$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.mft File: 966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.mft (raw, json) Hash identifier: NdOwc/DNLEZiu/ioARjRRU5XC+zHicQP7b/Hvu00esg= Subject key identifier: D4:35:12:74:70:1E:AD:84:8D:5C:14:D3:63:63:C6:7F:38:DB:91:73 Authority key identifier: 96:64:27:86:9F:CA:D1:5E:CB:E4:F1:C7:7A:3F:B3:C6:8B:D1:F9:17 Certificate issuer: /CN=966427869FCAD15ECBE4F1C77A3FB3C68BD1F917 Certificate serial: 416DC32CD0CD465C8C4020F9A392E54E80E5655F Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.mft Manifest number: 30 Signing time: Mon 21 Jul 2025 16:30:01 +0000 Manifest this update: Mon 21 Jul 2025 16:25:01 +0000 Manifest next update: Tue 22 Jul 2025 17:08:01 +0000 Files and hashes: 1: 966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.crl (hash: c1NsenSRHhuNxu6QjjamkaEgtGXth0MzZMnY6dM6P1s=) 2: 326130623a346530373a6138303a3a2f34382d3438203d3e20323133343133.roa (hash: K5QPPi4Yfjuh9BxUtSBKx+Yx6emt2s39uotzqzd2HMk=) 3: 326130623a346530373a6130303a3a2f34302d3438203d3e20323036363034.roa (hash: QCnIKEpXKZe1AF5x39w6gWUBez/vufMOaY+BXKXTWAg=) 4: 326130623a346530373a6138323a3a2f34382d3438203d3e20323133343133.roa (hash: rvOnZK77CBYF4grHGBuz0EhJZokSzxuINy2qRMybAKE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.crl rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Jul 2025 17:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:6d:c3:2c:d0:cd:46:5c:8c:40:20:f9:a3:92:e5:4e:80:e5:65:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966427869FCAD15ECBE4F1C77A3FB3C68BD1F917 Validity Not Before: Jul 21 16:25:01 2025 GMT Not After : Jul 22 17:08:01 2025 GMT Subject: CN=D4351274701EAD848D5C14D36363C67F38DB9173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:35:4d:fc:54:b6:78:bb:84:c5:c0:d0:fe:01: ce:30:85:7e:23:28:e8:2b:a5:93:7e:4f:b7:61:4a: b7:ae:3b:70:9f:38:59:49:21:6f:52:c4:5a:b7:6c: d0:d0:e2:5d:8f:ca:e2:95:44:c6:1c:e6:95:e5:82: 77:59:0f:64:0a:10:3a:9a:ea:3d:3c:90:3e:74:12: da:bf:a8:e3:45:3e:1f:2f:a5:90:93:15:5e:85:57: 27:2e:f8:a0:74:bd:10:a9:c5:15:52:08:91:1e:aa: 17:66:3b:6a:04:be:3a:4e:e2:92:d4:14:0a:fb:bd: 26:f1:3e:28:dc:c1:bf:ba:27:9a:35:7a:f6:a9:0b: 1e:88:b2:a6:ff:b3:6b:3c:a4:fe:cf:1d:cb:06:4b: 64:f0:a8:54:12:3f:17:81:19:15:04:f0:b4:0e:7c: 0b:9e:a0:dc:69:25:ca:bf:a8:c2:c2:5d:82:54:83: 21:2a:bf:1e:b0:b0:d3:6e:ce:aa:cc:de:27:99:e1: 07:51:7a:b6:80:6b:05:24:34:17:15:59:e3:46:bc: d1:d1:84:53:97:c0:db:a3:bd:bd:06:2e:9c:77:16: a7:5c:94:41:81:94:25:9a:0f:eb:fb:b7:47:d2:24: f4:e5:52:c0:1d:49:8c:fd:33:4e:4b:4c:78:1a:5a: cf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:35:12:74:70:1E:AD:84:8D:5C:14:D3:63:63:C6:7F:38:DB:91:73 X509v3 Authority Key Identifier: keyid:96:64:27:86:9F:CA:D1:5E:CB:E4:F1:C7:7A:3F:B3:C6:8B:D1:F9:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:28:a3:37:f1:a6:95:5d:99:ff:93:2c:18:90:0b:b7:d3:ec: de:87:58:ad:9d:b3:13:86:5e:22:b7:38:3f:c1:32:bf:1e:51: 75:df:8d:17:95:e7:7e:51:3c:fd:1f:08:72:b3:0f:fc:e4:e0: 5d:d8:e0:7f:a2:ff:eb:99:c3:87:49:24:e6:04:65:2c:2f:36: 1d:e7:cf:fa:7c:74:ed:33:da:63:7d:5b:45:ae:64:b5:45:e0: 07:a7:1e:81:c4:ef:e5:ca:b8:c9:1a:91:a4:ec:f8:24:73:f8: ee:65:d6:a1:15:1e:27:a4:b1:69:5b:d2:2a:9b:e1:e2:ab:ca: 4a:81:e1:70:f9:f3:7e:df:3e:46:3d:01:d3:78:e7:57:86:65: d2:94:ca:2d:ca:f4:8e:7f:2c:75:23:77:f8:ad:22:af:e2:17: 4a:e2:da:44:e2:da:31:fa:60:85:1a:7c:f8:ae:b0:97:3e:aa: 55:e0:2f:32:b0:3e:3f:c4:45:18:be:bd:ec:0b:f5:b2:96:92: 10:ea:2c:88:6b:50:07:48:55:a3:ac:6a:14:24:8a:90:56:23: a1:e6:45:0c:de:1d:14:df:38:23:3e:60:cc:01:dd:96:61:70: 05:f0:25:8f:4d:cb:b9:de:44:e0:ac:7f:88:a0:0b:ca:82:a2: 75:aa:e2:a6 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUQW3DLNDNRlyMQCD5o5LlToDlZV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY2NDI3ODY5RkNBRDE1RUNCRTRGMUM3N0EzRkIzQzY4 QkQxRjkxNzAeFw0yNTA3MjExNjI1MDFaFw0yNTA3MjIxNzA4MDFaMDMxMTAvBgNV BAMTKEQ0MzUxMjc0NzAxRUFEODQ4RDVDMTREMzYzNjNDNjdGMzhEQjkxNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUNU38VLZ4u4TFwND+Ac4whX4j KOgrpZN+T7dhSreuO3CfOFlJIW9SxFq3bNDQ4l2PyuKVRMYc5pXlgndZD2QKEDqa 6j08kD50Etq/qONFPh8vpZCTFV6FVycu+KB0vRCpxRVSCJEeqhdmO2oEvjpO4pLU FAr7vSbxPijcwb+6J5o1evapCx6Isqb/s2s8pP7PHcsGS2TwqFQSPxeBGRUE8LQO fAueoNxpJcq/qMLCXYJUgyEqvx6wsNNuzqrM3ieZ4QdReraAawUkNBcVWeNGvNHR hFOXwNujvb0GLpx3FqdclEGBlCWaD+v7t0fSJPTlUsAdSYz9M05LTHgaWs9jAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU1DUSdHAerYSNXBTTY2PGfzjbkXMwHwYDVR0j BBgwFoAUlmQnhp/K0V7L5PHHej+zxovR+RcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM3ZDI1MTItZTRiZi00MTFiLWIwMGEtZTc5ZTNhMzc4 YjQ2LzEvOTY2NDI3ODY5RkNBRDE1RUNCRTRGMUM3N0EzRkIzQzY4QkQxRjkxNy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvOTY2NDI3ODY5RkNBRDE1RUNCRTRGMUM3N0EzRkIzQzY4QkQx RjkxNy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YzdkMjUxMi1l NGJmLTQxMWItYjAwYS1lNzllM2EzNzhiNDYvMS85NjY0Mjc4NjlGQ0FEMTVFQ0JF NEYxQzc3QTNGQjNDNjhCRDFGOTE3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjyijN/GmlV2Z/5MsGJAL t9Ps3odYrZ2zE4ZeIrc4P8Eyvx5Rdd+NF5XnflE8/R8IcrMP/OTgXdjgf6L/65nD h0kk5gRlLC82HefP+nx07TPaY31bRa5ktUXgB6cegcTv5cq4yRqRpOz4JHP47mXW oRUeJ6SxaVvSKpvh4qvKSoHhcPnzft8+Rj0B03jnV4Zl0pTKLcr0jn8sdSN3+K0i r+IXSuLaROLaMfpghRp8+K6wlz6qVeAvMrA+P8RFGL697Av1spaSEOosiGtQB0hV o6xqFCSKkFYjoeZFDN4dFN84Iz5gzAHdlmFwBfAlj03Lud5E4Kx/iKALyoKidari pg== -----END CERTIFICATE-----Generated at Tue Jul 22 00:40:00 2025 by rpki-client