$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft File: 847138B5401830B89B52403C777718BB40B2B6B5.mft (raw, json) Hash identifier: 8YQJtPAiAos0IX6WKfG18YjSntEROa8F/KJhPh2evng= Subject key identifier: E9:0E:89:2B:1D:65:E3:33:E3:8C:B3:5F:23:AE:A8:7C:FF:EC:82:A5 Authority key identifier: 84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5 Certificate issuer: /CN=847138B5401830B89B52403C777718BB40B2B6B5 Certificate serial: 254628E3CDEF182E75C6D980A69E7D4941CC38AC Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft Manifest number: 051C Signing time: Mon 16 Jun 2025 07:31:59 +0000 Manifest this update: Mon 16 Jun 2025 07:26:59 +0000 Manifest next update: Tue 17 Jun 2025 08:27:59 +0000 Files and hashes: 1: 847138B5401830B89B52403C777718BB40B2B6B5.crl (hash: GtW9zerN5UFBc6RAwHTtp7jWxDjzp5X35eR7ylWThRY=) 2: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: nMmiIj2RlJjYPT/1+XLEzvCEDF/otDgwrHV2q/RTde4=) 3: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: HYPQYH9q04uUtQ2nRIqre2hb3Qbqb6C2ZO6Rxb9EvzQ=) 4: BE8A7AC02556C14368364036D5427F53187B6D9D.cer (hash: DgZZLJZ9Eml763gunc/aU0nCab1SiHrkxw0oRdopVbY=) 5: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: lqIlXTFIWSBiRqL977xA8LwWmhjqpimo3uxiYjVeS/M=) 6: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: B/V5ud+StvDXjqEGvB3k810Cv5LJwyUE9nhfaTbPqMk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 00:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:46:28:e3:cd:ef:18:2e:75:c6:d9:80:a6:9e:7d:49:41:cc:38:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847138B5401830B89B52403C777718BB40B2B6B5 Validity Not Before: Jun 16 07:26:59 2025 GMT Not After : Jun 17 08:27:59 2025 GMT Subject: CN=E90E892B1D65E333E38CB35F23AEA87CFFEC82A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ca:1a:cf:c5:e5:89:a2:66:a8:44:96:89:e9: e1:26:62:05:2b:ad:b1:3f:10:2a:7c:1f:88:ef:59: 5a:78:77:ec:62:04:31:5e:fc:c7:10:c3:19:83:6d: dc:40:72:a6:28:ee:49:6f:19:c0:54:b7:22:a4:c7: 66:8d:ac:6d:e4:7f:13:5d:01:91:10:76:55:87:1e: 26:2f:bd:01:e0:4c:bf:37:18:ff:dd:41:30:5f:7b: ff:4f:76:26:35:4b:0d:80:9f:ca:bc:28:f0:63:23: 71:99:bf:82:68:f4:b1:7b:87:4c:76:d6:e7:4c:20: d8:c1:54:98:d2:58:10:12:10:cd:38:84:cf:0f:fb: da:c5:a4:14:5b:ba:f5:07:dd:29:02:3d:e6:01:10: d2:81:e9:85:6a:82:d7:66:15:fa:ae:86:13:c7:13: 96:55:bd:6f:3e:e1:bc:82:eb:31:e5:c3:fb:e5:26: f0:1a:05:8f:d5:e7:73:4b:95:27:f4:7d:5c:88:b9: 46:d1:23:b8:e1:ba:cc:b9:60:bb:99:f5:8c:2a:f6: 12:9b:c7:69:e6:70:f4:bf:a1:2b:c5:aa:ad:64:79: db:67:3e:25:e4:ed:f8:cf:2c:12:75:30:bf:5e:93: c2:fe:5d:33:b4:60:72:ec:16:d3:4e:9f:83:a9:70: fe:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0E:89:2B:1D:65:E3:33:E3:8C:B3:5F:23:AE:A8:7C:FF:EC:82:A5 X509v3 Authority Key Identifier: keyid:84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:24:d8:d6:58:44:d3:a6:a6:03:41:ef:7c:87:41:2c:ed:19: fe:fc:fe:66:f8:00:4f:d8:ee:6b:82:1b:71:b7:01:b8:c7:2d: ed:68:ad:e6:30:46:f3:d5:58:b8:c5:c7:48:cb:18:ce:f3:ef: 50:c9:3b:c7:38:92:9d:68:ba:2b:c3:56:31:dd:62:b7:32:da: 14:cd:02:03:28:ae:d2:5b:6e:19:b2:7a:af:62:38:d9:e5:82: 78:2a:63:14:86:ee:db:3f:c0:08:ed:7a:ad:a3:12:2c:84:37: 21:96:70:13:69:b1:c5:1a:9d:08:44:a4:a2:bc:c0:5c:e5:e2: f8:89:94:b4:94:e4:c8:62:a5:df:94:1c:87:b1:18:35:63:cd: 28:26:df:e6:98:e4:a1:2d:68:dd:5e:c6:5b:6e:a7:ad:3d:c1: fd:fc:8e:5c:5a:3c:c4:86:54:34:74:77:b0:2f:40:b7:d8:61: c9:7b:46:9c:fb:21:ab:84:cd:66:1c:f4:5c:a9:57:3b:15:75: d6:94:0f:d0:83:79:f8:72:7b:e5:72:e5:3d:88:b9:ff:09:9d: 35:df:77:93:b8:97:69:f0:71:20:ea:15:3c:c6:bd:85:5d:23: 6e:96:f0:70:37:36:fb:9a:1d:7f:94:f9:f2:c8:5e:f5:0e:6f: 4f:2f:4d:4e -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUJUYo483vGC51xtmApp59SUHMOKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0 MEIyQjZCNTAeFw0yNTA2MTYwNzI2NTlaFw0yNTA2MTcwODI3NTlaMDMxMTAvBgNV BAMTKEU5MEU4OTJCMUQ2NUUzMzNFMzhDQjM1RjIzQUVBODdDRkZFQzgyQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8yhrPxeWJomaoRJaJ6eEmYgUr rbE/ECp8H4jvWVp4d+xiBDFe/McQwxmDbdxAcqYo7klvGcBUtyKkx2aNrG3kfxNd AZEQdlWHHiYvvQHgTL83GP/dQTBfe/9PdiY1Sw2An8q8KPBjI3GZv4Jo9LF7h0x2 1udMINjBVJjSWBASEM04hM8P+9rFpBRbuvUH3SkCPeYBENKB6YVqgtdmFfquhhPH E5ZVvW8+4byC6zHlw/vlJvAaBY/V53NLlSf0fVyIuUbRI7jhusy5YLuZ9Ywq9hKb x2nmcPS/oSvFqq1kedtnPiXk7fjPLBJ1ML9ek8L+XTO0YHLsFtNOn4OpcP4rAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU6Q6JKx1l4zPjjLNfI66ofP/sgqUwHwYDVR0j BBgwFoAUhHE4tUAYMLibUkA8d3cYu0CytrUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzQvODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0MEIyQjZCNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0MEIy QjZCNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03 Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvNC84NDcxMzhCNTQwMTgzMEI4OUI1 MjQwM0M3Nzc3MThCQjQwQjJCNkI1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdyTY1lhE06amA0HvfIdB LO0Z/vz+ZvgAT9jua4IbcbcBuMct7Wit5jBG89VYuMXHSMsYzvPvUMk7xziSnWi6 K8NWMd1itzLaFM0CAyiu0ltuGbJ6r2I42eWCeCpjFIbu2z/ACO16raMSLIQ3IZZw E2mxxRqdCESkorzAXOXi+ImUtJTkyGKl35Qch7EYNWPNKCbf5pjkoS1o3V7GW26n rT3B/fyOXFo8xIZUNHR3sC9At9hhyXtGnPshq4TNZhz0XKlXOxV11pQP0IN5+HJ7 5XLlPYi5/wmdNd93k7iXafBxIOoVPMa9hV0jbpbwcDc2+5odf5T58she9Q5vTy9N Tg== -----END CERTIFICATE-----Generated at Mon Jun 16 15:50:25 2025 by rpki-client