$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft File: 27851163005F59C06E35A8FD365F96356EB34971.mft (raw, json) Hash identifier: JYik0FjAGbRBWzFqqCAV77g8wPbcjYz4DacpBLXNTmY= Subject key identifier: 52:55:E3:07:6E:AE:9C:E4:14:7B:97:A6:7B:D7:23:A4:DA:1E:1F:27 Authority key identifier: 27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 Certificate issuer: /CN=27851163005f59c06e35a8fd365f96356eb34971 Certificate serial: 4F7A96CA4C4EDCEB81B14D67ACC3D8737B625435 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft Manifest number: B3 Signing time: Fri 06 Jun 2025 14:55:05 +0000 Manifest this update: Fri 06 Jun 2025 14:50:05 +0000 Manifest next update: Sat 07 Jun 2025 16:48:05 +0000 Files and hashes: 1: 27851163005F59C06E35A8FD365F96356EB34971.crl (hash: uPqQIHkNVu+z3BIdJvFXgmiuT4DmfGxIbSCKrGNAIg0=) 2: 39332e3135372e3134302e302f32342d3234203d3e20323132383535.roa (hash: hdp9Cx8dMbvUUOjRrqy1XfSIVtsUnXM8OZnay1usHT4=) 3: AS212855.asa (hash: T3YdrgEJ1P9IU1IPBHUKuz7lJiYzWWWbNO7fDdrADAU=) 4: 323030313a3637633a6638633a3a2f34382d3438203d3e20323132383535.roa (hash: prfcq9YIMAg2ry1iZCXqsMkFnalbT+MPZdyoUmwmw6g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:7a:96:ca:4c:4e:dc:eb:81:b1:4d:67:ac:c3:d8:73:7b:62:54:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27851163005f59c06e35a8fd365f96356eb34971 Validity Not Before: Jun 6 14:50:05 2025 GMT Not After : Jun 7 16:48:05 2025 GMT Subject: CN=5255E3076EAE9CE4147B97A67BD723A4DA1E1F27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:78:b8:53:32:88:83:b8:28:03:2b:22:9f:1a: 77:46:e4:d1:c9:02:d2:0b:c5:4d:d8:11:20:da:75: bc:2c:dd:79:06:c1:5f:5f:93:06:36:07:b2:02:cf: 1e:02:95:e6:dc:c0:e7:16:11:33:7b:cc:f6:c8:59: c7:52:cf:a1:ec:91:84:67:e1:f8:65:c0:42:31:c6: c9:59:44:41:f5:f5:b6:90:04:c5:d3:37:e9:9e:85: aa:6c:c6:c6:b5:e6:47:26:3f:0f:f9:39:ef:ef:ba: be:aa:6d:a4:35:68:d0:2d:c7:b2:51:6d:96:d3:c3: 53:2d:6f:ac:9c:51:8a:30:bf:1e:6d:e2:ef:83:5f: 53:e1:4f:07:33:ff:4e:09:08:19:e4:cf:ac:aa:6a: 88:75:39:a9:c8:32:0a:ba:f4:48:48:c0:ee:33:f0: 0d:58:48:72:dc:25:22:41:d7:09:c6:15:e8:af:e7: e6:38:21:05:ff:5d:8f:7d:f0:9b:a1:7a:9f:c4:d6: 35:c6:71:b3:c7:02:c2:9e:b8:b1:27:0c:31:30:03: 2e:25:b4:e2:9d:c4:87:bb:0c:0f:4a:08:c5:32:ec: 99:f5:49:c3:9b:da:89:7e:5d:94:26:dd:77:8d:c1: 19:2a:58:e7:b3:1a:97:87:bc:64:88:ac:7a:7b:ad: 08:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:55:E3:07:6E:AE:9C:E4:14:7B:97:A6:7B:D7:23:A4:DA:1E:1F:27 X509v3 Authority Key Identifier: keyid:27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:da:43:b0:8e:4c:fa:1c:cb:01:1b:98:46:48:7f:e5:f7:13: 4b:22:4a:b4:ec:08:41:42:eb:01:48:e2:fb:9b:83:7c:de:7d: a8:c5:fa:d5:22:30:7a:7d:9d:ed:57:ee:65:de:c9:9c:32:82: 1b:cc:41:cf:c7:93:08:73:77:31:62:d1:20:8a:e4:c0:c0:d2: a2:81:bf:d5:ed:00:80:0c:30:b5:4d:ee:11:ad:9e:8a:ac:a4: 64:2b:d3:0d:80:0c:7b:41:83:3a:7c:0e:c3:c5:da:35:cf:6c: 10:a2:2c:bd:11:d8:5b:e9:cd:32:32:e4:3a:4b:09:16:5e:70: 45:90:57:7f:f4:f8:53:08:c9:e3:c7:2f:da:29:c0:ea:71:1f: 4d:d3:6e:b3:cd:44:af:2e:aa:ee:3a:c9:1f:f7:e9:85:09:4d: 44:58:d7:3e:c3:cc:61:16:aa:9a:3f:c8:a8:26:6f:91:00:48: 7c:dc:21:be:37:45:96:e6:40:93:dc:22:bc:5a:a1:ec:21:93: cb:28:84:56:3e:9b:35:57:30:ff:e1:0b:8f:d4:c1:1b:ae:6f: 00:b5:e2:71:36:91:56:a6:d7:f7:0a:c8:28:b0:ad:13:6b:60: 03:f0:da:83:61:86:13:96:c4:54:e9:27:7f:3b:85:4b:5b:ef: f1:5a:48:16 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUT3qWykxO3OuBsU1nrMPYc3tiVDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc4NTExNjMwMDVmNTljMDZlMzVhOGZkMzY1Zjk2MzU2 ZWIzNDk3MTAeFw0yNTA2MDYxNDUwMDVaFw0yNTA2MDcxNjQ4MDVaMDMxMTAvBgNV BAMTKDUyNTVFMzA3NkVBRTlDRTQxNDdCOTdBNjdCRDcyM0E0REExRTFGMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7eLhTMoiDuCgDKyKfGndG5NHJ AtILxU3YESDadbws3XkGwV9fkwY2B7ICzx4ClebcwOcWETN7zPbIWcdSz6HskYRn 4fhlwEIxxslZREH19baQBMXTN+mehapsxsa15kcmPw/5Oe/vur6qbaQ1aNAtx7JR bZbTw1Mtb6ycUYowvx5t4u+DX1PhTwcz/04JCBnkz6yqaoh1OanIMgq69EhIwO4z 8A1YSHLcJSJB1wnGFeiv5+Y4IQX/XY998Juhep/E1jXGcbPHAsKeuLEnDDEwAy4l tOKdxIe7DA9KCMUy7Jn1ScOb2ol+XZQm3XeNwRkqWOezGpeHvGSIrHp7rQgHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUlXjB26unOQUe5eme9cjpNoeHycwHwYDVR0j BBgwFoAUJ4URYwBfWcBuNaj9Nl+WNW6zSXEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2VhZmMzMmItZWMwMy00MzE5LWIxYzYtM2MxYzQ3Mjdl MDZmLzAvMjc4NTExNjMwMDVGNTlDMDZFMzVBOEZEMzY1Rjk2MzU2RUIzNDk3MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0o0VVJZd0JmV2NCdU5hajlObC1XTlc2 elNYRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zZWFmYzMyYi1l YzAzLTQzMTktYjFjNi0zYzFjNDcyN2UwNmYvMC8yNzg1MTE2MzAwNUY1OUMwNkUz NUE4RkQzNjVGOTYzNTZFQjM0OTcxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9pDsI5M+hzLARuYRkh/ 5fcTSyJKtOwIQULrAUji+5uDfN59qMX61SIwen2d7VfuZd7JnDKCG8xBz8eTCHN3 MWLRIIrkwMDSooG/1e0AgAwwtU3uEa2eiqykZCvTDYAMe0GDOnwOw8XaNc9sEKIs vRHYW+nNMjLkOksJFl5wRZBXf/T4UwjJ48cv2inA6nEfTdNus81Ery6q7jrJH/fp hQlNRFjXPsPMYRaqmj/IqCZvkQBIfNwhvjdFluZAk9wivFqh7CGTyyiEVj6bNVcw /+ELj9TBG65vALXicTaRVqbX9wrIKLCtE2tgA/Dag2GGE5bEVOknfzuFS1vv8VpI Fg== -----END CERTIFICATE-----Generated at Fri Jun 6 23:21:17 2025 by rpki-client