$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft File: 6578E79662000496EB1540D8BD8FA65ED8D63A62.mft (raw, json) Hash identifier: ilmT14shcfIK/twgnWECJxfYv4U4lRfyBPvsnC6VxQA= Subject key identifier: E0:E2:BC:19:B1:27:E1:68:73:F9:8F:A2:D9:5E:AB:93:5E:F2:29:CD Authority key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 Certificate issuer: /CN=6578E79662000496EB1540D8BD8FA65ED8D63A62 Certificate serial: 0DF5F41895A7BADA2360A9F8E1EA6F3C6B8973BF Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft Manifest number: 73 Signing time: Tue 04 Nov 2025 23:43:32 +0000 Manifest this update: Tue 04 Nov 2025 23:38:32 +0000 Manifest next update: Thu 06 Nov 2025 01:46:32 +0000 Files and hashes: 1: 6578E79662000496EB1540D8BD8FA65ED8D63A62.crl (hash: riyh/fhEqgpnmQgzNdjNi2gCo9M6KpFm4Y8LggUimbE=) 2: 38352e3135352e3232372e302f32342d3234203d3e203530313034.roa (hash: ocAxx23XjwXyOYOHcEuZaqgQEocGKpcgw1PpjzeOLXQ=) 3: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (hash: CAs4yn2E+Z/tR5i90G5tFQhJLWheBQDwrBHMrZXdGBo=) 4: 38352e3135352e3232372e302f32342d3234203d3e203332323030.roa (hash: u3B6KKBKIUk9SO5JxQD+EeR9cSC3pRMQPnPBIW/RPYA=) 5: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (hash: 52mHsWa4VgNp8igpY75YRE/bqiZx2ZdwnVE8gr1/unY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 23:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f5:f4:18:95:a7:ba:da:23:60:a9:f8:e1:ea:6f:3c:6b:89:73:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62 Validity Not Before: Nov 4 23:38:32 2025 GMT Not After : Nov 6 01:46:32 2025 GMT Subject: CN=E0E2BC19B127E16873F98FA2D95EAB935EF229CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:61:72:19:e0:2c:e7:7c:87:5a:c4:63:29:55: bd:bf:0f:dd:a9:f8:2d:67:13:4d:6c:6d:96:a8:4a: 8f:b8:92:fb:b4:b5:3d:ba:97:c1:c4:45:fc:5f:3e: 07:d0:86:d6:b5:e3:77:ee:94:bf:f4:02:ed:28:e0: b9:a4:cc:85:e2:b3:8e:18:80:2f:c2:f8:1e:05:ba: 25:df:6e:59:22:1b:e6:23:b4:9a:4e:85:14:8d:91: d8:7a:a6:fc:b5:4e:38:d0:56:ca:46:b2:ab:85:53: 0f:55:7a:ba:18:f7:75:a7:ad:72:bf:fc:a3:64:bf: 95:aa:da:f8:5b:eb:69:02:d8:80:91:3c:be:cd:13: 67:99:2e:78:b2:91:b4:50:19:ee:3b:3d:89:69:2e: 7f:ca:96:13:12:9f:f7:5c:4e:6b:48:56:04:34:fb: ad:56:39:4f:f8:0b:07:e8:a9:cc:15:1b:19:1a:8b: cc:e7:d4:4f:67:44:90:35:07:1f:d6:53:de:e7:74: d7:5f:6a:5e:4b:8a:46:ed:e7:69:75:21:db:72:bd: 86:40:3e:97:a8:85:27:d4:b6:77:12:2f:a3:cc:34: 49:e5:f1:98:74:10:9d:a4:5b:bc:c7:46:3b:b6:fd: b1:79:a2:09:42:a9:08:15:ff:d5:d1:8c:72:76:7c: 44:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E2:BC:19:B1:27:E1:68:73:F9:8F:A2:D9:5E:AB:93:5E:F2:29:CD X509v3 Authority Key Identifier: keyid:65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e6:f3:f5:62:a4:6d:54:74:79:02:bc:8b:a6:1f:ad:36:0c: ab:45:cd:3c:b9:94:94:cd:12:95:df:85:f6:68:59:13:db:89: d7:e4:3a:19:e5:a6:a5:72:8b:ab:88:7b:88:be:4d:ee:5e:8a: 0d:db:39:1f:8b:dd:5c:01:fb:5e:a9:56:3e:31:29:d9:97:4e: 0b:06:ba:a1:86:cf:29:a1:15:f8:13:4c:ed:50:b1:2f:b6:70: 22:cc:fb:00:03:93:6a:e6:38:ba:05:78:9f:8e:dc:2d:a9:3e: 62:1f:fa:7d:33:ab:e0:fa:42:04:87:4f:1c:af:7a:a3:5b:84: 0f:af:62:09:67:4d:a9:8b:f9:af:6b:24:75:1b:a9:bc:d7:26: f2:2d:e7:72:bb:91:db:bd:a5:43:6c:0f:5c:5d:5e:15:b2:bd: 59:71:d2:59:bf:6b:98:aa:2c:9f:0b:b6:31:da:f6:b1:2e:b1: c0:ef:39:82:3f:ee:61:00:32:7f:03:8f:b8:87:bd:3a:f5:6b: 93:93:95:7a:fa:b5:11:ca:b3:f2:fe:b3:b9:dc:a7:f3:84:af: 58:12:08:dd:9b:48:18:89:7c:f9:da:d6:11:77:82:21:5a:c1: 5b:6f:26:bb:55:1a:aa:be:88:63:b5:e6:6a:66:0e:92:c6:42: 3e:4e:47:89 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUDfX0GJWnutojYKn44epvPGuJc78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVE OEQ2M0E2MjAeFw0yNTExMDQyMzM4MzJaFw0yNTExMDYwMTQ2MzJaMDMxMTAvBgNV BAMTKEUwRTJCQzE5QjEyN0UxNjg3M0Y5OEZBMkQ5NUVBQjkzNUVGMjI5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuYXIZ4CznfIdaxGMpVb2/D92p +C1nE01sbZaoSo+4kvu0tT26l8HERfxfPgfQhta143fulL/0Au0o4LmkzIXis44Y gC/C+B4FuiXfblkiG+YjtJpOhRSNkdh6pvy1TjjQVspGsquFUw9VeroY93WnrXK/ /KNkv5Wq2vhb62kC2ICRPL7NE2eZLniykbRQGe47PYlpLn/KlhMSn/dcTmtIVgQ0 +61WOU/4CwfoqcwVGxkai8zn1E9nRJA1Bx/WU97ndNdfal5Likbt52l1IdtyvYZA PpeohSfUtncSL6PMNEnl8Zh0EJ2kW7zHRju2/bF5oglCqQgV/9XRjHJ2fES9AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU4OK8GbEn4Whz+Y+i2V6rk17yKc0wHwYDVR0j BBgwFoAUZXjnlmIABJbrFUDYvY+mXtjWOmIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzgvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2M0E2Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2 M0E2Mi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1l NWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvOC82NTc4RTc5NjYyMDAwNDk2RUIx NTQwRDhCRDhGQTY1RUQ4RDYzQTYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMebz9WKkbVR0eQK8i6Yf rTYMq0XNPLmUlM0Sld+F9mhZE9uJ1+Q6GeWmpXKLq4h7iL5N7l6KDds5H4vdXAH7 XqlWPjEp2ZdOCwa6oYbPKaEV+BNM7VCxL7ZwIsz7AAOTauY4ugV4n47cLak+Yh/6 fTOr4PpCBIdPHK96o1uED69iCWdNqYv5r2skdRupvNcm8i3ncruR272lQ2wPXF1e FbK9WXHSWb9rmKosnwu2Mdr2sS6xwO85gj/uYQAyfwOPuIe9OvVrk5OVevq1Ecqz 8v6zudyn84SvWBII3ZtIGIl8+drWEXeCIVrBW28mu1Uaqr6IY7XmamYOksZCPk5H iQ== -----END CERTIFICATE-----Generated at Wed Nov 5 08:37:37 2025 by rpki-client