$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: /JXRxNn7dSutygsg+KVw/sgOLMQLIkHdSDP5FEzw9PE= Subject key identifier: 6B:67:98:49:DD:57:98:37:7B:DE:D8:F3:EE:17:6D:C5:2E:AF:C1:3B Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 07A1E6B883D00DD6370B123D8A3A83AB9A807CBC Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: C5 Signing time: Wed 06 Aug 2025 02:26:51 +0000 Manifest this update: Wed 06 Aug 2025 02:21:51 +0000 Manifest next update: Thu 07 Aug 2025 16:50:51 +0000 Files and hashes: 1: 326130623a346530373a363030303a3a2f34312d3438203d3e20323134373031.roa (hash: 4kUbGyjkNaSVg+CdxZZIcLS92ZdRbZtwjsOz4Bjkgro=) 2: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: CopML09NM5GdD7CTmfWAkp8JcZAILY9J+6gLvE1tp40=) 3: 326130623a346530373a363064303a3a2f34342d3438203d3e20323134373031.roa (hash: uV2TLwh180zk/DItScOuiwKDHaU99Mhyx8m59bwZFmA=) 4: 326130623a346530373a363065303a3a2f34342d3438203d3e203339333531.roa (hash: /JgrvpSR1ZDGP36oDONfP8baAAR4FG/skafz4v4Fs6E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 20:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a1:e6:b8:83:d0:0d:d6:37:0b:12:3d:8a:3a:83:ab:9a:80:7c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Aug 6 02:21:51 2025 GMT Not After : Aug 7 16:50:51 2025 GMT Subject: CN=6B679849DD5798377BDED8F3EE176DC52EAFC13B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:56:88:06:f9:2e:cb:18:a3:72:b8:88:c3:e1: 65:87:cd:6d:d4:96:64:ec:5a:8d:78:d9:bd:ef:46: b7:71:70:d4:57:20:30:a5:2b:a4:c6:5e:5e:70:4e: ee:41:30:b1:08:9c:2b:68:90:d7:b2:27:66:c1:3c: 5b:9b:93:e9:10:3d:c1:1e:c0:11:82:ef:64:fe:a2: 61:b9:bb:32:74:40:06:da:86:f6:f2:b4:c4:27:c2: 4e:38:68:5b:12:13:e0:fa:bc:6c:c7:d2:43:86:6f: 60:77:a2:b4:25:b7:1d:61:43:34:64:4a:fe:3f:5c: ef:bf:67:a4:b4:2c:07:4a:f1:ce:9b:b0:7f:94:b9: e5:3e:62:e6:d5:e8:36:bd:1a:dd:a9:35:04:1f:79: 1d:85:eb:65:27:8e:2d:7c:98:d3:9b:bb:b1:ca:cc: 3f:b3:ef:df:33:09:79:24:0e:ed:50:bf:7b:cd:32: ea:5d:29:b1:57:db:3f:00:5f:cc:30:2e:f9:52:fd: ff:66:24:5b:c2:68:29:2b:96:fa:f0:d0:87:a6:5f: 83:f4:9a:ee:a8:e0:00:87:3c:6b:6c:a6:d4:06:13: 16:04:4b:d7:89:0e:c3:31:01:47:85:9f:73:e5:28: c4:ab:2e:d8:9a:f1:53:e6:b0:c6:3d:cf:56:67:38: 3e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:67:98:49:DD:57:98:37:7B:DE:D8:F3:EE:17:6D:C5:2E:AF:C1:3B X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:f2:91:96:ea:31:f9:b0:8b:96:1a:49:cd:b5:4e:d8:a8:f2: d5:de:33:89:23:b0:18:51:f8:c2:93:54:6d:20:59:0c:07:26: f5:3d:47:75:b3:b5:e8:f8:cb:88:86:cb:09:08:bb:f4:99:07: 54:e9:8e:c6:36:bf:09:c7:e8:f4:78:f5:d5:85:80:29:1a:23: 2c:9c:30:5e:7c:e5:2f:3d:ca:b3:7e:c3:a1:c5:63:b0:f8:c9: 29:a4:24:3d:88:53:e6:52:f7:3a:91:d1:61:ab:a8:7e:56:27: 95:eb:5e:7e:f5:2b:b1:bf:b6:46:a4:1e:9e:75:9f:bf:8e:3c: a0:fd:c6:f5:37:e7:7f:65:27:a5:4a:f4:40:ed:96:cf:c4:85: 78:fe:25:7d:15:43:f2:6c:11:7b:3f:30:3c:bd:10:5f:82:b4: 94:78:07:ee:72:7b:a2:46:05:5f:1a:06:67:ea:33:ae:74:a9: 8f:bd:cf:92:93:16:21:6b:8d:39:c9:93:f0:79:bc:01:28:9c: ae:28:09:b6:67:38:69:78:ee:78:59:8f:c1:42:1f:74:66:7a: 40:6d:da:22:85:5c:9f:e1:38:ce:d0:ef:9c:56:a1:c0:e7:ee: 6c:9b:9e:37:8d:2e:5f:05:40:b6:19:75:62:38:a4:59:58:53: e0:b4:0d:0c -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUB6HmuIPQDdY3CxI9ijqDq5qAfLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNTA4MDYwMjIxNTFaFw0yNTA4MDcxNjUwNTFaMDMxMTAvBgNV BAMTKDZCNjc5ODQ5REQ1Nzk4Mzc3QkRFRDhGM0VFMTc2REM1MkVBRkMxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7VogG+S7LGKNyuIjD4WWHzW3U lmTsWo142b3vRrdxcNRXIDClK6TGXl5wTu5BMLEInCtokNeyJ2bBPFubk+kQPcEe wBGC72T+omG5uzJ0QAbahvbytMQnwk44aFsSE+D6vGzH0kOGb2B3orQltx1hQzRk Sv4/XO+/Z6S0LAdK8c6bsH+UueU+YubV6Da9Gt2pNQQfeR2F62Unji18mNObu7HK zD+z798zCXkkDu1Qv3vNMupdKbFX2z8AX8wwLvlS/f9mJFvCaCkrlvrw0IemX4P0 mu6o4ACHPGtsptQGExYES9eJDsMxAUeFn3PlKMSrLtia8VPmsMY9z1ZnOD5VAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUa2eYSd1XmDd73tjz7hdtxS6vwTswHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofKRluox+bCLlhpJzbVO 2Kjy1d4ziSOwGFH4wpNUbSBZDAcm9T1HdbO16PjLiIbLCQi79JkHVOmOxja/Ccfo 9Hj11YWAKRojLJwwXnzlLz3Ks37DocVjsPjJKaQkPYhT5lL3OpHRYauoflYnlete fvUrsb+2RqQennWfv448oP3G9Tfnf2UnpUr0QO2Wz8SFeP4lfRVD8mwRez8wPL0Q X4K0lHgH7nJ7okYFXxoGZ+ozrnSpj73PkpMWIWuNOcmT8Hm8ASicrigJtmc4aXju eFmPwUIfdGZ6QG3aIoVcn+E4ztDvnFahwOfubJueN40uXwVAthl1YjikWVhT4LQN DA== -----END CERTIFICATE-----Generated at Wed Aug 6 14:06:09 2025 by rpki-client