$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft File: 6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft (raw, json) Hash identifier: rFMl41lhg6VQn0FuyZr1S1md5q5NJki28Dd0MEJiXJo= Subject key identifier: 25:95:EA:D7:30:3E:20:F1:FB:4F:5F:F3:84:08:83:6F:CE:A0:19:E5 Authority key identifier: 62:03:32:7B:6A:4B:0A:FB:98:2B:64:0B:8B:FF:2A:92:B1:C7:33:43 Certificate issuer: /CN=6203327B6A4B0AFB982B640B8BFF2A92B1C73343 Certificate serial: 72B5E15FEAFD9927D517754DAB1DF14A4D05174B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft Manifest number: 9F Signing time: Wed 04 Jun 2025 10:59:26 +0000 Manifest this update: Wed 04 Jun 2025 10:54:26 +0000 Manifest next update: Thu 05 Jun 2025 13:48:26 +0000 Files and hashes: 1: 6203327B6A4B0AFB982B640B8BFF2A92B1C73343.crl (hash: MNnpBcUYGiuVzgtiZ8FYSVlinqXTwLI7RJ+7wXXsNc8=) 2: 326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa (hash: 1uuqh7vWgIM0zB+uNA1obgzEdiTwrJmrg/6SIClfVTE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.crl rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 13:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b5:e1:5f:ea:fd:99:27:d5:17:75:4d:ab:1d:f1:4a:4d:05:17:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6203327B6A4B0AFB982B640B8BFF2A92B1C73343 Validity Not Before: Jun 4 10:54:26 2025 GMT Not After : Jun 5 13:48:26 2025 GMT Subject: CN=2595EAD7303E20F1FB4F5FF38408836FCEA019E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0b:e0:bb:58:f1:78:4c:37:9c:df:e5:51:bf: b6:e9:8d:45:11:cd:eb:3e:94:2b:91:c5:63:54:c9: bb:48:ec:06:8b:12:3f:65:aa:56:72:8b:b5:7b:8c: fe:24:df:bf:b1:a6:fa:7b:d6:77:af:74:69:e1:bf: e0:c9:14:b9:fb:5e:af:97:5e:58:97:64:9f:26:47: 62:d4:5e:12:ef:23:4f:74:cd:50:15:10:6b:79:54: e5:17:12:41:ae:63:d4:d2:04:05:29:cc:69:41:af: 1a:c2:b7:0f:74:07:45:06:d2:73:19:cb:70:f7:9f: 6a:bf:64:68:2f:2c:fc:be:ef:e0:72:da:3b:11:53: 55:03:33:b4:46:d3:04:29:cf:be:06:8b:2d:51:c4: 4a:82:ec:e7:7e:d2:b9:ed:f4:65:75:f8:c7:ea:de: 5e:52:ad:2f:7c:a1:8f:f5:01:5a:4e:e2:f8:e3:d4: e5:3c:a6:91:4c:f7:43:32:02:b1:77:fd:de:7f:4a: b6:70:49:0d:c5:ee:44:78:1d:ef:6b:a4:68:9d:9e: a7:28:00:9b:d7:1f:c7:f3:be:1d:ed:57:dd:07:30: 6e:95:bb:0b:3a:d6:4d:fe:6c:9e:a3:53:21:dd:ee: 22:3c:28:04:b9:fe:fe:10:4d:ea:2d:db:74:a0:0d: ca:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:95:EA:D7:30:3E:20:F1:FB:4F:5F:F3:84:08:83:6F:CE:A0:19:E5 X509v3 Authority Key Identifier: keyid:62:03:32:7B:6A:4B:0A:FB:98:2B:64:0B:8B:FF:2A:92:B1:C7:33:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:06:b7:b2:86:be:92:65:68:3c:a5:3c:ea:c7:67:d7:c0:b7: 6d:86:7a:1f:6d:07:70:ca:0d:68:36:2a:fb:88:4c:ec:7c:7a: 0f:41:c7:0f:94:23:72:6a:cf:35:9c:05:19:8d:40:a1:57:d7: 00:b2:e9:74:01:ae:a8:95:44:34:d1:37:2e:5c:d5:a8:8e:37: be:22:0e:2b:53:d2:df:36:58:ad:37:84:d9:bc:df:22:58:c0: 34:58:53:da:58:95:99:22:4f:67:a9:6f:8d:ca:6c:87:31:8e: 29:22:3b:a7:7c:90:46:a3:b5:e1:9e:46:0f:49:fb:d4:17:bf: 0c:84:8b:08:ef:b3:2c:e1:a0:c1:b0:02:2a:1c:b7:f9:57:53: 3c:49:eb:20:91:45:96:4c:fa:07:a7:c7:f5:c3:73:db:a0:f6: c6:a5:85:e2:e6:3f:fa:05:c3:1c:ae:e3:63:72:6d:f7:54:d4: ab:90:fc:bc:d6:ca:c4:a6:82:82:a5:6e:bc:3c:3c:76:a0:fc: 3d:6c:3a:b3:06:63:4d:62:b7:94:fb:cb:00:c3:13:1e:08:4f: fc:1a:be:df:c4:09:1d:ef:86:a6:fa:0a:ab:6b:5a:23:64:1c: 66:c5:3b:66:6c:0d:f9:04:b2:40:70:7f:6a:8f:2a:39:6f:bb: de:39:c4:cb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcrXhX+r9mSfVF3VNqx3xSk0FF0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIwMzMyN0I2QTRCMEFGQjk4MkI2NDBCOEJGRjJBOTJC MUM3MzM0MzAeFw0yNTA2MDQxMDU0MjZaFw0yNTA2MDUxMzQ4MjZaMDMxMTAvBgNV BAMTKDI1OTVFQUQ3MzAzRTIwRjFGQjRGNUZGMzg0MDg4MzZGQ0VBMDE5RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXC+C7WPF4TDec3+VRv7bpjUUR zes+lCuRxWNUybtI7AaLEj9lqlZyi7V7jP4k37+xpvp71nevdGnhv+DJFLn7Xq+X XliXZJ8mR2LUXhLvI090zVAVEGt5VOUXEkGuY9TSBAUpzGlBrxrCtw90B0UG0nMZ y3D3n2q/ZGgvLPy+7+By2jsRU1UDM7RG0wQpz74Giy1RxEqC7Od+0rnt9GV1+Mfq 3l5SrS98oY/1AVpO4vjj1OU8ppFM90MyArF3/d5/SrZwSQ3F7kR4He9rpGidnqco AJvXH8fzvh3tV90HMG6Vuws61k3+bJ6jUyHd7iI8KAS5/v4QTeot23SgDcq/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJZXq1zA+IPH7T1/zhAiDb86gGeUwHwYDVR0j BBgwFoAUYgMye2pLCvuYK2QLi/8qkrHHM0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmVjYmM0MDQtYWM0My00NDliLThjN2UtOGYxZTk5ZDlh YzQ5LzMvNjIwMzMyN0I2QTRCMEFGQjk4MkI2NDBCOEJGRjJBOTJCMUM3MzM0My5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy82MjAzMzI3QjZBNEIwQUZCOTgyQjY0MEI4 QkZGMkE5MkIxQzczMzQzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZlY2JjNDA0LWFjNDMtNDQ5Yi04YzdlLThmMWU5OWQ5YWM0OS8zLzYyMDMzMjdC NkE0QjBBRkI5ODJCNjQwQjhCRkYyQTkyQjFDNzMzNDMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC8Brey hr6SZWg8pTzqx2fXwLdthnofbQdwyg1oNir7iEzsfHoPQccPlCNyas81nAUZjUCh V9cAsul0Aa6olUQ00TcuXNWojje+Ig4rU9LfNlitN4TZvN8iWMA0WFPaWJWZIk9n qW+NymyHMY4pIjunfJBGo7XhnkYPSfvUF78MhIsI77Ms4aDBsAIqHLf5V1M8Sesg kUWWTPoHp8f1w3PboPbGpYXi5j/6BcMcruNjcm33VNSrkPy81srEpoKCpW68PDx2 oPw9bDqzBmNNYreU+8sAwxMeCE/8Gr7fxAkd74am+gqra1ojZBxmxTtmbA35BLJA cH9qjyo5b7veOcTL -----END CERTIFICATE-----Generated at Thu Jun 5 07:12:45 2025 by rpki-client