$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft File: 4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft (raw, json) Hash identifier: syfEK36bwrUXsFJ9sw3KAeo8vql7daMbUsMaZdfPaCQ= Subject key identifier: 8F:88:B8:CC:64:49:C9:84:D3:1B:8C:D2:33:93:6A:B0:3D:3A:6A:02 Authority key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC Certificate issuer: /CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC Certificate serial: 3BB268AFE71E05E33A79D8CCB95B55B2599481AE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft Manifest number: 8A Signing time: Sun 15 Jun 2025 17:40:59 +0000 Manifest this update: Sun 15 Jun 2025 17:35:59 +0000 Manifest next update: Mon 16 Jun 2025 20:33:59 +0000 Files and hashes: 1: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (hash: QHn6tZLY5zwuhSPqOA8QQMb0D6GsyTP/mqBIqGqENAM=) 2: 4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl (hash: HWksIhw7R77cADugahpProD9G26AZdOSO74LCrtUYWo=) 3: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (hash: te+8Q1RQF+/El0aKCot2iG7DWX0UbXJkKUaUr9PfYwE=) 4: 326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa (hash: 4Gi+kIIUqV5pUjirmODz+ut3Qk0c/1o7NqIqNMEHsSc=) 5: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (hash: J8io8U0XPUuDsKGS242FyC3RGJyS4nfWqlR7rVI4fs4=) 6: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (hash: fR50iWKN91zeMKObuJZ1eZa1Tl9ML9P7Lc9Jyq3bDSI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 20:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b2:68:af:e7:1e:05:e3:3a:79:d8:cc:b9:5b:55:b2:59:94:81:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC Validity Not Before: Jun 15 17:35:59 2025 GMT Not After : Jun 16 20:33:59 2025 GMT Subject: CN=8F88B8CC6449C984D31B8CD233936AB03D3A6A02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:70:8c:38:cb:64:4d:d3:aa:63:ae:6f:b4:2f: 8f:40:3c:c3:15:75:06:d3:de:a6:45:49:fb:4c:db: 5b:cf:08:6e:6c:eb:eb:b1:56:db:c1:69:b4:05:74: e5:43:de:a9:b2:1e:d7:e6:a2:70:71:3d:1c:e8:d3: 95:fd:26:76:d8:46:9a:13:81:4f:c4:86:8b:fc:0d: 01:19:4d:1d:e9:fe:e9:9f:27:57:69:a4:5b:7e:0e: a4:21:e0:1e:26:b5:01:a5:fc:c8:dd:5c:31:49:a5: 14:b3:33:eb:31:57:05:11:6f:c4:49:76:21:81:a8: b5:ae:6a:0a:cc:42:92:f7:27:8c:5a:4c:c7:d7:ce: 3d:ed:ee:f6:20:fe:fe:40:31:09:02:cd:fc:b0:94: 83:54:f4:d7:c1:aa:41:78:a2:6d:8d:69:f4:35:14: 8d:e0:10:f7:c8:2b:23:aa:a5:d5:da:c8:bc:77:fc: c8:e1:7b:70:04:21:71:1a:b6:e1:1b:d3:9a:61:40: 49:e2:0f:fe:ad:d2:2f:7c:68:49:1c:37:7e:77:9c: 88:63:93:7d:59:6d:16:6a:1a:01:2b:e1:68:77:c3: 7e:8c:6b:c2:f7:87:fb:03:7a:8c:17:6b:69:2c:1b: 20:1f:db:77:ed:fb:94:f7:9e:eb:bb:7b:bc:30:b8: 0d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:88:B8:CC:64:49:C9:84:D3:1B:8C:D2:33:93:6A:B0:3D:3A:6A:02 X509v3 Authority Key Identifier: keyid:43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:9a:37:94:ca:5f:18:64:a4:fb:07:90:54:ec:c2:04:6f:20: 66:9f:cc:65:4a:70:c1:ee:7e:c7:e4:71:4c:79:c4:83:b7:1a: ac:f2:63:0b:96:33:02:4c:1c:e3:c1:de:dd:0a:41:60:8c:55: f8:17:06:f0:cb:d3:a8:5a:35:98:40:e9:d3:20:bd:f6:7d:bf: 89:55:ad:b1:08:10:75:8e:1c:82:93:11:17:f9:70:11:3a:2e: ef:3b:81:9c:1d:24:3f:d9:22:2b:45:2a:4c:e2:32:f6:6e:36: a3:df:90:85:f3:3b:ac:a8:fa:a1:57:93:03:f5:5e:45:7d:93: f5:d1:a8:66:19:c2:b3:8f:4a:e3:cf:37:36:de:9e:ca:6e:6f: 2f:85:39:57:90:a7:6a:53:c2:fa:b2:23:75:f8:cc:96:96:77: d4:b3:64:37:dd:cb:a2:a6:e7:21:5f:88:fe:09:06:42:79:68: 85:50:e6:19:04:e2:11:10:25:66:19:80:1c:f0:98:d4:3f:11: 56:b2:d2:d9:c3:87:ae:ac:51:47:7c:69:d4:8f:75:a8:69:9d: 34:2a:4b:ae:b6:cf:b7:fd:41:03:77:35:65:df:72:0c:b9:e5: 97:dc:b4:8d:13:43:b7:b3:73:a5:8e:a1:b9:8c:63:0b:2d:20: 5f:34:05:a0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUO7Jor+ceBeM6edjMuVtVslmUga4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM4OEFGNjI5QzcwMkREQTg4RkE2QkIyQTk1NURCOEYy NEVEMkJCQzAeFw0yNTA2MTUxNzM1NTlaFw0yNTA2MTYyMDMzNTlaMDMxMTAvBgNV BAMTKDhGODhCOENDNjQ0OUM5ODREMzFCOENEMjMzOTM2QUIwM0QzQTZBMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4cIw4y2RN06pjrm+0L49APMMV dQbT3qZFSftM21vPCG5s6+uxVtvBabQFdOVD3qmyHtfmonBxPRzo05X9JnbYRpoT gU/Ehov8DQEZTR3p/umfJ1dppFt+DqQh4B4mtQGl/MjdXDFJpRSzM+sxVwURb8RJ diGBqLWuagrMQpL3J4xaTMfXzj3t7vYg/v5AMQkCzfywlINU9NfBqkF4om2NafQ1 FI3gEPfIKyOqpdXayLx3/Mjhe3AEIXEatuEb05phQEniD/6t0i98aEkcN353nIhj k31ZbRZqGgEr4Wh3w36Ma8L3h/sDeowXa2ksGyAf23ft+5T3nuu7e7wwuA0VAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUj4i4zGRJyYTTG4zSM5NqsD06agIwHwYDVR0j BBgwFoAUQ4ivYpxwLdqI+muyqVXbjyTtK7wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzQvNDM4OEFGNjI5QzcwMkREQTg4RkE2QkIyQTk1NURCOEYyNEVEMkJCQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy80Mzg4QUY2MjlDNzAyRERBODhGQTZCQjJB OTU1REI4RjI0RUQyQkJDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQ5MWE0M2JjLTc2ZWMtNGFiZS1iYTdkLWU3M2U5MGQ2NjJjYi80LzQzODhBRjYy OUM3MDJEREE4OEZBNkJCMkE5NTVEQjhGMjRFRDJCQkMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB3mjeU yl8YZKT7B5BU7MIEbyBmn8xlSnDB7n7H5HFMecSDtxqs8mMLljMCTBzjwd7dCkFg jFX4Fwbwy9OoWjWYQOnTIL32fb+JVa2xCBB1jhyCkxEX+XAROi7vO4GcHSQ/2SIr RSpM4jL2bjaj35CF8zusqPqhV5MD9V5FfZP10ahmGcKzj0rjzzc23p7Kbm8vhTlX kKdqU8L6siN1+MyWlnfUs2Q33cuipuchX4j+CQZCeWiFUOYZBOIRECVmGYAc8JjU PxFWstLZw4eurFFHfGnUj3WoaZ00Kkuuts+3/UEDdzVl33IMueWX3LSNE0O3s3Ol jqG5jGMLLSBfNAWg -----END CERTIFICATE-----Generated at Mon Jun 16 05:16:06 2025 by rpki-client