$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft File: 99D922574ADCFE8B3741930044512F9A57EF91A4.mft (raw, json) Hash identifier: UceKK3p8Ms1PTxK0O9kpy0Zs+GV/Xp9O+aIPRYcS3ZQ= Subject key identifier: C5:E2:FB:6D:52:58:A1:C1:67:23:3E:CA:63:6E:20:FA:DF:13:8D:0F Authority key identifier: 99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4 Certificate issuer: /CN=99D922574ADCFE8B3741930044512F9A57EF91A4 Certificate serial: 7FD9FA424A794872E63DC6254EDC03381C8A82F3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft Manifest number: 01E8 Signing time: Mon 02 Jun 2025 14:43:44 +0000 Manifest this update: Mon 02 Jun 2025 14:38:44 +0000 Manifest next update: Tue 03 Jun 2025 15:57:44 +0000 Files and hashes: 1: 99D922574ADCFE8B3741930044512F9A57EF91A4.crl (hash: l1r/1l4zd8uT1bnp0IoiPzXjECs0ino9dPY1Lg0fSaQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 14:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d9:fa:42:4a:79:48:72:e6:3d:c6:25:4e:dc:03:38:1c:8a:82:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99D922574ADCFE8B3741930044512F9A57EF91A4 Validity Not Before: Jun 2 14:38:44 2025 GMT Not After : Jun 3 15:57:44 2025 GMT Subject: CN=C5E2FB6D5258A1C167233ECA636E20FADF138D0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:15:9d:52:31:52:4c:57:e7:ec:dd:6d:8b:d8: 09:25:84:91:bd:dd:22:e8:59:a7:33:e3:25:6b:91: 65:73:cf:98:94:3f:79:77:46:14:5d:4a:86:d2:11: b3:4c:5d:9a:f2:a7:5f:74:1d:11:ac:f4:ce:ea:c5: cd:99:46:8c:3e:57:11:a5:f1:9d:d3:40:48:17:01: bb:fd:e6:6a:f7:2a:6e:21:af:a4:58:6e:38:86:6a: 35:44:fc:a6:d2:56:9a:cd:09:03:ca:87:2f:24:a3: 9b:fd:9a:3d:f5:30:e5:1d:49:67:dc:59:72:1f:6e: 04:4e:75:81:06:23:a0:9f:d3:9f:d3:34:86:3f:00: 05:36:dd:1b:10:b2:e8:5e:67:41:f7:51:59:65:91: 67:cc:6a:a8:95:b6:10:5c:d3:4f:54:69:64:68:7f: 06:9d:97:ec:1f:d2:7c:50:93:58:9e:d3:cb:5c:46: a5:ae:e4:8d:b8:ae:d1:f3:c2:f4:47:11:f7:d3:2c: ee:e3:17:eb:0d:09:04:0b:2b:4d:ef:04:05:13:24: bd:8a:b0:4a:71:da:c0:15:a4:89:c2:1d:a3:1d:08: 1f:98:8b:60:f6:7c:5a:0f:43:22:d9:04:17:f7:75: fd:1b:e4:f7:f3:d4:4a:3e:5c:72:18:8e:e0:90:d2: 68:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E2:FB:6D:52:58:A1:C1:67:23:3E:CA:63:6E:20:FA:DF:13:8D:0F X509v3 Authority Key Identifier: keyid:99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ac:b9:0d:09:fd:5f:bb:da:3a:4b:38:15:6c:10:f7:85:e4: c0:fb:a2:db:cc:ce:24:10:2b:d4:fd:be:1c:9f:8c:a7:00:85: 93:b1:1c:db:0c:97:b2:34:d5:36:69:52:4c:44:db:63:d5:e1: 17:ce:41:0a:c7:2a:ac:77:64:a9:d5:68:a2:6c:85:18:d7:b6: b6:0f:d0:7f:4b:e4:f3:ff:5f:f9:45:bb:78:ff:2e:bf:b0:74: 53:83:68:9d:ac:66:42:65:3d:64:ef:ad:29:89:89:f9:39:68: aa:f3:0a:59:fe:2d:6e:c0:91:05:ac:bb:9d:5d:db:bb:2b:98: b6:f7:a1:61:eb:62:c9:8d:82:b8:10:b2:46:05:95:73:3b:3a: 1b:dd:b4:97:28:4b:1c:e3:e4:f8:da:4e:46:22:c8:1d:de:7d: 6d:4f:1f:98:5b:37:e0:ad:48:1c:fc:2b:bd:7f:ac:e4:a7:94: 2c:cf:11:04:8a:31:62:50:e8:b2:81:fc:ae:de:77:44:66:07: bc:dc:3a:c2:16:6c:7a:3a:fb:a3:e6:f2:be:25:b1:b6:c1:a2: 21:a4:77:c7:59:84:96:1a:8d:04:cc:d9:ca:0c:1b:ac:70:ad: 51:76:ba:6d:df:2d:16:e0:25:40:25:32:96:1f:00:e8:a2:4e: d9:f5:bb:81 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUf9n6Qkp5SHLmPcYlTtwDOByKgvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlEOTIyNTc0QURDRkU4QjM3NDE5MzAwNDQ1MTJGOUE1 N0VGOTFBNDAeFw0yNTA2MDIxNDM4NDRaFw0yNTA2MDMxNTU3NDRaMDMxMTAvBgNV BAMTKEM1RTJGQjZENTI1OEExQzE2NzIzM0VDQTYzNkUyMEZBREYxMzhEMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6FZ1SMVJMV+fs3W2L2AklhJG9 3SLoWacz4yVrkWVzz5iUP3l3RhRdSobSEbNMXZryp190HRGs9M7qxc2ZRow+VxGl 8Z3TQEgXAbv95mr3Km4hr6RYbjiGajVE/KbSVprNCQPKhy8ko5v9mj31MOUdSWfc WXIfbgROdYEGI6Cf05/TNIY/AAU23RsQsuheZ0H3UVllkWfMaqiVthBc009UaWRo fwadl+wf0nxQk1ie08tcRqWu5I24rtHzwvRHEffTLO7jF+sNCQQLK03vBAUTJL2K sEpx2sAVpInCHaMdCB+Yi2D2fFoPQyLZBBf3df0b5Pfz1Eo+XHIYjuCQ0mgnAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUxeL7bVJYocFnIz7KY24g+t8TjQ8wHwYDVR0j BBgwFoAUmdkiV0rc/os3QZMARFEvmlfvkaQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzIvOTlEOTIyNTc0QURDRkU4QjM3NDE5MzAwNDQ1MTJGOUE1N0VGOTFBNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC85OUQ5MjI1NzRBRENGRThCMzc0MTkzMDA0 NDUxMkY5QTU3RUY5MUE0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZmZjdhOTg5LWVjZGYtNDNkNi04NmUxLWY2YzM5MzViOWIzZC8yLzk5RDkyMjU3 NEFEQ0ZFOEIzNzQxOTMwMDQ0NTEyRjlBNTdFRjkxQTQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCFrLkN Cf1fu9o6SzgVbBD3heTA+6LbzM4kECvU/b4cn4ynAIWTsRzbDJeyNNU2aVJMRNtj 1eEXzkEKxyqsd2Sp1WiibIUY17a2D9B/S+Tz/1/5Rbt4/y6/sHRTg2idrGZCZT1k 760piYn5OWiq8wpZ/i1uwJEFrLudXdu7K5i296Fh62LJjYK4ELJGBZVzOzob3bSX KEsc4+T42k5GIsgd3n1tTx+YWzfgrUgc/Cu9f6zkp5QszxEEijFiUOiygfyu3ndE Zge83DrCFmx6Ovuj5vK+JbG2waIhpHfHWYSWGo0EzNnKDBuscK1Rdrpt3y0W4CVA JTKWHwDook7Z9buB -----END CERTIFICATE-----Generated at Tue Jun 3 03:29:59 2025 by rpki-client