$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft File: 51917E722DB03952D9056BED2F6BD4BF98B78976.mft (raw, json) Hash identifier: XPZ+ZqR+Npc41rorPPsbZCje9MDLKVJWNDACLs60bL8= Subject key identifier: 7C:4F:BC:1E:DC:9C:76:0B:B5:64:3E:80:1A:27:5C:38:0B:16:B4:89 Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 26E972EF8D9DACCCF1984CA8A85B6799BFC7FD40 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft Manifest number: 23 Signing time: Fri 06 Jun 2025 05:22:15 +0000 Manifest this update: Fri 06 Jun 2025 05:17:15 +0000 Manifest next update: Sat 07 Jun 2025 06:39:15 +0000 Files and hashes: 1: 326131343a373538303a3530303a3a2f34302d3430203d3e20323039373130.roa (hash: UtWLjV2JD6X8emwUC9bu8RyXGCD7bzymrTBVIEkaVv8=) 2: 326131343a373538303a666635333a3a2f34382d3438203d3e20323039373130.roa (hash: UpFVw7x1NBf/Uix4G0zJEj+QV4riL3tEIjso5GywhOU=) 3: 326131343a373538303a666635313a3a2f34382d3438203d3e20323039373130.roa (hash: KcfiSDiqDvlLOqfaLqph9s6F4NvpySAcmNFiwDriyms=) 4: 51917E722DB03952D9056BED2F6BD4BF98B78976.crl (hash: FPUnl8dA4lt1TXTmkiQ3HTzAHpIHNqNibLTOBaKjg0g=) 5: 326131343a373538303a666635323a3a2f34382d3438203d3e20323039373130.roa (hash: vs66PWFM6L/hirNyhIXTRaz65c001j+IhkCdp8VdfS4=) 6: 326131343a373538303a666635343a3a2f34382d3438203d3e20323039373130.roa (hash: i7VkbN6Rb5CnHlmR8BF2dlC+Uq3PFV4wJTcaolWAu+U=) 7: 326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa (hash: 5weylF9E+kZUqdJn7nMGLccAIkWjUNuo5MqarqyfkO8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 06:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e9:72:ef:8d:9d:ac:cc:f1:98:4c:a8:a8:5b:67:99:bf:c7:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Jun 6 05:17:15 2025 GMT Not After : Jun 7 06:39:15 2025 GMT Subject: CN=7C4FBC1EDC9C760BB5643E801A275C380B16B489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:36:9b:f9:93:7b:d4:15:d5:f0:66:88:a6:e6: 5c:e6:f1:f6:65:f1:f6:62:2e:6a:62:1d:07:42:7e: 43:b4:8a:0c:e4:aa:ba:cd:15:ac:40:fe:ab:fa:22: 1c:4d:bd:f7:b7:e3:f3:c8:a4:fb:8e:d0:39:96:9e: 67:00:24:90:a0:a2:d6:79:4a:c6:df:07:52:f2:77: 67:3d:00:41:ca:84:00:d2:a2:a1:84:bd:c1:43:93: 68:42:d9:d5:42:53:c3:c4:bf:64:c6:4b:fa:06:27: 97:f7:a6:b6:6b:8f:b0:10:da:a8:95:62:7e:62:7d: c1:7e:65:6d:e4:c2:e0:0f:23:65:b6:e2:b6:37:fa: cc:dd:90:3f:f8:d2:49:7a:e8:18:79:71:1f:51:a0: 56:d1:33:b7:ca:45:10:d2:80:07:bd:b3:8b:6d:77: c7:fa:32:bd:91:60:9a:94:fa:1d:34:59:5a:e1:1d: 8f:d5:02:f6:a1:bf:0d:fc:13:87:18:36:89:30:5c: e5:ff:ec:9a:49:23:6a:12:f9:9b:50:53:fa:40:f3: 2b:69:ec:be:59:44:0d:81:e9:f5:f7:dc:d1:98:6b: 2e:62:96:56:ea:dc:25:1e:c1:e2:0e:c3:14:e3:36: 92:b1:e6:8b:f4:78:99:a6:62:4f:c7:80:ee:6b:d4: be:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4F:BC:1E:DC:9C:76:0B:B5:64:3E:80:1A:27:5C:38:0B:16:B4:89 X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:10:41:11:3c:08:41:79:20:29:32:37:ce:18:f6:73:fd:15: 71:d4:3e:51:68:48:27:4b:d9:cf:22:0a:33:5b:0e:5d:e4:bb: 62:a9:78:7d:bf:f0:54:48:a9:fd:ab:ce:8f:72:48:4d:3b:4b: f4:d4:ea:55:ae:7a:2f:2d:93:fa:19:2d:0a:a4:a5:5d:7e:c2: fd:08:f3:2b:67:72:5b:fb:89:df:ad:cf:57:9f:76:6a:7c:4d: 2b:60:73:52:dd:46:4d:f4:1f:c8:29:76:6f:b9:87:9e:10:43: 35:49:d9:0d:01:68:64:d6:44:99:3e:0e:ba:e7:07:4d:ab:61: c0:9f:db:80:45:40:17:49:19:87:1e:c5:59:b7:b3:3c:7e:23: b6:2c:70:87:c4:0d:f4:e5:b1:b3:9f:8b:94:2e:e2:80:d8:dd: 53:3a:c9:90:09:fa:03:82:09:b8:de:c5:5b:94:c4:32:91:b4: 01:a9:9a:7e:ea:02:ac:f9:0b:f0:12:bd:40:a6:8e:b3:91:05: ea:44:8e:b9:68:95:78:d1:bb:65:5d:7f:37:11:c0:d4:df:c4: fd:a0:ab:ba:e0:6c:ae:6e:ba:5e:37:83:83:98:8b:96:25:60: 92:06:c2:6b:ce:e3:51:4c:d0:e5:d4:59:3c:03:ce:89:4b:8d: 68:77:73:2a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJuly742drMzxmEyoqFtnmb/H/UAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNTA2MDYwNTE3MTVaFw0yNTA2MDcwNjM5MTVaMDMxMTAvBgNV BAMTKDdDNEZCQzFFREM5Qzc2MEJCNTY0M0U4MDFBMjc1QzM4MEIxNkI0ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSNpv5k3vUFdXwZoim5lzm8fZl 8fZiLmpiHQdCfkO0igzkqrrNFaxA/qv6IhxNvfe34/PIpPuO0DmWnmcAJJCgotZ5 SsbfB1Lyd2c9AEHKhADSoqGEvcFDk2hC2dVCU8PEv2TGS/oGJ5f3prZrj7AQ2qiV Yn5ifcF+ZW3kwuAPI2W24rY3+szdkD/40kl66Bh5cR9RoFbRM7fKRRDSgAe9s4tt d8f6Mr2RYJqU+h00WVrhHY/VAvahvw38E4cYNokwXOX/7JpJI2oS+ZtQU/pA8ytp 7L5ZRA2B6fX33NGYay5illbq3CUeweIOwxTjNpKx5ov0eJmmYk/HgO5r1L5NAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUfE+8Htycdgu1ZD6AGidcOAsWtIkwHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzllY2FjNDEzLTRjZDItNDcyYy1iMDFlLTc0NDU4Y2VhMzg2Yy8wLzUxOTE3RTcy MkRCMDM5NTJEOTA1NkJFRDJGNkJENEJGOThCNzg5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTEEER PAhBeSApMjfOGPZz/RVx1D5RaEgnS9nPIgozWw5d5LtiqXh9v/BUSKn9q86PckhN O0v01OpVrnovLZP6GS0KpKVdfsL9CPMrZ3Jb+4nfrc9Xn3ZqfE0rYHNS3UZN9B/I KXZvuYeeEEM1SdkNAWhk1kSZPg665wdNq2HAn9uARUAXSRmHHsVZt7M8fiO2LHCH xA305bGzn4uULuKA2N1TOsmQCfoDggm43sVblMQykbQBqZp+6gKs+QvwEr1Apo6z kQXqRI65aJV40btlXX83EcDU38T9oKu64GyubrpeN4ODmIuWJWCSBsJrzuNRTNDl 1Fk8A86JS41od3Mq -----END CERTIFICATE-----Generated at Sat Jun 7 00:00:46 2025 by rpki-client