$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft File: 521525856CBBA6D9D2254221C280DC930734AAB8.mft (raw, json) Hash identifier: AfcXTABiH4OWybc/QohazoycXUn5ueG/WkyuIQJpp3g= Subject key identifier: 7D:E6:D1:FB:88:14:74:61:30:27:41:F2:91:B3:4A:18:D5:C2:C9:61 Authority key identifier: 52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 Certificate issuer: /CN=521525856CBBA6D9D2254221C280DC930734AAB8 Certificate serial: 120293C46DFEB8768067DA4A4571DE3B432C7ACE Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft Manifest number: 03 Signing time: Fri 04 Jul 2025 10:47:31 +0000 Manifest this update: Fri 04 Jul 2025 10:42:31 +0000 Manifest next update: Sat 05 Jul 2025 13:14:31 +0000 Files and hashes: 1: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: HVzJ9R68GMwZO9EL/DI2ZLp1a+F6uNrFmfl8+YGeZKc=) 2: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: PNV+6g1yuxZfiOErO1rlD/OjvHSDnl045B3ycAeUEw8=) 3: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: kunZD4UEEwcG2nc99Wb+xz1yK+IdIm7SjegbAra8chc=) 4: 521525856CBBA6D9D2254221C280DC930734AAB8.crl (hash: S1IvxCjJJ1Z44o41QzP2BE7F0jci1bL7r0o3Nz6v7Y8=) 5: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: hbkkIcLL2dVYKU+9BKXYxvOgTE4cVlfb37zj8sIKpS0=) 6: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: rOXq6KopS7nNrxLenr0thMMbHkGjihkrbeGzvVQ4fNc=) 7: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: qr/bfrnor+1gB61vuOA1czljaK/VRJBauBs1U2EbENw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 13:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:02:93:c4:6d:fe:b8:76:80:67:da:4a:45:71:de:3b:43:2c:7a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521525856CBBA6D9D2254221C280DC930734AAB8 Validity Not Before: Jul 4 10:42:31 2025 GMT Not After : Jul 5 13:14:31 2025 GMT Subject: CN=7DE6D1FB88147461302741F291B34A18D5C2C961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8c:87:e2:52:9e:4d:24:b4:bb:11:26:d2:84: 8f:ad:bd:ca:a8:c8:9a:58:dd:18:66:a0:35:4d:95: 92:67:e5:9c:80:4f:69:bc:31:df:89:d0:16:b9:17: 2b:a9:62:c3:0e:92:1f:37:93:0d:74:5b:7b:d0:58: d3:c6:6d:66:83:b4:0c:bd:91:30:6f:0f:eb:b8:fb: 46:9a:c7:91:3a:b9:04:0c:17:4b:68:b0:2c:29:16: 15:00:c7:24:94:ee:0a:df:f2:e7:2a:9b:a0:8c:43: 14:fb:24:6c:e4:5c:e3:52:78:68:a4:a7:14:16:7f: d4:78:51:d5:c0:f2:5c:f0:eb:7a:f7:97:cb:5d:50: 31:13:0a:3a:2d:0f:ad:ca:95:e5:3a:f6:20:50:4d: e6:50:5a:e7:da:93:8d:ed:7c:3b:02:72:bc:c2:9c: 71:64:bb:91:d5:d7:8f:c2:38:84:46:57:15:fc:86: 70:49:d6:fe:69:fb:e3:58:7e:c7:47:83:a9:a7:fa: 02:0d:64:98:8b:ff:10:f5:a9:eb:23:e6:e4:a9:a1: 76:d6:44:e0:e6:e1:e2:9e:e1:4d:7e:ee:a2:b0:09: 33:54:fa:0d:15:b5:1d:8d:94:9c:b5:b7:31:bd:3d: ac:00:37:d4:04:22:52:5e:a9:64:f7:eb:6f:7c:5f: 1d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E6:D1:FB:88:14:74:61:30:27:41:F2:91:B3:4A:18:D5:C2:C9:61 X509v3 Authority Key Identifier: keyid:52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:07:ff:18:62:d5:00:5e:06:9b:42:2d:87:4f:e3:23:e4:45: 13:78:64:d7:da:8e:9b:39:2e:23:71:4f:3b:9d:59:1c:84:cd: 62:f7:36:51:50:60:6a:93:e3:50:97:19:da:e1:3a:d6:d5:20: ec:61:b6:e8:09:22:b3:c5:5f:77:7b:d5:ee:93:3d:96:bd:94: 54:cd:d5:0c:be:ff:42:6f:53:0b:f7:de:75:63:49:fc:1e:ca: e7:65:5b:42:25:be:47:97:70:b3:88:7f:d7:f6:57:ea:38:36: 26:85:a7:30:82:90:37:32:74:95:68:85:13:30:d7:47:4b:26: fd:8e:99:35:1d:6d:5b:69:b0:17:b6:04:57:ef:94:5f:3a:2e: b0:3d:01:5f:a8:ba:c5:cb:3a:a7:18:f7:36:d7:6f:3a:a2:10: 2c:ec:35:c5:86:bd:aa:06:69:9f:96:a2:86:7a:59:d8:f6:21: 04:46:d9:07:d7:73:66:f0:d5:61:50:1e:77:ba:34:74:63:80: 9f:6d:01:3b:f4:3e:ac:69:8a:e7:39:c9:82:71:89:05:46:b8: 79:d7:6f:a5:3a:9f:d4:b6:7d:f4:2a:dd:eb:3b:1d:73:ae:a0: de:0a:e1:45:19:64:5b:24:a8:a0:10:38:28:2b:33:eb:b5:4a: 18:9a:0f:91 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUEgKTxG3+uHaAZ9pKRXHeO0Mses4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMw NzM0QUFCODAeFw0yNTA3MDQxMDQyMzFaFw0yNTA3MDUxMzE0MzFaMDMxMTAvBgNV BAMTKDdERTZEMUZCODgxNDc0NjEzMDI3NDFGMjkxQjM0QTE4RDVDMkM5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPjIfiUp5NJLS7ESbShI+tvcqo yJpY3RhmoDVNlZJn5ZyAT2m8Md+J0Ba5FyupYsMOkh83kw10W3vQWNPGbWaDtAy9 kTBvD+u4+0aax5E6uQQMF0tosCwpFhUAxySU7grf8ucqm6CMQxT7JGzkXONSeGik pxQWf9R4UdXA8lzw63r3l8tdUDETCjotD63KleU69iBQTeZQWufak43tfDsCcrzC nHFku5HV14/COIRGVxX8hnBJ1v5p++NYfsdHg6mn+gINZJiL/xD1qesj5uSpoXbW RODm4eKe4U1+7qKwCTNU+g0VtR2NlJy1tzG9PawAN9QEIlJeqWT36298Xx2PAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUfebR+4gUdGEwJ0HykbNKGNXCyWEwHwYDVR0j BBgwFoAUUhUlhWy7ptnSJUIhwoDckwc0qrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzQvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0QUFCOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0 QUFCOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvNC81MjE1MjU4NTZDQkJBNkQ5RDIy NTQyMjFDMjgwREM5MzA3MzRBQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQf/GGLVAF4Gm0Ith0/j I+RFE3hk19qOmzkuI3FPO51ZHITNYvc2UVBgapPjUJcZ2uE61tUg7GG26Akis8Vf d3vV7pM9lr2UVM3VDL7/Qm9TC/fedWNJ/B7K52VbQiW+R5dws4h/1/ZX6jg2JoWn MIKQNzJ0lWiFEzDXR0sm/Y6ZNR1tW2mwF7YEV++UXzousD0BX6i6xcs6pxj3Ntdv OqIQLOw1xYa9qgZpn5aihnpZ2PYhBEbZB9dzZvDVYVAed7o0dGOAn20BO/Q+rGmK 5znJgnGJBUa4eddvpTqf1LZ99Crd6zsdc66g3grhRRlkWySooBA4KCsz67VKGJoP kQ== -----END CERTIFICATE-----Generated at Sat Jul 5 04:34:29 2025 by rpki-client