$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft File: 51917E722DB03952D9056BED2F6BD4BF98B78976.mft (raw, json) Hash identifier: hrVKzcn5BzRPC7E8e7m8Ywc6UYGhUXdsM/ethelKo5Q= Subject key identifier: 0F:CA:25:4F:52:03:B1:F6:9C:26:08:41:8D:A9:66:EE:0E:53:89:8D Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 2BB9F707F4FBC4148E163EDB2C3CB5D465AB8A66 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft Manifest number: 61 Signing time: Tue 22 Jul 2025 19:50:48 +0000 Manifest this update: Tue 22 Jul 2025 19:45:48 +0000 Manifest next update: Wed 23 Jul 2025 21:44:48 +0000 Files and hashes: 1: 326131343a373538303a666635343a3a2f34382d3438203d3e20323039373130.roa (hash: i7VkbN6Rb5CnHlmR8BF2dlC+Uq3PFV4wJTcaolWAu+U=) 2: 326131343a373538303a666635313a3a2f34382d3438203d3e20323039373130.roa (hash: KcfiSDiqDvlLOqfaLqph9s6F4NvpySAcmNFiwDriyms=) 3: 326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa (hash: 5weylF9E+kZUqdJn7nMGLccAIkWjUNuo5MqarqyfkO8=) 4: 326131343a373538303a666635323a3a2f34382d3438203d3e20323039373130.roa (hash: vs66PWFM6L/hirNyhIXTRaz65c001j+IhkCdp8VdfS4=) 5: 51917E722DB03952D9056BED2F6BD4BF98B78976.crl (hash: zJ3NXT88LzhUm3sC0M1wDPVp3OI13u0g062co8CjwWg=) 6: 326131343a373538303a3530303a3a2f34302d3430203d3e20323039373130.roa (hash: UtWLjV2JD6X8emwUC9bu8RyXGCD7bzymrTBVIEkaVv8=) 7: 326131343a373538303a666635333a3a2f34382d3438203d3e20323039373130.roa (hash: UpFVw7x1NBf/Uix4G0zJEj+QV4riL3tEIjso5GywhOU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 21:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b9:f7:07:f4:fb:c4:14:8e:16:3e:db:2c:3c:b5:d4:65:ab:8a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Jul 22 19:45:48 2025 GMT Not After : Jul 23 21:44:48 2025 GMT Subject: CN=0FCA254F5203B1F69C2608418DA966EE0E53898D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:62:73:c5:e0:94:32:bf:15:44:ae:8c:a3:cc: ec:5f:e6:8f:89:98:65:c6:51:ce:ae:28:9d:c3:76: ce:60:a3:64:00:5c:59:f5:ba:d8:cd:c9:c8:58:0c: 10:d4:1d:dd:c2:66:29:04:03:8e:9a:9f:2d:05:a1: b6:4f:1d:c5:dc:fe:2e:da:d0:da:76:58:0f:3a:a5: 29:8a:e9:6c:35:66:0b:3f:c6:90:40:83:d5:51:3e: 5f:ee:49:fe:f7:4a:36:47:ca:5f:ac:e9:96:94:21: 29:76:08:ad:68:f4:3e:b3:4a:3c:b7:32:f1:d9:7c: 2b:d4:cc:2b:f2:11:7b:f5:df:f6:dc:98:1b:ab:4f: 65:8e:9f:10:ae:05:70:86:08:46:3c:a7:d3:61:a7: ff:bc:49:56:dc:f6:64:66:e7:52:ed:33:29:4d:d9: 30:06:96:01:0a:a4:9a:04:fd:d3:07:1a:f4:9c:33: 06:04:a4:5e:5b:e3:9c:34:4a:d3:09:da:56:df:47: ff:98:57:a8:d1:62:ca:f3:54:fd:35:70:5c:80:18: 3e:51:8e:83:d3:bc:71:1f:ee:c9:1a:b0:cc:24:bf: 6b:2d:fe:ea:c8:02:09:3f:9e:e7:c1:9b:c4:2e:25: 38:a4:f7:55:9d:ba:fe:69:9c:04:db:06:88:ac:55: 05:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CA:25:4F:52:03:B1:F6:9C:26:08:41:8D:A9:66:EE:0E:53:89:8D X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e5:23:b0:9f:1b:50:d1:6d:d0:9c:ec:f1:ca:18:27:b4:1c: fa:dc:9c:51:eb:70:3f:e0:8c:0e:5e:54:10:e7:f9:42:73:76: 25:f3:4c:cc:3e:02:9a:5f:fe:ed:17:c2:d2:f7:d4:f4:c1:4c: 69:68:50:9c:c2:5f:ed:34:d4:13:11:76:5f:71:31:85:c2:83: e8:ad:b5:2b:82:39:f4:77:90:be:2a:1a:8c:5d:b0:51:fb:34: 3f:79:b9:84:ee:56:c1:1b:c6:08:78:72:1f:5c:2f:f2:0a:67: 6b:1d:0b:26:1e:ff:55:5d:7f:64:72:20:41:b0:78:ba:88:4f: b1:13:48:87:3c:25:ec:ed:bb:f3:20:03:d4:ca:fa:fa:87:7f: c0:0f:f8:9c:5b:d5:0f:86:46:9d:56:6b:4b:5f:14:24:5a:c0: d4:46:c0:13:89:52:5e:51:1d:45:c3:30:32:f1:1b:d7:f1:0b: d1:80:68:c6:4a:2a:d5:31:8e:2a:78:b9:69:c1:77:1b:66:eb: 84:6b:c0:60:b5:ec:d3:58:f8:76:f7:38:b9:25:c6:66:22:17: 52:78:03:7a:91:b0:bd:f7:d4:26:9b:b4:ec:84:63:4f:17:fc: 52:2b:a8:2c:3a:a9:29:f4:42:76:e6:29:86:79:07:02:e0:70: f9:10:5b:c8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUK7n3B/T7xBSOFj7bLDy11GWrimYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNTA3MjIxOTQ1NDhaFw0yNTA3MjMyMTQ0NDhaMDMxMTAvBgNV BAMTKDBGQ0EyNTRGNTIwM0IxRjY5QzI2MDg0MThEQTk2NkVFMEU1Mzg5OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmYnPF4JQyvxVEroyjzOxf5o+J mGXGUc6uKJ3Dds5go2QAXFn1utjNychYDBDUHd3CZikEA46any0FobZPHcXc/i7a 0Np2WA86pSmK6Ww1Zgs/xpBAg9VRPl/uSf73SjZHyl+s6ZaUISl2CK1o9D6zSjy3 MvHZfCvUzCvyEXv13/bcmBurT2WOnxCuBXCGCEY8p9Nhp/+8SVbc9mRm51LtMylN 2TAGlgEKpJoE/dMHGvScMwYEpF5b45w0StMJ2lbfR/+YV6jRYsrzVP01cFyAGD5R joPTvHEf7skasMwkv2st/urIAgk/nufBm8QuJTik91Wduv5pnATbBoisVQXlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUD8olT1IDsfacJghBjalm7g5TiY0wHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzllY2FjNDEzLTRjZDItNDcyYy1iMDFlLTc0NDU4Y2VhMzg2Yy8wLzUxOTE3RTcy MkRCMDM5NTJEOTA1NkJFRDJGNkJENEJGOThCNzg5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAq5SOw nxtQ0W3QnOzxyhgntBz63JxR63A/4IwOXlQQ5/lCc3Yl80zMPgKaX/7tF8LS99T0 wUxpaFCcwl/tNNQTEXZfcTGFwoPorbUrgjn0d5C+KhqMXbBR+zQ/ebmE7lbBG8YI eHIfXC/yCmdrHQsmHv9VXX9kciBBsHi6iE+xE0iHPCXs7bvzIAPUyvr6h3/AD/ic W9UPhkadVmtLXxQkWsDURsATiVJeUR1FwzAy8RvX8QvRgGjGSirVMY4qeLlpwXcb ZuuEa8BgtezTWPh29zi5JcZmIhdSeAN6kbC999Qmm7TshGNPF/xSK6gsOqkp9EJ2 5imGeQcC4HD5EFvI -----END CERTIFICATE-----Generated at Wed Jul 23 11:16:09 2025 by rpki-client