$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/3/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.mft File: 5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.mft (raw, json) Hash identifier: FWZlr/rSVFwDwxkP0iIX28fI1mrq1Q9OIplLf9bHMig= Subject key identifier: 99:52:14:12:8A:A1:13:2F:94:78:6B:0D:9E:C2:F9:5A:71:EA:C6:9A Authority key identifier: 5C:76:E6:4D:72:F3:F9:5E:46:8F:23:BE:C4:5D:C2:F2:FF:76:93:8B Certificate issuer: /CN=5C76E64D72F3F95E468F23BEC45DC2F2FF76938B Certificate serial: 0AD99266C1B215661E60B7536392731B15E88CA6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/3/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.mft Manifest number: 03 Signing time: Tue 17 Jun 2025 10:05:11 +0000 Manifest this update: Tue 17 Jun 2025 10:00:11 +0000 Manifest next update: Wed 18 Jun 2025 13:23:11 +0000 Files and hashes: 1: 5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.crl (hash: OoKLV++XUas/DKj8A+LVF5IhDaQOYhB/ki1ZkH14FO8=) 2: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: e0ZUE2ihMqIcVzaW4KaZGqefPbQ9GLKeZeIru7vw7OQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/3/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/3/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 18 Jun 2025 12:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d9:92:66:c1:b2:15:66:1e:60:b7:53:63:92:73:1b:15:e8:8c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C76E64D72F3F95E468F23BEC45DC2F2FF76938B Validity Not Before: Jun 17 10:00:11 2025 GMT Not After : Jun 18 13:23:11 2025 GMT Subject: CN=995214128AA1132F94786B0D9EC2F95A71EAC69A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1d:31:12:ed:aa:9e:b0:2f:c9:8b:59:dc:79: 1b:11:5b:e0:6e:6d:ab:18:f6:4a:b0:42:1f:4e:49: 96:3f:f1:fe:40:df:ef:83:4c:43:2c:ed:c6:f7:07: bc:91:81:b3:6c:b9:ab:67:90:9d:72:e0:b6:99:83: 66:9a:52:b6:29:2d:77:b5:36:b0:4d:02:6a:5d:da: 6a:ee:81:27:0b:70:ac:49:a0:54:04:98:8b:48:0f: 12:43:64:8d:c4:ac:2a:a7:90:51:54:85:c9:1e:5f: de:70:3d:af:8b:80:27:cb:ae:d0:80:54:a6:b5:f1: 9a:20:fb:77:b3:cc:c9:41:cf:ed:bc:ed:44:29:f1: df:5d:6a:e4:aa:ca:9c:a3:d8:ad:d4:11:39:0c:2c: 12:75:30:56:6e:95:45:82:e3:9a:e3:80:7d:a7:45: 71:54:8c:c5:bf:cf:6d:81:58:62:60:73:7e:81:c5: 3b:c6:74:65:8b:32:d3:2c:23:d1:54:49:04:cf:78: b5:25:7e:f0:f9:d4:d4:3d:bf:47:ad:2f:83:34:6f: 82:3c:d8:c0:60:e1:00:f2:a2:40:a7:cf:2b:7a:ba: ef:57:08:fd:02:a7:f3:6f:90:c9:89:8e:f5:63:a4: 14:fa:76:1b:97:6f:7e:18:ad:e8:ac:f6:65:8b:45: da:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:52:14:12:8A:A1:13:2F:94:78:6B:0D:9E:C2:F9:5A:71:EA:C6:9A X509v3 Authority Key Identifier: keyid:5C:76:E6:4D:72:F3:F9:5E:46:8F:23:BE:C4:5D:C2:F2:FF:76:93:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/3/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/3/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:51:68:36:8c:0a:7a:86:14:34:1d:42:7b:30:3a:64:10:52: bb:e8:74:c7:2c:f2:d0:ac:5e:86:fa:67:c8:59:02:8c:01:2e: ae:c4:04:bd:ee:a6:27:9e:f9:3c:1d:f3:81:c3:37:47:06:40: 5c:ab:7e:bc:c7:26:d5:58:9d:1c:48:7a:40:53:59:96:36:88: 61:cd:d9:aa:f0:03:6e:79:f9:1f:61:1a:20:c8:10:d1:be:7c: ad:a8:6e:50:b6:e2:c7:70:9f:93:eb:cb:4d:ae:33:7c:1c:94: 48:52:0c:7e:33:a4:64:6c:68:f1:23:c1:d0:96:12:68:f0:53: 68:d7:98:1b:8c:00:b7:50:10:a8:62:90:8d:fe:1c:8e:f0:dc: 06:1d:60:35:d4:18:1d:4d:09:5d:72:ef:be:40:79:ea:7c:59: 6a:8b:47:14:d0:69:6f:75:e6:d4:82:64:6e:c2:1a:f0:b5:36: 03:fd:0b:56:c2:5a:23:5f:45:44:43:a7:11:1c:f0:b1:61:a6: d8:b3:a7:8a:35:e5:98:1f:de:8e:31:83:35:81:e4:58:ee:18: 85:5f:a2:ef:70:60:8e:4f:9a:72:40:6c:86:e7:79:af:d1:d0: e9:b0:80:a9:34:ab:4a:7c:29:52:00:fd:15:a7:dc:11:92:2a: 6f:8e:50:c3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCtmSZsGyFWYeYLdTY5JzGxXojKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3NkU2NEQ3MkYzRjk1RTQ2OEYyM0JFQzQ1REMyRjJG Rjc2OTM4QjAeFw0yNTA2MTcxMDAwMTFaFw0yNTA2MTgxMzIzMTFaMDMxMTAvBgNV BAMTKDk5NTIxNDEyOEFBMTEzMkY5NDc4NkIwRDlFQzJGOTVBNzFFQUM2OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeHTES7aqesC/Ji1nceRsRW+Bu basY9kqwQh9OSZY/8f5A3++DTEMs7cb3B7yRgbNsuatnkJ1y4LaZg2aaUrYpLXe1 NrBNAmpd2mrugScLcKxJoFQEmItIDxJDZI3ErCqnkFFUhckeX95wPa+LgCfLrtCA VKa18Zog+3ezzMlBz+287UQp8d9dauSqypyj2K3UETkMLBJ1MFZulUWC45rjgH2n RXFUjMW/z22BWGJgc36BxTvGdGWLMtMsI9FUSQTPeLUlfvD51NQ9v0etL4M0b4I8 2MBg4QDyokCnzyt6uu9XCP0Cp/NvkMmJjvVjpBT6dhuXb34Yreis9mWLRdoHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUmVIUEoqhEy+UeGsNnsL5WnHqxpowHwYDVR0j BBgwFoAUXHbmTXLz+V5GjyO+xF3C8v92k4swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzMvNUM3NkU2NEQ3MkYzRjk1RTQ2OEYyM0JFQzQ1REMyRjJGRjc2OTM4Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMS81Qzc2RTY0RDcyRjNGOTVFNDY4RjIzQkVD NDVEQzJGMkZGNzY5MzhCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy8zLzVDNzZFNjRE NzJGM0Y5NUU0NjhGMjNCRUM0NURDMkYyRkY3NjkzOEIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCDUWg2 jAp6hhQ0HUJ7MDpkEFK76HTHLPLQrF6G+mfIWQKMAS6uxAS97qYnnvk8HfOBwzdH BkBcq368xybVWJ0cSHpAU1mWNohhzdmq8ANuefkfYRogyBDRvnytqG5QtuLHcJ+T 68tNrjN8HJRIUgx+M6RkbGjxI8HQlhJo8FNo15gbjAC3UBCoYpCN/hyO8NwGHWA1 1BgdTQldcu++QHnqfFlqi0cU0GlvdebUgmRuwhrwtTYD/QtWwlojX0VEQ6cRHPCx YabYs6eKNeWYH96OMYM1geRY7hiFX6LvcGCOT5pyQGyG53mv0dDpsICpNKtKfClS AP0Vp9wRkipvjlDD -----END CERTIFICATE-----Generated at Wed Jun 18 01:53:45 2025 by rpki-client