$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: ySISi3IvPj0IVmIetTlb9M+oMPfSTh4Md+L4hsBm1XA= Subject key identifier: 3B:19:8E:37:2F:F8:ED:E8:0A:BB:3D:81:54:32:43:E0:07:C7:FF:30 Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 7D2F6E87B700645A2606849C700B83115956BFF8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: 019B Signing time: Sat 14 Jun 2025 21:06:18 +0000 Manifest this update: Sat 14 Jun 2025 21:01:18 +0000 Manifest next update: Sun 15 Jun 2025 23:21:18 +0000 Files and hashes: 1: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: MBZtq3m8RH5POBjneR7JQlxVWifelouee8ncm1jMQbk=) 2: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: ikRuOA2n8u4zq4qR5S8PkgRSZxYIGPGee0tyFklQIEM=) 3: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: 6SMGzy0qxU/C5+Cz9d8WI56z67FiL2uOHLuZUmmEFig=) 4: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: HVQR2cbKt8VVrQisjkBAhrhp4KsXJej/OLSmUeqTsY0=) 5: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: 8Iv1HdyRUhjcvQFIVfomOSyv77EzHn71qEiaLSvjvAE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 16:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:2f:6e:87:b7:00:64:5a:26:06:84:9c:70:0b:83:11:59:56:bf:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: Jun 14 21:01:18 2025 GMT Not After : Jun 15 23:21:18 2025 GMT Subject: CN=3B198E372FF8EDE80ABB3D81543243E007C7FF30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:71:75:95:2f:e6:6d:f7:30:b4:5e:a5:97:58: 3e:5d:e5:b2:03:cd:de:71:53:39:65:12:38:e8:7c: 6a:bb:05:fd:46:c9:06:c9:11:dd:06:a6:74:a3:7b: 55:38:9a:5c:df:7c:17:1f:43:50:3d:5c:0c:f9:b5: f5:f3:cc:da:d2:bc:65:37:ac:01:ae:cc:06:1b:af: e3:46:6d:52:5a:04:af:12:23:dc:a8:a5:6e:76:d1: e4:64:bb:e0:ce:5a:d9:c0:0e:f2:08:41:ef:bc:28: 26:02:e2:41:a7:c9:9b:1f:53:82:f9:1a:a6:34:b1: 03:00:79:7f:26:f6:7e:15:9a:8a:a0:e4:ea:d1:f4: 4a:a5:ab:82:4e:37:d6:4a:64:4f:34:2e:5f:7d:30: 43:a0:76:d1:de:b6:23:89:f9:34:6d:b5:57:56:c2: 81:c3:28:f8:0e:cc:fd:ca:7d:4f:fc:e6:5d:84:e0: 0e:16:8d:cb:aa:23:71:e1:76:c4:25:a7:ae:21:15: 32:e3:2a:c9:f1:18:ed:b8:1e:70:cd:9b:b2:47:7c: 77:27:77:28:f6:3b:8a:13:30:61:9b:3e:d0:28:6b: 50:5c:ca:e6:13:51:27:80:f6:b1:d5:b0:37:f8:d8: 76:bb:db:33:49:8a:5f:8b:e2:35:6e:b0:3d:fe:f7: 51:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:19:8E:37:2F:F8:ED:E8:0A:BB:3D:81:54:32:43:E0:07:C7:FF:30 X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:25:2f:3b:37:f6:44:bf:0a:4a:6b:ad:f0:ef:f7:ec:4e:d0: ed:83:62:3b:d4:5f:bb:2e:e4:8e:2e:08:bb:33:a5:2a:7d:9e: f4:84:c1:b0:1c:31:59:ee:28:c7:3f:16:19:1c:b1:30:a9:3e: f5:e7:49:fc:99:e5:fd:cb:57:dc:32:04:21:39:90:3f:6d:af: 32:b6:8f:35:c4:10:46:43:10:a3:12:31:c3:2d:0f:34:ea:78: d6:cb:ab:ac:e5:8a:cf:0b:06:6a:8c:ba:28:3e:4a:a8:5a:68: 57:05:bb:20:51:46:fb:19:df:b1:ac:ad:14:cc:02:58:29:fd: ee:7b:33:bc:ea:02:82:72:86:68:71:c6:79:73:93:bf:05:67: cc:cd:61:ca:d5:6a:65:09:99:b2:4f:7e:c8:b0:cb:dd:6f:93: 66:df:6f:ff:d4:62:6c:ad:ad:d4:7c:d2:bc:73:1c:87:6d:a9: 92:fa:33:f1:40:b4:38:39:33:04:39:4a:55:dc:29:74:9b:27: b3:35:f8:cf:35:bb:94:0b:4c:cd:56:da:79:06:5d:51:38:0f: d6:fb:40:3a:27:97:d5:c0:0e:e1:58:cd:ee:11:9b:a2:7a:21: 40:8e:b8:3b:0a:22:17:67:17:ea:da:ab:1e:5c:26:d2:ec:94: 07:29:eb:1d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfS9uh7cAZFomBoSccAuDEVlWv/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNTA2MTQyMTAxMThaFw0yNTA2MTUyMzIxMThaMDMxMTAvBgNV BAMTKDNCMTk4RTM3MkZGOEVERTgwQUJCM0Q4MTU0MzI0M0UwMDdDN0ZGMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+cXWVL+Zt9zC0XqWXWD5d5bID zd5xUzllEjjofGq7Bf1GyQbJEd0GpnSje1U4mlzffBcfQ1A9XAz5tfXzzNrSvGU3 rAGuzAYbr+NGbVJaBK8SI9yopW520eRku+DOWtnADvIIQe+8KCYC4kGnyZsfU4L5 GqY0sQMAeX8m9n4Vmoqg5OrR9Eqlq4JON9ZKZE80Ll99MEOgdtHetiOJ+TRttVdW woHDKPgOzP3KfU/85l2E4A4WjcuqI3HhdsQlp64hFTLjKsnxGO24HnDNm7JHfHcn dyj2O4oTMGGbPtAoa1BcyuYTUSeA9rHVsDf42Ha72zNJil+L4jVusD3+91GLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUOxmONy/47egKuz2BVDJD4AfH/zAwHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBaJS87 N/ZEvwpKa63w7/fsTtDtg2I71F+7LuSOLgi7M6UqfZ70hMGwHDFZ7ijHPxYZHLEw qT7150n8meX9y1fcMgQhOZA/ba8yto81xBBGQxCjEjHDLQ806njWy6us5YrPCwZq jLooPkqoWmhXBbsgUUb7Gd+xrK0UzAJYKf3uezO86gKCcoZoccZ5c5O/BWfMzWHK 1WplCZmyT37IsMvdb5Nm32//1GJsra3UfNK8cxyHbamS+jPxQLQ4OTMEOUpV3Cl0 myezNfjPNbuUC0zNVtp5Bl1ROA/W+0A6J5fVwA7hWM3uEZuieiFAjrg7CiIXZxfq 2qseXCbS7JQHKesd -----END CERTIFICATE-----Generated at Sun Jun 15 09:06:34 2025 by rpki-client