$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft File: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft (raw, json) Hash identifier: kPH+5WDT/nOnNEPWKf5U0DCCDy9ukuWEpz93iVRTmdk= Subject key identifier: 3C:AA:39:56:D2:69:DC:A5:66:46:AB:74:39:11:70:92:3B:D8:4F:DA Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A Certificate issuer: /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a Certificate serial: 74D496C3047F204DD737FC7C6F64D06EB8E9AD97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft Manifest number: 034F Signing time: Fri 06 Jun 2025 19:37:32 +0000 Manifest this update: Fri 06 Jun 2025 19:32:32 +0000 Manifest next update: Sat 07 Jun 2025 21:00:32 +0000 Files and hashes: 1: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl (hash: uWphzZhxQb6AQbCuIz40CGIbj7blBi1VJsnZwxqPf4w=) 2: 3138352e33372e3231362e302f32332d3234203d3e203433363431.roa (hash: R1hn+hKIX3uDtuYXayOgRshxOBIjYwYDCqH1e+zmsz0=) 3: 3138352e33372e3231382e302f32332d3234203d3e20323132323338.roa (hash: huwsUB31uBfbleT8W3liIVEEjjwoWiPQyT4oqqDXvCQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d4:96:c3:04:7f:20:4d:d7:37:fc:7c:6f:64:d0:6e:b8:e9:ad:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a Validity Not Before: Jun 6 19:32:32 2025 GMT Not After : Jun 7 21:00:32 2025 GMT Subject: CN=3CAA3956D269DCA56646AB74391170923BD84FDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:81:43:0f:05:78:db:ef:a4:3a:f8:22:05:fc: d6:5a:7d:0a:2c:43:79:7c:cf:bb:3f:80:c2:56:32: ae:e9:d5:05:d7:b6:08:29:e3:8e:4c:e2:98:48:fe: 4f:ed:36:8a:8f:3e:d6:1b:e9:71:c5:ea:54:63:bd: 71:c8:31:40:95:57:a9:94:a6:ff:ed:82:04:31:4b: 4a:27:40:85:58:58:c5:51:e4:a9:d8:61:62:20:68: 0d:6f:b4:10:b5:0c:0e:d8:6a:f8:36:ac:63:f7:ce: 3f:62:36:1d:ee:c5:d2:3c:56:f0:99:17:33:85:c5: b1:37:ad:b1:c5:53:13:ab:e4:18:43:ef:76:3f:7c: a1:5c:a3:6c:65:3e:c3:e6:0c:54:5c:34:6f:b0:c0: 3b:99:7b:6e:b2:c4:64:62:9a:09:7c:3b:ff:1f:17: 58:7e:60:60:ae:74:5a:16:e0:28:9e:80:e4:5f:eb: d4:26:d5:6d:44:e4:f6:15:73:1d:40:5b:fe:40:f7: 89:68:b1:4b:f9:47:54:c3:8a:fa:c7:9e:87:5e:9a: dd:3e:b4:82:65:91:90:ad:13:b8:17:c4:0e:03:09: eb:68:09:9d:c6:01:9e:a9:c1:fa:4d:7b:88:74:7b: 54:b7:15:8a:34:55:43:dd:2e:fa:d3:03:43:04:f7: a6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AA:39:56:D2:69:DC:A5:66:46:AB:74:39:11:70:92:3B:D8:4F:DA X509v3 Authority Key Identifier: keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:41:01:df:8e:4c:38:a1:2f:96:ee:c5:77:dc:b6:98:a0:22: 23:13:f6:c0:18:4b:d0:36:d9:a4:60:17:fe:4d:bf:cb:99:e6: b4:59:4a:5b:28:b6:40:90:c8:54:a6:35:c1:8a:4b:c4:77:60: 11:9a:f4:cd:b7:98:e3:8b:5c:a0:83:16:cd:d3:df:d0:18:e8: 99:f7:f5:7d:5b:27:39:a7:29:e0:e9:69:ed:1c:db:15:f7:d6: d2:30:d6:d8:70:d1:f4:04:7c:17:5e:7d:09:57:0a:5e:36:f4: 6d:82:0e:0c:7b:10:c7:50:0d:dd:2f:d4:35:45:92:27:58:34: b5:a5:73:10:f8:89:d6:f0:65:d0:d7:88:c0:89:52:09:f0:17: ad:b4:41:d7:9a:8c:42:8a:7e:f3:4c:49:dd:e3:47:f4:9d:8e: d4:c1:2a:1d:6d:78:fc:cd:d6:fa:d4:25:0a:af:5f:22:27:a2: 44:60:7f:a9:fa:c0:6d:11:87:70:5c:3e:4b:85:a4:fa:48:b7: 4b:6d:55:f6:12:2e:38:91:dc:ca:b0:af:1a:15:8c:3f:40:8b: 7d:59:31:60:f7:93:79:16:3c:34:4b:49:4c:a9:49:7e:cd:75: b6:32:0a:e8:00:0e:48:b2:6e:eb:a9:38:15:c9:96:45:f5:55: d7:75:93:a9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdNSWwwR/IE3XN/x8b2TQbrjprZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWRiOWYzZTZkOGU0YjU3YzQ5MzAxYWE2MjFlZjFmOTAz ODllMDU3YTAeFw0yNTA2MDYxOTMyMzJaFw0yNTA2MDcyMTAwMzJaMDMxMTAvBgNV BAMTKDNDQUEzOTU2RDI2OURDQTU2NjQ2QUI3NDM5MTE3MDkyM0JEODRGREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcgUMPBXjb76Q6+CIF/NZafQos Q3l8z7s/gMJWMq7p1QXXtggp445M4phI/k/tNoqPPtYb6XHF6lRjvXHIMUCVV6mU pv/tggQxS0onQIVYWMVR5KnYYWIgaA1vtBC1DA7Yavg2rGP3zj9iNh3uxdI8VvCZ FzOFxbE3rbHFUxOr5BhD73Y/fKFco2xlPsPmDFRcNG+wwDuZe26yxGRimgl8O/8f F1h+YGCudFoW4CiegORf69Qm1W1E5PYVcx1AW/5A94losUv5R1TDivrHnodemt0+ tIJlkZCtE7gXxA4DCetoCZ3GAZ6pwfpNe4h0e1S3FYo0VUPdLvrTA0ME96arAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUPKo5VtJp3KVmRqt0ORFwkjvYT9owHwYDVR0j BBgwFoAU7bnz5tjktXxJMBqmIe8fkDieBXowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmNmYTRhMmMtZTE0NS00MTRkLWE2MmYtMDlhM2Y5YjU3 NWZkLzAvRURCOUYzRTZEOEU0QjU3QzQ5MzAxQUE2MjFFRjFGOTAzODlFMDU3QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdibno1dGprdFh4Sk1CcW1JZThma0Rp ZUJYby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82Y2ZhNGEyYy1l MTQ1LTQxNGQtYTYyZi0wOWEzZjliNTc1ZmQvMC9FREI5RjNFNkQ4RTRCNTdDNDkz MDFBQTYyMUVGMUY5MDM4OUUwNTdBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkEB345MOKEvlu7Fd9y2 mKAiIxP2wBhL0DbZpGAX/k2/y5nmtFlKWyi2QJDIVKY1wYpLxHdgEZr0zbeY44tc oIMWzdPf0Bjomff1fVsnOacp4Olp7RzbFffW0jDW2HDR9AR8F159CVcKXjb0bYIO DHsQx1AN3S/UNUWSJ1g0taVzEPiJ1vBl0NeIwIlSCfAXrbRB15qMQop+80xJ3eNH 9J2O1MEqHW14/M3W+tQlCq9fIieiRGB/qfrAbRGHcFw+S4Wk+ki3S21V9hIuOJHc yrCvGhWMP0CLfVkxYPeTeRY8NEtJTKlJfs11tjIK6AAOSLJu66k4FcmWRfVV13WT qQ== -----END CERTIFICATE-----Generated at Fri Jun 6 22:23:16 2025 by rpki-client