$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft File: B3F1737E90F240D7ABB33C72F84D71482FE62679.mft (raw, json) Hash identifier: NJsEF7LTwy8uLE4D2hv3cBYCOu3FjwxzHQ+pk4h0Di4= Subject key identifier: 9F:8E:E9:29:39:E6:6D:14:A3:85:38:C4:A6:E2:79:F3:81:E4:D2:4A Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 Certificate issuer: /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Certificate serial: 06EDF11DDAAC8C08FA2AF4C3CF1E9E171C1840D5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft Manifest number: 2F Signing time: Mon 04 Aug 2025 19:25:19 +0000 Manifest this update: Mon 04 Aug 2025 19:20:19 +0000 Manifest next update: Tue 05 Aug 2025 19:34:19 +0000 Files and hashes: 1: B3F1737E90F240D7ABB33C72F84D71482FE62679.crl (hash: 0mEK22Pat2tYl//bJf8nhlL8oPXYBI7Of+wTJ5xbGWM=) 2: 326130373a353463373a353939393a3a2f34382d3438203d3e20323136343535.roa (hash: SvnI/kKkXn3yiVhNqVKN9Taah5WCLs8Rw+D4PBjSrbo=) 3: 326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa (hash: FG+PaaelFQQTh0Pl3BlClI1RFrk+FdkeBozLHlfkasU=) 4: 326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa (hash: 7mCuwzfIey+Hcqy/Vhuj4zUx9bQcgkzpUeh+UNvlKO4=) 5: 326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa (hash: x50UL+Ve3n2XGikbTbQdFLaQIWslIjcJnasiyHq58lM=) 6: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: dERySCDhc3+rlKwMAYMhD9XvddhhgSjXbVZeRoj98gc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ed:f1:1d:da:ac:8c:08:fa:2a:f4:c3:cf:1e:9e:17:1c:18:40:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Validity Not Before: Aug 4 19:20:19 2025 GMT Not After : Aug 5 19:34:19 2025 GMT Subject: CN=9F8EE92939E66D14A38538C4A6E279F381E4D24A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fa:ed:46:f9:0d:11:e0:33:96:b5:4c:de:80: ad:58:67:d4:a5:07:21:64:9a:84:4b:46:61:e7:3f: 8f:8c:59:74:ce:16:5c:df:51:1a:1a:47:79:e3:29: da:7f:bd:38:80:16:c2:d5:4c:51:e9:b0:89:df:4f: 4d:1f:cd:61:ae:1c:fc:00:d3:68:f7:c7:b1:23:26: 68:f2:1d:7c:82:dc:f9:c8:e8:f2:a7:d7:ec:e8:22: 9c:f4:24:1e:53:fe:df:86:3f:d1:92:69:28:fa:52: 75:42:8d:ae:6c:1a:b1:fb:fe:0c:a1:cd:5f:a6:d1: 69:f7:db:be:61:df:7e:42:74:51:f6:d9:41:67:36: 6f:34:c0:b4:05:92:b7:9c:6b:9d:f9:67:3a:8c:c2: 69:ce:5d:92:7e:9c:95:44:7b:81:14:a1:96:bd:4e: cd:93:2b:96:a3:a1:55:2d:39:05:2f:79:f5:d2:0a: 5b:b2:1c:55:d1:69:10:e8:65:87:20:6c:d1:f2:b5: ca:b0:6e:fd:a4:e6:b1:dd:33:18:48:46:5a:40:1d: 7b:fd:fa:51:b1:bb:54:a1:24:5c:7a:75:ba:dc:d9: f5:7f:ca:96:16:d2:d9:6d:81:4d:fe:5e:6c:7d:bb: 8f:4c:5a:2c:51:df:27:b1:2c:1a:bc:b4:24:07:cd: a5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8E:E9:29:39:E6:6D:14:A3:85:38:C4:A6:E2:79:F3:81:E4:D2:4A X509v3 Authority Key Identifier: keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5f:58:30:2a:26:50:a9:13:56:63:eb:0d:84:5e:c6:d9:c9: 69:f5:03:c3:96:4c:d8:6e:6d:00:ac:9a:30:a9:52:0f:21:41: 05:69:1d:a1:60:a9:2d:5d:eb:63:81:21:7d:ad:ff:78:7b:ed: 95:c6:bb:8a:c9:b3:09:ef:d1:d8:80:f0:ae:3d:6e:3f:83:eb: d2:d7:32:b9:16:24:cc:22:5d:27:8c:6f:1c:98:74:d8:57:ba: 42:53:c5:b5:64:c0:45:89:f5:91:99:fe:f0:b2:62:ad:34:37: 4e:34:3e:b9:5c:a3:6f:d1:fa:b1:bf:57:dc:ff:94:36:35:95: 46:ad:39:83:ea:ad:ff:56:fd:5b:78:32:dd:e2:88:30:fa:bb: f1:bf:ed:60:90:c4:f1:67:75:43:47:85:c5:e4:2d:ef:9e:db: 7a:6a:2c:af:be:08:bd:d9:ff:93:d2:08:7c:1c:e2:8f:9a:94: 29:d2:40:31:3b:0f:ea:0c:eb:9d:ff:d8:4a:10:8c:89:a2:90: ac:0c:51:75:bc:5d:53:a5:6f:fe:3c:76:20:fa:78:dd:d1:fd: 58:5b:d8:c1:59:f7:b6:aa:f6:57:ef:da:b7:60:2d:81:1b:3e: f7:eb:41:46:7d:d1:4e:f5:65:13:33:ad:ac:5b:74:15:a4:8f: 50:93:e0:78 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBu3xHdqsjAj6KvTDzx6eFxwYQNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgy RkU2MjY3OTAeFw0yNTA4MDQxOTIwMTlaFw0yNTA4MDUxOTM0MTlaMDMxMTAvBgNV BAMTKDlGOEVFOTI5MzlFNjZEMTRBMzg1MzhDNEE2RTI3OUYzODFFNEQyNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj+u1G+Q0R4DOWtUzegK1YZ9Sl ByFkmoRLRmHnP4+MWXTOFlzfURoaR3njKdp/vTiAFsLVTFHpsInfT00fzWGuHPwA 02j3x7EjJmjyHXyC3PnI6PKn1+zoIpz0JB5T/t+GP9GSaSj6UnVCja5sGrH7/gyh zV+m0Wn3275h335CdFH22UFnNm80wLQFkreca535ZzqMwmnOXZJ+nJVEe4EUoZa9 Ts2TK5ajoVUtOQUvefXSCluyHFXRaRDoZYcgbNHytcqwbv2k5rHdMxhIRlpAHXv9 +lGxu1ShJFx6dbrc2fV/ypYW0tltgU3+Xmx9u49MWixR3yexLBq8tCQHzaXVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUn47pKTnmbRSjhTjEpuJ584Hk0kowHwYDVR0j BBgwFoAUs/FzfpDyQNerszxy+E1xSC/mJnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzIvQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgyRkU2MjY3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9CM0YxNzM3RTkwRjI0MEQ3QUJCMzNDNzJG ODRENzE0ODJGRTYyNjc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8yL0IzRjE3MzdF OTBGMjQwRDdBQkIzM0M3MkY4NEQ3MTQ4MkZFNjI2NzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7X1gw KiZQqRNWY+sNhF7G2clp9QPDlkzYbm0ArJowqVIPIUEFaR2hYKktXetjgSF9rf94 e+2VxruKybMJ79HYgPCuPW4/g+vS1zK5FiTMIl0njG8cmHTYV7pCU8W1ZMBFifWR mf7wsmKtNDdOND65XKNv0fqxv1fc/5Q2NZVGrTmD6q3/Vv1beDLd4ogw+rvxv+1g kMTxZ3VDR4XF5C3vntt6aiyvvgi92f+T0gh8HOKPmpQp0kAxOw/qDOud/9hKEIyJ opCsDFF1vF1TpW/+PHYg+njd0f1YW9jBWfe2qvZX79q3YC2BGz7360FGfdFO9WUT M62sW3QVpI9Qk+B4 -----END CERTIFICATE-----Generated at Mon Aug 4 22:16:52 2025 by rpki-client