$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft File: 06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json) Hash identifier: 5jFYd4eKjR5msQw5PLQWMYSdK3TLqxmgaXWH0B9W+qw= Subject key identifier: 23:B5:0A:BB:63:98:7D:86:F3:F9:5A:00:66:31:0E:D1:4C:CF:4D:E6 Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5 Certificate serial: 7BEE595FD7E736B9737E96E50D1846F0575B6981 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft Manifest number: 04 Signing time: Fri 04 Jul 2025 13:06:13 +0000 Manifest this update: Fri 04 Jul 2025 13:01:13 +0000 Manifest next update: Sat 05 Jul 2025 14:37:13 +0000 Files and hashes: 1: 326130363a396634313a3a2f33322d3438203d3e20323135303835.roa (hash: Wzsm4f2LA5za568wbkiJepokvyBzVpcjorefCVCiEbM=) 2: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: r4esW2uPVryRidDFOUlhVV3wcsJCjuYcEEJn8r2PXMc=) 3: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: K8xHXu8PBNylpSXaMswB01W3KM9JQNKdf8F+yOiMZUQ=) 4: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: vr0IDnvMrQlAIKTPbmc9XgADtBREMeozkPpGVjOFGr4=) 5: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: UqjWSUv2XiZdDsdQ0uOndREGc/szQ2JnxQlbZ2ADckI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 14:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ee:59:5f:d7:e7:36:b9:73:7e:96:e5:0d:18:46:f0:57:5b:69:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Validity Not Before: Jul 4 13:01:13 2025 GMT Not After : Jul 5 14:37:13 2025 GMT Subject: CN=23B50ABB63987D86F3F95A0066310ED14CCF4DE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b3:01:f5:f8:ed:81:cf:ac:81:f6:15:da:6a: 00:bb:50:13:08:bb:4a:b4:65:d8:e3:a2:94:ec:96: bd:f0:79:2e:56:dd:90:3c:bc:6c:25:d4:e7:37:c3: 99:55:0b:8e:f8:57:d2:07:c0:d6:ab:a7:4a:e7:e9: 65:99:e5:08:08:8d:23:0d:7c:c9:ee:27:75:3b:d1: 9f:1c:6e:a4:50:7c:04:75:83:2e:88:e4:1b:6d:c9: d2:15:9e:43:b5:e3:77:26:0d:66:e6:20:b4:02:72: b6:c9:70:4a:8d:9c:a8:3f:33:0e:b0:00:f4:1b:46: 19:65:03:e7:38:49:96:1b:cd:26:61:98:4f:fd:db: e4:be:01:42:c4:0c:1a:64:fb:d5:26:b0:94:72:ce: 89:2a:ee:f6:bd:96:dd:f0:ff:d2:fb:47:ea:37:2c: 4a:2a:71:00:f4:6a:ec:6a:f9:52:29:75:0a:b9:1f: 63:a6:0a:03:d2:c4:91:28:c9:8b:a7:13:c3:2e:3d: 45:44:41:43:f8:c3:a8:99:be:44:ab:e7:d9:9c:6b: 14:e6:6f:e7:d2:92:8b:28:5d:7f:15:6f:2b:a7:dd: 46:55:25:76:c5:ec:53:4e:25:ec:8d:32:ea:44:12: 4b:ad:97:a4:85:be:48:ef:ef:17:f2:cf:7e:98:1a: 04:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B5:0A:BB:63:98:7D:86:F3:F9:5A:00:66:31:0E:D1:4C:CF:4D:E6 X509v3 Authority Key Identifier: keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:a3:67:ee:d6:4f:81:9d:cb:28:c9:c6:37:c1:02:0b:68:62: 78:bc:38:76:67:11:7f:26:78:b0:07:12:e7:fc:ee:f0:7d:b1: 4b:44:a4:74:ab:bc:c9:6f:f1:4d:8a:f1:ce:93:e7:71:eb:33: 67:2a:0c:07:f5:f5:fc:90:1e:1f:ad:4c:f4:df:c8:6b:cd:b3: 6b:b1:2a:de:89:a1:05:f1:17:ec:34:02:fe:d9:b0:ed:3d:f0: a1:7f:a7:d7:ee:06:7f:f8:9b:22:8a:87:e2:64:fd:67:d7:1c: 0d:be:39:ea:3a:91:84:7c:c1:84:3b:40:0c:8d:e8:dd:5a:00: 14:3f:ec:3f:48:e4:ba:3b:3b:77:8c:e9:cd:1c:f3:c2:ce:95: ed:60:ce:ae:04:1a:e5:01:ad:00:b7:b9:79:b4:c2:23:b3:68: f4:eb:47:b2:31:43:98:9e:ac:86:f9:b5:f9:41:1f:a1:71:3d: a1:07:9a:ba:c5:0c:7c:35:7b:f0:81:b0:7e:27:c7:33:ec:6f: b6:62:2e:6f:28:a5:de:61:54:bc:a3:d1:fe:a0:2b:35:1b:77: 5c:b5:51:fc:cd:ea:e1:9e:76:9f:d5:2a:72:dd:f9:87:58:84: cc:98:d4:6a:50:6a:51:e2:38:f4:cf:ec:24:52:ce:93:93:a9: 56:55:6a:17 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUe+5ZX9fnNrlzfpblDRhG8FdbaYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2 NzExNDJGNTAeFw0yNTA3MDQxMzAxMTNaFw0yNTA3MDUxNDM3MTNaMDMxMTAvBgNV BAMTKDIzQjUwQUJCNjM5ODdEODZGM0Y5NUEwMDY2MzEwRUQxNENDRjRERTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAswH1+O2Bz6yB9hXaagC7UBMI u0q0ZdjjopTslr3weS5W3ZA8vGwl1Oc3w5lVC474V9IHwNarp0rn6WWZ5QgIjSMN fMnuJ3U70Z8cbqRQfAR1gy6I5BttydIVnkO143cmDWbmILQCcrbJcEqNnKg/Mw6w APQbRhllA+c4SZYbzSZhmE/92+S+AULEDBpk+9UmsJRyzokq7va9lt3w/9L7R+o3 LEoqcQD0auxq+VIpdQq5H2OmCgPSxJEoyYunE8MuPUVEQUP4w6iZvkSr59mcaxTm b+fSkosoXX8Vbyun3UZVJXbF7FNOJeyNMupEEkutl6SFvkjv7xfyz36YGgQBAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUI7UKu2OYfYbz+VoAZjEO0UzPTeYwHwYDVR0j BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx NDJGNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03 ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMi8wNkRCNjk5RDE5MUQ0QjAyODk5 MTBDODhFOTlDRjk0QTY3MTE0MkY1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKNn7tZPgZ3LKMnGN8EC C2hieLw4dmcRfyZ4sAcS5/zu8H2xS0SkdKu8yW/xTYrxzpPnceszZyoMB/X1/JAe H61M9N/Ia82za7Eq3omhBfEX7DQC/tmw7T3woX+n1+4Gf/ibIoqH4mT9Z9ccDb45 6jqRhHzBhDtADI3o3VoAFD/sP0jkujs7d4zpzRzzws6V7WDOrgQa5QGtALe5ebTC I7No9OtHsjFDmJ6shvm1+UEfoXE9oQeausUMfDV78IGwfifHM+xvtmIubyil3mFU vKPR/qArNRt3XLVR/M3q4Z52n9Uqct35h1iEzJjUalBqUeI49M/sJFLOk5OpVlVq Fw== -----END CERTIFICATE-----Generated at Sat Jul 5 04:37:18 2025 by rpki-client