$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft File: B6366F3DD14AC5399103961C30642E6779892C6C.mft (raw, json) Hash identifier: 94AJHYj/ef2hpQxEKOErOVMJGSRVzC2Ou+xQsWdbq0A= Subject key identifier: A3:48:63:10:EA:A5:D1:D3:F0:56:26:1D:C8:4F:1C:E7:4F:AF:1A:BD Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C Certificate issuer: /CN=B6366F3DD14AC5399103961C30642E6779892C6C Certificate serial: 6591D0B70A36472EB70262BC5D2D45D632B21224 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft Manifest number: 01A2 Signing time: Fri 06 Jun 2025 08:34:26 +0000 Manifest this update: Fri 06 Jun 2025 08:29:26 +0000 Manifest next update: Sat 07 Jun 2025 12:07:26 +0000 Files and hashes: 1: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (hash: Bbj3dkfLCLvHSBOV2mo0X/dvVWVRNeC0CCNXaIH1NSU=) 2: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (hash: dd3FrIdYxmcCZ+0yiqqDqpbbY31J+y6oBOm7qM8H0EU=) 3: 326130363a313238333a386230303a3a2f34302d3438203d3e20323131303636.roa (hash: HcR8I97oYThFv0VpxMGU5cj9rhive5rP2rR8SXDiybY=) 4: B6366F3DD14AC5399103961C30642E6779892C6C.crl (hash: zlyvl7YhB5qonhwadvqb1N7FBA96fZRyUi52qwGy8vA=) 5: 326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa (hash: viX/3SQM4nfUuWRAgbcq7qnkCzLamDSQbyAAFuwSt0E=) 6: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (hash: NwxUM+Bu0lOfXqc/NSfMdy0y0UUCQqdUXqKBNCkgBgQ=) 7: 326130363a313238333a386530303a3a2f34302d3438203d3e20323131303636.roa (hash: HsjlAFHIQV6UlrYLXmXWr7Flxeyjlcgjqx5Y+vyThiA=) 8: 326130363a313238333a386330303a3a2f34302d3438203d3e20323131303636.roa (hash: Fozivs5VK4pgLoGEsqoGlUwV1cuRecwfPaBUsSrDB4Y=) 9: 326130363a313238333a386130303a3a2f34302d3438203d3e20323131303636.roa (hash: /Rv6Qyd4oJNesSRg3hY6FH8XM9bnDURMSVi/jtj0pWA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 12:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:91:d0:b7:0a:36:47:2e:b7:02:62:bc:5d:2d:45:d6:32:b2:12:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C Validity Not Before: Jun 6 08:29:26 2025 GMT Not After : Jun 7 12:07:26 2025 GMT Subject: CN=A3486310EAA5D1D3F056261DC84F1CE74FAF1ABD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b3:01:5a:77:73:85:54:a9:d5:17:11:c9:5d: 73:90:4f:1f:d4:1f:db:aa:46:c7:89:0d:3d:65:04: bd:8b:3c:85:5c:42:17:6f:16:60:22:a7:89:6b:a2: f3:b3:39:38:46:95:b3:c0:3b:ad:28:da:f3:ab:08: c8:1e:6b:60:60:72:53:f0:01:c1:40:66:0d:64:50: 22:c1:09:41:44:41:e9:49:45:87:e1:67:62:14:1f: d6:31:3f:37:2c:69:d8:d0:1f:2b:6d:3a:21:83:64: e0:0d:42:d2:de:da:71:c6:12:f5:b5:b6:e7:fe:43: 82:e0:35:0f:f8:ff:ef:ce:f1:8f:2e:15:07:94:f9: 7e:f9:18:43:ef:70:a6:b0:6b:52:ed:7a:d3:4a:54: 8d:f9:c1:c0:5c:bb:a8:35:9e:17:c0:ac:22:9e:17: 64:04:00:d3:ef:3b:09:c3:e9:19:0f:b0:de:da:7d: b9:d7:f6:b0:6a:82:e3:c8:1d:5b:eb:06:3c:1a:8c: 0f:b5:27:c7:bc:62:47:4b:ea:9a:66:ab:43:56:df: c0:89:d7:02:cb:67:c4:8e:45:69:07:c3:77:0e:e5: 51:b8:4a:02:fe:7f:61:d5:1a:f7:e0:c9:a3:c6:66: 7e:50:52:09:22:75:ea:ca:72:e3:a8:05:3b:f1:e3: c7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:48:63:10:EA:A5:D1:D3:F0:56:26:1D:C8:4F:1C:E7:4F:AF:1A:BD X509v3 Authority Key Identifier: keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:85:6d:cf:f2:e4:ca:38:1f:9e:b4:0a:ad:46:d8:1a:e3:18: f3:fa:52:19:88:21:f6:9f:ed:88:3d:ca:9b:96:d6:fb:85:fc: f6:dd:56:76:85:b6:0d:fe:eb:ba:cd:a2:16:81:c5:ee:df:d4: 25:ea:af:fe:d0:e5:9c:aa:1d:bc:b8:87:f2:f7:da:75:79:5c: d1:ea:0d:fc:9e:21:2a:6a:b8:b2:a9:13:57:b5:58:04:b9:b2: f9:43:c3:b1:5f:cd:80:6a:5d:f2:68:cb:21:70:bc:52:cd:12: fe:7c:55:35:fc:e0:eb:53:1f:fc:d1:e1:a1:94:9d:8a:80:2d: cf:53:12:29:31:a9:fd:79:a9:15:e5:df:06:ea:bb:ca:97:f7: d3:09:77:7f:b0:82:24:ac:3b:4a:20:b9:26:be:f9:c0:9d:0d: 12:12:4b:33:84:71:6b:2f:1c:83:38:5f:99:ec:a7:c0:f5:2f: 02:21:4b:80:80:b5:d6:b7:0a:24:ac:3a:ec:aa:4b:e8:0f:a6: d2:5a:ad:a0:5b:fd:38:66:02:aa:7b:34:66:88:c2:11:66:3e: 85:37:c3:1b:d0:b1:ee:8f:68:3b:1f:9c:33:ef:86:9f:b8:2d: e0:ab:25:92:48:44:17:ec:34:70:ca:29:bf:79:e7:35:30:10: 01:47:de:c0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZZHQtwo2Ry63AmK8XS1F1jKyEiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3 OTg5MkM2QzAeFw0yNTA2MDYwODI5MjZaFw0yNTA2MDcxMjA3MjZaMDMxMTAvBgNV BAMTKEEzNDg2MzEwRUFBNUQxRDNGMDU2MjYxREM4NEYxQ0U3NEZBRjFBQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMswFad3OFVKnVFxHJXXOQTx/U H9uqRseJDT1lBL2LPIVcQhdvFmAip4lrovOzOThGlbPAO60o2vOrCMgea2BgclPw AcFAZg1kUCLBCUFEQelJRYfhZ2IUH9YxPzcsadjQHyttOiGDZOANQtLe2nHGEvW1 tuf+Q4LgNQ/4/+/O8Y8uFQeU+X75GEPvcKawa1LtetNKVI35wcBcu6g1nhfArCKe F2QEANPvOwnD6RkPsN7afbnX9rBqguPIHVvrBjwajA+1J8e8YkdL6ppmq0NW38CJ 1wLLZ8SORWkHw3cO5VG4SgL+f2HVGvfgyaPGZn5QUgkiderKcuOoBTvx48fpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUo0hjEOql0dPwViYdyE8c50+vGr0wHwYDVR0j BBgwFoAUtjZvPdFKxTmRA5YcMGQuZ3mJLGwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzIvQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3OTg5MkM2Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvMS9CNjM2NkYzREQxNEFDNTM5OTEwMzk2MUMz MDY0MkU2Nzc5ODkyQzZDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi8yL0I2MzY2RjNE RDE0QUM1Mzk5MTAzOTYxQzMwNjQyRTY3Nzk4OTJDNkMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAkhW3P 8uTKOB+etAqtRtga4xjz+lIZiCH2n+2IPcqbltb7hfz23VZ2hbYN/uu6zaIWgcXu 39Ql6q/+0OWcqh28uIfy99p1eVzR6g38niEqariyqRNXtVgEubL5Q8OxX82Aal3y aMshcLxSzRL+fFU1/ODrUx/80eGhlJ2KgC3PUxIpMan9eakV5d8G6rvKl/fTCXd/ sIIkrDtKILkmvvnAnQ0SEkszhHFrLxyDOF+Z7KfA9S8CIUuAgLXWtwokrDrsqkvo D6bSWq2gW/04ZgKqezRmiMIRZj6FN8Mb0LHuj2g7H5wz74afuC3gqyWSSEQX7DRw yim/eec1MBABR97A -----END CERTIFICATE-----Generated at Fri Jun 6 23:04:00 2025 by rpki-client