$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft File: 178395FF98E8AEA645CFCD7DF742855D46457BAF.mft (raw, json) Hash identifier: zV3ZGBeVQHk48FlQ71c5I4JJ0Szo0bcFFN+Jm+adzS0= Subject key identifier: 98:31:BC:01:F5:7A:F0:87:5C:EA:CA:17:30:2C:C8:C5:2B:E0:63:F3 Authority key identifier: 17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF Certificate issuer: /CN=178395FF98E8AEA645CFCD7DF742855D46457BAF Certificate serial: 164BF4C1C884AC7381409DDCDAA124EC80129AED Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft Manifest number: 96 Signing time: Wed 04 Jun 2025 16:17:38 +0000 Manifest this update: Wed 04 Jun 2025 16:12:38 +0000 Manifest next update: Thu 05 Jun 2025 18:15:38 +0000 Files and hashes: 1: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: wALn/kuHRs3MtX4loe3ndPMMd8kJpkWDJTPFOhhGFZ0=) 2: 178395FF98E8AEA645CFCD7DF742855D46457BAF.crl (hash: aSgSTSJR2khswVKbJYYh6Ysj9I4Z/ISW27xCJUsK3Dk=) 3: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: tFQ4zhgC2iPnwqXyLnNzgEkZZIC1LjVxrVLEJzRxX40=) 4: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: DJIGVPPFdKw8WztsRwxSv88N7qWJk5uvTreoiT8psfU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 18:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:4b:f4:c1:c8:84:ac:73:81:40:9d:dc:da:a1:24:ec:80:12:9a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=178395FF98E8AEA645CFCD7DF742855D46457BAF Validity Not Before: Jun 4 16:12:38 2025 GMT Not After : Jun 5 18:15:38 2025 GMT Subject: CN=9831BC01F57AF0875CEACA17302CC8C52BE063F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3d:df:db:fe:62:7d:7e:cc:3b:bc:a8:2e:56: 2e:8b:45:ee:33:bf:2f:8f:94:00:b9:da:2b:e4:ff: 5b:c9:f7:c5:43:4e:a8:8e:e6:98:71:1a:5b:e2:1a: 50:1c:a8:31:95:2b:74:21:30:79:12:d1:a4:8b:27: 83:e5:84:b1:b8:ff:c3:16:11:5f:ce:c9:b3:c7:e2: d6:6d:44:bf:fa:05:92:ca:2a:95:3d:02:db:30:a9: 7e:86:0d:5d:5c:9a:a7:1a:b4:42:cd:c1:cf:e0:76: 70:37:57:b5:81:59:67:9e:01:ed:c2:54:17:bc:31: ca:87:6a:3c:33:42:59:22:07:35:ac:02:bd:60:ba: 76:61:b7:d5:e6:ea:f2:a6:a5:f3:fd:da:77:95:31: a3:9a:77:ed:1b:5b:be:14:b3:ed:35:b6:c3:92:22: ea:23:a0:f7:fc:2f:f9:bd:7b:f8:0a:b7:36:b8:91: 47:f5:07:f5:3d:c6:aa:ef:59:c5:e7:9d:cc:83:18: ce:d8:3b:72:42:df:3c:b2:06:5b:d4:65:41:7e:ae: 9c:7e:e9:c0:e6:db:93:d1:4e:8e:60:98:7f:79:5d: b3:c8:a1:16:f8:e8:06:96:a2:86:3b:3f:1d:a9:91: 65:a8:d9:75:78:b2:2a:32:b2:35:a1:69:8f:10:7b: 78:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:31:BC:01:F5:7A:F0:87:5C:EA:CA:17:30:2C:C8:C5:2B:E0:63:F3 X509v3 Authority Key Identifier: keyid:17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f0:9f:c9:e8:9e:0d:3c:58:63:31:06:4b:c3:b0:9c:fb:42: c5:b9:c0:5f:87:84:a4:9f:25:2a:cb:23:fe:c1:42:9d:c7:89: 0e:b7:90:21:15:86:71:60:68:65:0b:9d:23:c7:9d:fd:ca:2f: 41:1c:87:d2:ba:10:7b:d1:95:30:4e:80:91:84:6a:75:bb:45: c7:84:3a:27:9f:53:e1:6e:70:8c:3f:ae:c6:7a:97:29:1f:6a: 1f:68:1b:13:d1:12:d8:5c:d3:10:1b:14:fe:e6:1b:61:af:a4: c9:00:ce:66:b3:ae:dd:d9:ca:2f:4d:06:11:1e:e5:9b:65:2f: d6:ba:da:74:76:49:3d:c3:cf:f5:e1:ce:66:17:4b:8b:cf:e2: e3:93:75:23:5b:ab:d3:79:3c:ac:55:9e:d2:83:20:20:3d:ed: 2a:da:88:99:83:dd:a2:1c:fb:03:b4:b8:04:9a:bc:e0:cb:ff: df:8b:4d:d9:ea:5f:40:79:22:25:55:a6:df:a0:23:71:0e:38: 88:76:60:3f:3b:42:f2:88:05:04:a7:64:b2:68:b4:29:70:f0: 32:14:30:d0:10:6d:00:c9:4e:bc:a2:ce:45:7b:f2:38:f4:ec: f4:b0:24:60:92:74:cd:c8:07:97:e1:fc:d1:ce:4f:4f:4d:1d: 14:27:b6:ef -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFkv0wciErHOBQJ3c2qEk7IASmu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc4Mzk1RkY5OEU4QUVBNjQ1Q0ZDRDdERjc0Mjg1NUQ0 NjQ1N0JBRjAeFw0yNTA2MDQxNjEyMzhaFw0yNTA2MDUxODE1MzhaMDMxMTAvBgNV BAMTKDk4MzFCQzAxRjU3QUYwODc1Q0VBQ0ExNzMwMkNDOEM1MkJFMDYzRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPd/b/mJ9fsw7vKguVi6LRe4z vy+PlAC52ivk/1vJ98VDTqiO5phxGlviGlAcqDGVK3QhMHkS0aSLJ4PlhLG4/8MW EV/OybPH4tZtRL/6BZLKKpU9AtswqX6GDV1cmqcatELNwc/gdnA3V7WBWWeeAe3C VBe8McqHajwzQlkiBzWsAr1gunZht9Xm6vKmpfP92neVMaOad+0bW74Us+01tsOS IuojoPf8L/m9e/gKtza4kUf1B/U9xqrvWcXnncyDGM7YO3JC3zyyBlvUZUF+rpx+ 6cDm25PRTo5gmH95XbPIoRb46AaWooY7Px2pkWWo2XV4sioysjWhaY8Qe3hZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUmDG8AfV68Idc6soXMCzIxSvgY/MwHwYDVR0j BBgwFoAUF4OV/5jorqZFz81990KFXUZFe68wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzIvMTc4Mzk1RkY5OEU4QUVBNjQ1Q0ZDRDdERjc0Mjg1NUQ0NjQ1N0JBRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy8xNzgzOTVGRjk4RThBRUE2NDVDRkNEN0RG NzQyODU1RDQ2NDU3QkFGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy8yLzE3ODM5NUZG OThFOEFFQTY0NUNGQ0Q3REY3NDI4NTVENDY0NTdCQUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAB8J/J 6J4NPFhjMQZLw7Cc+0LFucBfh4SknyUqyyP+wUKdx4kOt5AhFYZxYGhlC50jx539 yi9BHIfSuhB70ZUwToCRhGp1u0XHhDonn1PhbnCMP67GepcpH2ofaBsT0RLYXNMQ GxT+5hthr6TJAM5ms67d2covTQYRHuWbZS/Wutp0dkk9w8/14c5mF0uLz+Ljk3Uj W6vTeTysVZ7SgyAgPe0q2oiZg92iHPsDtLgEmrzgy//fi03Z6l9AeSIlVabfoCNx DjiIdmA/O0LyiAUEp2SyaLQpcPAyFDDQEG0AyU68os5Fe/I49Oz0sCRgknTNyAeX 4fzRzk9PTR0UJ7bv -----END CERTIFICATE-----Generated at Thu Jun 5 05:09:36 2025 by rpki-client