$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft File: CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft (raw, json) Hash identifier: ukWQEsp5Rs780GbA7FU5o2BnidUtxDIevqzRLLxupos= Subject key identifier: A5:EB:03:6E:71:FE:E5:08:DE:07:12:AC:F8:38:B5:DF:32:F6:F7:11 Authority key identifier: CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD Certificate issuer: /CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD Certificate serial: 2FE68F345263107806E863C7DDA0B5D01E43FF9C Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft Manifest number: 0166 Signing time: Thu 05 Jun 2025 06:47:55 +0000 Manifest this update: Thu 05 Jun 2025 06:42:55 +0000 Manifest next update: Fri 06 Jun 2025 06:56:55 +0000 Files and hashes: 1: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: ahz6gPUt4YrcLpOD9Ozfm8bYrgH1OTsLIpfe4cqXpMc=) 2: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: Nyn9oM7uD3t9zeyaIzVAMa0fIXr9id1B4aigY0eVgwU=) 3: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: wTqD67Uqf1W/idPthA4sHinaJ2FPLZ88IN640ixPrCU=) 4: CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl (hash: EYCeVfXEo9s65X0GInPMQx3E2wNtaHxJLq1oKSIEAcU=) 5: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: vFXjegY0vnmzgiKwFkv4TNQvgCv0y7neNveGux2ZS+w=) 6: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: Q5gjl44KzFA6g8+tW8lygBoA3oaZ4qvSEamF1iUuuio=) 7: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: 4NAkvNhOgG+FdQOl5H1HgnY8A0ca/GD2rGJr4GFMtSI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Jun 2025 01:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e6:8f:34:52:63:10:78:06:e8:63:c7:dd:a0:b5:d0:1e:43:ff:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD Validity Not Before: Jun 5 06:42:55 2025 GMT Not After : Jun 6 06:56:55 2025 GMT Subject: CN=A5EB036E71FEE508DE0712ACF838B5DF32F6F711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8c:19:e1:c3:8e:28:84:83:a4:95:08:d1:0e: 4f:a3:36:d8:96:57:79:2f:f3:1c:74:fb:ce:7a:6f: 7e:cb:d8:36:75:35:e7:7c:3e:2f:23:95:08:a6:22: 3e:8d:0f:83:30:e5:34:df:d0:65:41:a0:e3:c1:82: 24:e7:0b:79:07:85:7d:25:b9:5e:95:c0:00:e5:22: f9:c2:13:7f:fe:0b:61:6e:13:72:84:80:be:79:bf: 5f:33:65:77:fc:88:ff:59:0e:4e:93:ad:81:38:ad: 8f:69:cf:3c:a6:e4:d5:a5:62:90:64:bb:0f:ec:fb: bb:71:12:47:11:cf:b6:2c:5b:74:bb:4e:19:30:0c: 97:b2:ce:83:2e:e0:0d:a6:0b:54:20:35:de:bd:ef: a2:e6:72:8a:ce:ba:36:54:84:80:20:ef:19:ec:72: 89:1e:5c:dc:a6:d3:99:d1:7f:53:a1:84:35:5a:1f: 47:b2:00:b3:2d:8e:dd:53:ed:55:26:4b:36:c0:66: 8b:f6:f5:d2:e5:ed:7f:5f:eb:77:64:e4:2b:bc:0d: ed:46:db:95:f1:14:fa:26:ee:83:61:08:86:6c:17: 60:3f:d9:74:53:4a:f6:4d:b6:86:cb:3f:66:d9:92: e8:fd:93:8f:a6:8b:7e:4d:40:4b:ad:ec:67:83:3b: 9b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EB:03:6E:71:FE:E5:08:DE:07:12:AC:F8:38:B5:DF:32:F6:F7:11 X509v3 Authority Key Identifier: keyid:CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:64:73:15:99:15:9e:bb:e2:1c:02:64:df:63:0e:da:d1:5d: cb:54:e6:79:cd:4c:8e:8b:87:b9:50:0c:01:6e:49:6b:44:a9: 2b:95:10:b7:8f:b5:46:c8:9c:6c:ec:25:73:ae:49:fd:14:f4: 6e:7b:bc:51:a7:77:ab:53:f5:b0:15:d9:52:28:0f:59:cb:94: d3:20:60:df:2e:22:17:4a:05:79:57:dc:60:ce:ab:ef:4a:33: a4:2b:26:d0:ae:4c:9c:39:e6:97:ce:fd:37:9e:8f:77:dc:98: 04:65:6e:0b:27:a9:dc:59:25:a2:a2:c0:ed:6b:6c:25:99:99: 5c:6f:93:1c:9f:32:56:78:7e:e3:9b:83:df:1a:1b:f4:de:c2: 46:33:07:6b:57:f8:71:3e:aa:72:78:97:17:09:1b:70:87:94: cb:36:fa:f2:74:49:91:95:55:3c:e9:c2:72:af:67:2f:7c:d4: 27:53:e9:d2:89:22:ab:2f:79:6d:8a:7e:dd:0b:89:13:2d:53: c6:76:b7:63:83:03:9c:db:20:3b:1c:3f:c4:1a:aa:6c:d8:cc: c2:14:56:01:fc:73:72:62:e9:62:3f:11:d3:ee:4b:f6:54:e5: db:6b:be:f6:bd:c5:90:a0:ee:ae:cc:6d:1f:dc:a7:02:7f:f5: d5:41:27:7b -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUL+aPNFJjEHgG6GPH3aC10B5D/5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgz Rjk1NTFDRDAeFw0yNTA2MDUwNjQyNTVaFw0yNTA2MDYwNjU2NTVaMDMxMTAvBgNV BAMTKEE1RUIwMzZFNzFGRUU1MDhERTA3MTJBQ0Y4MzhCNURGMzJGNkY3MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmjBnhw44ohIOklQjRDk+jNtiW V3kv8xx0+856b37L2DZ1Ned8Pi8jlQimIj6ND4Mw5TTf0GVBoOPBgiTnC3kHhX0l uV6VwADlIvnCE3/+C2FuE3KEgL55v18zZXf8iP9ZDk6TrYE4rY9pzzym5NWlYpBk uw/s+7txEkcRz7YsW3S7ThkwDJeyzoMu4A2mC1QgNd6976LmcorOujZUhIAg7xns cokeXNym05nRf1OhhDVaH0eyALMtjt1T7VUmSzbAZov29dLl7X9f63dk5Cu8De1G 25XxFPom7oNhCIZsF2A/2XRTSvZNtobLP2bZkuj9k4+mi35NQEut7GeDO5ujAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUpesDbnH+5QjeBxKs+Di13zL29xEwHwYDVR0j BBgwFoAUzhtPQ2e2pV80ypgaDWynWD+VUc0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzEvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1NTFDRC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1 NTFDRC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvMS9DRTFCNEY0MzY3QjZBNTVGMzRD QTk4MUEwRDZDQTc1ODNGOTU1MUNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2RzFZkVnrviHAJk32MO 2tFdy1Tmec1MjouHuVAMAW5Ja0SpK5UQt4+1RsicbOwlc65J/RT0bnu8Uad3q1P1 sBXZUigPWcuU0yBg3y4iF0oFeVfcYM6r70ozpCsm0K5MnDnml879N56Pd9yYBGVu Cyep3FkloqLA7WtsJZmZXG+THJ8yVnh+45uD3xob9N7CRjMHa1f4cT6qcniXFwkb cIeUyzb68nRJkZVVPOnCcq9nL3zUJ1Pp0okiqy95bYp+3QuJEy1Txna3Y4MDnNsg Oxw/xBqqbNjMwhRWAfxzcmLpYj8R0+5L9lTl22u+9r3FkKDursxtH9ynAn/11UEn ew== -----END CERTIFICATE-----Generated at Thu Jun 5 08:44:34 2025 by rpki-client