$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.mft File: AC2082F41576F66D1AA264309E33E738246AC454.mft (raw, json) Hash identifier: l6HKUn3xSMD+fJhg9lgYDrUr53HlSQLW4TkOHdmmqsQ= Subject key identifier: 2B:BB:3F:13:BE:8D:48:90:2D:BA:1D:17:80:CE:04:0E:B2:22:56:A4 Authority key identifier: AC:20:82:F4:15:76:F6:6D:1A:A2:64:30:9E:33:E7:38:24:6A:C4:54 Certificate issuer: /CN=AC2082F41576F66D1AA264309E33E738246AC454 Certificate serial: 3DB1D9DE2C5E48C18576525C6F4154F993158E4E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AC2082F41576F66D1AA264309E33E738246AC454.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.mft Manifest number: 0A Signing time: Sat 14 Jun 2025 23:23:38 +0000 Manifest this update: Sat 14 Jun 2025 23:18:38 +0000 Manifest next update: Mon 16 Jun 2025 03:22:38 +0000 Files and hashes: 1: AC2082F41576F66D1AA264309E33E738246AC454.crl (hash: szkKnFl/3Eix/Uj53T6JwGXU18QL1dtIdcvAMyQChHc=) 2: 326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa (hash: cDRjR1Gs+0Iu9xhCGCcpko1viLmb0+uf6ywJ7Kgfxpo=) 3: 326131343a373538343a346630303a3a2f34302d3430203d3e20323132353136.roa (hash: w8qLN4QSYjEpdJCkomXgGfT8US2E2zuhO/hns/+C5XM=) 4: 326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa (hash: FemJ+80fd71XEtyMVGoBFKhnKHjJGamQyy+E//E8CQM=) 5: 326131343a373538343a343130303a3a2f34302d3438203d3e20323136333039.roa (hash: dyI/vpBN2up97kkgTILkiXBGaFO4U5IDn0366sa0vPo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.crl rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AC2082F41576F66D1AA264309E33E738246AC454.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 03:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b1:d9:de:2c:5e:48:c1:85:76:52:5c:6f:41:54:f9:93:15:8e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC2082F41576F66D1AA264309E33E738246AC454 Validity Not Before: Jun 14 23:18:38 2025 GMT Not After : Jun 16 03:22:38 2025 GMT Subject: CN=2BBB3F13BE8D48902DBA1D1780CE040EB22256A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:eb:b7:f8:7f:43:f1:76:5b:e2:b6:4c:85:9a: 95:e8:4c:7c:45:92:b3:b1:ff:08:6f:69:ad:a2:0e: 07:68:d2:9f:96:d6:8d:68:27:9f:82:dd:ac:2f:e1: 7b:00:bc:ad:0f:7c:aa:db:8f:ac:0e:07:ad:f9:89: 9f:34:f3:e1:c6:2f:fc:e0:c6:1d:3a:c3:6f:3f:56: f4:06:52:f6:df:f4:68:32:36:cb:dc:9a:cf:ba:93: 3a:fb:e3:5b:99:0f:a4:d0:6e:8d:73:33:9f:70:fd: b4:b6:2b:03:e6:54:02:dd:44:55:95:ad:60:d2:61: b9:0e:49:35:ba:d0:51:ac:fa:50:9a:bc:ba:75:ce: c1:22:ed:50:22:5c:1d:f3:4f:f3:ec:b7:eb:e3:25: 9a:1d:9b:63:89:f2:15:27:ef:0e:75:d1:cf:05:a5: 75:2b:1d:d5:5a:70:06:0b:72:8a:ab:47:97:ee:ad: a0:c1:6d:a3:6b:59:f8:00:d6:3f:d6:9e:d9:fa:e0: 89:af:c9:ee:5e:2e:2c:03:1b:98:57:db:27:5e:06: a4:9e:36:66:47:26:7d:2d:c9:21:dc:d6:13:a7:9b: 9f:e2:6f:12:f7:d2:82:0a:46:8a:9a:e2:78:e7:53: 56:24:0b:6d:99:66:41:39:13:79:86:8e:c7:e1:0b: f1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BB:3F:13:BE:8D:48:90:2D:BA:1D:17:80:CE:04:0E:B2:22:56:A4 X509v3 Authority Key Identifier: keyid:AC:20:82:F4:15:76:F6:6D:1A:A2:64:30:9E:33:E7:38:24:6A:C4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AC2082F41576F66D1AA264309E33E738246AC454.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:40:03:0f:1c:68:48:8f:4e:94:30:b1:a4:4c:6a:6b:89:6c: 1a:c2:2c:5a:33:1a:dd:fb:a8:c1:c3:c6:ab:22:c2:83:76:af: 0c:34:f7:3d:e5:41:79:f7:3b:18:39:68:8d:aa:f7:17:7f:4b: 20:93:2d:eb:f7:14:d9:96:64:c6:27:d4:e2:cc:df:a7:e2:30: 7c:b3:a5:d7:cf:37:26:38:45:0b:25:36:72:0a:e7:c9:f0:6b: 6e:d2:d3:bd:3b:3d:20:c7:8c:c8:72:ee:a2:3c:dc:bb:be:14: 73:6f:3e:b2:ea:4c:b2:5e:36:ff:ce:3a:95:f6:cf:a8:9c:cd: e5:94:73:5e:25:57:b8:0d:b1:8e:79:23:6e:ce:76:82:99:7b: 6b:9b:22:f4:cc:d8:9c:d5:64:17:7f:30:a1:c1:f2:da:4a:c9: bb:ca:51:e8:7e:ee:a6:3b:0d:83:da:3c:09:17:7f:b4:f4:97: 9c:8e:53:62:4d:34:b7:8b:f7:0a:70:de:a5:dd:b8:50:72:7d: 92:29:4f:5f:e9:2d:fb:3e:9b:c9:2e:d9:8f:43:f8:a3:a8:a7: e5:33:c6:63:0a:80:1b:c5:2d:59:6b:66:fc:86:3e:ed:0d:34: 6a:dc:60:30:33:1a:03:be:4a:c7:fe:56:0b:87:ad:a6:d1:3e: 2b:97:87:bb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPbHZ3ixeSMGFdlJcb0FU+ZMVjk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyMDgyRjQxNTc2RjY2RDFBQTI2NDMwOUUzM0U3Mzgy NDZBQzQ1NDAeFw0yNTA2MTQyMzE4MzhaFw0yNTA2MTYwMzIyMzhaMDMxMTAvBgNV BAMTKDJCQkIzRjEzQkU4RDQ4OTAyREJBMUQxNzgwQ0UwNDBFQjIyMjU2QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC67f4f0PxdlvitkyFmpXoTHxF krOx/whvaa2iDgdo0p+W1o1oJ5+C3awv4XsAvK0PfKrbj6wOB635iZ808+HGL/zg xh06w28/VvQGUvbf9GgyNsvcms+6kzr741uZD6TQbo1zM59w/bS2KwPmVALdRFWV rWDSYbkOSTW60FGs+lCavLp1zsEi7VAiXB3zT/Pst+vjJZodm2OJ8hUn7w510c8F pXUrHdVacAYLcoqrR5furaDBbaNrWfgA1j/Wntn64Imvye5eLiwDG5hX2ydeBqSe NmZHJn0tySHc1hOnm5/ibxL30oIKRoqa4njnU1YkC22ZZkE5E3mGjsfhC/FnAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUK7s/E76NSJAtuh0XgM4EDrIiVqQwHwYDVR0j BBgwFoAUrCCC9BV29m0aomQwnjPnOCRqxFQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTljODNlNWMtNGI1NS00YTFhLTgwMDMtMWI3ZWNjNTFk NDdhLzIvQUMyMDgyRjQxNTc2RjY2RDFBQTI2NDMwOUUzM0U3MzgyNDZBQzQ1NC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BQzIwODJGNDE1NzZGNjZEMUFBMjY0MzA5 RTMzRTczODI0NkFDNDU0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU5YzgzZTVjLTRiNTUtNGExYS04MDAzLTFiN2VjYzUxZDQ3YS8yL0FDMjA4MkY0 MTU3NkY2NkQxQUEyNjQzMDlFMzNFNzM4MjQ2QUM0NTQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCkQAMP HGhIj06UMLGkTGpriWwawixaMxrd+6jBw8arIsKDdq8MNPc95UF59zsYOWiNqvcX f0sgky3r9xTZlmTGJ9TizN+n4jB8s6XXzzcmOEULJTZyCufJ8Gtu0tO9Oz0gx4zI cu6iPNy7vhRzbz6y6kyyXjb/zjqV9s+onM3llHNeJVe4DbGOeSNuznaCmXtrmyL0 zNic1WQXfzChwfLaSsm7ylHofu6mOw2D2jwJF3+09JecjlNiTTS3i/cKcN6l3bhQ cn2SKU9f6S37PpvJLtmPQ/ijqKflM8ZjCoAbxS1Za2b8hj7tDTRq3GAwMxoDvkrH /lYLh62m0T4rl4e7 -----END CERTIFICATE-----Generated at Sun Jun 15 16:55:31 2025 by rpki-client