$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json) Hash identifier: Egs0NArbm7pf7VJPw59mNhfYDrxm/BmEqqlAB2tiD2Q= Subject key identifier: 6D:44:92:11:CE:CE:91:86:17:D3:3E:A6:A8:14:81:C1:11:11:B4:EA Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Certificate serial: 78F6CA55F46AF4380AF3034A6647994D59ADCA4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft Manifest number: 0499 Signing time: Sun 15 Jun 2025 06:57:57 +0000 Manifest this update: Sun 15 Jun 2025 06:52:57 +0000 Manifest next update: Mon 16 Jun 2025 07:00:57 +0000 Files and hashes: 1: 3134362e3234372e36322e302f32342d3234203d3e203234383531.roa (hash: 3irJhAGcE48vEZNOxKTwKsy4d69RVyIL6ZEClAmlLA0=) 2: 3134362e3234372e35342e302f32342d3234203d3e2039333034.roa (hash: u8Um+hUrP9ltA5bj6O+zAw4bjYvbw7v/SuaSfwCO5nA=) 3: 3134362e3234372e35312e302f32342d3234203d3e203234383531.roa (hash: zRn95fZoa98Dxgk18rTQZPg3Vz861tTnSVUdcy0yTb0=) 4: 3134362e3234372e34382e302f32332d3234203d3e203234383531.roa (hash: CYrx2Q8+pBHAyk1lGd5Mg9MkvR7v5zfpX8Vn/ABu+6Q=) 5: 38312e32372e39362e302f32302d3230203d3e203234383531.roa (hash: XazNaC+hpMVCJhcoP3zL+9MGci5nPbb/SboV8YXiO2c=) 6: 3134362e3234372e35392e302f32342d3234203d3e203234383531.roa (hash: cISB3c/lX6ECxkwGaCM313qUlrkmfGXNHg9Sn5Duu/E=) 7: 3134362e3234372e35362e302f32342d3234203d3e2039333034.roa (hash: pfMwqvQ0dMhzxyI/lyxkgI3sWlDZ5/WAWZxeCzFbSBI=) 8: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: BxxDVNDkY4WmvQ0AqpUgOqQRjcPPaqtCOHwdzo0RYqo=) 9: 38312e32372e39362e302f32342d3234203d3e203234383531.roa (hash: ZdZRlvPz8E9OObfHOShlKU2uuHjCBKEbQURGTOBsuE8=) 10: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: y4OGbSGooI8V9euRtHx6jpjRwWGZstdSARXhTQ70Yxg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 07:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f6:ca:55:f4:6a:f4:38:0a:f3:03:4a:66:47:99:4d:59:ad:ca:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Validity Not Before: Jun 15 06:52:57 2025 GMT Not After : Jun 16 07:00:57 2025 GMT Subject: CN=6D449211CECE918617D33EA6A81481C11111B4EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:25:0c:05:47:38:e7:e6:53:51:62:e4:8f:65: ff:1f:f4:6f:75:bf:0c:72:f7:6a:19:b0:bf:69:5a: 7d:0f:fd:e1:76:19:37:1f:5d:0e:eb:fb:e0:6d:99: 61:6b:d8:35:69:24:4a:5a:3d:ce:b1:f3:66:7b:b1: bf:fa:90:8c:c8:12:38:72:a0:8f:58:1e:90:72:26: 9c:a0:36:fe:42:2f:f0:ce:77:d5:2f:e4:a6:7c:c8: 50:c9:aa:b4:8f:f3:c2:e3:9d:a7:6e:bb:04:1c:4c: 44:0b:9b:15:d7:8d:da:28:08:f8:8b:26:be:4e:d9: e2:7a:ed:f4:48:fe:21:76:fc:61:73:4e:c2:61:df: 64:3b:18:9c:df:20:8a:ac:44:ca:37:ad:c5:38:7f: b4:77:50:9f:0d:81:32:95:1f:2d:71:de:43:61:b4: d6:31:17:04:20:f9:da:28:c5:01:76:ef:e7:24:51: 46:67:12:97:e6:9b:b3:c2:1c:42:d6:57:e3:c9:36: 00:f0:07:23:b7:e9:93:42:6c:33:7c:cc:62:43:8f: 35:29:03:f3:32:ab:72:81:28:24:ce:6e:ee:52:96: 5d:d7:4d:38:b4:0b:09:95:bd:05:19:d0:4b:bf:1c: 93:6d:47:a1:10:db:e9:c5:fa:ae:dd:34:23:d3:91: 9a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:44:92:11:CE:CE:91:86:17:D3:3E:A6:A8:14:81:C1:11:11:B4:EA X509v3 Authority Key Identifier: keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:91:38:50:fd:aa:8a:be:38:fd:c0:dc:c5:c4:ae:23:e0:bb: 3c:4d:37:ea:5c:1c:3f:85:e4:6e:5c:c7:2e:b9:94:b3:87:39: b7:99:3b:92:f8:fe:52:79:8f:4f:1f:53:62:63:70:86:29:1a: 68:24:88:f8:90:87:94:aa:e0:d0:36:2c:59:ab:fa:61:d6:99: 50:30:ee:d3:72:4f:7a:a8:2d:28:db:ba:1b:44:b9:02:0b:70: ab:fd:2d:ea:09:dc:f5:85:17:5b:5b:28:f9:80:98:f7:d1:41: bf:2b:2f:2e:00:27:e1:14:05:82:56:30:75:47:df:b5:f8:e9: 98:85:35:04:18:c0:f0:04:56:6a:81:79:fa:8c:38:76:d7:52: 66:69:0a:11:2b:a2:ad:32:7f:db:30:cb:3e:f1:14:2d:e6:a9: ce:ce:dd:ad:b8:6b:b5:da:25:56:bc:4d:3b:13:0b:8e:49:6d: ba:02:8f:c6:a9:f5:e4:03:b0:17:a4:80:9e:e4:54:cc:a3:a2: 69:05:df:2b:4b:5f:e3:f4:74:0d:22:e7:7a:a4:91:c6:8d:dc: b1:a5:fb:09:47:79:ff:42:70:72:83:d7:5a:9c:71:3d:f4:03: 44:db:0c:92:3d:36:f4:67:0b:ac:42:3b:fa:91:74:a7:6e:61: ce:f2:da:de -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUePbKVfRq9DgK8wNKZkeZTVmtykwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTZjNTA5YmE0OGU1YjUwNDk0NTcyZTA1YzQ1YzU4ZTdl MTZkODdmYjAeFw0yNTA2MTUwNjUyNTdaFw0yNTA2MTYwNzAwNTdaMDMxMTAvBgNV BAMTKDZENDQ5MjExQ0VDRTkxODYxN0QzM0VBNkE4MTQ4MUMxMTExMUI0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkJQwFRzjn5lNRYuSPZf8f9G91 vwxy92oZsL9pWn0P/eF2GTcfXQ7r++BtmWFr2DVpJEpaPc6x82Z7sb/6kIzIEjhy oI9YHpByJpygNv5CL/DOd9Uv5KZ8yFDJqrSP88LjnaduuwQcTEQLmxXXjdooCPiL Jr5O2eJ67fRI/iF2/GFzTsJh32Q7GJzfIIqsRMo3rcU4f7R3UJ8NgTKVHy1x3kNh tNYxFwQg+dooxQF27+ckUUZnEpfmm7PCHELWV+PJNgDwByO36ZNCbDN8zGJDjzUp A/Myq3KBKCTObu5Sll3XTTi0CwmVvQUZ0Eu/HJNtR6EQ2+nF+q7dNCPTkZrjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUbUSSEc7OkYYX0z6mqBSBwRERtOowHwYDVR0j BBgwFoAUpsUJukjltQSUVy4FxFxY5+Fth/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYtOTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1 NWM1LzEvQTZDNTA5QkE0OEU1QjUwNDk0NTcyRTA1QzQ1QzU4RTdFMTZEODdGQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BzVUp1a2psdFFTVVZ5NEZ4RnhZNS1G dGhfcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzhiYjQ0Ni05 MWMwLTQxMzgtYTMzYS1iNDc4NjVkZTU1YzUvMS9BNkM1MDlCQTQ4RTVCNTA0OTQ1 NzJFMDVDNDVDNThFN0UxNkQ4N0ZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpE4UP2qir44/cDcxcSu I+C7PE036lwcP4XkblzHLrmUs4c5t5k7kvj+UnmPTx9TYmNwhikaaCSI+JCHlKrg 0DYsWav6YdaZUDDu03JPeqgtKNu6G0S5Agtwq/0t6gnc9YUXW1so+YCY99FBvysv LgAn4RQFglYwdUfftfjpmIU1BBjA8ARWaoF5+ow4dtdSZmkKESuirTJ/2zDLPvEU Leapzs7drbhrtdolVrxNOxMLjkltugKPxqn15AOwF6SAnuRUzKOiaQXfK0tf4/R0 DSLneqSRxo3csaX7CUd5/0JwcoPXWpxxPfQDRNsMkj029GcLrEI7+pF0p25hzvLa 3g== -----END CERTIFICATE-----Generated at Sun Jun 15 17:04:02 2025 by rpki-client