$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: sAUINSK/YBZZq69Kpc1xPZxAc/a0NAhcxoxZpvgaUHg= Subject key identifier: E2:8F:EC:CA:D3:9C:E6:F5:99:94:49:CA:C5:5B:8A:4F:66:71:FB:B4 Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 1F31F9F3E9AB64B8E49891AF98EA54E4DE4B2539 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: 43 Signing time: Wed 20 Aug 2025 17:15:56 +0000 Manifest this update: Wed 20 Aug 2025 17:10:56 +0000 Manifest next update: Thu 21 Aug 2025 17:22:56 +0000 Files and hashes: 1: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: sTs8O8KBp3/QEgTlhnDJhb+nhykdynr848iPv4Z/TIo=) 2: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: gEJaKXIDsZyqsh0zLmHblvrhZctUp4chQ6mSlRGYWNk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 17:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:31:f9:f3:e9:ab:64:b8:e4:98:91:af:98:ea:54:e4:de:4b:25:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Aug 20 17:10:56 2025 GMT Not After : Aug 21 17:22:56 2025 GMT Subject: CN=E28FECCAD39CE6F5999449CAC55B8A4F6671FBB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d8:a0:a4:56:9b:41:3f:ee:e6:54:5e:61:16: 02:8e:37:98:23:be:63:67:a1:71:85:78:2a:ea:63: 7d:c5:5d:1c:82:52:e3:9a:59:79:6e:48:19:d3:c2: ed:09:4e:14:80:51:4d:82:88:18:30:a1:5d:ab:10: 32:82:ab:eb:20:18:5b:43:43:ea:e6:32:ac:45:18: 81:e2:36:3a:aa:81:c6:d8:04:6c:4a:e0:e0:df:f6: bf:52:e1:fe:15:f2:0b:fe:b8:e2:69:98:4d:64:fd: 2e:67:2f:ec:c1:6d:b5:f4:35:30:13:23:07:36:f9: fe:0b:99:1c:1d:88:6f:aa:5b:47:28:3b:f9:c0:db: cb:1a:5b:dc:bb:8f:92:9a:93:b1:15:f2:06:c7:da: 34:da:51:50:5c:18:21:5f:12:be:d7:05:91:53:24: d8:b1:24:b0:6e:b8:07:6d:6e:43:13:6f:50:63:f8: 72:19:f8:1d:33:d4:30:97:d6:a7:6e:7a:e2:e1:63: 4b:da:88:fb:48:ed:36:88:f8:c7:48:1e:ab:eb:1a: 9e:35:97:4f:40:81:51:9d:19:29:cc:13:06:f1:8b: d1:24:a8:4b:a0:55:26:81:d4:19:5c:ac:9f:0e:ca: 2a:90:76:ae:b4:ec:be:69:8c:6e:b0:1c:70:48:21: 79:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8F:EC:CA:D3:9C:E6:F5:99:94:49:CA:C5:5B:8A:4F:66:71:FB:B4 X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:f9:c4:ad:a2:1f:59:13:6d:e4:ba:40:ad:79:91:35:1c:77: ad:5b:ce:18:90:0c:f7:21:9b:3c:92:d1:9e:43:4c:86:f6:fe: 63:07:85:2c:7e:d0:ab:dc:2e:70:8a:03:fd:58:94:64:19:81: be:62:c5:58:bb:35:6d:9c:62:09:bb:3e:c2:5e:34:d5:df:a3: c3:49:61:2d:b1:74:35:ba:ef:d3:31:20:7e:66:29:5e:ff:35: d4:85:7c:97:11:1c:c7:9f:ca:bb:dd:95:63:f3:c4:39:21:61: 8d:73:b5:26:f9:10:d5:ff:6d:92:ee:01:46:b6:c7:71:3e:50: c5:27:7e:c9:bd:48:8f:be:d6:50:75:2c:a3:9b:9b:e1:52:a2: b7:da:e8:9a:0a:dc:f9:70:41:21:16:19:eb:3d:0e:c8:7f:7b: 46:e0:00:7b:01:b9:3b:d5:7c:66:06:27:d6:41:f6:9c:49:be: 54:7a:ec:51:69:31:c4:88:0c:cd:1f:c8:e5:eb:a2:5b:81:63: e4:5b:58:59:56:0d:e4:03:44:a7:97:9c:b7:52:04:e7:69:62: 06:ed:d2:3a:07:9f:8c:15:ac:36:ef:3c:ac:e1:74:4e:d2:b1: 52:eb:58:65:b9:eb:70:7e:22:9c:d0:6d:2d:5f:63:87:e2:ae: 54:77:17:35 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHzH58+mrZLjkmJGvmOpU5N5LJTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNTA4MjAxNzEwNTZaFw0yNTA4MjExNzIyNTZaMDMxMTAvBgNV BAMTKEUyOEZFQ0NBRDM5Q0U2RjU5OTk0NDlDQUM1NUI4QTRGNjY3MUZCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg2KCkVptBP+7mVF5hFgKON5gj vmNnoXGFeCrqY33FXRyCUuOaWXluSBnTwu0JThSAUU2CiBgwoV2rEDKCq+sgGFtD Q+rmMqxFGIHiNjqqgcbYBGxK4ODf9r9S4f4V8gv+uOJpmE1k/S5nL+zBbbX0NTAT Iwc2+f4LmRwdiG+qW0coO/nA28saW9y7j5Kak7EV8gbH2jTaUVBcGCFfEr7XBZFT JNixJLBuuAdtbkMTb1Bj+HIZ+B0z1DCX1qdueuLhY0vaiPtI7TaI+MdIHqvrGp41 l09AgVGdGSnMEwbxi9EkqEugVSaB1BlcrJ8OyiqQdq607L5pjG6wHHBIIXlNAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU4o/sytOc5vWZlEnKxVuKT2Zx+7QwHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCu+cSt oh9ZE23kukCteZE1HHetW84YkAz3IZs8ktGeQ0yG9v5jB4UsftCr3C5wigP9WJRk GYG+YsVYuzVtnGIJuz7CXjTV36PDSWEtsXQ1uu/TMSB+Zile/zXUhXyXERzHn8q7 3ZVj88Q5IWGNc7Um+RDV/22S7gFGtsdxPlDFJ37JvUiPvtZQdSyjm5vhUqK32uia Ctz5cEEhFhnrPQ7If3tG4AB7Abk71XxmBifWQfacSb5UeuxRaTHEiAzNH8jl66Jb gWPkW1hZVg3kA0Snl5y3UgTnaWIG7dI6B5+MFaw27zys4XRO0rFS61hluetwfiKc 0G0tX2OH4q5Udxc1 -----END CERTIFICATE-----Generated at Thu Aug 21 03:10:56 2025 by rpki-client