$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: w3c2STlZ/FxbYHlfSfhVkskTPkkdfPwINTICWYLwq+A= Subject key identifier: AA:7B:70:BF:6B:28:9F:45:84:B8:B5:E8:DC:AD:8E:C7:F8:7D:13:D7 Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 1F1271DB256BB5178003A8FEBDF5DE72B8D40BEC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: 05 Signing time: Sat 05 Jul 2025 10:35:52 +0000 Manifest this update: Sat 05 Jul 2025 10:30:52 +0000 Manifest next update: Sun 06 Jul 2025 10:56:52 +0000 Files and hashes: 1: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: gBxMTxwUCWtMPkDeDuuA1ec56sj9OKNMk/a5wT64saE=) 2: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: sTs8O8KBp3/QEgTlhnDJhb+nhykdynr848iPv4Z/TIo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:12:71:db:25:6b:b5:17:80:03:a8:fe:bd:f5:de:72:b8:d4:0b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Jul 5 10:30:52 2025 GMT Not After : Jul 6 10:56:52 2025 GMT Subject: CN=AA7B70BF6B289F4584B8B5E8DCAD8EC7F87D13D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:41:69:53:37:0c:11:5b:54:b1:a2:d0:4d:89: 10:24:db:57:33:19:6a:89:95:0d:ff:f5:bf:3c:f5: 51:bb:86:b6:fc:8e:10:1b:b8:eb:24:66:61:64:92: 61:28:ea:53:bd:1d:17:45:97:20:81:e0:be:8d:17: a1:53:7e:1a:c9:55:9e:eb:75:b9:10:38:c1:e0:69: 07:9f:fe:fb:14:e4:f7:4a:84:dc:62:86:ba:4e:71: 7e:ed:de:b5:d7:e3:54:1e:47:bb:3e:0f:f1:fe:65: f5:a4:2b:ac:1c:9f:b7:31:f2:2c:78:12:8d:5a:ea: 35:e7:e2:9b:5d:2d:3b:19:ab:97:ba:99:67:c1:56: 3b:9b:99:e2:0d:01:c9:0f:c9:f7:9a:cc:6c:70:e7: 33:55:8e:ae:c6:87:de:33:82:97:de:c4:e5:37:b5: df:2a:00:69:c2:f0:fb:96:25:61:60:f3:e2:47:4b: 47:79:b0:f9:d4:e8:66:e6:d1:f2:86:f3:83:5d:f8: 39:39:cb:ed:1f:ac:c1:cf:5b:41:b6:97:ab:81:93: 63:bd:c7:2f:1a:8f:53:07:0c:e5:0c:2f:08:0f:7b: 51:8b:70:d3:c8:6f:4e:3a:f3:37:76:8d:d1:31:f0: bf:46:86:9c:a4:eb:43:99:2e:83:83:4f:4d:bf:4f: a5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7B:70:BF:6B:28:9F:45:84:B8:B5:E8:DC:AD:8E:C7:F8:7D:13:D7 X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:32:2e:dc:61:e5:ec:74:ba:a2:60:1d:25:60:6c:28:e2:fd: 85:c8:47:d0:ab:cd:a0:8b:0a:4e:02:a8:0c:df:ca:03:98:ba: 7b:e0:d2:ea:78:7c:39:3d:7a:58:4e:e2:d2:d1:73:70:b5:af: ec:c0:a3:ea:a2:ed:6f:12:b4:69:eb:d6:98:99:52:c4:be:2f: 85:1a:11:f3:d4:fc:88:21:d5:b4:29:9e:84:67:69:47:24:db: 3b:6c:a0:e8:04:e8:f3:b1:05:46:bc:12:ba:b0:ee:73:dd:a5: 82:29:48:86:85:6d:c8:24:43:a1:c8:23:fa:aa:81:4c:e6:34: 2b:b8:63:92:19:e8:e5:5b:98:14:76:f7:43:02:85:90:bc:ef: 42:94:3b:1d:b6:22:ba:05:92:f9:9b:8c:70:c7:6a:f0:0b:22: 05:11:38:b2:01:aa:16:10:33:34:6e:24:3f:3e:6b:1f:1e:05: 22:4e:27:40:34:7f:8b:6c:9e:fc:1d:15:90:b0:a6:4c:46:e7: f3:49:e8:8d:45:bd:e1:83:b6:39:f3:67:31:9e:e3:e7:a4:7f: fc:f0:4b:0c:c5:06:a4:aa:84:9f:36:d0:89:97:5f:3f:2e:31: fd:ea:90:9f:1c:ba:6c:52:07:3a:96:cb:b2:b8:8c:1f:c1:3f: 97:ed:26:e5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHxJx2yVrtReAA6j+vfXecrjUC+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNTA3MDUxMDMwNTJaFw0yNTA3MDYxMDU2NTJaMDMxMTAvBgNV BAMTKEFBN0I3MEJGNkIyODlGNDU4NEI4QjVFOERDQUQ4RUM3Rjg3RDEzRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoQWlTNwwRW1SxotBNiRAk21cz GWqJlQ3/9b889VG7hrb8jhAbuOskZmFkkmEo6lO9HRdFlyCB4L6NF6FTfhrJVZ7r dbkQOMHgaQef/vsU5PdKhNxihrpOcX7t3rXX41QeR7s+D/H+ZfWkK6wcn7cx8ix4 Eo1a6jXn4ptdLTsZq5e6mWfBVjubmeINAckPyfeazGxw5zNVjq7Gh94zgpfexOU3 td8qAGnC8PuWJWFg8+JHS0d5sPnU6Gbm0fKG84Nd+Dk5y+0frMHPW0G2l6uBk2O9 xy8aj1MHDOUMLwgPe1GLcNPIb0468zd2jdEx8L9Ghpyk60OZLoODT02/T6WbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUqntwv2son0WEuLXo3K2Ox/h9E9cwHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTMi7c YeXsdLqiYB0lYGwo4v2FyEfQq82giwpOAqgM38oDmLp74NLqeHw5PXpYTuLS0XNw ta/swKPqou1vErRp69aYmVLEvi+FGhHz1PyIIdW0KZ6EZ2lHJNs7bKDoBOjzsQVG vBK6sO5z3aWCKUiGhW3IJEOhyCP6qoFM5jQruGOSGejlW5gUdvdDAoWQvO9ClDsd tiK6BZL5m4xwx2rwCyIFETiyAaoWEDM0biQ/PmsfHgUiTidANH+LbJ78HRWQsKZM RufzSeiNRb3hg7Y582cxnuPnpH/88EsMxQakqoSfNtCJl18/LjH96pCfHLpsUgc6 lsuyuIwfwT+X7Sbl -----END CERTIFICATE-----Generated at Sat Jul 5 12:46:30 2025 by rpki-client