$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json) Hash identifier: 7u7nHmyuMgFfNWNxHechgb+qCDe1n+3CadWgOX0DnfE= Subject key identifier: 68:AA:9A:63:AB:6B:41:BE:85:27:8C:CD:2E:B6:22:E5:A4:FC:7A:5A Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Certificate serial: 5879060630603DE412851C715E0472D79024662F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft Manifest number: 048D Signing time: Fri 06 Jun 2025 11:52:30 +0000 Manifest this update: Fri 06 Jun 2025 11:47:30 +0000 Manifest next update: Sat 07 Jun 2025 13:10:30 +0000 Files and hashes: 1: 38312e32372e39362e302f32342d3234203d3e203234383531.roa (hash: ZdZRlvPz8E9OObfHOShlKU2uuHjCBKEbQURGTOBsuE8=) 2: 3134362e3234372e35362e302f32342d3234203d3e2039333034.roa (hash: pfMwqvQ0dMhzxyI/lyxkgI3sWlDZ5/WAWZxeCzFbSBI=) 3: 3134362e3234372e35312e302f32342d3234203d3e203234383531.roa (hash: zRn95fZoa98Dxgk18rTQZPg3Vz861tTnSVUdcy0yTb0=) 4: 3134362e3234372e35342e302f32342d3234203d3e2039333034.roa (hash: u8Um+hUrP9ltA5bj6O+zAw4bjYvbw7v/SuaSfwCO5nA=) 5: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: maWE2sy32IzHFOflVFgBfl3n6RuWdf8397Da0uot4tk=) 6: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: y4OGbSGooI8V9euRtHx6jpjRwWGZstdSARXhTQ70Yxg=) 7: 3134362e3234372e36322e302f32342d3234203d3e203234383531.roa (hash: 3irJhAGcE48vEZNOxKTwKsy4d69RVyIL6ZEClAmlLA0=) 8: 3134362e3234372e35392e302f32342d3234203d3e203234383531.roa (hash: cISB3c/lX6ECxkwGaCM313qUlrkmfGXNHg9Sn5Duu/E=) 9: 3134362e3234372e34382e302f32332d3234203d3e203234383531.roa (hash: CYrx2Q8+pBHAyk1lGd5Mg9MkvR7v5zfpX8Vn/ABu+6Q=) 10: 38312e32372e39362e302f32302d3230203d3e203234383531.roa (hash: XazNaC+hpMVCJhcoP3zL+9MGci5nPbb/SboV8YXiO2c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 13:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:79:06:06:30:60:3d:e4:12:85:1c:71:5e:04:72:d7:90:24:66:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Validity Not Before: Jun 6 11:47:30 2025 GMT Not After : Jun 7 13:10:30 2025 GMT Subject: CN=68AA9A63AB6B41BE85278CCD2EB622E5A4FC7A5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:27:bd:5c:30:ad:fb:95:cc:b2:6d:27:33:e5: e6:70:ea:b1:07:52:6c:28:11:3b:37:70:4c:25:a6: 9a:bb:ff:41:f6:f9:0d:4c:7a:a0:dd:ce:c3:54:84: 4e:2b:ab:e1:5c:f2:76:fc:0f:68:4d:5c:0a:12:7e: 99:7a:6b:03:1e:c5:c4:43:8a:62:7f:28:b6:41:f7: 7e:b1:3c:09:87:1a:e4:99:e9:2a:67:62:8e:53:2f: 11:32:ce:10:bd:7d:b2:e6:82:fe:e8:6e:3d:15:8f: f7:9a:f2:2d:fb:fc:2b:59:82:bf:c5:8a:7c:88:0e: da:0e:38:2f:87:0d:2d:6b:b7:2e:ff:b9:f0:59:26: 76:c3:bb:03:90:42:ae:f4:1f:9b:4a:f9:88:96:16: e4:d1:87:a2:7f:8d:df:29:b9:2a:1c:fd:a0:fa:29: 5f:f4:bf:3a:0e:bc:be:b9:18:1e:a3:a8:23:85:1d: 52:4f:3b:dc:3c:cd:10:c9:2f:01:41:04:82:c9:e6: 17:20:f3:a7:75:29:27:8b:ce:89:5e:8f:57:3a:3c: e5:95:1d:b0:cf:90:e0:b5:0b:9c:b1:d4:90:2a:7a: 34:b7:07:d2:b0:29:58:dc:c3:86:14:bf:53:09:c4: 9a:4b:18:bf:e7:e3:3f:23:7f:2f:8d:9d:94:17:fa: b7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AA:9A:63:AB:6B:41:BE:85:27:8C:CD:2E:B6:22:E5:A4:FC:7A:5A X509v3 Authority Key Identifier: keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:4e:1f:e3:a7:61:46:e7:ca:9f:93:99:9b:42:bf:70:0f:48: 3d:ff:61:49:3a:6c:37:54:26:56:f8:19:d3:c9:97:b0:b1:d3: 56:cf:11:01:49:6c:65:f0:3c:c7:87:54:65:af:2b:4d:b1:e3: 61:fd:c9:9b:46:51:b8:66:85:59:96:6a:57:36:7f:b9:7f:75: 79:d3:25:45:f1:9d:17:b8:03:98:02:fb:32:72:47:32:c6:e1: 11:0c:19:a8:1f:11:41:2e:64:66:ab:63:2e:ee:b1:ca:6c:eb: 6e:fa:38:0e:9c:25:e2:ee:7c:50:d4:66:bd:64:53:2d:91:f6: 30:36:37:fc:96:05:f0:66:85:22:0d:ef:ad:00:b9:8b:ff:2c: 8d:fa:99:9f:52:19:f5:39:f4:cc:1d:b0:1a:44:4a:ad:eb:e9: c2:d5:5d:0e:77:31:c1:08:43:dd:8a:d9:dd:f3:f8:aa:33:73: c0:26:84:87:48:e0:c1:eb:c5:35:af:c0:51:0b:8f:73:e6:34: ca:d0:c1:38:4d:4c:78:48:f0:1c:fc:e7:31:2a:c4:9a:7f:e3: 8b:c2:79:c6:40:19:1f:b4:11:64:b3:d3:89:fc:e1:0e:74:3d: 80:c7:c5:1f:df:7d:af:b0:23:6a:1d:84:50:db:dc:b6:60:ca: 74:6a:ea:ae -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWHkGBjBgPeQShRxxXgRy15AkZi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTZjNTA5YmE0OGU1YjUwNDk0NTcyZTA1YzQ1YzU4ZTdl MTZkODdmYjAeFw0yNTA2MDYxMTQ3MzBaFw0yNTA2MDcxMzEwMzBaMDMxMTAvBgNV BAMTKDY4QUE5QTYzQUI2QjQxQkU4NTI3OENDRDJFQjYyMkU1QTRGQzdBNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0J71cMK37lcyybScz5eZw6rEH UmwoETs3cEwlppq7/0H2+Q1MeqDdzsNUhE4rq+Fc8nb8D2hNXAoSfpl6awMexcRD imJ/KLZB936xPAmHGuSZ6SpnYo5TLxEyzhC9fbLmgv7obj0Vj/ea8i37/CtZgr/F inyIDtoOOC+HDS1rty7/ufBZJnbDuwOQQq70H5tK+YiWFuTRh6J/jd8puSoc/aD6 KV/0vzoOvL65GB6jqCOFHVJPO9w8zRDJLwFBBILJ5hcg86d1KSeLzolej1c6POWV HbDPkOC1C5yx1JAqejS3B9KwKVjcw4YUv1MJxJpLGL/n4z8jfy+NnZQX+rffAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUaKqaY6trQb6FJ4zNLrYi5aT8elowHwYDVR0j BBgwFoAUpsUJukjltQSUVy4FxFxY5+Fth/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYtOTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1 NWM1LzEvQTZDNTA5QkE0OEU1QjUwNDk0NTcyRTA1QzQ1QzU4RTdFMTZEODdGQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BzVUp1a2psdFFTVVZ5NEZ4RnhZNS1G dGhfcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzhiYjQ0Ni05 MWMwLTQxMzgtYTMzYS1iNDc4NjVkZTU1YzUvMS9BNkM1MDlCQTQ4RTVCNTA0OTQ1 NzJFMDVDNDVDNThFN0UxNkQ4N0ZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARk4f46dhRufKn5OZm0K/ cA9IPf9hSTpsN1QmVvgZ08mXsLHTVs8RAUlsZfA8x4dUZa8rTbHjYf3Jm0ZRuGaF WZZqVzZ/uX91edMlRfGdF7gDmAL7MnJHMsbhEQwZqB8RQS5kZqtjLu6xymzrbvo4 Dpwl4u58UNRmvWRTLZH2MDY3/JYF8GaFIg3vrQC5i/8sjfqZn1IZ9Tn0zB2wGkRK revpwtVdDncxwQhD3YrZ3fP4qjNzwCaEh0jgwevFNa/AUQuPc+Y0ytDBOE1MeEjw HPznMSrEmn/ji8J5xkAZH7QRZLPTifzhDnQ9gMfFH999r7Ajah2EUNvctmDKdGrq rg== -----END CERTIFICATE-----Generated at Fri Jun 6 22:44:54 2025 by rpki-client