$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: Gkf/3Ah4paASsPEtHrADxEGBG0YVIaxSrVu+1BZkTng= Subject key identifier: 0A:D0:5B:65:C8:0F:32:21:31:36:78:12:15:BF:43:6E:4C:13:12:FD Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 42A53B9AA94D9EF066A519992D04D59D611F0E65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 0338 Signing time: Sun 15 Jun 2025 05:42:56 +0000 Manifest this update: Sun 15 Jun 2025 05:37:56 +0000 Manifest next update: Mon 16 Jun 2025 06:12:56 +0000 Files and hashes: 1: 39332e39352e3131332e302f32342d3234203d3e20323135333034.roa (hash: 3gfso9hqm5DtBYcsaGKuxKlBtoOtyxWD+cWGZp8ZZBg=) 2: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: bvqtExc4o5GUJzraVc9CM0CC2GO3x6c+ohx4q9G/dgk=) 3: 39332e39352e3131332e302f32342d3234203d3e20323134303235.roa (hash: 8Gm4nO+d4zR1wraSZ/HOIsX+oVvW2ewC+6TWc3pBhYE=) 4: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: iuam+Y72SFbVuzZ6DMbPvd9+i2O4uNgJ9aW8l1vNV9U=) 5: 39332e39352e3131332e302f32342d3234203d3e203336353330.roa (hash: XdWmefAZyfxd+tfdlcAJ/nwVibHOt4TWi5DLte79H/Q=) 6: 39332e39352e3131342e302f32342d3234203d3e2035303635.roa (hash: MF/szlJtg3jR946D7Iy8tt2rHbx2IcEkKMT7PmewPLE=) 7: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: YkFSZY6EOPEHzHt5ADKgNiNP1fo+e/xwGoFqR4W8YeE=) 8: 39332e39352e3131322e302f32342d3234203d3e203231383539.roa (hash: /qKqCQ76EfJncAH1+pElYqDNRcZb1xZivyKMiSpERi8=) 9: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: oaLDq7aS5NFaYNW1gUs7MDdZL5P0TUUEDkjRyQGla3w=) 10: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: 8ja7Z+swVGTraKxezjgHzXG2GlS/dFRID6jPUC87mFI=) 11: 39332e39352e3131372e302f32342d3234203d3e20323135373732.roa (hash: vLSBueodjY+0YJW63au8p8n765D5sPEn1sQkXoc5D7w=) 12: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: qqVPSWZLREddEW4nL5NY3Bls+ZrG5ASHmT6xiutXttk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 06:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a5:3b:9a:a9:4d:9e:f0:66:a5:19:99:2d:04:d5:9d:61:1f:0e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Jun 15 05:37:56 2025 GMT Not After : Jun 16 06:12:56 2025 GMT Subject: CN=0AD05B65C80F32213136781215BF436E4C1312FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:21:3d:e4:36:0e:78:b5:cd:7d:68:e6:2b:e4: a4:0a:cb:9b:1d:ea:77:79:30:7d:ca:95:ca:0d:13: 60:f4:d1:be:68:31:a0:41:ab:aa:81:48:0c:19:a5: 8e:68:3a:66:aa:38:cd:de:cb:70:8f:6c:11:fa:d6: 2b:50:c6:9e:b3:7a:73:1b:5c:2f:7b:61:73:4c:14: 6b:36:33:19:e0:19:a2:a7:d5:26:ab:57:d6:2e:6b: f7:12:48:a8:87:28:0b:0b:6a:e7:1e:0f:03:4a:ab: 7e:d7:73:56:48:36:27:15:5d:0b:ee:35:40:c3:4d: 11:85:65:ca:8b:e4:58:1a:57:3f:8b:3d:fe:53:b3: b1:4f:0c:85:3e:e2:55:fa:cf:a0:3d:42:12:17:92: 3b:29:00:03:d5:b9:9b:b4:44:36:64:45:19:3c:ac: b1:38:33:3c:6b:79:4c:86:c9:9f:dc:c5:ec:0e:9e: 8b:22:79:50:85:d3:d5:cf:3f:a9:1d:e7:fe:9a:f5: e0:ac:89:ee:e2:53:21:00:cd:a5:da:6e:9f:5e:01: df:6a:a2:1a:be:0f:eb:c8:82:f7:d9:2c:bd:b5:85: 23:6d:22:3e:22:66:f8:f9:92:89:ea:91:5a:41:a9: 32:f9:eb:f4:51:2c:dc:aa:45:d0:b6:3c:0e:9c:a4: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D0:5B:65:C8:0F:32:21:31:36:78:12:15:BF:43:6E:4C:13:12:FD X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:79:80:af:0e:ec:82:8f:be:8c:3f:8f:9d:bb:a9:d6:94:b5: cc:82:0d:10:aa:8c:f4:ed:6d:a8:b8:ed:b5:75:97:a1:0e:6e: 7f:15:92:5f:64:a0:37:53:98:72:e1:9e:70:2d:c5:ce:b6:71: d3:79:69:df:48:38:4b:f8:5b:54:f2:7a:9a:f7:15:39:66:9f: 1d:90:b2:d8:60:9b:77:b4:37:89:c3:b3:bd:f5:bd:9d:a8:fc: ae:ed:e4:4b:53:c9:ee:f8:22:9b:58:bd:cf:80:12:2d:dd:7f: 64:dd:c7:80:f6:71:dc:a8:b2:1c:be:0b:66:fb:2a:4e:b6:df: 3a:35:67:61:f7:d6:5b:ab:1e:29:b7:5f:91:70:a7:c6:0f:60: 90:0e:ec:39:5b:d0:59:d5:79:9b:7d:0a:40:10:7f:a2:24:4b: 22:f5:d6:98:78:7f:b2:b7:e7:7d:77:f6:07:f1:12:88:63:22: 51:cd:e6:dd:ee:b6:45:05:4b:2c:67:e6:d9:17:aa:76:58:30: fa:9c:d4:c3:ec:c9:b3:c2:9b:cb:33:d7:89:e5:22:23:43:48: 4d:62:31:74:b4:d8:f7:c3:59:d2:3d:2f:11:e3:d8:8c:05:9b: d3:90:67:1d:1f:66:3a:ce:ea:bf:bc:2f:02:f6:88:7e:9e:0a: 6d:22:47:b0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQqU7mqlNnvBmpRmZLQTVnWEfDmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNTA2MTUwNTM3NTZaFw0yNTA2MTYwNjEyNTZaMDMxMTAvBgNV BAMTKDBBRDA1QjY1QzgwRjMyMjEzMTM2NzgxMjE1QkY0MzZFNEMxMzEyRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7IT3kNg54tc19aOYr5KQKy5sd 6nd5MH3KlcoNE2D00b5oMaBBq6qBSAwZpY5oOmaqOM3ey3CPbBH61itQxp6zenMb XC97YXNMFGs2MxngGaKn1SarV9Yua/cSSKiHKAsLauceDwNKq37Xc1ZINicVXQvu NUDDTRGFZcqL5FgaVz+LPf5Ts7FPDIU+4lX6z6A9QhIXkjspAAPVuZu0RDZkRRk8 rLE4MzxreUyGyZ/cxewOnosieVCF09XPP6kd5/6a9eCsie7iUyEAzaXabp9eAd9q ohq+D+vIgvfZLL21hSNtIj4iZvj5konqkVpBqTL56/RRLNyqRdC2PA6cpH2fAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUCtBbZcgPMiExNngSFb9DbkwTEv0wHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHmArw7sgo++jD+Pnbup 1pS1zIINEKqM9O1tqLjttXWXoQ5ufxWSX2SgN1OYcuGecC3FzrZx03lp30g4S/hb VPJ6mvcVOWafHZCy2GCbd7Q3icOzvfW9naj8ru3kS1PJ7vgim1i9z4ASLd1/ZN3H gPZx3KiyHL4LZvsqTrbfOjVnYffWW6seKbdfkXCnxg9gkA7sOVvQWdV5m30KQBB/ oiRLIvXWmHh/srfnfXf2B/ESiGMiUc3m3e62RQVLLGfm2Reqdlgw+pzUw+zJs8Kb yzPXieUiI0NITWIxdLTY98NZ0j0vEePYjAWb05BnHR9mOs7qv7wvAvaIfp4KbSJH sA== -----END CERTIFICATE-----Generated at Mon Jun 16 00:41:07 2025 by rpki-client