$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.mft File: 5BE6F0781C3A7A74F993C53DC07FC424ED911592.mft (raw, json) Hash identifier: xjbVGKU0KD0klHngnUI+67mzsQHMriQYiKkJnHQ1PAQ= Subject key identifier: D3:C6:92:BB:59:67:BC:7E:C9:9F:4C:56:DB:9B:F6:83:6D:83:CC:B0 Authority key identifier: 5B:E6:F0:78:1C:3A:7A:74:F9:93:C5:3D:C0:7F:C4:24:ED:91:15:92 Certificate issuer: /CN=5BE6F0781C3A7A74F993C53DC07FC424ED911592 Certificate serial: 4AA9195E9BBCABDDAF6BFF408095EF326A3AAD04 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.mft Manifest number: 0F Signing time: Sun 15 Jun 2025 01:12:02 +0000 Manifest this update: Sun 15 Jun 2025 01:07:02 +0000 Manifest next update: Mon 16 Jun 2025 02:29:02 +0000 Files and hashes: 1: 5BE6F0781C3A7A74F993C53DC07FC424ED911592.crl (hash: C6ioAXtKEUUJ+rTka6GjngtJbPIqfPfkQzmqCHjYvIA=) 2: 326131343a373538303a3330313a3a2f34382d3438203d3e20323037343237.roa (hash: jYfB7MgE41V7Cz7ve55LcQtaDn44bK16KlxCccTU4QU=) 3: 326131343a373538303a3330303a3a2f34382d3438203d3e20323037343237.roa (hash: G6hVCSFBjLf5sSVJuWclRF4hwJVUKmhh7yFq5RsJRpo=) 4: 326131343a373538303a666666323a3a2f34382d3438203d3e20323037343237.roa (hash: 9gAMmES5n2Z5a0zD2q3WOv8FxdvupYnl9n7vw0+tj9M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.crl rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 02:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a9:19:5e:9b:bc:ab:dd:af:6b:ff:40:80:95:ef:32:6a:3a:ad:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BE6F0781C3A7A74F993C53DC07FC424ED911592 Validity Not Before: Jun 15 01:07:02 2025 GMT Not After : Jun 16 02:29:02 2025 GMT Subject: CN=D3C692BB5967BC7EC99F4C56DB9BF6836D83CCB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:79:2c:79:1e:e1:31:b1:6c:4e:50:08:82: 3d:1c:88:b8:cf:b4:16:bd:56:70:77:b6:72:fa:1f: 32:0a:7b:d5:f4:e9:ba:ae:3b:95:63:5f:e1:10:67: 34:d1:fe:e6:ae:e3:44:df:57:25:ab:e1:20:dc:9f: f7:34:b6:c7:5b:6f:12:4d:5a:e5:39:e7:5a:f3:0a: 8c:81:0d:65:7e:07:94:e8:2c:88:c4:dc:e9:04:7f: d8:b5:c1:ad:20:da:63:97:97:b6:ad:dd:72:9e:0a: 09:56:26:1c:d4:33:fd:9b:15:03:95:8f:1f:4d:bd: ef:fb:0c:df:df:5c:e8:85:ab:a7:7d:14:93:cf:b3: c2:72:6b:d0:09:2b:72:0d:60:0d:83:c1:73:7f:55: fd:0f:9a:66:3a:00:cf:36:c2:ff:0f:d5:08:15:75: ae:0b:f3:62:7b:a1:0a:12:3a:fa:ef:d8:85:15:a7: 8b:4d:e6:58:8e:5c:19:00:79:17:42:93:92:df:1f: 73:0c:58:7f:2f:04:2f:0d:52:56:55:1f:2c:78:8d: d1:cf:16:29:63:5c:a1:17:b9:b4:5e:81:c3:79:c2: 5a:4e:ec:86:4c:eb:2c:96:8e:4b:a0:b3:22:e2:05: b7:50:5a:90:98:03:92:ae:43:c4:01:5e:e1:aa:c5: b7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C6:92:BB:59:67:BC:7E:C9:9F:4C:56:DB:9B:F6:83:6D:83:CC:B0 X509v3 Authority Key Identifier: keyid:5B:E6:F0:78:1C:3A:7A:74:F9:93:C5:3D:C0:7F:C4:24:ED:91:15:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ac:72:9c:e4:de:e6:64:a6:90:36:b0:2f:a8:0c:db:0c:23: 7d:4e:81:c8:7c:fe:9b:de:0e:02:dc:0c:26:2d:33:c0:65:b2: 18:9f:67:f8:2b:21:c0:26:43:b7:25:10:2e:39:35:ea:f8:f7: 6a:6f:e8:d8:7f:e3:23:f3:e7:83:4f:b3:f3:51:da:c7:bc:54: b2:7c:8f:b7:29:68:d8:a7:0e:74:76:66:69:ad:b9:19:20:2a: 2c:8b:d6:eb:93:31:4c:a9:0e:7f:49:04:5c:a9:df:ae:0a:63: ba:22:1e:6e:68:80:6a:b9:5a:c0:0d:f1:7a:7a:e8:85:4e:4e: ef:32:1f:31:41:88:9d:6a:52:35:7c:93:01:cb:5c:15:88:5f: 37:7b:05:f3:04:76:14:f1:14:4a:b9:80:ea:5b:61:ff:3c:2a: 15:7c:7e:6b:90:a8:a9:4e:40:f3:71:8c:c7:22:5c:8f:d9:df: 53:bc:08:f5:83:25:70:21:bf:f1:82:28:e4:b0:05:d7:45:de: 3e:60:c6:90:e4:8b:a3:a3:1d:21:3e:00:bc:1e:da:4f:e1:37: 50:33:ac:23:15:65:5c:78:c2:6c:9e:d9:a4:2c:3b:d6:25:54: c0:e5:17:5f:e2:df:52:96:b4:e0:fb:76:df:18:2d:c2:f5:67: 77:07:80:09 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSqkZXpu8q92va/9AgJXvMmo6rQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJFNkYwNzgxQzNBN0E3NEY5OTNDNTNEQzA3RkM0MjRF RDkxMTU5MjAeFw0yNTA2MTUwMTA3MDJaFw0yNTA2MTYwMjI5MDJaMDMxMTAvBgNV BAMTKEQzQzY5MkJCNTk2N0JDN0VDOTlGNEM1NkRCOUJGNjgzNkQ4M0NDQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6RHkseR7hMbFsTlAIgj0ciLjP tBa9VnB3tnL6HzIKe9X06bquO5VjX+EQZzTR/uau40TfVyWr4SDcn/c0tsdbbxJN WuU551rzCoyBDWV+B5ToLIjE3OkEf9i1wa0g2mOXl7at3XKeCglWJhzUM/2bFQOV jx9Nve/7DN/fXOiFq6d9FJPPs8Jya9AJK3INYA2DwXN/Vf0PmmY6AM82wv8P1QgV da4L82J7oQoSOvrv2IUVp4tN5liOXBkAeRdCk5LfH3MMWH8vBC8NUlZVHyx4jdHP FiljXKEXubRegcN5wlpO7IZM6yyWjkugsyLiBbdQWpCYA5KuQ8QBXuGqxbfvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU08aSu1lnvH7Jn0xW25v2g22DzLAwHwYDVR0j BBgwFoAUW+bweBw6enT5k8U9wH/EJO2RFZIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDJhZWQwYTQtM2U3Ni00ODMwLWJiYjQtMWNiYzIwNDM1 MmIzLzAvNUJFNkYwNzgxQzNBN0E3NEY5OTNDNTNEQzA3RkM0MjRFRDkxMTU5Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81QkU2RjA3ODFDM0E3QTc0Rjk5M0M1M0RD MDdGQzQyNEVEOTExNTkyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAyYWVkMGE0LTNlNzYtNDgzMC1iYmI0LTFjYmMyMDQzNTJiMy8wLzVCRTZGMDc4 MUMzQTdBNzRGOTkzQzUzREMwN0ZDNDI0RUQ5MTE1OTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBErHKc 5N7mZKaQNrAvqAzbDCN9ToHIfP6b3g4C3AwmLTPAZbIYn2f4KyHAJkO3JRAuOTXq +Pdqb+jYf+Mj8+eDT7PzUdrHvFSyfI+3KWjYpw50dmZprbkZICosi9brkzFMqQ5/ SQRcqd+uCmO6Ih5uaIBquVrADfF6euiFTk7vMh8xQYidalI1fJMBy1wViF83ewXz BHYU8RRKuYDqW2H/PCoVfH5rkKipTkDzcYzHIlyP2d9TvAj1gyVwIb/xgijksAXX Rd4+YMaQ5Iujox0hPgC8HtpP4TdQM6wjFWVceMJsntmkLDvWJVTA5Rdf4t9SlrTg +3bfGC3C9Wd3B4AJ -----END CERTIFICATE-----Generated at Sun Jun 15 17:08:12 2025 by rpki-client