$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft File: B3F1737E90F240D7ABB33C72F84D71482FE62679.mft (raw, json) Hash identifier: 2pOlrSyw+tAm2aDo/EtbtDSohs6XHjokbBLvnCjsTWw= Subject key identifier: 70:1B:FD:DF:AC:AF:8B:AB:E1:C1:71:34:DD:4B:6D:6B:EA:9B:DE:F8 Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 Certificate issuer: /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Certificate serial: 29EC550FE854A2456F2960651504D24F3E63E6F6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft Manifest number: 04 Signing time: Sat 05 Jul 2025 03:09:36 +0000 Manifest this update: Sat 05 Jul 2025 03:04:36 +0000 Manifest next update: Sun 06 Jul 2025 05:29:36 +0000 Files and hashes: 1: B3F1737E90F240D7ABB33C72F84D71482FE62679.crl (hash: K5WP1iwTYs0wz0BMt8F6zP4KRUyUuOYO5M4P716KSe8=) 2: 326130373a353463373a353939393a3a2f34382d3438203d3e20323136343535.roa (hash: SvnI/kKkXn3yiVhNqVKN9Taah5WCLs8Rw+D4PBjSrbo=) 3: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: dERySCDhc3+rlKwMAYMhD9XvddhhgSjXbVZeRoj98gc=) 4: 326130373a353463373a356630303a3a2f34302d3438203d3e20323135353737.roa (hash: ji15SChdAc+ViRTTxC2HnCuvz1AFHCBX/j4M4aMoeEQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 03:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ec:55:0f:e8:54:a2:45:6f:29:60:65:15:04:d2:4f:3e:63:e6:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Validity Not Before: Jul 5 03:04:36 2025 GMT Not After : Jul 6 05:29:36 2025 GMT Subject: CN=701BFDDFACAF8BABE1C17134DD4B6D6BEA9BDEF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:56:14:1d:cf:84:73:13:e4:24:27:d5:af:6a: eb:3b:af:b3:13:13:b1:17:c3:f0:f2:2c:9c:3a:56: c3:e2:7d:dc:4a:b3:52:aa:73:b8:9d:21:1d:77:fc: e4:dc:41:20:b5:35:81:3f:86:db:cc:6b:39:3e:e3: 49:64:47:92:af:d2:24:3b:18:c8:2d:36:a6:da:e4: 66:4b:e5:0b:9c:07:47:30:6b:76:ae:e9:55:83:8f: 69:81:10:e8:b9:83:84:6f:23:08:5a:d8:ad:5c:fc: e2:1d:cd:09:83:2d:36:4c:40:44:f6:83:9e:f7:2c: 78:7b:29:e2:20:4f:e0:31:65:aa:39:c1:5a:f2:53: c4:b4:32:e0:2a:e4:ad:a0:84:8f:e3:59:4d:25:ee: 6f:74:19:dc:63:f3:d5:c1:59:d7:db:36:38:86:be: 1c:97:5f:9e:75:04:09:4a:ed:67:c7:f8:11:4b:43: c4:93:50:2e:33:fe:e6:5b:c1:b6:04:22:f8:f7:6f: 5f:1d:5a:47:c3:c1:47:39:89:08:ec:70:e6:d9:a5: b8:0f:35:3b:8f:cd:d2:d6:79:35:4d:e3:c4:fa:fb: 4a:ad:96:a2:5e:87:19:a6:bf:79:8f:88:a8:67:37: 94:c5:7c:5f:51:db:a8:f9:b5:b4:75:d5:1a:87:f6: 54:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1B:FD:DF:AC:AF:8B:AB:E1:C1:71:34:DD:4B:6D:6B:EA:9B:DE:F8 X509v3 Authority Key Identifier: keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d6:1a:0d:1d:b6:23:df:a0:b2:3d:f5:86:cf:13:24:26:42: 76:0b:ee:9c:13:0f:fb:99:b9:44:2b:f0:42:f9:61:b2:f4:d5: 9c:26:56:24:91:61:0a:e1:77:33:b2:b9:ed:89:38:63:04:8c: e1:e9:5a:aa:2e:64:5b:c1:18:21:ca:c0:bb:5b:dc:53:8d:78: 8e:6f:a0:85:d9:82:0e:00:c9:b7:b7:82:c7:22:a9:96:32:98: ad:28:0a:20:e8:66:40:82:3c:fd:a8:5b:62:ac:45:44:62:98: 69:ba:e4:9d:ce:b4:67:f3:d4:03:13:51:2e:8c:1d:93:81:17: 1d:fe:28:50:ca:22:6b:c9:f4:b6:cc:a3:20:25:f4:22:89:b0: a6:c7:ef:12:87:26:09:61:5f:71:90:ee:c5:03:97:f2:31:45: 62:75:60:25:78:e3:4a:ba:18:2d:1d:0a:f2:a0:72:c4:6b:82: 87:4a:6c:7a:ca:87:4b:a4:fe:8e:bf:30:0d:c6:32:36:13:57: b9:df:3a:40:ab:c2:21:f4:f1:32:b4:5c:8d:c0:80:d6:87:b9: cc:3d:ad:48:04:9e:a8:6e:20:70:91:a4:17:f4:de:31:e5:e1: e3:7e:46:96:3d:68:27:71:e7:56:19:87:33:7c:6a:5e:f0:50: 01:1e:41:41 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKexVD+hUokVvKWBlFQTSTz5j5vYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgy RkU2MjY3OTAeFw0yNTA3MDUwMzA0MzZaFw0yNTA3MDYwNTI5MzZaMDMxMTAvBgNV BAMTKDcwMUJGRERGQUNBRjhCQUJFMUMxNzEzNERENEI2RDZCRUE5QkRFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcVhQdz4RzE+QkJ9Wvaus7r7MT E7EXw/DyLJw6VsPifdxKs1Kqc7idIR13/OTcQSC1NYE/htvMazk+40lkR5Kv0iQ7 GMgtNqba5GZL5QucB0cwa3au6VWDj2mBEOi5g4RvIwha2K1c/OIdzQmDLTZMQET2 g573LHh7KeIgT+AxZao5wVryU8S0MuAq5K2ghI/jWU0l7m90Gdxj89XBWdfbNjiG vhyXX551BAlK7WfH+BFLQ8STUC4z/uZbwbYEIvj3b18dWkfDwUc5iQjscObZpbgP NTuPzdLWeTVN48T6+0qtlqJehxmmv3mPiKhnN5TFfF9R26j5tbR11RqH9lQpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUcBv936yvi6vhwXE03Utta+qb3vgwHwYDVR0j BBgwFoAUs/FzfpDyQNerszxy+E1xSC/mJnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzIvQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgyRkU2MjY3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9CM0YxNzM3RTkwRjI0MEQ3QUJCMzNDNzJG ODRENzE0ODJGRTYyNjc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8yL0IzRjE3MzdF OTBGMjQwRDdBQkIzM0M3MkY4NEQ3MTQ4MkZFNjI2NzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAO1hoN HbYj36CyPfWGzxMkJkJ2C+6cEw/7mblEK/BC+WGy9NWcJlYkkWEK4XczsrntiThj BIzh6VqqLmRbwRghysC7W9xTjXiOb6CF2YIOAMm3t4LHIqmWMpitKAog6GZAgjz9 qFtirEVEYphpuuSdzrRn89QDE1EujB2TgRcd/ihQyiJryfS2zKMgJfQiibCmx+8S hyYJYV9xkO7FA5fyMUVidWAleONKuhgtHQryoHLEa4KHSmx6yodLpP6OvzANxjI2 E1e53zpAq8Ih9PEytFyNwIDWh7nMPa1IBJ6obiBwkaQX9N4x5eHjfkaWPWgncedW GYczfGpe8FABHkFB -----END CERTIFICATE-----Generated at Sat Jul 5 12:49:25 2025 by rpki-client