$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft File: 5E5179BB1757068D7028510FEEB1177AA7CC8818.mft (raw, json) Hash identifier: u62Iuu4e6tKTDf+cfv0Q9BOG4zCrqc4yhvxxdz3JPGY= Subject key identifier: 7D:9F:BE:76:9F:3A:2B:AF:78:CD:1F:D3:B6:9D:12:49:13:D6:7E:3B Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18 Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818 Certificate serial: 3AAEB7BB55ACD51FF5B00052F694FF152EDA2721 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft Manifest number: 0526 Signing time: Mon 08 Sep 2025 07:49:01 +0000 Manifest this update: Mon 08 Sep 2025 07:44:01 +0000 Manifest next update: Tue 09 Sep 2025 11:16:01 +0000 Files and hashes: 1: 3139322e3130392e31312e302f32342d3234203d3e203136323736.roa (hash: qRWEBAMqR9/oXRv8A+nfXFduPkpHZgx8k4TEVcf/LOk=) 2: 38332e3135302e3231362e302f32322d3234203d3e203631333137.roa (hash: 57aAYCaE5TgSVJlVlCOXKPFo7D7BRt8yiBp9fnzIrpI=) 3: 3139322e3130392e31302e302f32342d3234203d3e203239383032.roa (hash: zPOJooX1SbIfEdoUfLmfFj+bOWKjqS7oznOqpFqjTp4=) 4: 5E5179BB1757068D7028510FEEB1177AA7CC8818.crl (hash: VMa8tGZEbUORshq3dqb7baZ1/UdKw7ikKZPNvjQV+e0=) 5: 38332e3135302e3231382e302f32342d3234203d3e20313939343135.roa (hash: yCFgEcnTSAhMVf29HMHp04B1k4DqC3mlqJPDdmg8wFQ=) 6: 38332e3135302e3231392e302f32342d3234203d3e203533333430.roa (hash: woOa8XrslJUNd/zhwfkw+8SfH4VdemvQujuqkpyzwss=) 7: 38332e3135302e3231372e302f32342d3234203d3e20323132353034.roa (hash: k8RY7QTEncAN/MOxUGAuMRRlssrdtl7ahwCsdlVrRY0=) 8: 38332e3135302e3231362e302f32342d3234203d3e203630353538.roa (hash: JKcEyzkTVqyttDFURXSxmaVQ+BAZuAcc4gW4DE+3N8E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ae:b7:bb:55:ac:d5:1f:f5:b0:00:52:f6:94:ff:15:2e:da:27:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818 Validity Not Before: Sep 8 07:44:01 2025 GMT Not After : Sep 9 11:16:01 2025 GMT Subject: CN=7D9FBE769F3A2BAF78CD1FD3B69D124913D67E3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0e:70:a0:ff:36:fe:44:04:3f:c2:7a:2d:1b: 82:f2:e2:a8:e7:51:49:85:9c:92:47:c0:0e:cf:ea: 91:89:57:d1:23:e6:7b:f4:b6:38:64:43:a7:02:33: 9f:a3:ec:72:b8:03:7c:ab:a6:96:e5:16:9b:23:f1: ce:d5:8e:16:2e:7a:ca:ed:d8:d7:1a:31:e9:08:f0: e8:4f:96:f0:76:73:88:fe:af:59:8a:a2:cb:23:97: a8:f3:65:44:f3:d9:82:e4:13:c4:00:92:ce:84:f3: a6:b0:11:e6:e5:34:dd:1c:09:64:90:74:72:79:53: bb:eb:0f:e9:51:d5:a7:19:e2:23:4a:6d:82:7d:ba: bc:01:be:03:50:c2:70:fb:3d:a0:d1:2b:a6:93:7f: 51:4f:e7:2d:66:d9:5a:56:62:be:62:22:3a:83:91: 73:6f:09:f4:93:51:60:36:21:b3:9d:e9:33:df:cd: f2:36:dc:a4:ed:88:f1:dd:2f:ca:45:52:a4:db:09: e9:a6:45:a4:56:6f:fb:e8:e3:24:a0:ab:0a:a7:56: 95:63:13:aa:98:af:24:11:f6:74:c1:80:0d:c4:0a: 31:c4:c8:7b:04:3e:ed:16:6e:05:65:1e:f2:de:60: e7:9f:59:ee:5a:a7:69:4e:18:87:9e:8f:2c:14:fc: 4b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9F:BE:76:9F:3A:2B:AF:78:CD:1F:D3:B6:9D:12:49:13:D6:7E:3B X509v3 Authority Key Identifier: keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:64:d5:f7:b0:4d:e8:ab:0c:1b:aa:20:78:4a:f7:71:37:90: 14:30:cc:1d:be:ab:d8:52:4e:94:f3:ce:f2:03:3f:9e:3c:04: a9:ed:f5:15:49:6c:89:44:7d:3b:c1:ab:3a:e3:6c:83:95:81: b0:9d:de:3c:00:62:7d:b3:a9:41:43:ef:92:7b:09:c7:6b:c8: d9:92:75:1a:9e:c0:61:38:65:2b:c5:5b:fd:fe:fd:12:f8:8f: 17:9d:da:b3:44:6f:59:2d:ed:68:2e:53:47:17:af:1b:12:65: da:b8:fe:72:32:e9:39:4f:a9:f9:04:fa:f5:a0:a0:64:71:14: 1f:9f:40:9e:16:24:37:99:87:34:a3:ab:6f:f8:7d:a7:fe:cd: 44:ad:2c:5a:82:17:22:e9:06:17:5e:b1:fd:88:39:4d:2c:12: 43:da:bb:58:58:47:fd:ab:aa:ae:b2:27:cb:37:80:30:44:d0: bd:0f:cb:15:c3:95:74:9b:14:47:4b:f3:7a:2b:03:41:cd:82: e7:b6:f6:15:72:5d:6e:35:8f:b7:81:32:d9:52:03:8f:5e:61: 42:d2:8f:55:ac:fe:be:c8:30:42:ac:22:30:08:65:01:f8:82: 96:93:35:4e:31:0c:60:e2:79:4a:df:12:bb:43:9d:6c:05:c0: e5:3e:a9:57 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOq63u1Ws1R/1sABS9pT/FS7aJyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWU1MTc5YmIxNzU3MDY4ZDcwMjg1MTBmZWViMTE3N2Fh N2NjODgxODAeFw0yNTA5MDgwNzQ0MDFaFw0yNTA5MDkxMTE2MDFaMDMxMTAvBgNV BAMTKDdEOUZCRTc2OUYzQTJCQUY3OENEMUZEM0I2OUQxMjQ5MTNENjdFM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxDnCg/zb+RAQ/wnotG4Ly4qjn UUmFnJJHwA7P6pGJV9Ej5nv0tjhkQ6cCM5+j7HK4A3yrppblFpsj8c7VjhYuesrt 2NcaMekI8OhPlvB2c4j+r1mKossjl6jzZUTz2YLkE8QAks6E86awEeblNN0cCWSQ dHJ5U7vrD+lR1acZ4iNKbYJ9urwBvgNQwnD7PaDRK6aTf1FP5y1m2VpWYr5iIjqD kXNvCfSTUWA2IbOd6TPfzfI23KTtiPHdL8pFUqTbCemmRaRWb/vo4ySgqwqnVpVj E6qYryQR9nTBgA3ECjHEyHsEPu0WbgVlHvLeYOefWe5ap2lOGIeejywU/EsnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUfZ++dp86K694zR/Ttp0SSRPWfjswHwYDVR0j BBgwFoAUXlF5uxdXBo1wKFEP7rEXeqfMiBgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODNlNDc1N2YtZDM3Zi00ZmQ2LWE2OWItZDc0YmRkNmI4 N2RjLzAvNUU1MTc5QkIxNzU3MDY4RDcwMjg1MTBGRUVCMTE3N0FBN0NDODgxOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hsRjV1eGRYQm8xd0tGRVA3ckVYZXFm TWlCZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84M2U0NzU3Zi1k MzdmLTRmZDYtYTY5Yi1kNzRiZGQ2Yjg3ZGMvMC81RTUxNzlCQjE3NTcwNjhENzAy ODUxMEZFRUIxMTc3QUE3Q0M4ODE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWTV97BN6KsMG6ogeEr3 cTeQFDDMHb6r2FJOlPPO8gM/njwEqe31FUlsiUR9O8GrOuNsg5WBsJ3ePABifbOp QUPvknsJx2vI2ZJ1Gp7AYThlK8Vb/f79EviPF53as0RvWS3taC5TRxevGxJl2rj+ cjLpOU+p+QT69aCgZHEUH59AnhYkN5mHNKOrb/h9p/7NRK0sWoIXIukGF16x/Yg5 TSwSQ9q7WFhH/auqrrInyzeAMETQvQ/LFcOVdJsUR0vzeisDQc2C57b2FXJdbjWP t4Ey2VIDj15hQtKPVaz+vsgwQqwiMAhlAfiClpM1TjEMYOJ5St8Su0OdbAXA5T6p Vw== -----END CERTIFICATE-----Generated at Mon Sep 8 11:12:55 2025 by rpki-client