4ZDcwMjg1MTBmZWViMTE3N2Fh N2NjODgxODAeFw0yNTA3MjMyMTE3MDVaFw0yNTA3MjUwMTA0MDVaMDMxMTAvBgNV BAMTKENENDk1ODQyMTg2MTQwRTY1REVGRDZDQ0NCNjk2QTUzMEQyRUJBOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUxFfroUTWKxU7s6IpNijQ2BCb kr1r0+uJhjOFCiy+xToDVug0WpuutMkzZBzUTAUMQLLIXmFDhEBTujClrDxaZi+A s3Hrx8C8gGVUZN+Fvl0szEI0jECkI7AZcT2Od1bhBMrBBL8ssc36qevR5+7KheLv iw46pTClMaoAozAt5b3/cu8DtNR+YzZS30kOBQJto6zF8l+YBC6gCrnxdsNBJ3HW JHBuk/37ePny/Temn7nrP+OfqtzfgvShYub5n/jSVX+OusLBcSDxF6NfptnUkN1l Jwx5gTUqHKBxdhjf0UoD2aG9lRVd020c+L8valFgiqTh2XlnOTOQKXW579NrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzUlYQhhhQOZd79bMy2lqUw0uupcwHwYDVR0j BBgwFoAUXlF5uxdXBo1wKFEP7rEXeqfMiBgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODNlNDc1N2YtZDM3Zi00ZmQ2LWE2OWItZDc0YmRkNmI4 N2RjLzAvNUU1MTc5QkIxNzU3MDY4RDcwMjg1MTBGRUVCMTE3N0FBN0NDODgxOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hsRjV1eGRYQm8xd0tGRVA3ckVYZXFm TWlCZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84M2U0NzU3Zi1k MzdmLTRmZDYtYTY5Yi1kNzRiZGQ2Yjg3ZGMvMC81RTUxNzlCQjE3NTcwNjhENzAy ODUxMEZFRUIxMTc3QUE3Q0M4ODE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1SV+lbDxtyJxIRLts3e OdTRLVsVNB0m8ZkHjMBqbfTlohd1JEEEkoskc3DoJAP1L0y1z5crRSmkMTcEI+vb hQ5IeIMzPwME6j2haVZ/TNHnyoNkg3N0Ym+E7BjfNBe28Gyys8awCU6jeZhid1wW +HPFLAavVFIq9512Lm7+3wGedQvttpzjUi7QrFOd4RxYktkjleGG1lK1DXO+85yF zPDp30sgX/RVsld349waWd4n38Xl9ymwbn8/tgPeuEmZX5y4p3br5FlsqSjqKIWb jbgChPGgcBmE/HdtLHOzM9WpLuVTOH2pVLBSeiea1pwqD+Y5wyDdRPAyrmxv8CmY og== -----END CERTIFICATE-----Generated at Thu Jul 24 08:13:45 2025 by rpki-client