$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json) Hash identifier: cuueYYy9Wg6XNx/OL5yvGDmfTE6hWrbvpbZ3OiLh7pI= Subject key identifier: 35:28:84:D5:39:F1:E2:24:9B:58:8F:CD:D5:CD:33:2D:0B:54:42:A5 Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Certificate serial: 17BEB41F4F1825F4C53CF4342B41F0F974E1735C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft Manifest number: CE Signing time: Tue 24 Jun 2025 23:47:06 +0000 Manifest this update: Tue 24 Jun 2025 23:42:06 +0000 Manifest next update: Thu 26 Jun 2025 02:53:06 +0000 Files and hashes: 1: AS215248.asa (hash: Sb+0gXxMTsfzVz5MSdgmRLaj0eWSk1yQA7d7qNiRsFE=) 2: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: QRVapac/2v//+HUyFzZAmAUFiOHrRHDdtA/Z4ALKjdo=) 3: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: +yFHbjFdcl3OkH9bM82B/wbQvRBlEBGqJ0LTOyulC0Q=) 4: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: kUiBrX3+9cuSC9lMhoz9V2p165UrI0C31waBU1/3ZFc=) 5: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: RPFyh+9f4VeLKwhSKFsibkww2V1WrimAJUdSq1OTL10=) 6: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: aQBGW4UwEpZw1viUGTiicR7R7bF3eHxKluau3FSxHVQ=) 7: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: M972A2zux5bp2vtM/yV/ifXNBlJMRB7g6qDIDzpgNsU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Jun 2025 00:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:be:b4:1f:4f:18:25:f4:c5:3c:f4:34:2b:41:f0:f9:74:e1:73:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Validity Not Before: Jun 24 23:42:06 2025 GMT Not After : Jun 26 02:53:06 2025 GMT Subject: CN=352884D539F1E2249B588FCDD5CD332D0B5442A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:69:83:32:8c:89:19:a5:3f:19:89:9d:40:a6: b7:cb:c2:02:85:7a:55:7f:c6:e1:8a:31:a5:1f:50: a0:21:c7:28:d4:2a:48:e3:1a:6c:13:90:ee:62:87: 3b:44:d9:47:60:98:6b:0c:0f:26:e7:13:55:2e:2b: 32:cf:11:c0:17:f2:9d:8e:8f:28:51:1a:b1:85:80: 6d:a8:25:3c:3c:5d:89:03:90:41:40:9b:a9:e5:a7: e3:6b:bf:81:e5:28:74:28:a9:ea:3d:d1:b2:94:c5: ab:43:7d:a9:77:4a:8e:f2:f8:14:58:44:a0:d1:15: c2:8b:04:8a:a3:6d:11:16:24:4e:00:48:b0:84:93: b3:22:b2:e8:88:88:60:30:f5:0b:b8:d5:b2:9b:df: 3d:a5:bf:97:cf:cc:56:3e:a5:07:48:89:a3:71:93: 35:75:08:e3:fe:f0:a0:20:f8:c9:0c:c5:56:3d:2b: 02:7f:5e:43:83:61:86:80:b2:b4:9c:32:df:26:b6: 81:6f:18:5d:c4:49:bc:1b:cb:77:7f:1f:cc:83:be: 8b:fd:c2:a6:81:2a:ff:e4:f8:d0:3e:d1:c3:6d:30: 29:10:cf:e4:b6:49:7d:3e:e2:ae:e9:a2:dd:80:c9: 7b:58:02:d9:ba:cc:a4:1e:26:b6:03:f0:46:1d:24: 03:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:28:84:D5:39:F1:E2:24:9B:58:8F:CD:D5:CD:33:2D:0B:54:42:A5 X509v3 Authority Key Identifier: keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:85:83:05:60:0e:8c:22:82:c0:f4:00:0b:62:38:90:5d:6e: ce:74:d4:99:5e:47:75:0c:8b:a8:03:37:95:3a:ea:ef:3d:19: 45:c0:b0:6e:4e:7e:62:df:4a:e9:7b:ee:35:52:1c:29:96:fc: d7:14:64:9f:12:89:7f:fb:bf:d1:4e:d3:07:a1:8c:55:4b:ad: 0f:f4:ef:a3:ae:50:89:f9:ce:f3:f5:6a:d4:a8:d0:c6:0c:cb: 43:94:31:76:ed:76:d1:6e:1e:45:d7:d3:72:c6:3c:71:01:8a: 57:be:17:db:68:2f:86:5d:65:77:c6:78:b4:74:bf:f3:58:25: a5:89:8e:ee:4c:37:76:06:4b:70:94:f9:d4:0a:8b:1b:20:71: 96:b9:cf:c7:d4:73:13:ef:84:6b:42:62:96:ca:f8:37:7e:98: ab:37:55:a7:3a:04:42:d2:b4:68:91:b3:2f:77:aa:6d:f7:4e: b0:2c:3d:dd:f4:25:88:85:63:ef:74:fc:2d:fd:bc:2f:83:03: 8f:20:ca:71:00:d3:e6:29:bb:4e:3f:e4:95:15:bc:d9:e4:cd: 30:26:6a:25:b4:10:a7:72:c2:1b:a3:8c:32:eb:3c:39:9d:86: a2:3a:e6:98:7c:53:4b:3c:74:04:0c:b3:86:71:d7:f5:d6:76: 7b:dc:d0:ab -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUF760H08YJfTFPPQ0K0Hw+XThc1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3 ZTc5N2I2ODAeFw0yNTA2MjQyMzQyMDZaFw0yNTA2MjYwMjUzMDZaMDMxMTAvBgNV BAMTKDM1Mjg4NEQ1MzlGMUUyMjQ5QjU4OEZDREQ1Q0QzMzJEMEI1NDQyQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOaYMyjIkZpT8ZiZ1AprfLwgKF elV/xuGKMaUfUKAhxyjUKkjjGmwTkO5ihztE2UdgmGsMDybnE1UuKzLPEcAX8p2O jyhRGrGFgG2oJTw8XYkDkEFAm6nlp+Nrv4HlKHQoqeo90bKUxatDfal3So7y+BRY RKDRFcKLBIqjbREWJE4ASLCEk7MisuiIiGAw9Qu41bKb3z2lv5fPzFY+pQdIiaNx kzV1COP+8KAg+MkMxVY9KwJ/XkODYYaAsrScMt8mtoFvGF3ESbwby3d/H8yDvov9 wqaBKv/k+NA+0cNtMCkQz+S2SX0+4q7pot2AyXtYAtm6zKQeJrYD8EYdJAPpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNSiE1Tnx4iSbWI/N1c0zLQtUQqUwHwYDVR0j BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1 NWUyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZDE5ZGIyMC00 NjUzLTQ4ZDQtOGZjNC01ODBkMTM2OWI3YzQvMC81Q0RDMDRCQjIzRUFBNENFQ0M3 OTFERkUwNEJCMDI4QjdFNzk3QjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvoWDBWAOjCKCwPQAC2I4 kF1uznTUmV5HdQyLqAM3lTrq7z0ZRcCwbk5+Yt9K6XvuNVIcKZb81xRknxKJf/u/ 0U7TB6GMVUutD/Tvo65QifnO8/Vq1KjQxgzLQ5Qxdu120W4eRdfTcsY8cQGKV74X 22gvhl1ld8Z4tHS/81glpYmO7kw3dgZLcJT51AqLGyBxlrnPx9RzE++Ea0Jilsr4 N36YqzdVpzoEQtK0aJGzL3eqbfdOsCw93fQliIVj73T8Lf28L4MDjyDKcQDT5im7 Tj/klRW82eTNMCZqJbQQp3LCG6OMMus8OZ2GojrmmHxTSzx0BAyzhnHX9dZ2e9zQ qw== -----END CERTIFICATE-----Generated at Wed Jun 25 08:26:33 2025 by rpki-client