$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft File: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft (raw, json) Hash identifier: ZbgLwTLnLEtB/yzRGyuOtftxPZ7v528WOxCGlyfhBxM= Subject key identifier: E0:D4:3D:B7:19:8D:66:D1:9C:13:B1:3B:46:11:9A:5E:26:85:1C:4C Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Certificate serial: 3935CCBF8495B48FB9D2AE1A180DFA9C147407A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft Manifest number: 0356 Signing time: Fri 13 Jun 2025 07:47:46 +0000 Manifest this update: Fri 13 Jun 2025 07:42:46 +0000 Manifest next update: Sat 14 Jun 2025 09:24:46 +0000 Files and hashes: 1: 34352e3134362e3136332e302f32342d3234203d3e20323136313833.roa (hash: VqRU0PsdkYcQlfLEqZmAkEPw8yvo7sqFgCP45AzG5Gs=) 2: 34352e3134362e3136322e302f32342d3234203d3e203138363331.roa (hash: C/6HJC1mRnTjt5un9I/ly/ex3eg1Ngny62cwbLuyXag=) 3: 34352e3134362e3136302e302f32332d3233203d3e203437343437.roa (hash: RhIjHNXayp0tS4DN32atD6aHafLrHUAz0HkdV618CRY=) 4: 5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl (hash: +A1+Y/TvJnCbSwuFIy5omPYWPcUufu9FLHLnMvUCuY0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 09:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:35:cc:bf:84:95:b4:8f:b9:d2:ae:1a:18:0d:fa:9c:14:74:07:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Validity Not Before: Jun 13 07:42:46 2025 GMT Not After : Jun 14 09:24:46 2025 GMT Subject: CN=E0D43DB7198D66D19C13B13B46119A5E26851C4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9e:44:b3:98:87:f1:f1:82:06:84:1d:d7:de: 99:58:ed:e3:6f:cf:fc:13:fa:29:46:45:ab:41:bf: 3e:db:56:03:37:82:a7:89:9c:d7:e2:ed:7e:c6:77: db:1e:1e:31:5a:66:c2:c5:e6:c0:15:71:a3:0c:0b: eb:55:42:9d:21:ad:e5:63:68:e4:79:8b:bd:33:81: c8:56:48:e8:61:03:7d:cd:d3:ad:de:e6:c4:8f:c6: ca:27:36:c9:08:33:80:0c:1d:4c:25:7f:c7:42:18: 08:4f:29:4c:b0:d0:11:c7:2d:06:1f:fa:85:2a:72: 8f:4e:5d:e1:bf:c3:4c:10:2a:5b:f2:ee:34:3f:5c: 6c:32:16:57:e4:d4:95:fc:5d:a5:e8:88:95:1d:d2: 02:90:d6:e1:95:b8:5e:b4:97:07:99:44:72:89:6c: c9:54:bd:7c:fd:d9:ac:02:6e:19:7c:44:35:1e:01: b6:de:ba:64:65:66:9c:2e:0c:85:7a:a2:36:ef:cc: e3:7d:32:29:5a:3d:6b:1a:43:68:25:dc:e6:09:32: 23:1b:5e:e8:37:a1:bc:23:55:25:aa:bb:f2:7e:5c: 86:7a:68:06:a8:92:1e:04:6c:d3:70:6f:47:9d:f0: 5c:c2:a5:eb:a1:af:fe:60:d8:46:84:87:2e:d8:b5: a6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D4:3D:B7:19:8D:66:D1:9C:13:B1:3B:46:11:9A:5E:26:85:1C:4C X509v3 Authority Key Identifier: keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:9a:44:da:f7:90:a2:de:f7:7d:58:7b:c0:f4:50:ad:e8:88: a9:0b:ad:60:1a:31:07:ef:6e:3a:d2:e3:0e:c3:79:ef:cd:ce: fe:7b:9d:ff:da:f5:0f:bd:db:bc:9d:bc:11:58:68:7a:51:fc: f8:91:7b:21:d9:75:dc:7d:bd:7a:17:0a:5f:8e:df:73:df:34: 7b:f7:d7:f9:4b:dc:e7:b0:a5:a0:b2:a9:97:63:63:aa:28:aa: f8:29:cd:2c:07:71:f9:60:bb:f2:9f:13:47:f7:a1:f4:cf:86: b4:a1:d2:49:d8:00:04:97:65:94:b3:85:0c:6e:9a:93:38:78: 62:45:ca:1a:3b:c8:27:c4:83:0d:5d:cf:29:c1:12:06:0b:a5: c4:b5:ad:95:fe:64:80:65:c3:40:07:76:a6:b7:f2:56:05:d0: 5f:3a:5f:49:d7:c1:da:de:7e:12:13:78:80:dc:fe:d4:44:23: 91:81:15:6d:99:0c:d8:57:0d:d5:18:a0:4b:12:ff:34:2e:13: af:62:1e:4a:26:5b:f4:e5:6f:0c:82:52:b5:4f:15:d7:53:69: d9:cf:11:66:5d:99:9c:00:7c:9b:96:f7:80:a7:21:60:17:d0: 79:06:2e:af:bc:c8:ef:dc:e3:90:d4:a3:32:26:98:b5:bf:db: f1:f5:8b:1e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOTXMv4SVtI+50q4aGA36nBR0B6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRlZmUwOTIyZjRmNTUyNzBkY2Q1YzA4ZjA0ZjFjN2Jm MjYwNzNjMzAeFw0yNTA2MTMwNzQyNDZaFw0yNTA2MTQwOTI0NDZaMDMxMTAvBgNV BAMTKEUwRDQzREI3MTk4RDY2RDE5QzEzQjEzQjQ2MTE5QTVFMjY4NTFDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlnkSzmIfx8YIGhB3X3plY7eNv z/wT+ilGRatBvz7bVgM3gqeJnNfi7X7Gd9seHjFaZsLF5sAVcaMMC+tVQp0hreVj aOR5i70zgchWSOhhA33N063e5sSPxsonNskIM4AMHUwlf8dCGAhPKUyw0BHHLQYf +oUqco9OXeG/w0wQKlvy7jQ/XGwyFlfk1JX8XaXoiJUd0gKQ1uGVuF60lweZRHKJ bMlUvXz92awCbhl8RDUeAbbeumRlZpwuDIV6ojbvzON9MilaPWsaQ2gl3OYJMiMb Xug3obwjVSWqu/J+XIZ6aAaokh4EbNNwb0ed8FzCpeuhr/5g2EaEhy7YtaYjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4NQ9txmNZtGcE7E7RhGaXiaFHEwwHwYDVR0j BBgwFoAUXe/gki9PVScNzVwI8E8ce/Jgc8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmZlMmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYz NzkwLzAvNURFRkUwOTIyRjRGNTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hlX2draTlQVlNjTnpWd0k4RThjZV9K Z2M4TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZmUyYjI3YS0x ZWM1LTRhYjctOTc4ZS02ZGE5Y2Y5ZjM3OTAvMC81REVGRTA5MjJGNEY1NTI3MERD RDVDMDhGMDRGMUM3QkYyNjA3M0MzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZpE2veQot73fVh7wPRQ reiIqQutYBoxB+9uOtLjDsN5783O/nud/9r1D73bvJ28EVhoelH8+JF7Idl13H29 ehcKX47fc980e/fX+Uvc57CloLKpl2Njqiiq+CnNLAdx+WC78p8TR/eh9M+GtKHS SdgABJdllLOFDG6akzh4YkXKGjvIJ8SDDV3PKcESBgulxLWtlf5kgGXDQAd2prfy VgXQXzpfSdfB2t5+EhN4gNz+1EQjkYEVbZkM2FcN1RigSxL/NC4Tr2IeSiZb9OVv DIJStU8V11Np2c8RZl2ZnAB8m5b3gKchYBfQeQYur7zI79zjkNSjMiaYtb/b8fWL Hg== -----END CERTIFICATE-----Generated at Fri Jun 13 18:58:19 2025 by rpki-client