$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: MSAlCBqhQBAcVzgk8u21cxCy+iSi3MRK4QmVsa+9BPM= Subject key identifier: 79:CE:2B:C6:F5:CA:1E:83:A3:AA:91:AF:48:CA:4F:04:A7:91:9C:3D Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 617226D2AD3B67F84C52B205AA80FC087895C207 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: 5D Signing time: Fri 06 Jun 2025 23:42:32 +0000 Manifest this update: Fri 06 Jun 2025 23:37:32 +0000 Manifest next update: Sun 08 Jun 2025 02:07:32 +0000 Files and hashes: 1: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: obPbW0ZKO9rq4yp7c5UqzqijavPW0CV78gaYhHaBReI=) 2: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: oXC9Asr9SJ7DSslxSZaWUX9xWnSBbY5iUxbxwvvcFUI=) 3: 3231332e3135372e3132312e302f32342d3234203d3e20383334.roa (hash: KzRDONoUEdWtAmYoE3nM54cz2mZ3OTHGtsETHEM2i5I=) 4: 3231332e3135372e3132332e302f32342d3234203d3e20313337353137.roa (hash: 101KeXXnBE7X7QLTvc7Gr7DVuO0YIAuTdg47tJ4yQUU=) 5: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: u6D0nQIamyf1rwT6EphlkmgpGmdsHhrROhbEzSFSSxQ=) 6: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: fkThFrWbc2SNg5nWL/DjCmp7efO9LKVSLfyHO63Odeo=) 7: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: YozVeBr1pE5JF22gewWlDFgIFO8W7pXljr2ellvH33M=) 8: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: U2rsj2GmpPBYV9RPLITNHzbaDI2Gxelnlov5msxX9eI=) 9: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: aUvc4UTsIU7R0m9dsnmxWesOTPr9WQo6/RshJ5X0hb4=) 10: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: cK22q6rO6KtktflqsQYlSr1z73xEpoVM/WNGnd6YIEI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 02:07:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:72:26:d2:ad:3b:67:f8:4c:52:b2:05:aa:80:fc:08:78:95:c2:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Jun 6 23:37:32 2025 GMT Not After : Jun 8 02:07:32 2025 GMT Subject: CN=79CE2BC6F5CA1E83A3AA91AF48CA4F04A7919C3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:67:5d:14:6e:64:e0:61:48:da:ea:7e:eb:d0: c1:6c:54:53:c5:df:b8:00:57:64:6f:25:4c:fd:51: 51:bc:24:71:8f:fe:26:15:35:f6:d2:0b:8b:95:86: f4:a3:c4:0c:b6:cb:48:09:9f:df:d8:11:2b:52:89: 3a:3c:e5:fb:48:71:f2:fc:8a:06:8c:8b:0d:fc:90: 68:a6:cc:d7:1c:9a:01:d0:05:89:6e:6c:03:ec:87: 4f:3e:14:ca:9a:c0:44:53:40:b6:56:fd:34:09:5f: 6b:e7:c8:5c:8b:b9:1e:63:65:cb:ee:1c:a7:90:7c: d3:45:9b:c9:ec:31:31:0f:f8:e0:2d:47:c5:f0:14: fc:d7:44:81:a0:1c:52:e1:d8:77:64:99:21:e1:fa: ee:09:17:ff:21:0b:6f:8f:80:cd:28:43:ea:23:05: 61:a1:09:56:88:20:12:a0:01:ae:5c:58:8c:29:f4: 22:86:cd:11:c9:2e:1a:2e:5e:8c:ff:fc:60:71:95: 43:9d:e8:81:23:4b:3f:be:6e:1e:6b:24:11:52:12: 4d:35:3e:28:50:bb:cb:21:36:87:78:ce:4b:40:4b: 55:03:ae:ea:1d:b7:e9:9c:86:c1:c0:83:e8:40:ff: 3f:26:d3:1e:ce:40:71:61:d1:b4:e8:3c:20:65:bf: b7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CE:2B:C6:F5:CA:1E:83:A3:AA:91:AF:48:CA:4F:04:A7:91:9C:3D X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6a:34:68:71:24:c4:3a:32:e8:b5:d4:ff:86:35:5d:3c:86: 17:7b:54:bf:c3:6a:c4:d9:6a:b7:a4:51:5f:57:a1:84:27:23: 6d:38:1d:17:1c:cd:fe:c9:b0:d5:16:af:ab:a0:3e:e4:c2:32: a4:c4:07:ce:90:4d:23:6a:db:d4:ae:d0:a2:21:84:28:33:42: 29:7c:0b:fb:09:8b:d3:e4:53:84:a4:6c:72:b9:e6:dd:b9:c9: 81:b1:e2:d1:62:99:c7:21:9c:0d:92:d9:d0:1d:ed:53:56:b6: b1:d6:fa:12:04:60:42:7b:6c:40:e2:29:02:4d:c0:71:ee:86: ca:a6:c0:3a:ac:fb:00:4a:59:88:af:8a:a1:fe:c1:fd:b1:51: 94:15:86:cd:94:ca:77:88:22:a0:41:98:d2:b8:ce:04:27:9c: e6:c8:05:e9:d0:a8:15:99:c6:09:d6:5d:31:4b:a4:7d:d3:9a: d8:32:cf:94:0f:5f:b2:17:df:e6:7c:28:a3:8c:9b:43:87:05: 1b:33:79:84:a2:a4:a0:92:3d:a6:58:dc:3c:e4:48:50:d3:04: 29:49:ac:60:3b:aa:4a:fd:c9:08:af:90:14:04:ba:81:ad:90: f3:76:1c:e4:6c:c0:08:e8:0d:7e:a0:b5:b4:6c:a4:9f:4e:3c: b9:5f:de:8f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYXIm0q07Z/hMUrIFqoD8CHiVwgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNTA2MDYyMzM3MzJaFw0yNTA2MDgwMjA3MzJaMDMxMTAvBgNV BAMTKDc5Q0UyQkM2RjVDQTFFODNBM0FBOTFBRjQ4Q0E0RjA0QTc5MTlDM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZ10UbmTgYUja6n7r0MFsVFPF 37gAV2RvJUz9UVG8JHGP/iYVNfbSC4uVhvSjxAy2y0gJn9/YEStSiTo85ftIcfL8 igaMiw38kGimzNccmgHQBYlubAPsh08+FMqawERTQLZW/TQJX2vnyFyLuR5jZcvu HKeQfNNFm8nsMTEP+OAtR8XwFPzXRIGgHFLh2HdkmSHh+u4JF/8hC2+PgM0oQ+oj BWGhCVaIIBKgAa5cWIwp9CKGzRHJLhouXoz//GBxlUOd6IEjSz++bh5rJBFSEk01 PihQu8shNod4zktAS1UDruodt+mchsHAg+hA/z8m0x7OQHFh0bToPCBlv7cDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUec4rxvXKHoOjqpGvSMpPBKeRnD0wHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmo0aHEkxDoy6LXU/4Y1 XTyGF3tUv8NqxNlqt6RRX1ehhCcjbTgdFxzN/smw1Ravq6A+5MIypMQHzpBNI2rb 1K7QoiGEKDNCKXwL+wmL0+RThKRscrnm3bnJgbHi0WKZxyGcDZLZ0B3tU1a2sdb6 EgRgQntsQOIpAk3Ace6GyqbAOqz7AEpZiK+Kof7B/bFRlBWGzZTKd4gioEGY0rjO BCec5sgF6dCoFZnGCdZdMUukfdOa2DLPlA9fshff5nwoo4ybQ4cFGzN5hKKkoJI9 pljcPORIUNMEKUmsYDuqSv3JCK+QFAS6ga2Q83Yc5GzACOgNfqC1tGykn048uV/e jw== -----END CERTIFICATE-----Generated at Sat Jun 7 13:56:31 2025 by rpki-client