$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft File: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft (raw, json) Hash identifier: LoQ7pm8BWG74clMspvDeSZdDTINcDUzFpKiErkbhJes= Subject key identifier: C7:D3:28:BA:15:AA:FD:60:B3:43:74:F0:59:9F:C1:25:B1:95:43:FF Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Certificate serial: 269CBA676C6F479DFA14BA57601DFDF54BC05E79 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft Manifest number: 03 Signing time: Sat 05 Jul 2025 11:33:25 +0000 Manifest this update: Sat 05 Jul 2025 11:28:25 +0000 Manifest next update: Sun 06 Jul 2025 14:46:25 +0000 Files and hashes: 1: 326130363a313238333a386530303a3a2f34302d3438203d3e20323131303636.roa (hash: zh/0wPRro0Lk1m44hGThxyXQVvLxur06EBEe3Ht0Czk=) 2: 326130363a313238333a386230333a3a2f34382d313238203d3e20323136323936.roa (hash: N9MolD8dDj/dBd/n3Fw4ld40S7jRH9ie9KMXOnILBv8=) 3: 326130363a313238333a386230323a3a2f34382d313238203d3e20323037363935.roa (hash: C58CzcueBZLGi3BZhVC1snl3/HIsG8jd8UxQItY5XqQ=) 4: 326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa (hash: fhZLtEdAcpVe5ZEFnO5ghX4tvoay2QbvYeWWfzdmNM4=) 5: 326130363a313238333a386230313a3a2f34382d313238203d3e20323037363935.roa (hash: 6vaetUt7c9H+9aVn0u2KQRLHDuQZ528YxlkFqIwRrOU=) 6: 326130363a313238333a386630303a3a2f34302d313238203d3e20323131303636.roa (hash: r9X5RrRgRpcWg3o0DruFRABIQJqS6HSEppSZqEX6zcQ=) 7: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (hash: +z0Qc7b7Pm0YyOUO4LNkttIVrmFKBrkfbPc/zfrDGTk=) 8: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl (hash: rrMqHqzdfp2m2X9HBXNnTCB1JW96C8BxssMWq65Cfow=) 9: 326130363a313238333a386330303a3a2f34302d3438203d3e20323131303636.roa (hash: PjXxPcOFpDrt2/J2rK7/G4zujo+FjWZMvwQwdSAXtCs=) 10: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (hash: B3lCmzbMTTF4JEYaqxL5SocH8KSyx1ZOaOngpc1c9xY=) 11: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (hash: 1HZdS5easOTzXqx+g13vhM2s0dAHymCGMDkKOH0yoVM=) 12: 326130363a313238333a386230303a3a2f34302d3438203d3e20323131303636.roa (hash: E/viu9vBcRpgXLkYydv4L1bSWYconnC9RhF31aVMM/0=) 13: 326130363a313238333a386130303a3a2f34302d3438203d3e20323131303636.roa (hash: 0UwJEaqOuZNt12cGdgRNs6h5sg/UqNE4VWJ7LVXWQWc=) 14: 326130363a313238333a386230343a3a2f34382d313238203d3e20323136323936.roa (hash: h1a1cZj7VSGbOfHrD9FwYA93/4cSGskJlxFeFxQgJB0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 03:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:9c:ba:67:6c:6f:47:9d:fa:14:ba:57:60:1d:fd:f5:4b:c0:5e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C Validity Not Before: Jul 5 11:28:25 2025 GMT Not After : Jul 6 14:46:25 2025 GMT Subject: CN=C7D328BA15AAFD60B34374F0599FC125B19543FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:95:f2:3f:74:93:d5:d9:05:45:ea:54:f2:fc: 07:e0:c0:9b:c5:4b:d8:89:31:e1:6a:94:3f:2b:09: 61:6c:fc:3f:b0:3f:b3:a2:cf:0e:43:bc:3d:75:09: 24:ea:77:80:ef:01:92:80:74:ab:db:67:24:e0:c7: f3:59:0b:6a:af:c1:24:85:9f:73:a0:10:d2:fd:e7: bf:01:ed:1d:e2:e3:cb:14:10:ae:e3:87:a4:4b:20: 56:12:93:73:03:9a:76:a5:92:5d:51:f9:1a:9a:6a: ce:77:c9:c2:25:0f:d4:fb:44:87:33:48:4f:c4:7a: f8:1f:2a:69:7b:1a:95:d7:9f:37:ee:77:bd:21:22: 49:4c:cf:b3:95:4a:19:70:20:74:63:cf:fc:1d:c2: fd:9a:fc:8a:f2:06:1f:93:6c:ef:cb:fe:a2:cf:5e: d2:6b:00:72:c3:4e:92:5c:1e:33:e5:4d:78:35:c8: 57:9c:30:37:56:11:04:ed:2a:3a:76:54:75:dd:e4: a4:33:2e:e8:45:1b:12:ff:3b:8e:91:a3:21:fd:fa: 42:7f:3e:df:58:5c:be:2d:15:63:d3:a9:3d:ed:2c: 48:85:c6:da:ad:06:b4:85:d1:d9:7c:51:df:40:ad: 85:b5:e4:11:65:33:ec:50:b0:8c:f4:89:ed:1a:5c: f2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D3:28:BA:15:AA:FD:60:B3:43:74:F0:59:9F:C1:25:B1:95:43:FF X509v3 Authority Key Identifier: keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:0a:5d:a7:c4:3f:37:a9:ca:5e:bb:8b:b5:49:d5:6f:9d:4d: 61:ff:b3:fe:33:0f:ca:91:00:bf:e6:94:59:65:2c:ad:12:3b: 75:47:01:a6:3c:fe:61:b8:ad:23:bd:23:51:8b:c1:e7:a7:de: 1e:1e:82:89:07:10:27:b1:35:5d:da:fb:70:c4:5f:3c:cc:43: a1:c8:94:46:14:a9:a8:e3:76:03:69:62:22:28:55:56:fe:b7: 30:7b:44:cf:93:70:4d:75:97:6f:ab:29:8f:51:2c:d7:13:7b: ce:a8:73:fb:c5:ae:a4:c1:0e:6e:0e:05:f2:4f:5e:f5:06:b5: c0:65:4b:77:13:c7:e3:86:b4:8e:65:48:5f:c8:0c:d5:eb:3d: 3c:a6:5a:97:89:9d:fd:2d:85:43:22:26:20:fe:94:aa:c3:7b: 38:ad:8e:73:68:5f:e9:98:00:81:25:91:fb:a0:17:6f:ac:74: 57:fa:d9:b7:4f:b1:49:88:22:57:1b:79:df:16:b0:9b:d3:9d: fb:3a:96:70:3b:94:79:66:5a:a7:fb:6a:7a:dd:b9:4a:a5:91: 11:38:93:31:f9:cb:25:71:57:98:97:fe:07:72:19:12:54:ad: dd:c4:31:53:a6:2b:3a:bf:35:c9:7a:1a:58:e2:05:fd:27:60: fb:ee:a0:3a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJpy6Z2xvR536FLpXYB399UvAXnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz QTdBOEIyQzAeFw0yNTA3MDUxMTI4MjVaFw0yNTA3MDYxNDQ2MjVaMDMxMTAvBgNV BAMTKEM3RDMyOEJBMTVBQUZENjBCMzQzNzRGMDU5OUZDMTI1QjE5NTQzRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDClfI/dJPV2QVF6lTy/AfgwJvF S9iJMeFqlD8rCWFs/D+wP7Oizw5DvD11CSTqd4DvAZKAdKvbZyTgx/NZC2qvwSSF n3OgENL9578B7R3i48sUEK7jh6RLIFYSk3MDmnalkl1R+Rqaas53ycIlD9T7RIcz SE/EevgfKml7GpXXnzfud70hIklMz7OVShlwIHRjz/wdwv2a/IryBh+TbO/L/qLP XtJrAHLDTpJcHjPlTXg1yFecMDdWEQTtKjp2VHXd5KQzLuhFGxL/O46RoyH9+kJ/ Pt9YXL4tFWPTqT3tLEiFxtqtBrSF0dl8Ud9ArYW15BFlM+xQsIz0ie0aXPKNAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUx9MouhWq/WCzQ3TwWZ/BJbGVQ/8wHwYDVR0j BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB MDY0M0NBQzNBN0E4QjJDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi82L0Q1NEQ0NDNC NjdDMUNDNUVBMUI1NDQ2RUEwNjQzQ0FDM0E3QThCMkMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhCl2n xD83qcpeu4u1SdVvnU1h/7P+Mw/KkQC/5pRZZSytEjt1RwGmPP5huK0jvSNRi8Hn p94eHoKJBxAnsTVd2vtwxF88zEOhyJRGFKmo43YDaWIiKFVW/rcwe0TPk3BNdZdv qymPUSzXE3vOqHP7xa6kwQ5uDgXyT171BrXAZUt3E8fjhrSOZUhfyAzV6z08plqX iZ39LYVDIiYg/pSqw3s4rY5zaF/pmACBJZH7oBdvrHRX+tm3T7FJiCJXG3nfFrCb 0537OpZwO5R5Zlqn+2p63blKpZEROJMx+cslcVeYl/4HchkSVK3dxDFTpis6vzXJ ehpY4gX9J2D77qA6 -----END CERTIFICATE-----Generated at Sat Jul 5 12:55:29 2025 by rpki-client