$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json) Hash identifier: gOh1DcKhuBHGrdBn8FKRVOo7jg/QhYogFgFrAx8eoYc= Subject key identifier: 28:3B:37:37:4B:00:70:DB:C5:07:0C:FF:4E:10:C9:EF:88:87:58:98 Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Certificate serial: 21E82B0E6B2282547645E44C7A7B162650F7D28B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft Manifest number: BF Signing time: Sun 15 Jun 2025 03:24:49 +0000 Manifest this update: Sun 15 Jun 2025 03:19:49 +0000 Manifest next update: Mon 16 Jun 2025 07:20:49 +0000 Files and hashes: 1: 3130332e3134392e3136392e302f32342d3234203d3e203239303636.roa (hash: maEEcKFpE2t04MDS7J/KRiM4ruTlWUrzhdkOt++OWAY=) 2: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: 9w0YYz2WSwJv1gg7/D35TSfNVyLWnY0kHjQG9R2GLyw=) 3: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: RPFyh+9f4VeLKwhSKFsibkww2V1WrimAJUdSq1OTL10=) 4: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: aQBGW4UwEpZw1viUGTiicR7R7bF3eHxKluau3FSxHVQ=) 5: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: kUiBrX3+9cuSC9lMhoz9V2p165UrI0C31waBU1/3ZFc=) 6: AS215248.asa (hash: Sb+0gXxMTsfzVz5MSdgmRLaj0eWSk1yQA7d7qNiRsFE=) 7: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: +yFHbjFdcl3OkH9bM82B/wbQvRBlEBGqJ0LTOyulC0Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 22:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e8:2b:0e:6b:22:82:54:76:45:e4:4c:7a:7b:16:26:50:f7:d2:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Validity Not Before: Jun 15 03:19:49 2025 GMT Not After : Jun 16 07:20:49 2025 GMT Subject: CN=283B37374B0070DBC5070CFF4E10C9EF88875898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:21:77:6d:80:a5:e5:a6:1d:65:43:d9:98:c9: 88:bf:9a:46:84:97:ed:d1:7a:a0:e9:02:9d:d0:11: 8b:58:ba:3e:4b:eb:23:eb:2b:e3:e3:76:fa:89:78: 19:a3:a9:7d:c8:4b:e2:67:a7:bf:a0:5d:7b:c7:80: 19:3e:24:9a:44:63:d1:8d:a6:ee:0f:df:52:b2:4c: fb:55:3f:1b:6a:11:68:76:b6:c1:03:d7:12:96:ad: ef:4a:b6:15:26:18:ec:22:2e:70:26:32:b3:15:2b: c9:4a:10:d7:5e:32:61:fd:1f:dc:50:34:9f:ae:27: 13:49:2b:1c:13:ed:92:7c:b5:2a:7a:a8:a3:33:58: 5f:3a:04:b9:ff:fd:9e:fc:6a:17:d1:c6:52:d6:e0: 8c:8c:b4:d6:e9:7c:42:b4:fa:3c:6e:c5:2f:38:48: e6:a8:ea:85:b7:a4:0b:78:5f:41:96:b8:41:79:4e: 09:c8:9a:e2:05:4f:91:fb:6e:96:ad:e3:7d:0c:c6: 99:7e:70:82:47:6b:4e:64:53:50:c2:d2:0f:23:45: c9:9a:44:11:c6:5a:42:eb:2c:dc:1f:87:9a:33:df: 4c:1b:d1:bc:75:c6:d3:3a:f2:bd:6a:ce:0d:dd:fd: 77:d6:86:70:c6:5c:ad:7b:cd:f1:1c:30:9a:a1:eb: 5f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3B:37:37:4B:00:70:DB:C5:07:0C:FF:4E:10:C9:EF:88:87:58:98 X509v3 Authority Key Identifier: keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:4e:6e:a4:ab:cc:07:22:9d:f2:59:56:7c:f4:a0:53:2a:ae: 7e:75:1c:ba:db:ed:d0:f0:48:c3:74:e7:bd:0a:6b:d4:50:a4: 34:51:f0:e7:c5:74:71:99:7b:32:1b:43:5c:e4:02:fe:11:80: 9d:45:3b:42:fb:b6:28:8f:96:85:4b:22:5f:9b:1c:f6:50:bf: 4e:74:33:20:c4:d9:16:59:6a:dc:1f:00:e5:64:fe:2a:87:d1: ca:bb:e0:52:18:f1:8f:99:19:ad:64:a0:af:2e:80:20:ae:60: b8:5c:e6:c4:b2:3d:44:9f:55:e0:59:1f:af:17:76:a6:b8:ba: d0:cc:17:06:9d:bf:51:8b:63:11:fc:ac:7f:fc:78:5e:85:95: 97:de:26:50:34:bd:1c:a0:2f:5c:8e:80:4e:9d:0c:d0:cf:8a: f2:01:df:d8:00:81:e1:84:4b:86:7d:93:ac:ed:e4:59:80:04: cd:c8:62:ef:43:5c:f7:6b:56:b6:b3:40:82:5b:57:ec:e6:57: be:1d:e9:51:e5:ba:a2:98:dd:1f:63:db:5a:79:af:3b:3f:bd: a1:ee:73:c4:ef:9a:2d:2c:cd:38:b2:44:7c:24:a3:58:ab:b1: 6e:4b:83:52:02:5e:75:91:08:03:65:00:ca:c0:08:1f:8b:00: 01:c2:93:19 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIegrDmsiglR2ReRMensWJlD30oswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3 ZTc5N2I2ODAeFw0yNTA2MTUwMzE5NDlaFw0yNTA2MTYwNzIwNDlaMDMxMTAvBgNV BAMTKDI4M0IzNzM3NEIwMDcwREJDNTA3MENGRjRFMTBDOUVGODg4NzU4OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkIXdtgKXlph1lQ9mYyYi/mkaE l+3ReqDpAp3QEYtYuj5L6yPrK+PjdvqJeBmjqX3IS+Jnp7+gXXvHgBk+JJpEY9GN pu4P31KyTPtVPxtqEWh2tsED1xKWre9KthUmGOwiLnAmMrMVK8lKENdeMmH9H9xQ NJ+uJxNJKxwT7ZJ8tSp6qKMzWF86BLn//Z78ahfRxlLW4IyMtNbpfEK0+jxuxS84 SOao6oW3pAt4X0GWuEF5TgnImuIFT5H7bpat430Mxpl+cIJHa05kU1DC0g8jRcma RBHGWkLrLNwfh5oz30wb0bx1xtM68r1qzg3d/XfWhnDGXK17zfEcMJqh618pAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUKDs3N0sAcNvFBwz/ThDJ74iHWJgwHwYDVR0j BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1 NWUyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZDE5ZGIyMC00 NjUzLTQ4ZDQtOGZjNC01ODBkMTM2OWI3YzQvMC81Q0RDMDRCQjIzRUFBNENFQ0M3 OTFERkUwNEJCMDI4QjdFNzk3QjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUk5upKvMByKd8llWfPSg UyqufnUcutvt0PBIw3TnvQpr1FCkNFHw58V0cZl7MhtDXOQC/hGAnUU7Qvu2KI+W hUsiX5sc9lC/TnQzIMTZFllq3B8A5WT+KofRyrvgUhjxj5kZrWSgry6AIK5guFzm xLI9RJ9V4Fkfrxd2pri60MwXBp2/UYtjEfysf/x4XoWVl94mUDS9HKAvXI6ATp0M 0M+K8gHf2ACB4YRLhn2TrO3kWYAEzchi70Nc92tWtrNAgltX7OZXvh3pUeW6opjd H2PbWnmvOz+9oe5zxO+aLSzNOLJEfCSjWKuxbkuDUgJedZEIA2UAysAIH4sAAcKT GQ== -----END CERTIFICATE-----Generated at Sun Jun 15 09:13:31 2025 by rpki-client