$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft File: 51917E722DB03952D9056BED2F6BD4BF98B78976.mft (raw, json) Hash identifier: +pe4Pmavl6HYH9fT7f2HG3l+gdSIX/w+qfE1xTq+y9A= Subject key identifier: 65:1C:9E:25:DF:3C:09:AD:39:F5:F2:3D:63:D1:F8:E0:32:E9:DC:F2 Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 6AEFBE74ED839EDD55D23B04244A99013E366E77 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft Manifest number: 2F Signing time: Sun 15 Jun 2025 05:04:43 +0000 Manifest this update: Sun 15 Jun 2025 04:59:43 +0000 Manifest next update: Mon 16 Jun 2025 07:09:43 +0000 Files and hashes: 1: 326131343a373538303a666635333a3a2f34382d3438203d3e20323039373130.roa (hash: UpFVw7x1NBf/Uix4G0zJEj+QV4riL3tEIjso5GywhOU=) 2: 326131343a373538303a3530303a3a2f34302d3430203d3e20323039373130.roa (hash: UtWLjV2JD6X8emwUC9bu8RyXGCD7bzymrTBVIEkaVv8=) 3: 326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa (hash: 5weylF9E+kZUqdJn7nMGLccAIkWjUNuo5MqarqyfkO8=) 4: 51917E722DB03952D9056BED2F6BD4BF98B78976.crl (hash: 8ZNRyTxwZtH8TUa4MgpDezXG4tWvw/kqjqDSK+j/ook=) 5: 326131343a373538303a666635323a3a2f34382d3438203d3e20323039373130.roa (hash: vs66PWFM6L/hirNyhIXTRaz65c001j+IhkCdp8VdfS4=) 6: 326131343a373538303a666635343a3a2f34382d3438203d3e20323039373130.roa (hash: i7VkbN6Rb5CnHlmR8BF2dlC+Uq3PFV4wJTcaolWAu+U=) 7: 326131343a373538303a666635313a3a2f34382d3438203d3e20323039373130.roa (hash: KcfiSDiqDvlLOqfaLqph9s6F4NvpySAcmNFiwDriyms=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 04:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ef:be:74:ed:83:9e:dd:55:d2:3b:04:24:4a:99:01:3e:36:6e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Jun 15 04:59:43 2025 GMT Not After : Jun 16 07:09:43 2025 GMT Subject: CN=651C9E25DF3C09AD39F5F23D63D1F8E032E9DCF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e1:e8:b1:9c:13:81:87:a9:7a:5d:eb:a7:b6: 5c:db:90:c8:e4:e3:4e:3b:53:9c:ed:7c:b0:8c:e5: 84:11:a4:d7:67:2a:7e:cf:64:d3:53:07:a3:fd:27: d8:c0:19:63:26:a8:34:76:b6:26:3f:21:9c:fd:a9: 40:45:d7:7f:af:58:cd:60:8b:bf:21:59:27:f3:ab: a6:91:c2:f8:55:b2:ea:be:9c:b5:2e:b9:75:48:a6: 1a:87:b1:c0:77:20:cd:50:45:02:36:0b:b9:96:f7: 69:73:4e:ca:95:cc:0e:39:b9:5f:bd:40:fe:97:8f: 5c:cb:2b:97:1e:d7:bd:72:b4:5c:fa:7a:7a:1d:52: 4a:88:6d:19:4b:b9:b0:ff:a1:0b:a9:b5:11:5f:3b: 21:31:3d:80:e9:02:d3:73:7a:50:c4:d7:27:18:8c: 6f:a3:f3:2e:22:e2:53:b7:42:30:97:a4:77:9c:6c: 34:08:fa:bf:4c:f3:13:67:12:8f:d4:6a:33:6e:18: bc:9a:aa:8f:01:ed:d3:d1:e0:62:d6:b2:f6:23:c4: db:5a:98:e1:ef:8a:27:3e:26:0c:0e:f9:64:c8:28: 6d:73:ba:ae:26:3d:9d:9b:64:88:dc:07:42:d7:12: a3:e6:54:df:8e:b0:c5:48:ad:91:13:a5:97:55:be: 5e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1C:9E:25:DF:3C:09:AD:39:F5:F2:3D:63:D1:F8:E0:32:E9:DC:F2 X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:ac:39:cf:83:7c:b9:b8:11:4a:0a:83:80:cd:66:f8:f4:5b: f4:27:d9:70:60:43:82:43:a3:12:a3:5e:4b:fb:fe:12:de:49: 30:60:22:fe:bc:a1:6f:dd:fb:fd:1e:37:fa:79:10:1a:86:49: 8f:f0:05:00:01:d3:62:a2:46:f9:d0:e3:06:ac:b7:fc:c6:39: 70:03:66:9a:13:07:df:9b:a7:3f:3f:d4:eb:a2:87:c3:9d:20: 3b:49:ee:e9:ff:65:f6:d8:2d:1b:da:57:08:e0:6f:05:ad:e5: 4e:66:00:6f:35:10:fa:3a:8b:3b:79:01:9f:e7:6f:c0:e7:ab: 1f:e3:d3:30:52:eb:66:55:2e:85:4e:b8:6e:8f:27:fb:e6:fb: f9:05:07:2c:6a:32:36:8c:d8:bd:d7:97:6b:ee:6c:11:62:a1: d6:3b:24:85:3c:7d:20:05:04:2f:36:e9:61:a1:e6:3e:3f:e2: ce:c7:07:33:71:a1:44:c2:b8:c4:e4:bd:8a:73:06:31:7f:b3: 7c:ac:ed:84:0c:ec:e3:7c:74:6e:6e:8e:b3:05:8a:78:b3:46: 9a:0a:fe:cc:70:f3:b6:01:2e:54:17:65:09:eb:25:5f:8b:89: 47:1b:a4:ca:62:81:89:06:88:85:c8:69:55:f9:4b:a3:44:0f: 90:bb:0f:b2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUau++dO2Dnt1V0jsEJEqZAT42bncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNTA2MTUwNDU5NDNaFw0yNTA2MTYwNzA5NDNaMDMxMTAvBgNV BAMTKDY1MUM5RTI1REYzQzA5QUQzOUY1RjIzRDYzRDFGOEUwMzJFOURDRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl4eixnBOBh6l6XeuntlzbkMjk 4047U5ztfLCM5YQRpNdnKn7PZNNTB6P9J9jAGWMmqDR2tiY/IZz9qUBF13+vWM1g i78hWSfzq6aRwvhVsuq+nLUuuXVIphqHscB3IM1QRQI2C7mW92lzTsqVzA45uV+9 QP6Xj1zLK5ce171ytFz6enodUkqIbRlLubD/oQuptRFfOyExPYDpAtNzelDE1ycY jG+j8y4i4lO3QjCXpHecbDQI+r9M8xNnEo/UajNuGLyaqo8B7dPR4GLWsvYjxNta mOHviic+JgwO+WTIKG1zuq4mPZ2bZIjcB0LXEqPmVN+OsMVIrZETpZdVvl4nAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUZRyeJd88Ca059fI9Y9H44DLp3PIwHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzllY2FjNDEzLTRjZDItNDcyYy1iMDFlLTc0NDU4Y2VhMzg2Yy8wLzUxOTE3RTcy MkRCMDM5NTJEOTA1NkJFRDJGNkJENEJGOThCNzg5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDOrDnP g3y5uBFKCoOAzWb49Fv0J9lwYEOCQ6MSo15L+/4S3kkwYCL+vKFv3fv9Hjf6eRAa hkmP8AUAAdNiokb50OMGrLf8xjlwA2aaEwffm6c/P9TroofDnSA7Se7p/2X22C0b 2lcI4G8FreVOZgBvNRD6Oos7eQGf52/A56sf49MwUutmVS6FTrhujyf75vv5BQcs ajI2jNi915dr7mwRYqHWOySFPH0gBQQvNulhoeY+P+LOxwczcaFEwrjE5L2KcwYx f7N8rO2EDOzjfHRubo6zBYp4s0aaCv7McPO2AS5UF2UJ6yVfi4lHG6TKYoGJBoiF yGlV+UujRA+Quw+y -----END CERTIFICATE-----Generated at Sun Jun 15 12:25:50 2025 by rpki-client