$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft File: 3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft (raw, json) Hash identifier: 9HnsrKLs2cvnWlwEFSuoJDNlZHmpenqCQF3r0H8LFSU= Subject key identifier: EF:00:8E:BA:7E:F3:87:68:86:16:2F:F1:60:C8:68:84:32:55:E0:D7 Authority key identifier: 3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA Certificate issuer: /CN=3F0D5C989D06DEE4CEF73B76423F7D1B248305CA Certificate serial: 4D95439B42417C7CBEFB57CFD95934F85FCBF2B8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft Manifest number: 24 Signing time: Mon 16 Jun 2025 01:26:47 +0000 Manifest this update: Mon 16 Jun 2025 01:21:47 +0000 Manifest next update: Tue 17 Jun 2025 04:10:47 +0000 Files and hashes: 1: 326130353a646663333a666434303a3a2f34342d3438203d3e20323134323939.roa (hash: tzPv+0SYW7c4BhO+NRENEMHDxJFYhSgi+7F5pSL26rM=) 2: 326130393a353463373a313030303a3a2f34382d3438203d3e20323134323939.roa (hash: polSfU3C8waUTNHXjjV/PtCyw7FXJG9dpAnmbVhvFpA=) 3: 326130393a353463373a316562653a3a2f34382d3438203d3e20323039383636.roa (hash: TaPYx3TgPHUyddmtxy9zzW0mG+lkUufKcfpaVs06+uc=) 4: 3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.crl (hash: E7Ip9yRSms3/OKWdGaNQSzK7pX1ahYIZFkDTXx/T6IE=) 5: 326130393a353463373a316562653a3a2f34382d3438203d3e20323134323939.roa (hash: HE6NA8iuF7m/BEGtvKSapzIZyTFfFUeBBMBI1WKr7Q4=) 6: 326130393a353463373a313030313a3a2f34382d3438203d3e20323134323939.roa (hash: sMFqJHE6ZX3ycW3EXnTJu0zQlY1y10K2aBBpHFeENOs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.crl rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 23:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:95:43:9b:42:41:7c:7c:be:fb:57:cf:d9:59:34:f8:5f:cb:f2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F0D5C989D06DEE4CEF73B76423F7D1B248305CA Validity Not Before: Jun 16 01:21:47 2025 GMT Not After : Jun 17 04:10:47 2025 GMT Subject: CN=EF008EBA7EF3876886162FF160C868843255E0D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c8:4a:93:55:22:9b:38:f2:d6:5c:44:fe:5a: 11:41:31:bb:d3:b2:4f:e2:45:52:22:16:06:3f:52: c3:d5:2d:83:59:ea:e2:df:3c:5c:e9:de:ae:9f:af: 53:7a:35:44:da:7c:a7:e9:b6:f8:36:a5:82:b9:b3: 80:e6:98:f8:a8:71:b3:db:dd:c8:1c:b5:9e:a6:24: fd:84:ac:65:07:64:c3:db:fd:16:ff:7a:d9:b7:84: 1f:cb:4f:8c:ee:36:24:28:cd:38:cf:12:c4:a7:17: 68:d8:d4:37:22:2d:27:94:b0:8c:6d:5c:ca:f6:e6: fe:23:5d:5d:73:9b:d0:7d:f4:15:b1:ce:18:cf:fe: cf:90:e1:ad:ce:2a:ae:7d:c6:22:b8:83:a3:d3:46: 5d:9a:9b:76:4d:20:70:6a:8a:18:17:39:2c:65:a2: 31:ba:21:49:a1:54:16:ac:e9:c6:56:9a:c6:71:65: a4:fc:0e:39:eb:cc:5b:ba:52:d0:94:ed:7e:95:f6: 05:91:9a:60:b0:ab:c3:61:63:7f:46:c0:bb:00:0b: 0a:fb:b8:98:7d:57:54:00:1c:dd:4a:69:62:07:34: 96:39:8e:33:e0:30:83:eb:ad:62:1b:85:a5:d8:ad: ae:7f:d4:60:4f:bd:59:cc:62:c6:d6:ea:3b:5e:1a: 97:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:00:8E:BA:7E:F3:87:68:86:16:2F:F1:60:C8:68:84:32:55:E0:D7 X509v3 Authority Key Identifier: keyid:3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:45:c0:4a:10:37:0b:4f:7e:f9:e5:ad:66:71:b8:ee:e5:2b: 3f:df:42:bc:1f:04:17:e2:e6:f2:01:90:eb:52:39:f9:ad:c0: d0:b1:d2:eb:b0:f3:df:60:bd:4f:01:62:b2:98:81:ac:e2:00: 8a:83:cf:93:d4:e3:de:86:42:c5:73:e7:d1:da:72:32:41:57: fc:0c:78:26:10:1d:ad:55:f8:91:e9:35:54:e1:08:b3:62:cb: 70:bc:6a:09:26:de:a8:eb:58:1c:ba:a7:90:59:13:e6:bd:75: 0e:61:5a:5b:d1:8f:e9:38:ce:da:a4:2a:5c:01:93:64:e4:87: 16:4c:4a:d1:fb:23:88:19:5d:be:ad:c5:0d:ad:ed:0f:72:f9: 15:e8:8d:f2:c5:ae:1d:e8:8a:7a:2f:fb:bf:c1:8b:40:4c:1e: 2f:8c:79:dc:cc:d3:57:d9:f9:fb:ac:e5:04:68:ef:13:21:cf: 68:01:b5:4f:2a:f6:3d:79:5e:58:be:e2:cb:fb:ab:b0:47:c3: 1c:d2:04:68:09:2c:7f:bc:01:25:b1:0c:47:66:6d:43:ac:c4: 2d:72:14:ba:1c:f4:c0:43:f1:60:a6:96:cc:8d:b2:47:d1:88: 12:c6:93:b8:bb:f9:00:bf:6f:fe:59:fe:19:b5:6f:7e:f9:7a: 95:dc:68:9a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTZVDm0JBfHy++1fP2Vk0+F/L8rgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YwRDVDOTg5RDA2REVFNENFRjczQjc2NDIzRjdEMUIy NDgzMDVDQTAeFw0yNTA2MTYwMTIxNDdaFw0yNTA2MTcwNDEwNDdaMDMxMTAvBgNV BAMTKEVGMDA4RUJBN0VGMzg3Njg4NjE2MkZGMTYwQzg2ODg0MzI1NUUwRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsyEqTVSKbOPLWXET+WhFBMbvT sk/iRVIiFgY/UsPVLYNZ6uLfPFzp3q6fr1N6NUTafKfptvg2pYK5s4DmmPiocbPb 3cgctZ6mJP2ErGUHZMPb/Rb/etm3hB/LT4zuNiQozTjPEsSnF2jY1DciLSeUsIxt XMr25v4jXV1zm9B99BWxzhjP/s+Q4a3OKq59xiK4g6PTRl2am3ZNIHBqihgXOSxl ojG6IUmhVBas6cZWmsZxZaT8DjnrzFu6UtCU7X6V9gWRmmCwq8NhY39GwLsACwr7 uJh9V1QAHN1KaWIHNJY5jjPgMIPrrWIbhaXYra5/1GBPvVnMYsbW6jteGpcpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU7wCOun7zh2iGFi/xYMhohDJV4NcwHwYDVR0j BBgwFoAUPw1cmJ0G3uTO9zt2Qj99GySDBcowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4MWUyMzUtODE1OC00MDdlLWJjZmYtZjA5NjM0ODM1 N2EyLzEvM0YwRDVDOTg5RDA2REVFNENFRjczQjc2NDIzRjdEMUIyNDgzMDVDQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy8zRjBENUM5ODlEMDZERUU0Q0VGNzNCNzY0 MjNGN0QxQjI0ODMwNUNBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NmODFlMjM1LTgxNTgtNDA3ZS1iY2ZmLWYwOTYzNDgzNTdhMi8xLzNGMEQ1Qzk4 OUQwNkRFRTRDRUY3M0I3NjQyM0Y3RDFCMjQ4MzA1Q0EubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBhRcBK EDcLT3755a1mcbju5Ss/30K8HwQX4ubyAZDrUjn5rcDQsdLrsPPfYL1PAWKymIGs 4gCKg8+T1OPehkLFc+fR2nIyQVf8DHgmEB2tVfiR6TVU4QizYstwvGoJJt6o61gc uqeQWRPmvXUOYVpb0Y/pOM7apCpcAZNk5IcWTErR+yOIGV2+rcUNre0PcvkV6I3y xa4d6Ip6L/u/wYtATB4vjHnczNNX2fn7rOUEaO8TIc9oAbVPKvY9eV5YvuLL+6uw R8Mc0gRoCSx/vAElsQxHZm1DrMQtchS6HPTAQ/FgppbMjbJH0YgSxpO4u/kAv2/+ Wf4ZtW9++XqV3Gia -----END CERTIFICATE-----Generated at Mon Jun 16 11:21:59 2025 by rpki-client