$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft File: 847138B5401830B89B52403C777718BB40B2B6B5.mft (raw, json) Hash identifier: j4mxWsLsEsSar1WxRsDul9M3IHm0uv+TBhzD5e5SwrU= Subject key identifier: 07:A1:C7:76:02:42:62:39:37:38:42:B3:83:38:3F:3E:A5:35:62:28 Authority key identifier: 84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5 Certificate issuer: /CN=847138B5401830B89B52403C777718BB40B2B6B5 Certificate serial: 5CFBB4A18B6CC0A38ED221F629B68481ADE1A455 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft Manifest number: 050C Signing time: Wed 04 Jun 2025 23:32:22 +0000 Manifest this update: Wed 04 Jun 2025 23:27:21 +0000 Manifest next update: Fri 06 Jun 2025 00:36:21 +0000 Files and hashes: 1: BE8A7AC02556C14368364036D5427F53187B6D9D.cer (hash: DgZZLJZ9Eml763gunc/aU0nCab1SiHrkxw0oRdopVbY=) 2: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: B/V5ud+StvDXjqEGvB3k810Cv5LJwyUE9nhfaTbPqMk=) 3: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: nMmiIj2RlJjYPT/1+XLEzvCEDF/otDgwrHV2q/RTde4=) 4: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: HYPQYH9q04uUtQ2nRIqre2hb3Qbqb6C2ZO6Rxb9EvzQ=) 5: 847138B5401830B89B52403C777718BB40B2B6B5.crl (hash: DvC3XktCacTPd6hRXc0Jc0lXPIzHniZVHMGlf13L7qM=) 6: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: lqIlXTFIWSBiRqL977xA8LwWmhjqpimo3uxiYjVeS/M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 00:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:fb:b4:a1:8b:6c:c0:a3:8e:d2:21:f6:29:b6:84:81:ad:e1:a4:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847138B5401830B89B52403C777718BB40B2B6B5 Validity Not Before: Jun 4 23:27:21 2025 GMT Not After : Jun 6 00:36:21 2025 GMT Subject: CN=07A1C77602426239373842B383383F3EA5356228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e6:ec:98:ab:07:d1:16:7e:17:1d:99:b1:58: 86:19:f1:89:f0:d0:c3:9e:b1:36:89:94:a2:28:d1: c1:f3:a2:65:38:d1:db:44:29:c0:59:ca:16:35:91: 44:a3:88:55:53:b9:9f:12:28:d3:c5:94:29:9a:ce: e2:bf:c6:08:21:dd:74:d0:9c:c0:b9:68:a9:38:43: 5f:f3:70:34:b4:28:8d:93:78:96:15:c2:41:e3:0a: 0e:e5:2c:a2:b2:81:d4:c9:ee:b0:44:6b:86:28:d4: eb:32:0c:73:f9:af:23:02:d5:25:9f:61:dd:12:b7: ad:52:62:34:67:ea:78:25:92:43:ff:1c:f7:59:c7: 10:87:01:da:07:29:ba:33:ef:03:6e:8f:14:3f:d4: 1b:28:d7:7e:cc:0f:24:f6:2d:4f:ea:20:f0:90:26: 5c:ad:b8:12:5d:f3:a1:b6:04:bd:aa:b7:ad:6f:e8: 68:52:b2:0b:e9:6b:c3:a4:2e:cd:85:74:60:c7:da: 08:10:01:d7:6d:b3:dd:77:0b:52:69:bb:6b:33:ed: 7b:5b:23:71:67:64:d9:23:eb:c5:66:c7:44:4e:16: 6c:5d:bd:ab:5a:e3:56:a4:5b:5d:a7:bf:d6:9b:d6: d3:48:18:af:ab:1b:54:47:a3:42:76:bd:48:b7:64: df:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A1:C7:76:02:42:62:39:37:38:42:B3:83:38:3F:3E:A5:35:62:28 X509v3 Authority Key Identifier: keyid:84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:0a:1b:72:9c:0c:44:89:7b:8e:3b:02:f7:be:e5:8e:51:a4: 92:40:d0:fd:42:04:24:e9:6d:db:c2:24:42:38:95:fc:8b:1e: c5:21:ab:0f:3a:ce:82:d1:03:a0:c0:ee:bc:8e:d0:68:6d:d1: af:6d:6f:c5:8e:d9:e6:86:97:f5:db:87:ec:8c:40:c0:db:56: 2d:f5:78:fa:ca:9c:c9:b6:b2:f5:a6:25:23:f1:4b:97:a8:d6: 6d:c1:fc:9a:86:5f:93:bb:75:56:78:54:4b:78:ce:92:2c:c3: 11:06:36:76:de:f0:e4:7d:21:bb:93:ab:06:ed:f3:91:fc:45: bd:fb:c2:df:5e:36:21:2a:c8:f7:94:9c:07:91:86:50:e1:7e: 1b:58:98:f6:ce:af:54:5d:aa:00:96:e8:d3:ac:f0:26:e2:94: 12:ab:4a:34:ca:fd:b4:e0:5a:ce:20:c1:e8:86:c1:8e:f8:a1: 4e:b2:44:59:e0:62:14:5e:d5:ac:a6:b6:9d:0a:40:b9:c5:f1: f4:6d:9b:f0:97:af:2f:eb:7d:84:77:94:51:ba:e9:4f:25:89: 6b:e2:6f:6e:73:3d:59:14:1c:a3:4e:3d:12:39:2e:25:60:e2: 47:eb:11:b3:64:83:6e:5d:3b:49:22:32:c1:10:05:b7:7e:80: 62:be:2d:10 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUXPu0oYtswKOO0iH2KbaEga3hpFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0 MEIyQjZCNTAeFw0yNTA2MDQyMzI3MjFaFw0yNTA2MDYwMDM2MjFaMDMxMTAvBgNV BAMTKDA3QTFDNzc2MDI0MjYyMzkzNzM4NDJCMzgzMzgzRjNFQTUzNTYyMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK5uyYqwfRFn4XHZmxWIYZ8Ynw 0MOesTaJlKIo0cHzomU40dtEKcBZyhY1kUSjiFVTuZ8SKNPFlCmazuK/xggh3XTQ nMC5aKk4Q1/zcDS0KI2TeJYVwkHjCg7lLKKygdTJ7rBEa4Yo1OsyDHP5ryMC1SWf Yd0St61SYjRn6nglkkP/HPdZxxCHAdoHKboz7wNujxQ/1Bso137MDyT2LU/qIPCQ JlytuBJd86G2BL2qt61v6GhSsgvpa8OkLs2FdGDH2ggQAddts913C1Jpu2sz7Xtb I3FnZNkj68Vmx0ROFmxdvata41akW12nv9ab1tNIGK+rG1RHo0J2vUi3ZN+3AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUB6HHdgJCYjk3OEKzgzg/PqU1YigwHwYDVR0j BBgwFoAUhHE4tUAYMLibUkA8d3cYu0CytrUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzQvODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0MEIyQjZCNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0MEIy QjZCNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03 Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvNC84NDcxMzhCNTQwMTgzMEI4OUI1 MjQwM0M3Nzc3MThCQjQwQjJCNkI1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQobcpwMRIl7jjsC977l jlGkkkDQ/UIEJOlt28IkQjiV/IsexSGrDzrOgtEDoMDuvI7QaG3Rr21vxY7Z5oaX 9duH7IxAwNtWLfV4+sqcybay9aYlI/FLl6jWbcH8moZfk7t1VnhUS3jOkizDEQY2 dt7w5H0hu5OrBu3zkfxFvfvC3142ISrI95ScB5GGUOF+G1iY9s6vVF2qAJbo06zw JuKUEqtKNMr9tOBaziDB6IbBjvihTrJEWeBiFF7VrKa2nQpAucXx9G2b8JevL+t9 hHeUUbrpTyWJa+JvbnM9WRQco049EjkuJWDiR+sRs2SDbl07SSIywRAFt36AYr4t EA== -----END CERTIFICATE-----Generated at Thu Jun 5 08:40:50 2025 by rpki-client