$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft File: 3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft (raw, json) Hash identifier: aYu7ZMbgz5CxfxlPT28wSzxPpNdLzRhVCZ0lHshVW+Q= Subject key identifier: D6:7E:26:9B:0E:2A:89:0F:77:DA:4D:48:DA:5F:BB:16:5C:A2:77:95 Authority key identifier: 3A:3B:E1:4D:08:68:E3:9E:43:E2:7B:58:56:76:DF:5B:82:A1:22:E3 Certificate issuer: /CN=3A3BE14D0868E39E43E27B585676DF5B82A122E3 Certificate serial: 12D5C6661725496090A2032844BC398AC90D6F20 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft Manifest number: E6 Signing time: Fri 06 Jun 2025 20:37:57 +0000 Manifest this update: Fri 06 Jun 2025 20:32:57 +0000 Manifest next update: Sat 07 Jun 2025 22:34:57 +0000 Files and hashes: 1: 326131343a373538343a343130303a3a2f34302d3438203d3e20323136333039.roa (hash: o0e/YZFYgXWaWgJ9eaHmXBCXoGTSBaeTvlCQTDkm3+c=) 2: 326131343a373538343a346630303a3a2f34302d3430203d3e20323132353136.roa (hash: 2LuyqKKWcdoqL1q9FKGl+zX6qwvAs9rBA48b+Sgpn8w=) 3: 326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa (hash: nIC6lswk91hjl6KPMQ+RZfHgO+0KGr/fDFoPo3gap1k=) 4: 326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa (hash: 5+vQb6lOPVb905YmSSgsG+hU/u4KZQA5Mhi2G2NVX+8=) 5: 326131343a373538343a346662653a3a2f34382d3438203d3e2036353137.roa (hash: xptTc8UfiLJf//oV4oJOzWfdwqREpi/ly50X2yQ1eVw=) 6: 3A3BE14D0868E39E43E27B585676DF5B82A122E3.crl (hash: mwSFCEG7G6BLbWM5VxYunjExUtQRQdP3X3Fz2+rfUuc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.crl rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:d5:c6:66:17:25:49:60:90:a2:03:28:44:bc:39:8a:c9:0d:6f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3BE14D0868E39E43E27B585676DF5B82A122E3 Validity Not Before: Jun 6 20:32:57 2025 GMT Not After : Jun 7 22:34:57 2025 GMT Subject: CN=D67E269B0E2A890F77DA4D48DA5FBB165CA27795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:57:8a:9f:c7:f2:45:9a:8a:42:f8:49:22:94: a4:b9:e5:38:51:1c:d7:f9:21:1b:15:b2:5e:23:09: 33:16:4e:b0:b7:a9:8d:58:27:39:b2:f4:1a:7f:47: e7:71:78:ae:86:42:bb:5e:99:3c:9d:18:90:4c:3a: e1:b3:46:be:b7:ec:69:f0:2c:39:9a:97:82:53:97: b6:63:3f:c7:d9:8b:96:7c:ec:d7:1d:87:0b:ef:02: 6a:bb:9f:bc:40:94:0c:3f:d4:a0:7b:4a:ec:d3:f5: 16:3d:c7:0f:bd:a6:1c:5d:bb:25:ad:c9:3b:e1:c0: c1:2a:e7:8f:9c:77:ba:8a:65:5a:4d:38:a1:22:71: 43:14:64:a3:a1:7d:6b:4a:26:1f:f4:f7:91:c0:d8: 16:f7:21:aa:54:43:90:0e:b5:b0:f2:41:6a:ee:69: 06:d9:40:f0:ca:da:e2:8d:b2:00:94:15:0f:59:5d: 23:2c:3e:0f:76:d3:28:e6:f1:ef:b9:86:4a:bc:c2: aa:34:6b:7d:16:f5:95:e7:7b:ff:f8:14:d6:4e:2e: ba:71:36:4b:16:e2:ff:98:ea:c4:e5:72:ed:54:38: 81:13:8e:4c:65:31:ce:29:c1:2f:5a:7a:e6:22:07: af:9c:95:3d:e3:fa:ff:f8:f1:03:f0:72:42:31:c7: eb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7E:26:9B:0E:2A:89:0F:77:DA:4D:48:DA:5F:BB:16:5C:A2:77:95 X509v3 Authority Key Identifier: keyid:3A:3B:E1:4D:08:68:E3:9E:43:E2:7B:58:56:76:DF:5B:82:A1:22:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:df:e9:d8:69:ee:76:96:ba:2e:55:fb:b1:63:ea:8f:5c:37: 50:86:7c:2c:ea:1e:dc:cf:2b:d4:fd:7d:3b:3d:ab:83:41:7a: cc:2f:d3:84:00:38:3c:dd:11:f3:07:2d:ed:01:da:8b:7c:5b: fa:b0:e9:c0:95:1f:54:83:a0:0c:f7:ae:fb:e9:da:95:19:b0: 44:b9:10:7e:83:5c:70:98:10:c4:9e:17:d4:e3:26:8f:1d:96: aa:a2:25:a1:2d:61:cb:03:12:6f:13:f0:2a:80:69:ad:46:52: 7a:ce:21:35:12:5f:32:dc:c2:df:01:00:b7:df:d1:98:ec:b1: 98:b4:43:56:9b:9b:9e:20:08:b9:65:7e:44:70:f7:dc:ff:7c: 96:76:59:3b:af:e0:d5:7a:72:a0:50:1e:6c:f8:91:f2:78:5b: 4f:69:85:a2:37:27:69:20:d4:cc:cd:af:dd:9d:57:f2:e0:b1: 5f:b5:07:04:69:31:2d:f8:f4:7a:cf:05:ac:25:7a:3b:71:60: 25:bd:b3:c4:cc:05:3d:d9:8a:b7:45:d7:5e:d2:70:f7:47:3b: 0f:03:2b:5d:4d:e8:9d:9d:8e:d2:7a:93:77:f0:54:74:a3:36: ca:22:0b:fc:9c:ec:33:29:fa:c5:59:d7:4d:0a:1b:19:36:41: 5a:df:73:f0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEtXGZhclSWCQogMoRLw5iskNbyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EzQkUxNEQwODY4RTM5RTQzRTI3QjU4NTY3NkRGNUI4 MkExMjJFMzAeFw0yNTA2MDYyMDMyNTdaFw0yNTA2MDcyMjM0NTdaMDMxMTAvBgNV BAMTKEQ2N0UyNjlCMEUyQTg5MEY3N0RBNEQ0OERBNUZCQjE2NUNBMjc3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjV4qfx/JFmopC+EkilKS55ThR HNf5IRsVsl4jCTMWTrC3qY1YJzmy9Bp/R+dxeK6GQrtemTydGJBMOuGzRr637Gnw LDmal4JTl7ZjP8fZi5Z87NcdhwvvAmq7n7xAlAw/1KB7SuzT9RY9xw+9phxduyWt yTvhwMEq54+cd7qKZVpNOKEicUMUZKOhfWtKJh/095HA2Bb3IapUQ5AOtbDyQWru aQbZQPDK2uKNsgCUFQ9ZXSMsPg920yjm8e+5hkq8wqo0a30W9ZXne//4FNZOLrpx NksW4v+Y6sTlcu1UOIETjkxlMc4pwS9aeuYiB6+clT3j+v/48QPwckIxx+uLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU1n4mmw4qiQ932k1I2l+7Flyid5UwHwYDVR0j BBgwFoAUOjvhTQho455D4ntYVnbfW4KhIuMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTljODNlNWMtNGI1NS00YTFhLTgwMDMtMWI3ZWNjNTFk NDdhLzEvM0EzQkUxNEQwODY4RTM5RTQzRTI3QjU4NTY3NkRGNUI4MkExMjJFMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zQTNCRTE0RDA4NjhFMzlFNDNFMjdCNTg1 Njc2REY1QjgyQTEyMkUzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU5YzgzZTVjLTRiNTUtNGExYS04MDAzLTFiN2VjYzUxZDQ3YS8xLzNBM0JFMTRE MDg2OEUzOUU0M0UyN0I1ODU2NzZERjVCODJBMTIyRTMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA73+nY ae52lrouVfuxY+qPXDdQhnws6h7czyvU/X07PauDQXrML9OEADg83RHzBy3tAdqL fFv6sOnAlR9Ug6AM96776dqVGbBEuRB+g1xwmBDEnhfU4yaPHZaqoiWhLWHLAxJv E/AqgGmtRlJ6ziE1El8y3MLfAQC339GY7LGYtENWm5ueIAi5ZX5EcPfc/3yWdlk7 r+DVenKgUB5s+JHyeFtPaYWiNydpINTMza/dnVfy4LFftQcEaTEt+PR6zwWsJXo7 cWAlvbPEzAU92Yq3Rdde0nD3RzsPAytdTeidnY7SepN38FR0ozbKIgv8nOwzKfrF WddNChsZNkFa33Pw -----END CERTIFICATE-----Generated at Fri Jun 6 22:55:55 2025 by rpki-client