$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft File: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft (raw, json) Hash identifier: 9i3jUebfoEPpq9xi+V5owBSiLruDvDs2DWGObL/KrOQ= Subject key identifier: 51:F1:59:E7:40:F8:0F:67:95:BA:13:DD:F5:9E:7E:E7:25:B1:BE:79 Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 Certificate issuer: /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Certificate serial: 01A5A52A1F2DC8EA70E4D68033B05E1B60305508 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft Manifest number: 0336 Signing time: Fri 13 Jun 2025 11:24:06 +0000 Manifest this update: Fri 13 Jun 2025 11:19:06 +0000 Manifest next update: Sat 14 Jun 2025 11:33:06 +0000 Files and hashes: 1: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (hash: tHiNPLeborN3MzxDKSTEAgj3ZJMcJjV9OqmGVy4ABhE=) 2: 323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa (hash: 3wDhadYEfX0Hhy3fPxID0nH+bbX55tStnGOk9S2bMKU=) 3: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl (hash: jDe1anxkQSKcTajZ08CC1ObjdDZUsvXBvot+hXeCsPE=) 4: AS202881.asa (hash: n7g3r7+FlCCQyP417H6Uudw0ZEIUQH6oYUZ2fSNBDRU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 11:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a5:a5:2a:1f:2d:c8:ea:70:e4:d6:80:33:b0:5e:1b:60:30:55:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Validity Not Before: Jun 13 11:19:06 2025 GMT Not After : Jun 14 11:33:06 2025 GMT Subject: CN=51F159E740F80F6795BA13DDF59E7EE725B1BE79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4e:ca:17:7c:59:55:ad:aa:6f:c5:e1:30:da: fd:30:49:22:67:cd:1f:90:85:25:e5:15:20:f3:e8: a5:f5:91:ff:c5:3f:60:eb:57:e2:c6:f3:0d:72:e1: 95:df:0b:b1:b2:00:2f:60:ee:b4:94:c1:31:3f:e2: 07:52:f8:3f:13:db:db:39:ac:5e:16:1f:31:17:d1: 30:28:5a:5e:7e:a8:22:4b:5f:03:b8:58:fa:bb:5b: 38:5b:fe:25:2c:7f:e5:2a:1c:f0:98:ca:7a:22:99: 52:04:4c:3b:22:a8:44:6f:e3:29:36:8e:7b:91:fb: 73:25:db:f2:ac:fc:d4:46:1c:39:b8:7d:72:69:f4: f5:89:5b:c4:aa:ee:50:59:d6:e2:78:c7:e4:23:d6: cb:1b:bb:b1:10:61:7d:5c:15:66:59:48:68:f3:a4: 6d:42:73:b4:06:0c:e3:4d:da:34:28:73:98:80:0a: 41:21:09:b2:00:8a:a4:50:35:67:ac:27:3e:50:88: 6a:62:39:20:dc:c8:ac:69:d2:dd:f5:96:06:6b:9f: d0:15:2a:11:59:8d:45:e9:33:d4:9b:dc:0c:54:08: d6:45:e8:67:50:ab:ce:aa:2d:33:66:83:f1:7c:e5: 83:7c:98:b8:fe:97:68:68:d0:86:03:8a:83:aa:1f: 25:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F1:59:E7:40:F8:0F:67:95:BA:13:DD:F5:9E:7E:E7:25:B1:BE:79 X509v3 Authority Key Identifier: keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ae:d6:d2:4d:56:d9:84:5b:7c:2a:78:f0:9e:95:04:27:b7: 48:be:a2:96:8b:0a:37:86:76:7f:9a:ae:1f:82:58:59:bd:6f: 04:c9:2a:c9:7e:68:c9:ba:c6:a3:45:72:d4:a3:a6:84:2c:61: b7:30:85:89:b4:ca:23:cf:ea:fd:23:5d:dd:7d:9d:75:4d:c7: 6c:7d:9f:dd:98:3d:24:c3:28:2e:bd:e1:a1:81:71:ed:e0:31: ec:a3:27:f3:bb:46:73:11:e6:f2:d7:ab:cc:c3:78:bf:7b:94: bf:d3:bb:9d:1d:36:8e:f3:d4:39:9e:15:6f:17:a0:a5:a5:ec: 5a:af:83:d5:70:7a:6d:6c:4c:7f:04:19:07:77:57:9c:7b:6d: aa:ef:ef:c7:3d:60:20:e7:89:9d:3e:a9:26:7d:17:b5:38:64: 33:be:fe:5c:ff:e2:63:87:b6:a2:32:55:92:23:95:ba:e2:89: 9b:79:dd:cc:b2:0b:2b:be:5b:e3:bc:38:6d:99:e3:4f:78:94: 87:24:9a:27:25:d6:98:21:15:8a:44:69:da:a1:d8:41:aa:f3: 87:57:b9:2f:fc:4a:7a:02:6d:f2:18:36:e9:6e:3d:87:d3:a6: 1b:38:e1:c5:15:91:b1:6c:df:05:a9:30:24:77:7c:f0:37:5e: 69:bf:75:54 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAaWlKh8tyOpw5NaAM7BeG2AwVQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDY0Mjk3NWY1MzVmNDVmZDlmNmQ4ZmVhNjI2YmM2ZDI0 YmM5ZDhkODAeFw0yNTA2MTMxMTE5MDZaFw0yNTA2MTQxMTMzMDZaMDMxMTAvBgNV BAMTKDUxRjE1OUU3NDBGODBGNjc5NUJBMTNEREY1OUU3RUU3MjVCMUJFNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlTsoXfFlVrapvxeEw2v0wSSJn zR+QhSXlFSDz6KX1kf/FP2DrV+LG8w1y4ZXfC7GyAC9g7rSUwTE/4gdS+D8T29s5 rF4WHzEX0TAoWl5+qCJLXwO4WPq7Wzhb/iUsf+UqHPCYynoimVIETDsiqERv4yk2 jnuR+3Ml2/Ks/NRGHDm4fXJp9PWJW8Sq7lBZ1uJ4x+Qj1ssbu7EQYX1cFWZZSGjz pG1Cc7QGDONN2jQoc5iACkEhCbIAiqRQNWesJz5QiGpiOSDcyKxp0t31lgZrn9AV KhFZjUXpM9Sb3AxUCNZF6GdQq86qLTNmg/F85YN8mLj+l2ho0IYDioOqHyXnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUfFZ50D4D2eVuhPd9Z5+5yWxvnkwHwYDVR0j BBgwFoAU1kKXX1NfRf2fbY/qYmvG0kvJ2NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2 OTgwLzMvRDY0Mjk3NUY1MzVGNDVGRDlGNkQ4RkVBNjI2QkM2RDI0QkM5RDhEOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFrS1hYMU5mUmYyZmJZX3FZbXZHMGt2 SjJOZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMy9ENjQyOTc1RjUzNUY0NUZEOUY2 RDhGRUE2MjZCQzZEMjRCQzlEOEQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn67W0k1W2YRbfCp48J6V BCe3SL6ilosKN4Z2f5quH4JYWb1vBMkqyX5oybrGo0Vy1KOmhCxhtzCFibTKI8/q /SNd3X2ddU3HbH2f3Zg9JMMoLr3hoYFx7eAx7KMn87tGcxHm8terzMN4v3uUv9O7 nR02jvPUOZ4VbxegpaXsWq+D1XB6bWxMfwQZB3dXnHttqu/vxz1gIOeJnT6pJn0X tThkM77+XP/iY4e2ojJVkiOVuuKJm3ndzLILK75b47w4bZnjT3iUhySaJyXWmCEV ikRp2qHYQarzh1e5L/xKegJt8hg26W49h9OmGzjhxRWRsWzfBakwJHd88Ddeab91 VA== -----END CERTIFICATE-----Generated at Fri Jun 13 18:57:07 2025 by rpki-client