$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.mft File: 966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.mft (raw, json) Hash identifier: KXnNnHQDV8a84kJV91sRbT4Ock5Yvvl2S5qF8dPIVLQ= Subject key identifier: D1:78:36:68:9A:7E:E5:5C:78:D6:3E:3B:DC:79:3D:A7:08:52:67:54 Authority key identifier: 96:64:27:86:9F:CA:D1:5E:CB:E4:F1:C7:7A:3F:B3:C6:8B:D1:F9:17 Certificate issuer: /CN=966427869FCAD15ECBE4F1C77A3FB3C68BD1F917 Certificate serial: 18CCA0C45AFBEA912169BDBCED58E9C7318D21AC Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.mft Manifest number: 47 Signing time: Sun 03 Aug 2025 23:21:28 +0000 Manifest this update: Sun 03 Aug 2025 23:16:28 +0000 Manifest next update: Tue 05 Aug 2025 02:09:28 +0000 Files and hashes: 1: 326130623a346530373a6138343a3a2f34382d3438203d3e20323133343133.roa (hash: vLPoSQgfosHE7Eo78gbVp2ZF9Mgg6KTTveqCQsG15Og=) 2: 326130623a346530373a6130303a3a2f34302d3438203d3e20323036363034.roa (hash: QCnIKEpXKZe1AF5x39w6gWUBez/vufMOaY+BXKXTWAg=) 3: 966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.crl (hash: W4mE6pEYwho94PVFfQs9kNzSRqhjFarbHMKB288ZhPo=) 4: 326130623a346530373a6138323a3a2f34382d3438203d3e20323133343133.roa (hash: rvOnZK77CBYF4grHGBuz0EhJZokSzxuINy2qRMybAKE=) 5: 326130623a346530373a6138333a3a2f34382d3438203d3e20323036363034.roa (hash: mJzqR/fpijtPp4VFm79QmiYW4kUZt+TI1uOvw8S0gkU=) 6: 326130623a346530373a6138303a3a2f34382d3438203d3e20323133343133.roa (hash: K5QPPi4Yfjuh9BxUtSBKx+Yx6emt2s39uotzqzd2HMk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.crl rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 21:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:cc:a0:c4:5a:fb:ea:91:21:69:bd:bc:ed:58:e9:c7:31:8d:21:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966427869FCAD15ECBE4F1C77A3FB3C68BD1F917 Validity Not Before: Aug 3 23:16:28 2025 GMT Not After : Aug 5 02:09:28 2025 GMT Subject: CN=D17836689A7EE55C78D63E3BDC793DA708526754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a0:86:5a:af:db:6e:91:a1:46:0e:ba:07:20: af:f4:3c:ab:71:b1:33:d7:9e:31:04:06:49:56:36: 85:01:6b:c6:dd:23:2e:9d:34:77:1e:03:13:95:12: 33:26:7d:27:e9:23:29:8b:7a:11:4f:72:ce:41:99: 62:23:d7:b6:6d:f4:df:f9:33:bd:9c:59:4a:1d:d5: 6d:5c:3c:29:f9:2d:ed:84:ff:e8:1e:c0:30:3a:10: 18:65:7d:01:2f:50:00:5d:dd:fd:2b:0d:1f:8c:dd: fb:36:5a:54:dd:b0:f4:8a:3c:58:d1:9a:4d:18:67: a2:8a:b7:01:52:19:ec:1a:d5:ea:78:fd:e1:32:9e: da:b3:e2:69:f2:a9:8f:eb:38:a3:bf:14:82:13:32: b5:37:81:74:d3:dc:a2:de:50:c8:a0:89:81:37:19: d9:31:91:d9:83:84:bb:a5:26:47:05:be:5a:99:9b: 53:83:9f:f0:e4:bd:3f:2a:a3:c9:6e:d9:43:50:b3: fb:80:ad:71:97:98:5a:30:89:de:35:41:ee:0e:c5: 7b:0e:86:d2:11:99:7a:34:1e:fc:5e:3b:b1:3f:3d: 36:91:54:f0:03:91:ee:7a:de:eb:39:31:1c:23:9d: ec:fe:e0:88:36:4e:ba:5d:d9:4b:5e:fa:b4:9b:fe: b1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:78:36:68:9A:7E:E5:5C:78:D6:3E:3B:DC:79:3D:A7:08:52:67:54 X509v3 Authority Key Identifier: keyid:96:64:27:86:9F:CA:D1:5E:CB:E4:F1:C7:7A:3F:B3:C6:8B:D1:F9:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c7d2512-e4bf-411b-b00a-e79e3a378b46/1/966427869FCAD15ECBE4F1C77A3FB3C68BD1F917.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:c0:58:2b:4b:b9:dc:e4:8f:fd:c0:94:b2:47:2b:80:04:5b: 33:96:bf:b4:5d:d5:86:fd:9f:9a:90:20:c4:37:60:e4:48:87: 4f:13:d5:74:41:23:f9:a4:a0:bd:2e:c4:9a:af:c6:f0:9f:20: 28:bd:09:c7:dc:e2:01:42:5f:10:6c:3f:84:5e:06:79:55:b2: 91:d3:ef:ca:bd:c4:13:00:31:c3:d4:fe:5a:82:d1:54:a7:a7: 46:f3:96:af:0b:91:ed:59:b1:62:a7:a1:62:0d:05:d8:47:88: b7:b6:e8:75:87:85:fc:5e:56:6a:89:2e:f1:d0:ac:06:91:0b: 41:b4:73:a7:bf:72:e6:12:22:0d:73:09:9d:c8:63:d3:ae:7c: f2:2d:bf:2c:1f:b4:94:aa:cc:5c:28:d2:9d:c2:9a:3c:9e:90: d0:c4:74:81:82:a0:aa:2e:7e:09:39:20:dd:73:77:b5:30:f9: ba:57:71:f9:ea:99:ae:0b:98:b6:ea:bf:49:63:d5:30:a6:b8: 97:e1:01:50:d0:aa:3d:26:95:61:42:d3:55:13:7b:2b:51:68: fe:f4:0f:06:37:f7:49:24:03:d1:ef:1b:e3:8c:51:36:1e:18: 8f:13:ff:d2:a0:cf:42:25:6d:0e:43:64:e6:f9:af:b3:02:5d: 02:fc:0d:41 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUGMygxFr76pEhab287VjpxzGNIawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY2NDI3ODY5RkNBRDE1RUNCRTRGMUM3N0EzRkIzQzY4 QkQxRjkxNzAeFw0yNTA4MDMyMzE2MjhaFw0yNTA4MDUwMjA5MjhaMDMxMTAvBgNV BAMTKEQxNzgzNjY4OUE3RUU1NUM3OEQ2M0UzQkRDNzkzREE3MDg1MjY3NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0oIZar9tukaFGDroHIK/0PKtx sTPXnjEEBklWNoUBa8bdIy6dNHceAxOVEjMmfSfpIymLehFPcs5BmWIj17Zt9N/5 M72cWUod1W1cPCn5Le2E/+gewDA6EBhlfQEvUABd3f0rDR+M3fs2WlTdsPSKPFjR mk0YZ6KKtwFSGewa1ep4/eEyntqz4mnyqY/rOKO/FIITMrU3gXTT3KLeUMigiYE3 GdkxkdmDhLulJkcFvlqZm1ODn/DkvT8qo8lu2UNQs/uArXGXmFowid41Qe4OxXsO htIRmXo0HvxeO7E/PTaRVPADke563us5MRwjnez+4Ig2Trpd2Ute+rSb/rEpAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU0Xg2aJp+5Vx41j473Hk9pwhSZ1QwHwYDVR0j BBgwFoAUlmQnhp/K0V7L5PHHej+zxovR+RcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM3ZDI1MTItZTRiZi00MTFiLWIwMGEtZTc5ZTNhMzc4 YjQ2LzEvOTY2NDI3ODY5RkNBRDE1RUNCRTRGMUM3N0EzRkIzQzY4QkQxRjkxNy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvOTY2NDI3ODY5RkNBRDE1RUNCRTRGMUM3N0EzRkIzQzY4QkQx RjkxNy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YzdkMjUxMi1l NGJmLTQxMWItYjAwYS1lNzllM2EzNzhiNDYvMS85NjY0Mjc4NjlGQ0FEMTVFQ0JF NEYxQzc3QTNGQjNDNjhCRDFGOTE3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8BYK0u53OSP/cCUskcr gARbM5a/tF3Vhv2fmpAgxDdg5EiHTxPVdEEj+aSgvS7Emq/G8J8gKL0Jx9ziAUJf EGw/hF4GeVWykdPvyr3EEwAxw9T+WoLRVKenRvOWrwuR7VmxYqehYg0F2EeIt7bo dYeF/F5Waoku8dCsBpELQbRzp79y5hIiDXMJnchj06588i2/LB+0lKrMXCjSncKa PJ6Q0MR0gYKgqi5+CTkg3XN3tTD5uldx+eqZrguYtuq/SWPVMKa4l+EBUNCqPSaV YULTVRN7K1Fo/vQPBjf3SSQD0e8b44xRNh4YjxP/0qDPQiVtDkNk5vmvswJdAvwN QQ== -----END CERTIFICATE-----Generated at Mon Aug 4 15:06:01 2025 by rpki-client