$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft File: 75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft (raw, json) Hash identifier: e5UJ8pP09Ut8y/GJnn/Ue6QORe8iGxGNLBjGmDzekTI= Subject key identifier: 40:61:88:B9:5F:6E:22:21:E3:3B:6F:96:B1:02:65:B8:27:71:C9:34 Authority key identifier: 75:D2:E4:BD:F4:BE:FC:82:AC:93:8E:CC:34:6F:0B:32:16:59:75:23 Certificate issuer: /CN=75d2e4bdf4befc82ac938ecc346f0b3216597523 Certificate serial: 6954CF4491755589F97EF985A1DDD354467EA9AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft Manifest number: 01B4 Signing time: Sun 15 Jun 2025 09:34:43 +0000 Manifest this update: Sun 15 Jun 2025 09:29:43 +0000 Manifest next update: Mon 16 Jun 2025 10:28:43 +0000 Files and hashes: 1: AS47272.asa (hash: mnspjqBc3qtl9xMPFLbFBVztcaPK/e7+oVXALpAftOg=) 2: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (hash: trryrU9wIYmZgEJdzHNYY5h4S9o2VXqY8o0Zi9mSgQo=) 3: 323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa (hash: pidPjaC/0SzUTjVt7jeHfSi0+syOL6p0IuoBQSBkar0=) 4: 75D2E4BDF4BEFC82AC938ECC346F0B3216597523.crl (hash: /i84hwaIJDG7THaR2U07RnftDyTUnJPhDYE9W+j6N70=) 5: 323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa (hash: 1LnjtNWO4AFu9pCH4CmYsFOHKUIy1MM7xTorxxHQjEg=) 6: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (hash: n7zi8erDwVkaEAccTf7AgcxyPGv2dh/rzzppLzmNaTU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 10:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:54:cf:44:91:75:55:89:f9:7e:f9:85:a1:dd:d3:54:46:7e:a9:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75d2e4bdf4befc82ac938ecc346f0b3216597523 Validity Not Before: Jun 15 09:29:43 2025 GMT Not After : Jun 16 10:28:43 2025 GMT Subject: CN=406188B95F6E2221E33B6F96B10265B82771C934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7a:25:81:2c:93:34:03:1f:90:7d:37:ca:fc: df:56:a3:ad:c4:eb:1b:0d:1c:85:03:6b:96:9e:8e: 1b:e8:57:e3:90:fe:bb:85:67:fb:b6:fa:23:63:7e: 94:76:e8:bd:e3:4f:7e:e4:bc:61:4a:05:70:80:36: 67:e9:7a:14:95:00:2f:47:88:07:03:80:75:13:2f: 63:60:bf:8b:68:2f:0e:b2:43:88:6c:37:11:42:07: aa:09:de:31:0c:29:3c:8f:1b:f0:71:be:e7:aa:48: eb:ab:bd:be:dd:86:78:c2:93:c8:e8:88:9a:c9:34: 5b:6f:cb:43:00:9e:8d:66:19:89:cc:57:a6:84:44: 1e:50:d1:a8:84:c7:32:f3:69:d0:71:8a:6f:c3:06: 04:21:bb:24:6f:e0:8b:09:11:ac:6f:c3:68:fd:4b: 8b:e8:fa:60:a5:cf:52:31:87:af:54:d6:b1:98:3c: 61:33:2d:7d:10:c0:9f:ab:42:b7:69:30:ea:f6:1c: 1c:95:a1:7d:8d:37:39:da:5b:36:85:93:f9:32:3c: bf:9a:b9:a4:af:54:3a:cc:9b:f9:a4:5e:47:49:96: 9d:3c:2d:91:b7:b9:6c:23:bc:fd:27:78:c4:34:9c: 4e:ce:30:7c:24:a6:50:71:98:21:29:df:6e:64:ae: 54:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:61:88:B9:5F:6E:22:21:E3:3B:6F:96:B1:02:65:B8:27:71:C9:34 X509v3 Authority Key Identifier: keyid:75:D2:E4:BD:F4:BE:FC:82:AC:93:8E:CC:34:6F:0B:32:16:59:75:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:8e:cf:2d:2e:22:93:d4:72:f1:af:40:07:37:b1:2c:b4:61: 53:9a:4a:50:5e:17:89:fe:46:6f:ad:0b:bc:11:59:42:96:eb: 89:80:82:69:33:75:9f:49:7c:38:f2:82:a1:08:e8:b4:04:17: 77:8d:d0:14:72:8b:76:49:1d:14:42:b8:50:52:53:c1:9c:93: af:ff:9d:38:da:d1:ad:e1:34:6c:0b:45:63:68:7d:03:92:1a: b6:e2:14:57:8a:6e:6f:fe:08:e1:1a:ab:52:41:8e:c7:91:15: 46:2b:4f:7f:8d:8e:47:d5:cf:bd:63:97:af:58:46:7a:3e:59: 8e:70:e2:49:8d:be:05:50:65:ab:85:2a:ef:4b:1b:43:27:03: 77:43:75:e5:41:b3:c7:f5:a8:79:bd:3b:34:e5:26:da:fc:84: a7:55:0e:a9:f4:6f:4f:e4:2a:b9:44:ca:f3:df:86:ed:8b:eb: 50:de:0a:cd:c6:ff:5a:23:91:c1:aa:5b:22:ef:9d:1d:b5:3a: 24:a1:58:b2:e7:e7:7e:be:12:4d:c6:97:b9:fc:d8:af:4b:99: d4:70:ea:d1:4d:12:46:47:4f:09:72:0b:10:7d:b2:7a:57:32: 1d:5f:ab:c1:c2:89:f1:16:e3:09:13:48:c9:df:f3:53:48:5e: 0c:16:eb:cf -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUaVTPRJF1VYn5fvmFod3TVEZ+qa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVkMmU0YmRmNGJlZmM4MmFjOTM4ZWNjMzQ2ZjBiMzIx NjU5NzUyMzAeFw0yNTA2MTUwOTI5NDNaFw0yNTA2MTYxMDI4NDNaMDMxMTAvBgNV BAMTKDQwNjE4OEI5NUY2RTIyMjFFMzNCNkY5NkIxMDI2NUI4Mjc3MUM5MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/eiWBLJM0Ax+QfTfK/N9Wo63E 6xsNHIUDa5aejhvoV+OQ/ruFZ/u2+iNjfpR26L3jT37kvGFKBXCANmfpehSVAC9H iAcDgHUTL2Ngv4toLw6yQ4hsNxFCB6oJ3jEMKTyPG/BxvueqSOurvb7dhnjCk8jo iJrJNFtvy0MAno1mGYnMV6aERB5Q0aiExzLzadBxim/DBgQhuyRv4IsJEaxvw2j9 S4vo+mClz1Ixh69U1rGYPGEzLX0QwJ+rQrdpMOr2HByVoX2NNznaWzaFk/kyPL+a uaSvVDrMm/mkXkdJlp08LZG3uWwjvP0neMQ0nE7OMHwkplBxmCEp325krlQ5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQGGIuV9uIiHjO2+WsQJluCdxyTQwHwYDVR0j BBgwFoAUddLkvfS+/IKsk47MNG8LMhZZdSMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzAvNzVEMkU0QkRGNEJFRkM4MkFDOTM4RUNDMzQ2RjBCMzIxNjU5NzUyMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkTGt2ZlMtX0lLc2s0N01ORzhMTWha WmRTTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0z MjU1LTQ5ZjktOWI2Yy05YzlmMzg5ODk5NWQvMC83NUQyRTRCREY0QkVGQzgyQUM5 MzhFQ0MzNDZGMEIzMjE2NTk3NTIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB47PLS4ik9Ry8a9ABzex LLRhU5pKUF4Xif5Gb60LvBFZQpbriYCCaTN1n0l8OPKCoQjotAQXd43QFHKLdkkd FEK4UFJTwZyTr/+dONrRreE0bAtFY2h9A5IatuIUV4pub/4I4RqrUkGOx5EVRitP f42OR9XPvWOXr1hGej5ZjnDiSY2+BVBlq4Uq70sbQycDd0N15UGzx/Woeb07NOUm 2vyEp1UOqfRvT+QquUTK89+G7YvrUN4Kzcb/WiORwapbIu+dHbU6JKFYsufnfr4S TcaXufzYr0uZ1HDq0U0SRkdPCXILEH2yelcyHV+rwcKJ8RbjCRNIyd/zU0heDBbr zw== -----END CERTIFICATE-----Generated at Sun Jun 15 17:55:18 2025 by rpki-client