$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: V7MNBQ6kYpiN9nZSENjUyiVaWLLNGMLlDJwW4EjWKOw= Subject key identifier: 52:9C:7A:0C:F1:F3:DC:F3:E1:0F:B1:63:02:B8:48:21:C6:B3:D1:42 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 1B8A6AC33C8D787F780D2F6E4243CF2B18DA5B1E Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 5D Signing time: Fri 06 Jun 2025 17:55:38 +0000 Manifest this update: Fri 06 Jun 2025 17:50:38 +0000 Manifest next update: Sun 08 Jun 2025 07:56:38 +0000 Files and hashes: 1: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: fDez3nKoXUDJHva/D2m22temLwPBsUg3vYkBa+vjLAk=) 2: 326130623a346530373a363065303a3a2f34342d3438203d3e203339333531.roa (hash: /JgrvpSR1ZDGP36oDONfP8baAAR4FG/skafz4v4Fs6E=) 3: 326130623a346530373a363064303a3a2f34342d3438203d3e20323134373031.roa (hash: uV2TLwh180zk/DItScOuiwKDHaU99Mhyx8m59bwZFmA=) 4: 326130623a346530373a363030303a3a2f34312d3438203d3e20323134373031.roa (hash: 4kUbGyjkNaSVg+CdxZZIcLS92ZdRbZtwjsOz4Bjkgro=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 19:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:8a:6a:c3:3c:8d:78:7f:78:0d:2f:6e:42:43:cf:2b:18:da:5b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Jun 6 17:50:38 2025 GMT Not After : Jun 8 07:56:38 2025 GMT Subject: CN=529C7A0CF1F3DCF3E10FB16302B84821C6B3D142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ac:8c:c0:ce:cb:f0:b9:39:c7:d7:ea:4e:08: e8:60:82:92:22:a8:82:72:31:98:67:71:23:79:9b: 76:be:12:96:25:93:dd:ad:57:b7:f3:d4:d7:70:46: 65:f7:65:08:11:8d:90:45:7b:30:1d:0e:9b:6d:84: 35:40:5e:c4:dd:3a:22:d3:ab:95:84:94:d3:eb:4c: 3f:65:22:97:50:7d:59:58:0b:ea:5d:fb:7f:4c:79: ae:cf:18:85:3d:51:24:7c:8e:b1:6e:c4:96:27:52: fb:b4:b9:2e:35:c0:a0:76:59:8a:a5:57:e4:b4:7f: 07:be:8e:4c:ae:5b:2b:b0:d9:96:96:f2:3c:ed:f6: bb:d8:45:3e:01:0e:28:da:1a:9e:c8:99:68:5d:d7: 19:3f:1d:73:68:22:14:6d:0d:36:4d:c3:ee:3c:02: 5c:a0:8a:87:a6:27:33:3b:88:e9:0a:12:a9:5e:46: b7:65:fc:9b:56:68:10:c8:b2:fc:ea:7a:a1:13:1c: 61:47:e4:38:0e:f7:a0:5d:8b:50:69:ad:00:df:67: ce:f5:be:f4:79:d4:55:19:17:57:1d:3c:f1:ad:19: d7:4a:f2:2a:b1:26:77:cc:42:aa:a1:3f:7b:f1:c2: ed:ed:8b:24:31:d3:9d:8a:f7:e3:54:e1:12:07:53: 55:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9C:7A:0C:F1:F3:DC:F3:E1:0F:B1:63:02:B8:48:21:C6:B3:D1:42 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:8b:f9:cc:48:86:ea:54:e8:5b:a0:23:41:82:85:a9:4d:18: a7:8b:3b:e8:11:31:48:6c:15:15:d8:3a:88:af:33:3d:4b:f9: 05:69:39:1f:c2:2a:cd:8c:73:98:6d:2d:4e:02:84:03:4e:9d: e9:a8:5d:fd:95:86:36:40:44:cb:eb:fd:4e:1a:24:1a:34:e5: 3f:0e:9b:b2:93:44:63:ca:33:81:3a:b1:9b:72:47:ff:3b:78: 19:72:a4:e2:d9:8c:4d:35:35:fc:8f:8e:64:67:a8:92:19:b7: 6a:c0:2d:38:ad:eb:72:86:ca:91:ed:cc:3b:2e:90:e5:4b:ce: 15:2c:13:8a:38:8d:5a:31:10:d1:a4:9a:8c:9e:4d:56:d2:0b: 07:01:07:d6:0d:d3:45:35:78:c4:ff:91:01:05:5b:c7:ca:92: 6b:a6:9f:13:8c:93:86:f4:54:ca:44:c5:2b:6c:c1:95:47:c6: 91:41:0b:f2:8e:63:86:5d:d2:80:67:e0:ea:a8:12:88:39:96: 0f:00:7f:bb:ae:42:70:ee:48:8f:1d:02:20:95:b0:d1:2e:b0: 07:16:85:f0:31:d8:ed:6a:3f:6a:30:28:10:ef:40:91:80:fa: b1:1c:60:05:8f:4c:73:24:cd:8a:20:f5:da:01:94:bf:4d:70: 8b:6b:91:96 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUG4pqwzyNeH94DS9uQkPPKxjaWx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNTA2MDYxNzUwMzhaFw0yNTA2MDgwNzU2MzhaMDMxMTAvBgNV BAMTKDUyOUM3QTBDRjFGM0RDRjNFMTBGQjE2MzAyQjg0ODIxQzZCM0QxNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rIzAzsvwuTnH1+pOCOhggpIi qIJyMZhncSN5m3a+EpYlk92tV7fz1NdwRmX3ZQgRjZBFezAdDptthDVAXsTdOiLT q5WElNPrTD9lIpdQfVlYC+pd+39Mea7PGIU9USR8jrFuxJYnUvu0uS41wKB2WYql V+S0fwe+jkyuWyuw2ZaW8jzt9rvYRT4BDijaGp7ImWhd1xk/HXNoIhRtDTZNw+48 AlygioemJzM7iOkKEqleRrdl/JtWaBDIsvzqeqETHGFH5DgO96Bdi1BprQDfZ871 vvR51FUZF1cdPPGtGddK8iqxJnfMQqqhP3vxwu3tiyQx052K9+NU4RIHU1WXAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUUpx6DPHz3PPhD7FjArhIIcaz0UIwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnov5zEiG6lToW6AjQYKF qU0Yp4s76BExSGwVFdg6iK8zPUv5BWk5H8IqzYxzmG0tTgKEA06d6ahd/ZWGNkBE y+v9ThokGjTlPw6bspNEY8ozgTqxm3JH/zt4GXKk4tmMTTU1/I+OZGeokhm3asAt OK3rcobKke3MOy6Q5UvOFSwTijiNWjEQ0aSajJ5NVtILBwEH1g3TRTV4xP+RAQVb x8qSa6afE4yThvRUykTFK2zBlUfGkUEL8o5jhl3SgGfg6qgSiDmWDwB/u65CcO5I jx0CIJWw0S6wBxaF8DHY7Wo/ajAoEO9AkYD6sRxgBY9McyTNiiD12gGUv01wi2uR lg== -----END CERTIFICATE-----Generated at Sat Jun 7 08:06:26 2025 by rpki-client