$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft File: 3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft (raw, json) Hash identifier: kmXnDqW4NQOMwTHUPIxsMKFdAj2Y/7mnuo41RL8aQCw= Subject key identifier: C2:F8:16:1E:6C:12:EC:F6:BD:5A:C3:48:BB:34:BA:A5:D0:B2:31:EC Authority key identifier: 3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA Certificate issuer: /CN=3F0D5C989D06DEE4CEF73B76423F7D1B248305CA Certificate serial: 6C72A15F738E4CD918E431A41D621EE785337674 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft Manifest number: 15 Signing time: Wed 04 Jun 2025 10:26:47 +0000 Manifest this update: Wed 04 Jun 2025 10:21:47 +0000 Manifest next update: Thu 05 Jun 2025 14:16:47 +0000 Files and hashes: 1: 326130393a353463373a316562653a3a2f34382d3438203d3e20323134323939.roa (hash: HE6NA8iuF7m/BEGtvKSapzIZyTFfFUeBBMBI1WKr7Q4=) 2: 3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.crl (hash: Xx9OeMyk7AJ4yq+HNZDkchH6cMecvZfE7kyp0cwmEWo=) 3: 326130393a353463373a316562653a3a2f34382d3438203d3e20323039383636.roa (hash: TaPYx3TgPHUyddmtxy9zzW0mG+lkUufKcfpaVs06+uc=) 4: 326130393a353463373a313030313a3a2f34382d3438203d3e20323134323939.roa (hash: sMFqJHE6ZX3ycW3EXnTJu0zQlY1y10K2aBBpHFeENOs=) 5: 326130353a646663333a666434303a3a2f34342d3438203d3e20323134323939.roa (hash: tzPv+0SYW7c4BhO+NRENEMHDxJFYhSgi+7F5pSL26rM=) 6: 326130393a353463373a313030303a3a2f34382d3438203d3e20323134323939.roa (hash: polSfU3C8waUTNHXjjV/PtCyw7FXJG9dpAnmbVhvFpA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.crl rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 14:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:72:a1:5f:73:8e:4c:d9:18:e4:31:a4:1d:62:1e:e7:85:33:76:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F0D5C989D06DEE4CEF73B76423F7D1B248305CA Validity Not Before: Jun 4 10:21:47 2025 GMT Not After : Jun 5 14:16:47 2025 GMT Subject: CN=C2F8161E6C12ECF6BD5AC348BB34BAA5D0B231EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:16:25:46:43:65:97:90:fe:10:30:0f:4e:1c: 0a:90:7f:91:c0:49:70:0c:50:3c:d6:fd:5a:b7:26: 3b:16:7e:be:63:3a:b0:3d:4a:03:1b:11:0f:ea:e9: 1e:15:d6:58:74:d0:9d:9a:fe:7e:fd:a0:f8:7a:69: 10:e3:1d:64:2f:83:6e:8f:eb:50:a5:f6:dd:f3:12: b9:ab:ac:41:36:b5:e2:c9:72:0b:19:3b:19:7e:a8: 73:e5:27:70:63:e5:88:1e:2a:ca:01:4f:3e:25:51: 32:3e:b5:f3:88:94:32:e8:f9:a5:a9:ee:a8:43:c5: 24:c6:36:6d:a4:46:b8:b4:58:b5:50:ae:d5:69:e8: 0c:e3:bc:48:0f:31:6d:75:71:5d:7d:81:3c:4d:b8: 49:fb:f4:07:e7:59:cc:45:2a:f0:a7:60:92:9a:d1: d2:8e:4b:57:57:48:5d:61:fd:78:1a:99:2d:fc:19: 5b:42:8c:77:39:02:52:5e:47:2d:b0:19:39:4d:16: b6:41:4d:5b:d1:f3:7b:31:e6:04:4b:1f:2d:81:24: bc:e8:9b:5d:35:34:24:6c:11:11:ef:fa:74:86:b5: 7f:cd:76:31:7d:be:f6:0f:ee:30:f9:2c:97:3d:00: 14:45:7b:fb:bd:21:c1:a1:56:64:de:86:9f:a6:8b: 72:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F8:16:1E:6C:12:EC:F6:BD:5A:C3:48:BB:34:BA:A5:D0:B2:31:EC X509v3 Authority Key Identifier: keyid:3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:89:75:8e:32:73:b0:76:0a:72:ab:64:fe:82:a0:e3:2a:3b: 2c:73:eb:7e:3c:89:15:66:fe:d0:14:7e:e1:03:fc:d8:74:75: 18:66:62:9c:1b:49:df:88:86:22:f7:6b:1c:39:e4:19:fb:40: 05:e8:90:73:0e:bb:0d:2a:38:27:83:69:ed:e6:2a:b5:fb:2d: d7:d0:53:56:70:82:62:ca:6c:a8:95:29:64:c5:94:75:3c:4e: 2a:45:4d:20:19:69:58:01:ea:c5:bd:8f:62:7f:69:c6:1b:40: cb:8d:72:b5:c2:f8:d3:2b:f5:76:59:fa:6e:56:b0:9d:30:d3: 8b:03:b7:ed:f3:20:22:72:fd:66:7b:d1:53:e4:82:61:ca:65: 6d:f6:c6:8a:16:8b:19:84:c4:e6:90:fd:fa:48:5e:00:e7:03: 90:e9:97:65:14:81:a3:8b:42:b7:86:f5:04:d0:08:f8:d1:da: 74:96:77:49:d3:d9:37:56:ed:dc:f0:46:5e:a2:22:95:23:ae: 57:fd:a1:2f:2b:21:7e:24:83:e6:57:36:6f:8b:d3:90:89:f0: 53:0d:db:6a:9a:3a:93:1f:45:cb:2d:41:d0:92:78:d2:ae:e1: 8d:ca:b2:63:c7:2b:ad:0c:a8:83:07:6d:d5:31:10:4b:dc:23: 00:84:f5:6b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbHKhX3OOTNkY5DGkHWIe54UzdnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YwRDVDOTg5RDA2REVFNENFRjczQjc2NDIzRjdEMUIy NDgzMDVDQTAeFw0yNTA2MDQxMDIxNDdaFw0yNTA2MDUxNDE2NDdaMDMxMTAvBgNV BAMTKEMyRjgxNjFFNkMxMkVDRjZCRDVBQzM0OEJCMzRCQUE1RDBCMjMxRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcFiVGQ2WXkP4QMA9OHAqQf5HA SXAMUDzW/Vq3JjsWfr5jOrA9SgMbEQ/q6R4V1lh00J2a/n79oPh6aRDjHWQvg26P 61Cl9t3zErmrrEE2teLJcgsZOxl+qHPlJ3Bj5YgeKsoBTz4lUTI+tfOIlDLo+aWp 7qhDxSTGNm2kRri0WLVQrtVp6AzjvEgPMW11cV19gTxNuEn79AfnWcxFKvCnYJKa 0dKOS1dXSF1h/XgamS38GVtCjHc5AlJeRy2wGTlNFrZBTVvR83sx5gRLHy2BJLzo m101NCRsERHv+nSGtX/NdjF9vvYP7jD5LJc9ABRFe/u9IcGhVmTehp+mi3JPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUwvgWHmwS7Pa9WsNIuzS6pdCyMewwHwYDVR0j BBgwFoAUPw1cmJ0G3uTO9zt2Qj99GySDBcowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4MWUyMzUtODE1OC00MDdlLWJjZmYtZjA5NjM0ODM1 N2EyLzEvM0YwRDVDOTg5RDA2REVFNENFRjczQjc2NDIzRjdEMUIyNDgzMDVDQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy8zRjBENUM5ODlEMDZERUU0Q0VGNzNCNzY0 MjNGN0QxQjI0ODMwNUNBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NmODFlMjM1LTgxNTgtNDA3ZS1iY2ZmLWYwOTYzNDgzNTdhMi8xLzNGMEQ1Qzk4 OUQwNkRFRTRDRUY3M0I3NjQyM0Y3RDFCMjQ4MzA1Q0EubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBKiXWO MnOwdgpyq2T+gqDjKjssc+t+PIkVZv7QFH7hA/zYdHUYZmKcG0nfiIYi92scOeQZ +0AF6JBzDrsNKjgng2nt5iq1+y3X0FNWcIJiymyolSlkxZR1PE4qRU0gGWlYAerF vY9if2nGG0DLjXK1wvjTK/V2WfpuVrCdMNOLA7ft8yAicv1me9FT5IJhymVt9saK FosZhMTmkP36SF4A5wOQ6ZdlFIGji0K3hvUE0Aj40dp0lndJ09k3Vu3c8EZeoiKV I65X/aEvKyF+JIPmVzZvi9OQifBTDdtqmjqTH0XLLUHQknjSruGNyrJjxyutDKiD B23VMRBL3CMAhPVr -----END CERTIFICATE-----Generated at Thu Jun 5 05:09:39 2025 by rpki-client