$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft File: 99D922574ADCFE8B3741930044512F9A57EF91A4.mft (raw, json) Hash identifier: gba88SEk/iksddVUYpxtrFz5U91403i1EKmNA11yjGk= Subject key identifier: AC:48:33:46:D0:5F:00:A0:75:B2:17:E6:A1:B0:C9:9D:67:B1:29:41 Authority key identifier: 99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4 Certificate issuer: /CN=99D922574ADCFE8B3741930044512F9A57EF91A4 Certificate serial: 1B37F815A27B03C4F0BE3C025639099EED9F14FB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft Manifest number: 01FA Signing time: Sun 15 Jun 2025 23:18:31 +0000 Manifest this update: Sun 15 Jun 2025 23:13:31 +0000 Manifest next update: Tue 17 Jun 2025 00:22:31 +0000 Files and hashes: 1: 99D922574ADCFE8B3741930044512F9A57EF91A4.crl (hash: 8u2MKh+7DuGeBZ7qyFYPJ6sYkXdEAwFDNNIa7NizS+I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 20:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:37:f8:15:a2:7b:03:c4:f0:be:3c:02:56:39:09:9e:ed:9f:14:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99D922574ADCFE8B3741930044512F9A57EF91A4 Validity Not Before: Jun 15 23:13:31 2025 GMT Not After : Jun 17 00:22:31 2025 GMT Subject: CN=AC483346D05F00A075B217E6A1B0C99D67B12941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:42:51:67:30:1f:db:85:94:9e:82:64:cd:75: 50:c8:89:5a:88:75:1d:5e:b8:86:54:5b:05:34:8d: d2:d3:f0:19:f7:4c:ad:73:86:9d:ee:47:d8:40:34: 5f:55:48:5e:90:e8:7a:ac:33:ad:39:a3:ad:89:0f: dd:4c:39:63:3d:f7:de:5b:fc:4b:e6:ae:12:4b:76: a3:2e:8e:27:95:4a:ba:23:36:44:32:a1:e1:f2:9c: bc:b3:bd:83:d0:2c:95:f5:c9:47:74:82:f5:ae:1d: 6a:7c:73:a4:87:4f:66:cf:fa:81:13:92:2a:30:4b: a7:e5:f8:05:76:bd:66:b5:ba:30:3d:7f:5b:3c:ca: c2:37:77:1c:17:16:db:a8:8f:40:63:dc:ef:69:41: 34:04:fa:c2:f0:d2:d5:89:03:87:d2:66:67:ad:06: 8d:ad:8d:3c:fa:47:e0:2c:98:82:67:cd:ea:af:35: bc:4b:4e:9d:ec:b2:69:9a:38:f3:5f:b7:39:20:5c: ed:02:9c:4f:94:a4:8d:b1:18:6e:24:3f:25:3e:3b: 2f:40:6c:f5:3b:30:87:98:ed:b8:73:a7:39:87:b1: 2d:01:43:3e:07:c4:42:8b:64:a3:77:1c:1e:66:04: 40:1d:f0:04:13:95:4d:53:e8:1d:58:52:ca:04:62: 72:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:48:33:46:D0:5F:00:A0:75:B2:17:E6:A1:B0:C9:9D:67:B1:29:41 X509v3 Authority Key Identifier: keyid:99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:b0:22:27:13:34:98:fc:82:af:b3:f3:a0:7a:81:07:e4:e1: bc:2f:3f:c8:ac:3b:20:3c:47:74:4a:d2:16:a9:5b:d9:7b:a5: 98:8b:d7:5d:39:0a:0e:13:77:1d:d7:28:69:52:f3:a5:0f:76: b9:55:18:a9:c6:48:57:40:d9:cd:bf:83:54:b5:e3:e0:85:6f: 91:10:3b:ac:27:20:dc:1c:da:07:80:8e:fc:a0:17:a5:09:41: 5b:b6:be:29:7e:d2:c3:e3:af:05:09:0a:fb:07:0d:e2:64:07: 05:ee:7b:48:f7:80:e1:ae:48:5c:9b:3e:2b:1b:d0:a5:81:07: a3:8f:28:3e:d2:4a:e2:3e:9f:73:dc:75:a7:06:ea:ab:db:eb: d3:ec:8e:95:61:68:e3:92:ec:e7:2b:21:a9:4c:6c:8d:77:ea: c0:e6:77:16:fa:c6:24:35:52:88:69:71:56:bf:ec:f7:51:6e: da:20:c4:b1:3c:ee:55:3d:e1:a0:a9:32:53:61:1c:2d:94:7b: 01:f0:35:03:15:7a:5e:fd:78:a9:9e:6e:70:43:da:7b:c1:69: 8e:49:50:e5:fa:7f:52:4d:8c:a3:1e:85:fa:fb:dd:e2:04:73: 41:8c:48:80:8e:62:43:6d:e0:4a:ec:a8:2e:d8:a3:9a:16:e1: b5:9d:7a:17 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGzf4FaJ7A8TwvjwCVjkJnu2fFPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlEOTIyNTc0QURDRkU4QjM3NDE5MzAwNDQ1MTJGOUE1 N0VGOTFBNDAeFw0yNTA2MTUyMzEzMzFaFw0yNTA2MTcwMDIyMzFaMDMxMTAvBgNV BAMTKEFDNDgzMzQ2RDA1RjAwQTA3NUIyMTdFNkExQjBDOTlENjdCMTI5NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7QlFnMB/bhZSegmTNdVDIiVqI dR1euIZUWwU0jdLT8Bn3TK1zhp3uR9hANF9VSF6Q6HqsM605o62JD91MOWM9995b /EvmrhJLdqMujieVSrojNkQyoeHynLyzvYPQLJX1yUd0gvWuHWp8c6SHT2bP+oET kiowS6fl+AV2vWa1ujA9f1s8ysI3dxwXFtuoj0Bj3O9pQTQE+sLw0tWJA4fSZmet Bo2tjTz6R+AsmIJnzeqvNbxLTp3ssmmaOPNftzkgXO0CnE+UpI2xGG4kPyU+Oy9A bPU7MIeY7bhzpzmHsS0BQz4HxEKLZKN3HB5mBEAd8AQTlU1T6B1YUsoEYnI9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUrEgzRtBfAKB1shfmobDJnWexKUEwHwYDVR0j BBgwFoAUmdkiV0rc/os3QZMARFEvmlfvkaQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzIvOTlEOTIyNTc0QURDRkU4QjM3NDE5MzAwNDQ1MTJGOUE1N0VGOTFBNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC85OUQ5MjI1NzRBRENGRThCMzc0MTkzMDA0 NDUxMkY5QTU3RUY5MUE0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZmZjdhOTg5LWVjZGYtNDNkNi04NmUxLWY2YzM5MzViOWIzZC8yLzk5RDkyMjU3 NEFEQ0ZFOEIzNzQxOTMwMDQ0NTEyRjlBNTdFRjkxQTQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBFsCIn EzSY/IKvs/OgeoEH5OG8Lz/IrDsgPEd0StIWqVvZe6WYi9ddOQoOE3cd1yhpUvOl D3a5VRipxkhXQNnNv4NUtePghW+REDusJyDcHNoHgI78oBelCUFbtr4pftLD468F CQr7Bw3iZAcF7ntI94Dhrkhcmz4rG9ClgQejjyg+0kriPp9z3HWnBuqr2+vT7I6V YWjjkuznKyGpTGyNd+rA5ncW+sYkNVKIaXFWv+z3UW7aIMSxPO5VPeGgqTJTYRwt lHsB8DUDFXpe/Xipnm5wQ9p7wWmOSVDl+n9STYyjHoX6+93iBHNBjEiAjmJDbeBK 7Kgu2KOaFuG1nXoX -----END CERTIFICATE-----Generated at Mon Jun 16 02:04:22 2025 by rpki-client