$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft File: CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft (raw, json) Hash identifier: dy10pyCPZaEUDp9z9H7oGxSlz6kThQkcaN2h2uz9bhU= Subject key identifier: 92:19:D3:0D:9A:3B:1A:0F:A4:89:EE:41:7F:30:CA:4C:70:74:AE:42 Authority key identifier: CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD Certificate issuer: /CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD Certificate serial: 3DC9A467ACCBE9D3701929C6143405929A4949C8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft Manifest number: 0173 Signing time: Sat 14 Jun 2025 22:03:18 +0000 Manifest this update: Sat 14 Jun 2025 21:58:18 +0000 Manifest next update: Mon 16 Jun 2025 00:37:18 +0000 Files and hashes: 1: CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl (hash: 9v4bs/ltkIKCCDsT9Sav5ONusOAaxsMOBCDlqbJRp88=) 2: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: Q5gjl44KzFA6g8+tW8lygBoA3oaZ4qvSEamF1iUuuio=) 3: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: 4NAkvNhOgG+FdQOl5H1HgnY8A0ca/GD2rGJr4GFMtSI=) 4: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: wTqD67Uqf1W/idPthA4sHinaJ2FPLZ88IN640ixPrCU=) 5: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: Nyn9oM7uD3t9zeyaIzVAMa0fIXr9id1B4aigY0eVgwU=) 6: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: vFXjegY0vnmzgiKwFkv4TNQvgCv0y7neNveGux2ZS+w=) 7: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: ahz6gPUt4YrcLpOD9Ozfm8bYrgH1OTsLIpfe4cqXpMc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 00:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c9:a4:67:ac:cb:e9:d3:70:19:29:c6:14:34:05:92:9a:49:49:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD Validity Not Before: Jun 14 21:58:18 2025 GMT Not After : Jun 16 00:37:18 2025 GMT Subject: CN=9219D30D9A3B1A0FA489EE417F30CA4C7074AE42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:93:fd:25:5e:8c:08:27:29:88:77:d4:3e: 65:a2:b9:2d:52:09:27:5b:b9:7e:bb:5a:d2:7c:27: 6b:6e:df:ec:29:ef:93:d2:e2:91:f1:82:95:4d:76: f5:77:77:07:d1:8f:50:68:d6:f3:ce:79:56:e7:67: c9:f9:ba:b3:5a:6f:39:32:1f:11:51:eb:4e:c9:c4: 01:e7:a7:06:16:a7:49:d2:30:af:32:06:e8:23:35: 61:bf:d4:f1:29:af:87:09:4d:1f:83:78:40:ce:e2: 95:46:b0:29:62:33:be:48:70:44:3f:8a:05:2d:75: 25:39:1c:19:89:73:7b:3f:41:9f:19:0e:a2:fd:27: f8:d0:d4:25:1d:7e:fe:eb:03:46:1a:f5:a3:89:05: eb:1d:dc:62:69:40:19:72:7d:c1:3b:72:14:69:ce: 42:5a:80:4f:3b:42:05:ef:20:f1:4b:93:e9:ea:08: f3:78:85:58:24:a2:8a:5f:36:18:37:cd:1a:86:d9: 98:bf:e4:84:24:af:2d:b2:bc:1b:53:39:d8:8c:80: ed:a2:0f:9a:16:94:52:f3:d0:90:b2:18:e8:f0:00: 2b:34:e1:07:4a:2a:78:41:97:6e:86:de:ed:89:1f: b5:66:14:4c:65:11:8f:bb:c6:b8:c2:c1:e9:0a:cd: b5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:19:D3:0D:9A:3B:1A:0F:A4:89:EE:41:7F:30:CA:4C:70:74:AE:42 X509v3 Authority Key Identifier: keyid:CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f9:a4:13:a0:f7:da:06:cf:c9:50:ad:aa:87:f5:68:83:c1: 4d:ed:37:9e:a6:e8:ed:72:95:2e:84:63:69:dd:e5:8a:58:db: 96:40:87:da:2f:0c:73:ba:52:db:a7:dc:d9:d8:4b:f4:16:08: e0:7a:d7:c0:05:ed:aa:dd:51:f9:46:8f:94:5a:f5:bc:d4:57: 00:8f:ff:40:af:83:09:d5:d6:e0:04:d1:8c:ad:e4:47:f4:3d: f5:41:66:38:0c:07:85:8b:20:1b:42:ce:cb:0d:bb:a6:de:18: ee:93:a9:b0:52:fa:47:32:b7:87:d0:eb:f6:31:63:db:64:8a: ea:98:06:36:40:ef:b5:a9:74:db:95:0b:f1:9b:bb:6d:d5:12: 35:09:29:55:79:db:5d:23:ed:0b:c0:1e:5c:f5:e9:25:b5:ae: 49:7a:bb:a0:c9:63:5b:66:04:c6:cf:91:96:6c:30:c7:87:44: ef:42:e0:5b:8d:9a:68:2f:20:82:ca:ec:98:10:a5:d0:61:ba: f3:16:cf:f9:cf:3b:19:b6:8f:d2:3d:cf:b3:bf:4f:30:46:e8: e7:97:8c:81:ba:c3:d2:0e:9f:d1:7c:cc:56:cb:10:87:eb:e0: 16:02:c4:43:f4:5e:7e:db:3b:23:af:1b:fc:0f:13:4c:c4:de: 5f:b5:34:ea -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUPcmkZ6zL6dNwGSnGFDQFkppJScgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgz Rjk1NTFDRDAeFw0yNTA2MTQyMTU4MThaFw0yNTA2MTYwMDM3MThaMDMxMTAvBgNV BAMTKDkyMTlEMzBEOUEzQjFBMEZBNDg5RUU0MTdGMzBDQTRDNzA3NEFFNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjO5P9JV6MCCcpiHfUPmWiuS1S CSdbuX67WtJ8J2tu3+wp75PS4pHxgpVNdvV3dwfRj1Bo1vPOeVbnZ8n5urNabzky HxFR607JxAHnpwYWp0nSMK8yBugjNWG/1PEpr4cJTR+DeEDO4pVGsCliM75IcEQ/ igUtdSU5HBmJc3s/QZ8ZDqL9J/jQ1CUdfv7rA0Ya9aOJBesd3GJpQBlyfcE7chRp zkJagE87QgXvIPFLk+nqCPN4hVgkoopfNhg3zRqG2Zi/5IQkry2yvBtTOdiMgO2i D5oWlFLz0JCyGOjwACs04QdKKnhBl26G3u2JH7VmFExlEY+7xrjCwekKzbWbAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUkhnTDZo7Gg+kie5BfzDKTHB0rkIwHwYDVR0j BBgwFoAUzhtPQ2e2pV80ypgaDWynWD+VUc0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzEvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1NTFDRC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1 NTFDRC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvMS9DRTFCNEY0MzY3QjZBNTVGMzRD QTk4MUEwRDZDQTc1ODNGOTU1MUNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfmkE6D32gbPyVCtqof1 aIPBTe03nqbo7XKVLoRjad3liljblkCH2i8Mc7pS26fc2dhL9BYI4HrXwAXtqt1R +UaPlFr1vNRXAI//QK+DCdXW4ATRjK3kR/Q99UFmOAwHhYsgG0LOyw27pt4Y7pOp sFL6RzK3h9Dr9jFj22SK6pgGNkDvtal025UL8Zu7bdUSNQkpVXnbXSPtC8AeXPXp JbWuSXq7oMljW2YExs+Rlmwwx4dE70LgW42aaC8ggsrsmBCl0GG68xbP+c87GbaP 0j3Ps79PMEbo55eMgbrD0g6f0XzMVssQh+vgFgLEQ/Refts7I68b/A8TTMTeX7U0 6g== -----END CERTIFICATE-----Generated at Sun Jun 15 15:48:23 2025 by rpki-client