$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft File: C284E54726A876081FA2857EF4AF5B1A78D096B4.mft (raw, json) Hash identifier: vk4Qq2xZ4uvSwgXhWQJlRs3A7bDNMg2SulvMgEW0yPI= Subject key identifier: 79:11:55:B5:56:F7:77:D5:EC:AB:FB:C6:FD:E9:C2:F4:DF:30:C8:9B Authority key identifier: C2:84:E5:47:26:A8:76:08:1F:A2:85:7E:F4:AF:5B:1A:78:D0:96:B4 Certificate issuer: /CN=C284E54726A876081FA2857EF4AF5B1A78D096B4 Certificate serial: 1DD785AFA1981BB11CB4EF997A70EDE1ABA6A1F4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft Manifest number: 02 Signing time: Sat 05 Jul 2025 04:13:39 +0000 Manifest this update: Sat 05 Jul 2025 04:08:39 +0000 Manifest next update: Sun 06 Jul 2025 07:12:39 +0000 Files and hashes: 1: C284E54726A876081FA2857EF4AF5B1A78D096B4.crl (hash: k/uzgjtnKoIr7uyqarTNoHFwVIu0tRxFHr/OCmhC1bc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d7:85:af:a1:98:1b:b1:1c:b4:ef:99:7a:70:ed:e1:ab:a6:a1:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C284E54726A876081FA2857EF4AF5B1A78D096B4 Validity Not Before: Jul 5 04:08:39 2025 GMT Not After : Jul 6 07:12:39 2025 GMT Subject: CN=791155B556F777D5ECABFBC6FDE9C2F4DF30C89B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3a:b8:90:b0:54:72:ea:c4:30:d1:05:1f:8c: 3f:06:7a:60:fb:2e:77:bb:48:f5:68:7f:0c:19:e0: 66:63:5a:be:cf:d3:55:d1:1c:a9:dc:9b:d7:82:a9: b3:7c:b8:5b:7f:d8:33:73:ab:5a:2a:3f:3e:5f:10: 91:fb:0b:14:8b:48:58:a1:d6:1a:13:59:35:94:1a: 32:db:eb:1f:7a:5c:9a:88:e1:83:8c:7c:a5:7e:8c: 02:91:d2:bb:2c:20:97:1b:05:4f:f2:81:cc:42:65: 4e:78:b0:4b:43:b9:e9:97:1c:8a:c3:cf:33:41:07: 2c:f0:b5:83:7b:7b:37:37:3b:fc:12:27:5f:89:07: b5:bd:cb:4d:51:58:af:09:20:cd:a3:fb:36:85:99: ec:3a:e9:65:8b:36:68:da:81:fe:bf:08:fd:32:b1: 9c:7b:d1:68:2b:54:b5:58:bc:aa:66:fd:1e:ea:62: 52:74:ac:1b:0a:0d:74:b6:f6:62:68:6d:bd:45:da: 67:7f:ab:81:a8:f2:96:7c:21:a4:6c:5d:74:24:73: 81:dd:5d:b6:24:5d:e1:69:50:da:a6:be:de:23:3c: c7:0a:1d:1f:a7:33:96:86:6b:b7:27:39:4d:fc:11: 4a:f7:77:ff:69:2c:2a:e4:b1:e1:9f:f9:94:3b:e6: 66:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:11:55:B5:56:F7:77:D5:EC:AB:FB:C6:FD:E9:C2:F4:DF:30:C8:9B X509v3 Authority Key Identifier: keyid:C2:84:E5:47:26:A8:76:08:1F:A2:85:7E:F4:AF:5B:1A:78:D0:96:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/C284E54726A876081FA2857EF4AF5B1A78D096B4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/5/C284E54726A876081FA2857EF4AF5B1A78D096B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:f4:bd:9e:ae:6e:d3:1a:1e:53:76:4f:b4:2c:61:7e:26:41: 37:69:4a:a3:97:76:75:0f:6b:ab:3b:d9:6d:d4:dd:ed:d7:89: 73:3a:c1:d9:e0:90:97:28:82:36:fd:58:2e:a5:f0:90:8b:12: 03:23:ad:38:b7:f3:eb:34:42:c1:3e:47:ac:04:5b:b5:cd:43: e1:ac:ee:63:77:09:3f:34:6b:84:02:38:2b:e7:1e:5a:cf:80: 65:02:ea:6c:36:79:91:e4:9a:e6:40:a3:3c:07:60:48:ba:8c: 9a:25:bf:a0:25:29:45:9b:ba:d7:44:fa:ad:ff:ea:75:df:c6: 90:21:c1:85:58:b7:9e:00:ec:c6:1d:80:51:37:f2:ef:dd:ce: 28:e0:a4:b8:2d:45:c4:00:5d:3d:63:b5:72:aa:fe:94:63:81: a8:7c:cb:b6:ed:27:27:ad:cf:d8:c6:19:1d:34:5f:87:a0:68: a5:d8:f1:69:92:f6:d2:ec:4e:2b:5c:8c:ab:8a:2e:c6:f7:68: e3:f2:d7:a8:2b:ef:0e:ba:fb:60:fb:59:7e:05:04:24:ee:f0: dc:d6:c8:5b:63:f3:e8:18:f1:d6:41:bd:a9:0f:e2:4b:ed:f9: 67:90:ac:6d:9c:78:aa:0d:dd:47:00:b1:c5:49:34:b0:83:1e: d8:e9:19:4e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHdeFr6GYG7EctO+ZenDt4aumofQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI4NEU1NDcyNkE4NzYwODFGQTI4NTdFRjRBRjVCMUE3 OEQwOTZCNDAeFw0yNTA3MDUwNDA4MzlaFw0yNTA3MDYwNzEyMzlaMDMxMTAvBgNV BAMTKDc5MTE1NUI1NTZGNzc3RDVFQ0FCRkJDNkZERTlDMkY0REYzMEM4OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQOriQsFRy6sQw0QUfjD8GemD7 Lne7SPVofwwZ4GZjWr7P01XRHKncm9eCqbN8uFt/2DNzq1oqPz5fEJH7CxSLSFih 1hoTWTWUGjLb6x96XJqI4YOMfKV+jAKR0rssIJcbBU/ygcxCZU54sEtDuemXHIrD zzNBByzwtYN7ezc3O/wSJ1+JB7W9y01RWK8JIM2j+zaFmew66WWLNmjagf6/CP0y sZx70WgrVLVYvKpm/R7qYlJ0rBsKDXS29mJobb1F2md/q4Go8pZ8IaRsXXQkc4Hd XbYkXeFpUNqmvt4jPMcKHR+nM5aGa7cnOU38EUr3d/9pLCrkseGf+ZQ75mZ9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUeRFVtVb3d9Xsq/vG/enC9N8wyJswHwYDVR0j BBgwFoAUwoTlRyaodggfooV+9K9bGnjQlrQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzUvQzI4NEU1NDcyNkE4NzYwODFGQTI4NTdFRjRBRjVCMUE3OEQwOTZCNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9DMjg0RTU0NzI2QTg3NjA4MUZBMjg1N0VG NEFGNUIxQTc4RDA5NkI0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZmZjdhOTg5LWVjZGYtNDNkNi04NmUxLWY2YzM5MzViOWIzZC81L0MyODRFNTQ3 MjZBODc2MDgxRkEyODU3RUY0QUY1QjFBNzhEMDk2QjQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCW9L2e rm7TGh5Tdk+0LGF+JkE3aUqjl3Z1D2urO9lt1N3t14lzOsHZ4JCXKII2/VgupfCQ ixIDI604t/PrNELBPkesBFu1zUPhrO5jdwk/NGuEAjgr5x5az4BlAupsNnmR5Jrm QKM8B2BIuoyaJb+gJSlFm7rXRPqt/+p138aQIcGFWLeeAOzGHYBRN/Lv3c4o4KS4 LUXEAF09Y7Vyqv6UY4GofMu27Scnrc/YxhkdNF+HoGil2PFpkvbS7E4rXIyrii7G 92jj8teoK+8Ouvtg+1l+BQQk7vDc1shbY/PoGPHWQb2pD+JL7flnkKxtnHiqDd1H ALHFSTSwgx7Y6RlO -----END CERTIFICATE-----Generated at Sat Jul 5 12:48:35 2025 by rpki-client