$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft File: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft (raw, json) Hash identifier: WkgEy1FPfkcIqzE9i2HzBtwft7uh4kAW26gzEyaUIvY= Subject key identifier: D3:76:21:3D:CF:43:51:48:DD:D5:52:40:FA:7E:A5:63:4C:60:B4:F8 Authority key identifier: 72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 Certificate issuer: /CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Certificate serial: 5C1F5E8AD4BC1369C534AF47D07CC3094969D586 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft Manifest number: 3F Signing time: Fri 13 Jun 2025 09:46:24 +0000 Manifest this update: Fri 13 Jun 2025 09:41:24 +0000 Manifest next update: Sat 14 Jun 2025 13:25:24 +0000 Files and hashes: 1: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl (hash: kCqrfGOQWonExjU9diwpDIkIBsdMAK+QKpriMZcr4dc=) 2: 3139352e37342e34302e302f32322d3234203d3e203331313834.roa (hash: OWTrG12il6+R+m95Ctsd+LQNgEyVIDW3AMDlydaSO3g=) 3: 3139332e32322e3235332e302f32342d3234203d3e203331313834.roa (hash: WrMYNrMKiwcHb7Layep1L0ANnPM7z3AEErZKMOJmYxg=) 4: 326131333a363134303a3a2f32392d3332203d3e203331313834.roa (hash: HEAzsbwZSQMPtZWHDUG9J3+dKm/03SetBs7lrO1nkwI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 13:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:1f:5e:8a:d4:bc:13:69:c5:34:af:47:d0:7c:c3:09:49:69:d5:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Validity Not Before: Jun 13 09:41:24 2025 GMT Not After : Jun 14 13:25:24 2025 GMT Subject: CN=D376213DCF435148DDD55240FA7EA5634C60B4F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e4:2f:0f:81:1d:d0:2e:a3:33:57:10:62:02: c0:d0:92:ce:1b:67:96:a1:53:cf:16:29:8d:3c:2c: 3b:5c:36:2f:35:b2:8c:8a:75:a6:9c:7c:91:1f:5b: 60:23:8e:6b:fd:29:5c:76:b4:8f:77:30:4b:57:81: 8a:a0:d7:a7:c9:99:60:4b:9e:30:fd:19:f0:24:45: 1f:30:fe:00:a2:e6:7c:d8:58:a0:74:97:1a:c2:16: 45:98:09:a8:ad:d1:b6:2e:59:6c:3b:81:93:02:1e: 56:c8:28:e2:ea:c8:66:ee:91:cf:f1:83:b3:8f:be: 9a:4c:c8:93:bc:07:25:b0:66:11:a9:6e:4a:0b:a6: 11:49:07:b5:48:61:6d:01:fb:83:49:15:f8:96:ed: b2:39:43:3b:ed:ff:d2:96:c7:14:41:ab:46:af:89: dc:0f:5d:ab:25:99:00:6c:85:cd:cc:db:98:9a:28: 84:41:2c:39:7b:85:f9:d7:56:78:85:b3:72:79:11: 04:97:52:78:8e:40:a4:de:8d:1c:1d:7d:c4:7e:95: ac:8b:dc:8a:89:49:2c:ae:02:a1:c3:d9:58:e3:de: 28:b5:8f:36:84:87:6c:74:57:07:c3:da:86:d4:56: f2:c0:0f:2d:7e:68:32:39:22:1b:91:66:5a:48:14: 78:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:76:21:3D:CF:43:51:48:DD:D5:52:40:FA:7E:A5:63:4C:60:B4:F8 X509v3 Authority Key Identifier: keyid:72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:d8:c4:3f:6c:f1:0e:ae:7d:44:b3:76:ba:4a:c3:b7:b9:aa: 60:9a:8f:a3:ea:1b:df:01:06:72:fd:1b:de:b6:65:a8:bf:2f: c1:83:ab:a3:7e:26:dd:15:0b:58:2a:d3:bc:6d:83:25:18:75: e4:e4:46:0d:86:01:a0:08:1e:aa:26:32:5b:ac:5f:1f:a3:cf: d8:e1:58:86:99:8d:34:6e:2d:07:05:6e:36:27:52:5b:0d:cc: 02:13:74:33:4f:a2:63:59:fb:b3:39:9b:b3:03:4f:91:f8:0d: c4:0c:39:ca:3f:9d:3c:46:fd:fc:6f:3d:a3:7b:00:d3:f2:35: 0c:3b:94:1b:75:60:fd:5f:d0:4b:2b:7f:64:79:f5:2e:94:4b: 5d:82:86:42:67:c7:0b:9f:69:67:66:93:8f:92:c3:be:df:88: ef:d4:2a:39:b3:55:4e:8b:9f:cc:2c:1d:61:36:ee:8d:08:f3: b9:ec:71:46:51:13:e5:8e:45:e7:06:d5:e8:c5:97:8e:cf:c4: e7:0b:2c:d5:92:66:5e:33:96:d6:28:0a:09:90:5c:8f:40:b7: 9e:ec:62:79:c6:9e:11:47:34:38:79:fb:fa:58:a8:32:c0:fa: 54:73:e5:a7:18:36:86:a4:85:39:8f:23:78:e3:50:b1:e6:fa: 7b:32:48:43 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXB9eitS8E2nFNK9H0HzDCUlp1YYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJmM2VlMTY5ZjliZDcxZjc4YTQyZDFhNzJmZTBmMmE4 MjQ4MjJkMTAeFw0yNTA2MTMwOTQxMjRaFw0yNTA2MTQxMzI1MjRaMDMxMTAvBgNV BAMTKEQzNzYyMTNEQ0Y0MzUxNDhEREQ1NTI0MEZBN0VBNTYzNEM2MEI0RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV5C8PgR3QLqMzVxBiAsDQks4b Z5ahU88WKY08LDtcNi81soyKdaacfJEfW2Ajjmv9KVx2tI93MEtXgYqg16fJmWBL njD9GfAkRR8w/gCi5nzYWKB0lxrCFkWYCait0bYuWWw7gZMCHlbIKOLqyGbukc/x g7OPvppMyJO8ByWwZhGpbkoLphFJB7VIYW0B+4NJFfiW7bI5Qzvt/9KWxxRBq0av idwPXaslmQBshc3M25iaKIRBLDl7hfnXVniFs3J5EQSXUniOQKTejRwdfcR+layL 3IqJSSyuAqHD2Vjj3ii1jzaEh2x0VwfD2obUVvLADy1+aDI5IhuRZlpIFHhxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU03YhPc9DUUjd1VJA+n6lY0xgtPgwHwYDVR0j BBgwFoAUcvPuFp+b1x94pC0acv4PKoJIItEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjgyYjVlMDAtMmFjMy00OWYxLWEyOWItMjZhNWZkZjBm YTQxLzAvNzJGM0VFMTY5RjlCRDcxRjc4QTQyRDFBNzJGRTBGMkE4MjQ4MjJEMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2N2UHVGcC1iMXg5NHBDMGFjdjRQS29K SUl0RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yODJiNWUwMC0y YWMzLTQ5ZjEtYTI5Yi0yNmE1ZmRmMGZhNDEvMC83MkYzRUUxNjlGOUJENzFGNzhB NDJEMUE3MkZFMEYyQTgyNDgyMkQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAttjEP2zxDq59RLN2ukrD t7mqYJqPo+ob3wEGcv0b3rZlqL8vwYOro34m3RULWCrTvG2DJRh15ORGDYYBoAge qiYyW6xfH6PP2OFYhpmNNG4tBwVuNidSWw3MAhN0M0+iY1n7szmbswNPkfgNxAw5 yj+dPEb9/G89o3sA0/I1DDuUG3Vg/V/QSyt/ZHn1LpRLXYKGQmfHC59pZ2aTj5LD vt+I79QqObNVToufzCwdYTbujQjzuexxRlET5Y5F5wbV6MWXjs/E5wss1ZJmXjOW 1igKCZBcj0C3nuxiecaeEUc0OHn7+lioMsD6VHPlpxg2hqSFOY8jeONQseb6ezJI Qw== -----END CERTIFICATE-----Generated at Fri Jun 13 19:21:50 2025 by rpki-client