$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.mft File: 5BE6F0781C3A7A74F993C53DC07FC424ED911592.mft (raw, json) Hash identifier: bfNFJWgbH13eENQ+LBYb6AjtikAXkcr2eZ9+8p1rAL4= Subject key identifier: DE:E3:3F:61:42:A4:DF:BA:A2:83:C5:4A:10:B5:DC:D3:95:1C:51:D6 Authority key identifier: 5B:E6:F0:78:1C:3A:7A:74:F9:93:C5:3D:C0:7F:C4:24:ED:91:15:92 Certificate issuer: /CN=5BE6F0781C3A7A74F993C53DC07FC424ED911592 Certificate serial: 2DAB171B865003BA284A012A624A887C4181E282 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.mft Manifest number: 05 Signing time: Sat 07 Jun 2025 07:27:02 +0000 Manifest this update: Sat 07 Jun 2025 07:22:02 +0000 Manifest next update: Sun 08 Jun 2025 09:09:02 +0000 Files and hashes: 1: 326131343a373538303a3330303a3a2f34382d3438203d3e20323037343237.roa (hash: G6hVCSFBjLf5sSVJuWclRF4hwJVUKmhh7yFq5RsJRpo=) 2: 326131343a373538303a666666323a3a2f34382d3438203d3e20323037343237.roa (hash: 9gAMmES5n2Z5a0zD2q3WOv8FxdvupYnl9n7vw0+tj9M=) 3: 326131343a373538303a3330313a3a2f34382d3438203d3e20323037343237.roa (hash: jYfB7MgE41V7Cz7ve55LcQtaDn44bK16KlxCccTU4QU=) 4: 5BE6F0781C3A7A74F993C53DC07FC424ED911592.crl (hash: BYlmUbi5tJDyylEzPl2FkuwBse97W9u/v0dRiNZS094=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.crl rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 09:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ab:17:1b:86:50:03:ba:28:4a:01:2a:62:4a:88:7c:41:81:e2:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BE6F0781C3A7A74F993C53DC07FC424ED911592 Validity Not Before: Jun 7 07:22:02 2025 GMT Not After : Jun 8 09:09:02 2025 GMT Subject: CN=DEE33F6142A4DFBAA283C54A10B5DCD3951C51D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dd:ab:33:ce:5c:2f:c4:7c:cb:f0:24:17:cf: cb:b4:9a:20:50:09:1b:39:e8:9e:69:aa:5d:7d:60: ef:69:4f:52:e0:bc:b9:a7:72:99:bf:1d:97:72:a1: 14:e9:93:80:74:d7:e0:b5:f1:7d:71:29:a2:2b:26: 8b:ff:55:70:af:9b:96:3e:39:8f:b8:79:49:d4:81: b9:a1:b8:ac:8a:87:af:9f:c8:28:5e:0b:80:66:5d: 36:a1:98:32:44:f3:29:ee:b6:e5:91:d7:e9:42:26: 4b:9c:e0:df:da:82:79:c7:f8:04:31:34:16:56:88: e5:8e:c8:65:87:9b:6c:03:71:65:76:a1:87:20:48: b6:63:86:61:b9:ea:19:c6:2e:6a:df:a5:15:26:41: 77:d5:36:1b:54:60:74:c4:1c:b8:58:fa:1c:97:21: a4:52:88:32:c9:ac:bd:bc:74:6e:be:7c:26:65:14: 83:07:94:83:aa:7a:2d:54:28:59:29:77:6e:75:4f: e6:61:65:93:28:28:5f:5b:1a:8e:a1:6a:65:a6:57: 54:bd:c7:55:9e:0b:90:8b:60:3c:09:da:c6:e0:d5: 46:4a:4c:9c:43:03:c1:c1:9e:fa:68:32:96:d9:ca: ea:bb:02:fa:76:20:27:71:33:8a:7e:fd:8a:96:7a: eb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E3:3F:61:42:A4:DF:BA:A2:83:C5:4A:10:B5:DC:D3:95:1C:51:D6 X509v3 Authority Key Identifier: keyid:5B:E6:F0:78:1C:3A:7A:74:F9:93:C5:3D:C0:7F:C4:24:ED:91:15:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5a:6b:d7:39:f5:88:23:65:4e:88:ef:c1:e6:01:85:b1:df: f1:7b:52:2c:01:b5:52:c3:e7:a4:85:31:06:b4:6d:27:ef:7a: 43:80:dc:fa:fd:54:92:ef:29:93:83:a1:48:a4:80:e5:29:b9: ea:2a:7a:9b:37:bc:86:9b:8c:33:4a:5e:2e:72:30:c8:33:8a: c3:97:27:e6:9c:2e:ff:6c:fa:de:ba:b1:2e:48:64:e6:fa:f1: 42:11:fa:b7:f3:eb:67:b0:1f:8a:f2:c4:dc:fc:09:5f:c0:2d: d0:69:dc:fc:09:80:70:e7:6e:5f:e1:15:b5:57:37:37:ed:d3: e7:07:ca:79:b7:6d:76:7e:c1:53:c0:c0:50:85:05:9b:4f:5a: 1f:af:4a:d0:4a:c0:d2:22:21:48:1f:5d:68:15:ee:6a:ac:c2: 2e:05:09:ea:39:5f:10:cf:63:9b:80:91:81:79:98:8a:df:3a: 52:0e:80:98:2e:e5:91:5e:63:cf:25:22:d2:b3:43:11:c7:e9: 64:39:5a:f4:ce:1e:2d:96:6f:e5:4d:3d:4e:5c:68:5c:01:ae: a2:7c:ee:5f:09:6c:8a:e5:55:22:6f:0d:96:f2:90:18:1c:09: 97:8e:6d:70:8f:bc:be:c2:1d:c4:08:c8:81:55:0a:21:03:6c: c2:74:8b:ac -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULasXG4ZQA7ooSgEqYkqIfEGB4oIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJFNkYwNzgxQzNBN0E3NEY5OTNDNTNEQzA3RkM0MjRF RDkxMTU5MjAeFw0yNTA2MDcwNzIyMDJaFw0yNTA2MDgwOTA5MDJaMDMxMTAvBgNV BAMTKERFRTMzRjYxNDJBNERGQkFBMjgzQzU0QTEwQjVEQ0QzOTUxQzUxRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX3aszzlwvxHzL8CQXz8u0miBQ CRs56J5pql19YO9pT1LgvLmncpm/HZdyoRTpk4B01+C18X1xKaIrJov/VXCvm5Y+ OY+4eUnUgbmhuKyKh6+fyCheC4BmXTahmDJE8ynutuWR1+lCJkuc4N/agnnH+AQx NBZWiOWOyGWHm2wDcWV2oYcgSLZjhmG56hnGLmrfpRUmQXfVNhtUYHTEHLhY+hyX IaRSiDLJrL28dG6+fCZlFIMHlIOqei1UKFkpd251T+ZhZZMoKF9bGo6hamWmV1S9 x1WeC5CLYDwJ2sbg1UZKTJxDA8HBnvpoMpbZyuq7Avp2ICdxM4p+/YqWeuvzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU3uM/YUKk37qig8VKELXc05UcUdYwHwYDVR0j BBgwFoAUW+bweBw6enT5k8U9wH/EJO2RFZIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDJhZWQwYTQtM2U3Ni00ODMwLWJiYjQtMWNiYzIwNDM1 MmIzLzAvNUJFNkYwNzgxQzNBN0E3NEY5OTNDNTNEQzA3RkM0MjRFRDkxMTU5Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81QkU2RjA3ODFDM0E3QTc0Rjk5M0M1M0RD MDdGQzQyNEVEOTExNTkyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAyYWVkMGE0LTNlNzYtNDgzMC1iYmI0LTFjYmMyMDQzNTJiMy8wLzVCRTZGMDc4 MUMzQTdBNzRGOTkzQzUzREMwN0ZDNDI0RUQ5MTE1OTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+WmvX OfWII2VOiO/B5gGFsd/xe1IsAbVSw+ekhTEGtG0n73pDgNz6/VSS7ymTg6FIpIDl KbnqKnqbN7yGm4wzSl4ucjDIM4rDlyfmnC7/bPreurEuSGTm+vFCEfq38+tnsB+K 8sTc/AlfwC3Qadz8CYBw525f4RW1Vzc37dPnB8p5t212fsFTwMBQhQWbT1ofr0rQ SsDSIiFIH11oFe5qrMIuBQnqOV8Qz2ObgJGBeZiK3zpSDoCYLuWRXmPPJSLSs0MR x+lkOVr0zh4tlm/lTT1OXGhcAa6ifO5fCWyK5VUibw2W8pAYHAmXjm1wj7y+wh3E CMiBVQohA2zCdIus -----END CERTIFICATE-----Generated at Sun Jun 8 00:35:51 2025 by rpki-client