$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: SpWOAc4OcWLkH9SjZO9zGtTIrByE0NL8CMoBiYdJQsk= Subject key identifier: CA:68:2B:35:C1:37:CC:2A:FF:92:59:14:99:39:8A:18:5E:5D:90:13 Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 70143E9C06FE1939F2A78097E1807F1B67C5FD50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: 66 Signing time: Fri 13 Jun 2025 21:07:49 +0000 Manifest this update: Fri 13 Jun 2025 21:02:49 +0000 Manifest next update: Sat 14 Jun 2025 23:36:49 +0000 Files and hashes: 1: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: U2rsj2GmpPBYV9RPLITNHzbaDI2Gxelnlov5msxX9eI=) 2: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: aUvc4UTsIU7R0m9dsnmxWesOTPr9WQo6/RshJ5X0hb4=) 3: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: obPbW0ZKO9rq4yp7c5UqzqijavPW0CV78gaYhHaBReI=) 4: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: oXC9Asr9SJ7DSslxSZaWUX9xWnSBbY5iUxbxwvvcFUI=) 5: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: cK22q6rO6KtktflqsQYlSr1z73xEpoVM/WNGnd6YIEI=) 6: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: fkThFrWbc2SNg5nWL/DjCmp7efO9LKVSLfyHO63Odeo=) 7: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: lu6gr7Zz0ytwbA711cWG1X/cjzCTF7yr/e9BRxzASp4=) 8: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: u6D0nQIamyf1rwT6EphlkmgpGmdsHhrROhbEzSFSSxQ=) 9: 3231332e3135372e3132312e302f32342d3234203d3e20383334.roa (hash: KzRDONoUEdWtAmYoE3nM54cz2mZ3OTHGtsETHEM2i5I=) 10: 3231332e3135372e3132332e302f32342d3234203d3e20313337353137.roa (hash: 101KeXXnBE7X7QLTvc7Gr7DVuO0YIAuTdg47tJ4yQUU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 23:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:14:3e:9c:06:fe:19:39:f2:a7:80:97:e1:80:7f:1b:67:c5:fd:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Jun 13 21:02:49 2025 GMT Not After : Jun 14 23:36:49 2025 GMT Subject: CN=CA682B35C137CC2AFF92591499398A185E5D9013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d1:95:33:ef:de:2b:fa:3b:e9:58:46:1a:21: 38:ad:a1:10:c7:c5:2a:c7:0e:8a:bc:77:08:95:d0: fd:90:2a:c7:6b:fd:dd:96:f3:d3:4f:30:be:fc:7c: f0:33:e0:70:d4:b9:d4:db:20:e2:92:29:93:78:2f: 66:78:25:f5:4f:66:97:d4:86:76:ad:af:02:cb:e6: 1e:3d:1a:ad:88:24:20:e0:63:a3:60:7d:8e:9d:cd: c5:b8:45:5c:7f:76:7a:14:d3:43:a7:b7:8b:46:1d: 1b:43:50:94:a3:37:62:aa:29:8d:23:93:6a:88:07: e3:5e:88:0a:28:cd:b6:54:31:71:eb:4b:a6:44:7c: 2b:64:d1:ef:51:ea:5e:1d:6d:bf:ec:2e:7f:d5:48: 91:90:6b:31:40:02:7f:b5:12:5e:77:d5:02:ce:f3: e8:c5:07:10:d4:55:1a:1e:18:1f:fc:0b:ad:94:1d: d9:e0:3f:9a:87:26:05:c5:6d:03:84:4e:ee:2a:f8: 8a:aa:ad:31:d3:c4:77:06:ba:32:e5:a6:22:5f:36: 9f:ea:fd:1c:cb:38:3e:11:ef:94:91:09:64:9d:c2: 1d:38:88:b9:e8:a1:15:b7:f4:41:ab:66:15:66:a7: f6:e5:c5:1e:a5:7f:34:cc:1c:09:8a:71:c3:8f:a5: ef:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:68:2B:35:C1:37:CC:2A:FF:92:59:14:99:39:8A:18:5E:5D:90:13 X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:c0:11:2d:9c:72:10:3b:1f:80:56:49:6e:e7:6d:ca:06:83: 76:41:3a:b3:a3:07:96:d6:96:d8:91:06:ac:38:6f:e0:07:d1: 21:a6:33:23:b1:2c:af:bd:0b:03:78:14:f2:a7:9d:09:9a:ba: e6:6f:96:67:e7:01:32:c1:39:0c:11:8e:4f:fb:f2:05:bf:1b: c2:ca:cd:08:7e:5e:fa:1d:04:e6:bf:4b:ae:38:f7:18:e8:9e: 82:a1:47:9c:b9:01:f3:48:ad:5b:a3:7f:30:9b:c8:ad:57:80: 99:c5:dd:0c:db:06:78:91:ec:12:43:c5:4f:8a:f7:22:43:9a: 27:12:fd:46:ac:45:dc:3a:7b:f7:06:79:3f:21:cb:47:b7:58: 2f:57:22:ed:ed:f4:9d:1b:35:b9:95:61:c5:62:38:5b:57:03: 01:af:a8:bb:7c:74:4c:88:f3:ab:95:2c:27:98:7c:81:26:dd: 1c:6c:8a:ce:b4:24:52:36:cf:00:83:96:f1:ea:e8:82:f8:6e: d5:46:07:fc:16:fa:ba:56:dc:7e:23:c3:f2:a1:9e:58:45:fc: 33:ed:35:57:3e:d9:35:8b:41:fc:c8:0f:97:1d:29:c7:ff:f2: 75:a5:6b:08:dd:81:4c:c6:de:0d:4d:c0:83:ea:66:c4:bb:8a: 62:89:81:ee -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcBQ+nAb+GTnyp4CX4YB/G2fF/VAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNTA2MTMyMTAyNDlaFw0yNTA2MTQyMzM2NDlaMDMxMTAvBgNV BAMTKENBNjgyQjM1QzEzN0NDMkFGRjkyNTkxNDk5Mzk4QTE4NUU1RDkwMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU0ZUz794r+jvpWEYaITitoRDH xSrHDoq8dwiV0P2QKsdr/d2W89NPML78fPAz4HDUudTbIOKSKZN4L2Z4JfVPZpfU hnatrwLL5h49Gq2IJCDgY6NgfY6dzcW4RVx/dnoU00Ont4tGHRtDUJSjN2KqKY0j k2qIB+NeiAoozbZUMXHrS6ZEfCtk0e9R6l4dbb/sLn/VSJGQazFAAn+1El531QLO 8+jFBxDUVRoeGB/8C62UHdngP5qHJgXFbQOETu4q+IqqrTHTxHcGujLlpiJfNp/q /RzLOD4R75SRCWSdwh04iLnooRW39EGrZhVmp/blxR6lfzTMHAmKccOPpe+rAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUymgrNcE3zCr/klkUmTmKGF5dkBMwHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsARLZxyEDsfgFZJbudt ygaDdkE6s6MHltaW2JEGrDhv4AfRIaYzI7Esr70LA3gU8qedCZq65m+WZ+cBMsE5 DBGOT/vyBb8bwsrNCH5e+h0E5r9Lrjj3GOiegqFHnLkB80itW6N/MJvIrVeAmcXd DNsGeJHsEkPFT4r3IkOaJxL9RqxF3Dp79wZ5PyHLR7dYL1ci7e30nRs1uZVhxWI4 W1cDAa+ou3x0TIjzq5UsJ5h8gSbdHGyKzrQkUjbPAIOW8erogvhu1UYH/Bb6ulbc fiPD8qGeWEX8M+01Vz7ZNYtB/MgPlx0px//ydaVrCN2BTMbeDU3Ag+pmxLuKYomB 7g== -----END CERTIFICATE-----Generated at Sat Jun 14 09:28:26 2025 by rpki-client