$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft File: 75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft (raw, json) Hash identifier: ALVXev20Imp8T9kbdn9LYJ8MGgT6/TqmLXxyv/Akq/E= Subject key identifier: 6A:3A:C6:AB:57:06:A1:4F:84:6E:CC:CB:62:11:D2:E1:9F:7B:8F:F0 Authority key identifier: 75:D2:E4:BD:F4:BE:FC:82:AC:93:8E:CC:34:6F:0B:32:16:59:75:23 Certificate issuer: /CN=75d2e4bdf4befc82ac938ecc346f0b3216597523 Certificate serial: 7EC810D1023EA5A87F343744E45BED9EB2AD7F60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft Manifest number: 0102 Signing time: Tue 29 Apr 2025 18:06:43 +0000 Manifest this update: Tue 29 Apr 2025 18:01:43 +0000 Manifest next update: Wed 30 Apr 2025 18:39:43 +0000 Files and hashes: 1: 75D2E4BDF4BEFC82AC938ECC346F0B3216597523.crl (hash: B4YSLlN9scPGyX/GnNgNpuxSRRQsSUZAGCZp6Hwgu+s=) 2: 323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa (hash: pidPjaC/0SzUTjVt7jeHfSi0+syOL6p0IuoBQSBkar0=) 3: AS47272.asa (hash: V1JO5W+cc6ckYUh1nImJJtFR/jaKow9IHBTPbid4vVM=) 4: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (hash: trryrU9wIYmZgEJdzHNYY5h4S9o2VXqY8o0Zi9mSgQo=) 5: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (hash: n7zi8erDwVkaEAccTf7AgcxyPGv2dh/rzzppLzmNaTU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 18:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c8:10:d1:02:3e:a5:a8:7f:34:37:44:e4:5b:ed:9e:b2:ad:7f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75d2e4bdf4befc82ac938ecc346f0b3216597523 Validity Not Before: Apr 29 18:01:43 2025 GMT Not After : Apr 30 18:39:43 2025 GMT Subject: CN=6A3AC6AB5706A14F846ECCCB6211D2E19F7B8FF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4b:1d:9b:58:fb:be:e5:6e:df:d8:fc:6d:de: 39:17:1a:5b:ca:d5:ae:dc:07:1e:aa:49:74:94:3a: 00:48:91:6f:9b:dc:45:6b:01:68:67:8a:ef:5b:c7: 12:34:cc:44:92:37:49:8a:92:b6:ea:b3:07:3e:6d: e4:79:d5:ff:35:dd:1e:15:3b:8a:5b:47:37:e6:83: f2:37:c8:fb:4f:88:45:4d:3a:f2:1e:e9:6a:24:18: 9c:9d:10:0f:2e:c7:be:de:52:da:ef:ae:23:9c:24: c6:5f:27:ce:6b:5a:92:8e:65:1f:79:16:43:78:75: 5e:19:b2:fc:2d:d4:f7:4f:bd:d9:5d:4c:b9:0a:58: 5e:08:7a:7d:14:64:80:10:2f:c0:f5:10:b7:df:5a: 46:70:62:84:3d:ca:30:a4:96:82:a6:8f:0d:d2:9d: 24:ec:4f:54:87:c3:34:fd:cd:d9:ae:27:93:31:62: 0c:65:c6:85:cd:ea:04:ec:eb:12:1c:21:a4:72:f2: 4e:b5:7b:e4:be:f1:2e:29:d2:16:3e:c8:f1:1f:c3: ac:1a:f2:77:69:af:54:ec:5b:05:80:da:0c:5d:9f: 8a:23:73:b1:e5:d5:90:10:9d:e9:a9:06:65:24:17: 46:22:79:f3:0a:3b:12:5b:a7:7d:bb:66:86:a5:03: e0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3A:C6:AB:57:06:A1:4F:84:6E:CC:CB:62:11:D2:E1:9F:7B:8F:F0 X509v3 Authority Key Identifier: keyid:75:D2:E4:BD:F4:BE:FC:82:AC:93:8E:CC:34:6F:0B:32:16:59:75:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:6c:7c:db:97:14:47:d1:30:b9:d9:87:dd:60:47:66:cd:61: d0:d5:d0:8d:06:06:88:49:6e:27:c4:fa:be:f8:f9:c4:2e:45: 1e:97:92:76:48:3a:2c:08:ed:92:c1:08:f1:97:97:51:f5:e7: 05:a6:ae:1c:f7:52:54:80:4b:64:a9:d1:14:ae:a3:90:a4:7c: f0:d3:36:ac:ee:89:d7:98:64:bf:87:18:1a:46:cb:59:ff:fd: de:30:82:03:cc:0e:0d:9e:5c:d6:e4:62:0f:1a:49:b4:4b:38: f3:70:c8:ae:44:b6:7c:34:49:aa:16:fa:8f:3e:0a:05:55:a2: 54:b5:c9:1d:a9:2b:99:fb:8d:65:ec:3f:af:d8:24:6d:15:91: 89:e1:82:a1:be:e3:3c:8c:8a:ed:67:31:74:76:cf:45:35:f3: e2:5d:fa:3e:16:0c:d4:44:7e:60:dc:05:fd:f5:aa:ca:a1:13: 44:db:a6:ca:a2:7c:20:10:a5:df:62:52:14:e7:9f:31:19:59: c0:98:e5:ec:c9:79:e7:ea:fd:0c:fb:f4:68:c2:d5:46:7b:70: 5a:cc:ea:4e:9d:11:19:81:e8:63:4b:cc:f6:a1:d2:be:2f:0b: 21:6a:77:29:de:cc:bd:98:05:27:16:6e:43:d9:8d:2d:fa:7b: 9e:8e:f3:92 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfsgQ0QI+pah/NDdE5FvtnrKtf2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVkMmU0YmRmNGJlZmM4MmFjOTM4ZWNjMzQ2ZjBiMzIx NjU5NzUyMzAeFw0yNTA0MjkxODAxNDNaFw0yNTA0MzAxODM5NDNaMDMxMTAvBgNV BAMTKDZBM0FDNkFCNTcwNkExNEY4NDZFQ0NDQjYyMTFEMkUxOUY3QjhGRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDISx2bWPu+5W7f2Pxt3jkXGlvK 1a7cBx6qSXSUOgBIkW+b3EVrAWhniu9bxxI0zESSN0mKkrbqswc+beR51f813R4V O4pbRzfmg/I3yPtPiEVNOvIe6WokGJydEA8ux77eUtrvriOcJMZfJ85rWpKOZR95 FkN4dV4Zsvwt1PdPvdldTLkKWF4Ien0UZIAQL8D1ELffWkZwYoQ9yjCkloKmjw3S nSTsT1SHwzT9zdmuJ5MxYgxlxoXN6gTs6xIcIaRy8k61e+S+8S4p0hY+yPEfw6wa 8ndpr1TsWwWA2gxdn4ojc7Hl1ZAQnempBmUkF0YiefMKOxJbp327ZoalA+D7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUajrGq1cGoU+EbszLYhHS4Z97j/AwHwYDVR0j BBgwFoAUddLkvfS+/IKsk47MNG8LMhZZdSMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzAvNzVEMkU0QkRGNEJFRkM4MkFDOTM4RUNDMzQ2RjBCMzIxNjU5NzUyMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkTGt2ZlMtX0lLc2s0N01ORzhMTWha WmRTTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0z MjU1LTQ5ZjktOWI2Yy05YzlmMzg5ODk5NWQvMC83NUQyRTRCREY0QkVGQzgyQUM5 MzhFQ0MzNDZGMEIzMjE2NTk3NTIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2x825cUR9EwudmH3WBH Zs1h0NXQjQYGiEluJ8T6vvj5xC5FHpeSdkg6LAjtksEI8ZeXUfXnBaauHPdSVIBL ZKnRFK6jkKR88NM2rO6J15hkv4cYGkbLWf/93jCCA8wODZ5c1uRiDxpJtEs483DI rkS2fDRJqhb6jz4KBVWiVLXJHakrmfuNZew/r9gkbRWRieGCob7jPIyK7WcxdHbP RTXz4l36PhYM1ER+YNwF/fWqyqETRNumyqJ8IBCl32JSFOefMRlZwJjl7Ml55+r9 DPv0aMLVRntwWszqTp0RGYHoY0vM9qHSvi8LIWp3Kd7MvZgFJxZuQ9mNLfp7no7z kg== -----END CERTIFICATE-----Generated at Wed Apr 30 08:26:28 2025 by rpki-client