$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft File: B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft (raw, json) Hash identifier: x/TiwEQ3VP2PQMvwqItBmodZjCdFhN56Ke8vXEwvkOY= Subject key identifier: 60:16:A7:2D:08:25:7F:F1:05:99:F2:86:65:F9:2B:0C:CB:92:F7:3E Authority key identifier: B7:D2:E8:6F:D3:DA:15:BD:13:4C:A2:15:5C:3A:9F:DA:71:8B:37:49 Certificate issuer: /CN=B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749 Certificate serial: 716DE4BC2BBCC2789F425BB8A6DBBCB8E5A57074 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft Manifest number: 3A Signing time: Fri 06 Jun 2025 04:04:52 +0000 Manifest this update: Fri 06 Jun 2025 03:59:52 +0000 Manifest next update: Sat 07 Jun 2025 06:56:52 +0000 Files and hashes: 1: B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl (hash: BzSEzkJIYdrTebfvgCwdSITwuupq4MEI83wx1+rvXu4=) 2: 326131343a373538303a6330303a3a2f34302d3438203d3e20313938303235.roa (hash: 3eo92HTpLxu+/Kjst/g+aIrgcCeedR/rWPVZHkoZXZY=) 3: 326131343a373538303a6330303a3a2f34302d3438203d3e20313531313934.roa (hash: IcJMioVXTHIBW9dWRoa7QtI8OxLl1FTCXI6aJvTPxUg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 06:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:6d:e4:bc:2b:bc:c2:78:9f:42:5b:b8:a6:db:bc:b8:e5:a5:70:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749 Validity Not Before: Jun 6 03:59:52 2025 GMT Not After : Jun 7 06:56:52 2025 GMT Subject: CN=6016A72D08257FF10599F28665F92B0CCB92F73E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d5:53:c4:b3:be:a4:77:5b:dc:90:51:85:d1: 98:cd:ad:ac:48:ed:66:47:00:48:d2:7a:4f:ef:99: 24:9f:69:d7:7f:0e:47:e6:2d:c9:35:e3:d6:6b:c4: 66:d7:48:ca:d3:20:da:b7:d6:0f:17:90:d5:79:c2: 75:a6:3d:5c:a3:f6:2c:24:db:23:0d:74:37:73:cd: 44:43:f1:fb:0d:24:9d:25:c8:a1:7e:71:60:1d:c2: 44:d0:8c:d6:3b:66:bc:23:6e:db:9e:9f:ad:cb:53: 9a:ae:1f:a8:69:4c:cb:8c:a9:25:91:44:fa:a8:b2: 5e:67:bb:fe:3c:8e:cc:7c:15:90:92:aa:40:4e:79: c8:e7:e1:96:9f:51:61:66:c6:cd:36:a0:46:74:78: 5e:2e:ce:a6:e1:a2:df:13:6b:4f:fd:1d:bc:f2:ba: 34:c4:64:61:8b:bf:ea:09:8e:50:91:70:86:74:b7: 93:07:83:69:47:5f:c7:6e:f0:10:cc:d7:8c:3e:3c: 21:56:22:70:48:1a:40:bd:b4:a8:aa:4c:28:76:c6: 70:0c:27:f3:bc:7e:50:d6:54:53:70:1b:32:3e:8c: b3:c7:95:44:26:33:90:b6:bb:2d:15:df:2f:b2:fc: 9d:3b:24:e2:61:15:82:97:46:68:6b:5a:e1:39:b2: 8b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:16:A7:2D:08:25:7F:F1:05:99:F2:86:65:F9:2B:0C:CB:92:F7:3E X509v3 Authority Key Identifier: keyid:B7:D2:E8:6F:D3:DA:15:BD:13:4C:A2:15:5C:3A:9F:DA:71:8B:37:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:dc:d4:0c:ac:a8:42:8d:5d:87:10:f6:f0:51:02:ee:9c:68: dc:b9:bd:24:5d:cf:2a:7e:3b:83:03:92:09:85:7a:2a:6b:a2: 1a:fc:9b:0d:72:09:c2:9c:67:2f:61:bb:0d:9c:8b:5a:f3:6c: ab:f5:40:a5:0f:1f:7d:03:c4:e0:c8:93:fd:2f:68:0a:d8:ff: a0:10:f4:66:9e:dc:63:69:fd:d2:f1:d0:61:24:a6:d2:52:83: 77:19:3e:d5:17:2f:a8:b2:34:d7:4e:26:95:c5:d5:24:4e:34: 7a:48:c9:4f:cb:74:0e:39:98:5c:49:3b:d9:aa:a7:35:fd:43: 46:b9:45:f0:9a:26:ec:ae:06:cf:c4:40:2a:1e:3f:47:5b:0f: 78:f8:f5:9e:34:68:29:11:e3:81:3a:0a:aa:d9:37:6e:76:ca: 07:3b:a1:d3:44:39:b3:87:f3:a7:cf:26:df:3b:f7:b1:06:bb: 7f:68:cb:fa:db:19:01:c0:dd:f1:d2:e8:9d:58:34:3c:f3:62: 8b:27:07:4c:98:f4:b2:85:58:66:3c:0c:23:df:61:1b:a1:23: dd:8f:37:d8:e0:82:b7:b1:e1:d6:2f:d5:87:32:a8:7a:12:df: 25:e3:69:a8:ef:d8:01:a0:4b:96:96:2d:b9:e3:ef:ff:35:0a: c1:07:69:c1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcW3kvCu8wnifQlu4ptu8uOWlcHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdEMkU4NkZEM0RBMTVCRDEzNENBMjE1NUMzQTlGREE3 MThCMzc0OTAeFw0yNTA2MDYwMzU5NTJaFw0yNTA2MDcwNjU2NTJaMDMxMTAvBgNV BAMTKDYwMTZBNzJEMDgyNTdGRjEwNTk5RjI4NjY1RjkyQjBDQ0I5MkY3M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM1VPEs76kd1vckFGF0ZjNraxI 7WZHAEjSek/vmSSfadd/DkfmLck149ZrxGbXSMrTINq31g8XkNV5wnWmPVyj9iwk 2yMNdDdzzURD8fsNJJ0lyKF+cWAdwkTQjNY7Zrwjbtuen63LU5quH6hpTMuMqSWR RPqosl5nu/48jsx8FZCSqkBOecjn4ZafUWFmxs02oEZ0eF4uzqbhot8Ta0/9Hbzy ujTEZGGLv+oJjlCRcIZ0t5MHg2lHX8du8BDM14w+PCFWInBIGkC9tKiqTCh2xnAM J/O8flDWVFNwGzI+jLPHlUQmM5C2uy0V3y+y/J07JOJhFYKXRmhrWuE5sosVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUYBanLQglf/EFmfKGZfkrDMuS9z4wHwYDVR0j BBgwFoAUt9Lob9PaFb0TTKIVXDqf2nGLN0kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzZmZDRlYTEtYTI2Ni00ZGVhLWI0OGEtMTVkYTM1NDUy MTA5LzEvQjdEMkU4NkZEM0RBMTVCRDEzNENBMjE1NUMzQTlGREE3MThCMzc0OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CN0QyRTg2RkQzREExNUJEMTM0Q0EyMTU1 QzNBOUZEQTcxOEIzNzQ5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M2ZmQ0ZWExLWEyNjYtNGRlYS1iNDhhLTE1ZGEzNTQ1MjEwOS8xL0I3RDJFODZG RDNEQTE1QkQxMzRDQTIxNTVDM0E5RkRBNzE4QjM3NDkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAD3NQM rKhCjV2HEPbwUQLunGjcub0kXc8qfjuDA5IJhXoqa6Ia/JsNcgnCnGcvYbsNnIta 82yr9UClDx99A8TgyJP9L2gK2P+gEPRmntxjaf3S8dBhJKbSUoN3GT7VFy+osjTX TiaVxdUkTjR6SMlPy3QOOZhcSTvZqqc1/UNGuUXwmibsrgbPxEAqHj9HWw94+PWe NGgpEeOBOgqq2TdudsoHO6HTRDmzh/OnzybfO/exBrt/aMv62xkBwN3x0uidWDQ8 82KLJwdMmPSyhVhmPAwj32EboSPdjzfY4IK3seHWL9WHMqh6Et8l42mo79gBoEuW li254+//NQrBB2nB -----END CERTIFICATE-----Generated at Fri Jun 6 22:25:26 2025 by rpki-client