$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft File: B3F1737E90F240D7ABB33C72F84D71482FE62679.mft (raw, json) Hash identifier: YDj4Hv629S5Mj/2J7ybdF2JW/Np5f7bsPaTzua0zbY0= Subject key identifier: EC:27:F9:52:B8:CD:13:C6:61:79:7D:09:C4:C2:1F:09:C5:A0:55:36 Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 Certificate issuer: /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Certificate serial: 5E343BBDE265EFC63BDBBA34D80EB52319315465 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft Manifest number: 44 Signing time: Wed 20 Aug 2025 16:16:06 +0000 Manifest this update: Wed 20 Aug 2025 16:11:06 +0000 Manifest next update: Thu 21 Aug 2025 18:58:06 +0000 Files and hashes: 1: 326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa (hash: 7mCuwzfIey+Hcqy/Vhuj4zUx9bQcgkzpUeh+UNvlKO4=) 2: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: dERySCDhc3+rlKwMAYMhD9XvddhhgSjXbVZeRoj98gc=) 3: 326130373a353463373a353939393a3a2f34382d3438203d3e20323136343535.roa (hash: SvnI/kKkXn3yiVhNqVKN9Taah5WCLs8Rw+D4PBjSrbo=) 4: 326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa (hash: FG+PaaelFQQTh0Pl3BlClI1RFrk+FdkeBozLHlfkasU=) 5: B3F1737E90F240D7ABB33C72F84D71482FE62679.crl (hash: F1zAXl4wju8LhgkVa5LcBHY4jT7cmopKzRWsLhM5NbI=) 6: 326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa (hash: x50UL+Ve3n2XGikbTbQdFLaQIWslIjcJnasiyHq58lM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 16:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:34:3b:bd:e2:65:ef:c6:3b:db:ba:34:d8:0e:b5:23:19:31:54:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Validity Not Before: Aug 20 16:11:06 2025 GMT Not After : Aug 21 18:58:06 2025 GMT Subject: CN=EC27F952B8CD13C661797D09C4C21F09C5A05536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:79:5c:8d:ea:e2:f2:44:c4:0f:b6:da:31: d5:46:06:5b:ff:27:3f:35:05:02:79:ba:aa:c1:a4: 91:50:02:bf:f6:52:c8:77:46:69:71:1d:e6:fe:1a: 1f:27:f1:a5:7f:be:cc:99:45:ea:9c:85:e8:9e:32: 4f:cd:c0:33:2d:35:00:39:ae:34:f6:d9:a1:5f:f8: 22:3c:47:2b:5f:d7:90:6a:87:3c:aa:af:d8:2c:b5: 02:c9:8c:79:c9:02:c3:e2:db:7d:91:89:16:0b:41: 42:80:1f:31:32:4b:c5:a5:ef:c9:d5:88:6f:08:9d: fb:9f:dc:ef:7a:35:c1:32:cc:de:da:ae:f9:9f:e1: 39:36:32:af:16:b6:c6:a3:8d:8a:c1:3a:49:31:ed: ea:74:cd:52:92:04:d8:5e:d8:de:6b:b2:f6:57:04: b7:c2:f9:c5:76:de:c8:c6:18:b5:69:de:d4:07:92: 17:20:80:b1:77:33:4d:6b:32:0c:c6:da:8b:fc:7c: c3:c1:b7:4f:57:dc:c0:4a:5e:f3:e0:3a:6f:46:2f: 52:a2:b9:74:fe:97:77:a3:c1:23:a4:43:76:ba:62: 4e:1c:69:2b:99:bc:64:3d:90:16:78:d6:4c:a0:81: 42:37:0d:7e:15:26:87:b6:77:cc:85:ed:7f:91:4e: 75:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:27:F9:52:B8:CD:13:C6:61:79:7D:09:C4:C2:1F:09:C5:A0:55:36 X509v3 Authority Key Identifier: keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:03:f2:89:9a:7b:c7:10:63:df:77:ec:d2:b5:e6:a9:e0:d2: e0:d3:14:3b:cf:72:74:80:1a:ce:28:65:d2:1b:9b:42:53:63: 41:b4:93:d2:51:63:fb:6c:1b:23:d1:bf:ba:f3:3f:1a:41:7c: 2a:27:10:71:16:47:09:aa:de:a3:c7:a1:3e:fa:28:f6:39:dc: 15:88:45:4d:ff:73:dc:17:ee:ed:a7:c0:7c:d9:23:f7:57:40: 3e:65:78:88:d9:98:21:cd:ec:99:10:58:ea:4f:13:78:77:91: d7:be:2e:a9:1e:16:c0:74:91:44:b4:43:f4:64:14:18:0f:51: ab:7b:75:f9:4b:c9:da:92:74:e6:7f:5e:c8:9a:db:a5:e8:8c: df:f4:66:80:9e:0b:c6:98:fa:6c:f9:54:af:e4:f2:6d:56:d1: 61:86:09:3f:12:e1:4e:6a:3b:01:cb:b4:b1:f9:69:25:69:9c: 48:58:20:ea:6d:bb:8e:a9:11:38:c0:52:74:f8:ed:99:a7:e7: 98:4e:4a:9c:f8:09:91:16:96:e1:41:e5:f0:38:ca:f6:fb:b6: 85:39:fd:97:37:a2:c0:2b:e9:c5:45:d2:97:38:68:e4:42:5c: d1:7c:d9:4e:df:89:1a:bf:65:c6:8d:e7:ed:dd:d2:e2:f5:65: 37:38:0b:f7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXjQ7veJl78Y727o02A61IxkxVGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgy RkU2MjY3OTAeFw0yNTA4MjAxNjExMDZaFw0yNTA4MjExODU4MDZaMDMxMTAvBgNV BAMTKEVDMjdGOTUyQjhDRDEzQzY2MTc5N0QwOUM0QzIxRjA5QzVBMDU1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqHXlcjeri8kTED7baMdVGBlv/ Jz81BQJ5uqrBpJFQAr/2Ush3RmlxHeb+Gh8n8aV/vsyZReqcheieMk/NwDMtNQA5 rjT22aFf+CI8Rytf15Bqhzyqr9gstQLJjHnJAsPi232RiRYLQUKAHzEyS8Wl78nV iG8Infuf3O96NcEyzN7arvmf4Tk2Mq8WtsajjYrBOkkx7ep0zVKSBNhe2N5rsvZX BLfC+cV23sjGGLVp3tQHkhcggLF3M01rMgzG2ov8fMPBt09X3MBKXvPgOm9GL1Ki uXT+l3ejwSOkQ3a6Yk4caSuZvGQ9kBZ41kyggUI3DX4VJoe2d8yF7X+RTnVlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU7Cf5UrjNE8ZheX0JxMIfCcWgVTYwHwYDVR0j BBgwFoAUs/FzfpDyQNerszxy+E1xSC/mJnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzIvQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgyRkU2MjY3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9CM0YxNzM3RTkwRjI0MEQ3QUJCMzNDNzJG ODRENzE0ODJGRTYyNjc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8yL0IzRjE3MzdF OTBGMjQwRDdBQkIzM0M3MkY4NEQ3MTQ4MkZFNjI2NzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCUA/KJ mnvHEGPfd+zSteap4NLg0xQ7z3J0gBrOKGXSG5tCU2NBtJPSUWP7bBsj0b+68z8a QXwqJxBxFkcJqt6jx6E++ij2OdwViEVN/3PcF+7tp8B82SP3V0A+ZXiI2ZghzeyZ EFjqTxN4d5HXvi6pHhbAdJFEtEP0ZBQYD1Gre3X5S8naknTmf17Imtul6Izf9GaA ngvGmPps+VSv5PJtVtFhhgk/EuFOajsBy7Sx+WklaZxIWCDqbbuOqRE4wFJ0+O2Z p+eYTkqc+AmRFpbhQeXwOMr2+7aFOf2XN6LAK+nFRdKXOGjkQlzRfNlO34kav2XG jeft3dLi9WU3OAv3 -----END CERTIFICATE-----Generated at Thu Aug 21 06:53:21 2025 by rpki-client