$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: P4tymLkgOk6j+cfLQwZKIXZdoYXJDUB8E/3vNGYt0aM= Subject key identifier: EC:C8:57:10:6D:56:67:00:BC:84:B7:37:6E:92:87:24:F7:00:82:13 Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 7EFF4AD0DC5C3DC6B613C4F13BB1440A2766823C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 032C Signing time: Fri 06 Jun 2025 04:37:29 +0000 Manifest this update: Fri 06 Jun 2025 04:32:29 +0000 Manifest next update: Sat 07 Jun 2025 07:55:29 +0000 Files and hashes: 1: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: 8ja7Z+swVGTraKxezjgHzXG2GlS/dFRID6jPUC87mFI=) 2: 39332e39352e3131332e302f32342d3234203d3e20323135333034.roa (hash: 3gfso9hqm5DtBYcsaGKuxKlBtoOtyxWD+cWGZp8ZZBg=) 3: 39332e39352e3131322e302f32342d3234203d3e203231383539.roa (hash: /qKqCQ76EfJncAH1+pElYqDNRcZb1xZivyKMiSpERi8=) 4: 39332e39352e3131372e302f32342d3234203d3e20323135373732.roa (hash: vLSBueodjY+0YJW63au8p8n765D5sPEn1sQkXoc5D7w=) 5: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: iuam+Y72SFbVuzZ6DMbPvd9+i2O4uNgJ9aW8l1vNV9U=) 6: 39332e39352e3131332e302f32342d3234203d3e20323134303235.roa (hash: 8Gm4nO+d4zR1wraSZ/HOIsX+oVvW2ewC+6TWc3pBhYE=) 7: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: LlSiDbKahJE8EKdC86b9FtExo35vBo99wDrMQECQ5V0=) 8: 39332e39352e3131342e302f32342d3234203d3e2035303635.roa (hash: MF/szlJtg3jR946D7Iy8tt2rHbx2IcEkKMT7PmewPLE=) 9: 39332e39352e3131332e302f32342d3234203d3e203336353330.roa (hash: XdWmefAZyfxd+tfdlcAJ/nwVibHOt4TWi5DLte79H/Q=) 10: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: oaLDq7aS5NFaYNW1gUs7MDdZL5P0TUUEDkjRyQGla3w=) 11: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: bvqtExc4o5GUJzraVc9CM0CC2GO3x6c+ohx4q9G/dgk=) 12: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: qqVPSWZLREddEW4nL5NY3Bls+ZrG5ASHmT6xiutXttk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 07:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ff:4a:d0:dc:5c:3d:c6:b6:13:c4:f1:3b:b1:44:0a:27:66:82:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Jun 6 04:32:29 2025 GMT Not After : Jun 7 07:55:29 2025 GMT Subject: CN=ECC857106D566700BC84B7376E928724F7008213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9f:47:f1:b1:d4:6e:5b:3f:b7:dd:cd:9e:e0: 66:5c:23:9f:97:d1:f6:00:c3:06:02:20:eb:db:c5: b6:39:ff:c3:fd:61:02:f1:24:92:8c:52:32:06:f3: 81:dd:99:35:ed:1d:88:16:59:7a:79:5c:15:ca:5a: 31:3f:03:27:a4:38:34:7e:75:f5:cf:80:7e:52:89: 2b:f2:0f:76:3c:46:b3:b3:27:b7:4e:75:05:19:cd: f7:f8:d5:ea:47:5f:f2:93:df:ce:b5:f1:de:3a:64: 9e:ec:fb:41:6d:64:94:a7:10:5a:91:11:c4:38:3d: cc:b4:38:56:f6:e6:c4:d3:91:4f:0a:b0:11:ed:a4: 50:92:70:9d:b1:57:00:ff:49:de:49:1f:0a:65:be: b2:91:14:96:98:28:27:ee:18:86:4a:52:08:e6:4f: 6b:b9:2a:1e:49:c0:87:18:81:19:66:1e:61:2e:7d: 28:4b:0e:e8:0b:2c:4d:5c:bf:af:5b:33:b3:20:75: 9f:b5:2c:59:63:45:58:8b:a5:9b:09:6c:b2:08:d1: 34:98:88:12:48:0c:23:44:4f:a5:41:13:21:ab:5d: d0:a3:14:c2:4d:6a:39:95:40:23:28:39:60:8f:42: c9:d5:f3:d5:f4:47:ee:69:d1:4b:ef:86:c8:6c:f3: d5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C8:57:10:6D:56:67:00:BC:84:B7:37:6E:92:87:24:F7:00:82:13 X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d3:e9:6a:52:df:1e:21:44:e5:92:06:e6:06:5c:44:44:15: 90:e2:5d:dc:b3:b1:2f:80:5c:ba:6d:11:69:28:c3:c7:1d:ac: 92:60:6a:ed:b2:aa:e2:23:ca:6c:0c:db:97:4c:bc:57:ec:34: de:d2:9e:eb:66:60:84:fd:ad:e7:c8:9a:d3:68:65:ad:2a:98: 3f:44:20:3a:10:b5:d2:74:b7:93:bc:af:39:d4:d8:62:a6:6b: a6:6f:06:d3:e1:21:85:7b:ff:1a:3a:7b:3c:cd:c4:42:c5:06: d2:54:fb:4e:b4:fa:dd:70:ff:58:81:9a:b0:4e:65:5b:9c:e0: 81:fe:e3:03:21:9e:c1:33:1f:d2:2c:7c:0f:9f:f3:a1:09:39: 77:a9:65:53:81:df:8a:2a:05:49:19:0c:d0:a8:d9:8e:5a:6f: 19:86:4e:dd:2a:ee:17:2d:00:da:13:5c:58:12:2f:6f:43:a2: 02:d3:18:eb:73:b8:41:6b:ec:d4:33:1b:18:d4:59:e4:b9:af: f2:ba:d9:45:36:01:32:b5:2d:43:cd:b0:db:a3:a1:55:c4:5f: a2:83:1a:ae:0f:53:d8:56:a7:ba:3d:d4:74:5f:8b:f2:d8:82: 0e:dc:9d:eb:a2:1f:86:00:0b:87:f5:62:5b:f9:ae:d3:54:e1: 83:20:c8:ea -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfv9K0NxcPca2E8TxO7FECidmgjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNTA2MDYwNDMyMjlaFw0yNTA2MDcwNzU1MjlaMDMxMTAvBgNV BAMTKEVDQzg1NzEwNkQ1NjY3MDBCQzg0QjczNzZFOTI4NzI0RjcwMDgyMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYn0fxsdRuWz+33c2e4GZcI5+X 0fYAwwYCIOvbxbY5/8P9YQLxJJKMUjIG84HdmTXtHYgWWXp5XBXKWjE/AyekODR+ dfXPgH5SiSvyD3Y8RrOzJ7dOdQUZzff41epHX/KT38618d46ZJ7s+0FtZJSnEFqR EcQ4Pcy0OFb25sTTkU8KsBHtpFCScJ2xVwD/Sd5JHwplvrKRFJaYKCfuGIZKUgjm T2u5Kh5JwIcYgRlmHmEufShLDugLLE1cv69bM7MgdZ+1LFljRViLpZsJbLII0TSY iBJIDCNET6VBEyGrXdCjFMJNajmVQCMoOWCPQsnV89X0R+5p0Uvvhshs89VrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7MhXEG1WZwC8hLc3bpKHJPcAghMwHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktPpalLfHiFE5ZIG5gZc REQVkOJd3LOxL4Bcum0RaSjDxx2skmBq7bKq4iPKbAzbl0y8V+w03tKe62ZghP2t 58ia02hlrSqYP0QgOhC10nS3k7yvOdTYYqZrpm8G0+EhhXv/Gjp7PM3EQsUG0lT7 TrT63XD/WIGasE5lW5zggf7jAyGewTMf0ix8D5/zoQk5d6llU4HfiioFSRkM0KjZ jlpvGYZO3SruFy0A2hNcWBIvb0OiAtMY63O4QWvs1DMbGNRZ5Lmv8rrZRTYBMrUt Q82w26OhVcRfooMarg9T2Fanuj3UdF+L8tiCDtyd66IfhgALh/ViW/mu01ThgyDI 6g== -----END CERTIFICATE-----Generated at Fri Jun 6 22:31:18 2025 by rpki-client