$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft File: 6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft (raw, json) Hash identifier: wXQljU2UuZtoPmIa5aYnRhdx0dOn7vmvZVXYnpOmo9g= Subject key identifier: 52:73:BC:93:46:8C:4C:AA:3E:C4:00:AA:03:AB:43:69:72:A8:F8:8E Authority key identifier: 62:03:32:7B:6A:4B:0A:FB:98:2B:64:0B:8B:FF:2A:92:B1:C7:33:43 Certificate issuer: /CN=6203327B6A4B0AFB982B640B8BFF2A92B1C73343 Certificate serial: 75CBC50B280F65638AD202566D46B90685AA08A9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft Manifest number: AF Signing time: Mon 16 Jun 2025 10:56:25 +0000 Manifest this update: Mon 16 Jun 2025 10:51:25 +0000 Manifest next update: Tue 17 Jun 2025 11:45:25 +0000 Files and hashes: 1: 326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa (hash: 1uuqh7vWgIM0zB+uNA1obgzEdiTwrJmrg/6SIClfVTE=) 2: 6203327B6A4B0AFB982B640B8BFF2A92B1C73343.crl (hash: oP+uroXCOliPu/t0FNAWNv9oOR0cQVpS5cwf9IXgOgg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.crl rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 11:45:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:cb:c5:0b:28:0f:65:63:8a:d2:02:56:6d:46:b9:06:85:aa:08:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6203327B6A4B0AFB982B640B8BFF2A92B1C73343 Validity Not Before: Jun 16 10:51:25 2025 GMT Not After : Jun 17 11:45:25 2025 GMT Subject: CN=5273BC93468C4CAA3EC400AA03AB436972A8F88E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ff:83:16:2b:c0:26:a5:61:c8:b2:75:18:d1: 55:d3:96:88:8e:54:82:2b:41:2e:ef:84:fa:63:75: 97:78:e0:73:f5:30:15:8b:4b:7d:c9:bb:36:88:07: cb:82:e7:05:f5:c5:15:a3:0d:9f:fe:52:2e:e3:be: d3:10:c1:8d:dc:90:fd:20:76:87:ec:ef:df:28:eb: 8c:ba:c9:08:33:94:e5:7c:a5:96:8f:ba:ce:18:98: ed:56:21:70:47:66:4a:ab:cb:b8:17:0d:e9:77:a8: 27:91:8d:49:d9:08:8f:74:bc:ef:fd:e9:b7:10:98: 11:01:41:26:03:e7:5d:ad:24:9a:ea:da:7e:67:e7: 0c:31:37:d0:0c:09:de:70:b5:63:c2:36:bc:93:28: 3d:21:11:c9:c2:02:a0:49:63:cb:93:f6:f9:4b:59: 92:ed:dd:11:9f:a6:1d:c1:ab:ce:b7:76:d3:f1:41: fe:6c:e2:41:f4:31:76:ac:60:af:a0:69:8d:b9:0b: e9:e7:91:6e:a5:7a:1c:e0:a2:05:9c:53:0a:d8:d3: 88:fe:37:2c:1e:bf:cb:84:37:31:7c:a6:27:5f:1d: 31:b9:c7:a4:2b:0b:cd:87:e4:ff:b7:61:6a:90:d1: bb:8e:12:57:2c:04:89:58:e7:fd:4c:0a:00:c5:21: cb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:73:BC:93:46:8C:4C:AA:3E:C4:00:AA:03:AB:43:69:72:A8:F8:8E X509v3 Authority Key Identifier: keyid:62:03:32:7B:6A:4B:0A:FB:98:2B:64:0B:8B:FF:2A:92:B1:C7:33:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c7:db:32:5d:4b:d9:c3:38:59:82:9b:30:ae:e1:1b:4c:6f: 34:50:d4:f1:43:72:98:8e:40:a7:44:b6:82:45:b3:9e:75:80: be:a4:3b:20:2a:2c:91:79:a2:96:7e:8a:e3:e7:4f:4f:d2:bb: 46:0f:53:2c:c1:34:30:75:69:42:44:9e:90:f9:d7:48:38:38: e4:2c:7d:78:91:da:71:d6:a9:65:bf:51:03:bf:05:11:14:47: ef:c1:0f:c7:17:e1:e7:d3:97:2f:aa:2a:26:20:21:7b:17:c2: c7:dc:77:a5:56:be:06:f4:76:7c:92:9c:9c:b2:d4:5a:42:37: e6:0f:1d:59:e5:fb:a5:6a:3c:26:bb:20:bd:40:ff:44:f5:db: 93:ef:16:6a:65:a6:6b:07:2c:30:96:e8:0d:d3:bf:df:ce:22: 52:03:bb:44:9e:55:00:b4:6a:df:b0:6b:cc:64:64:a6:56:4c: 2c:ba:66:7e:c5:8e:9e:01:cc:fa:47:bb:4f:f0:ae:f1:02:3f: 5e:49:ff:70:01:0a:de:10:ee:99:11:5f:a9:1f:35:e5:35:69: e6:df:d5:12:20:a4:f9:49:69:14:4b:cb:2a:01:98:4c:09:ce: cd:4a:c5:d9:f1:3f:45:8a:fd:d0:64:25:c9:b5:33:c1:15:14: 4e:e2:8d:a9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdcvFCygPZWOK0gJWbUa5BoWqCKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIwMzMyN0I2QTRCMEFGQjk4MkI2NDBCOEJGRjJBOTJC MUM3MzM0MzAeFw0yNTA2MTYxMDUxMjVaFw0yNTA2MTcxMTQ1MjVaMDMxMTAvBgNV BAMTKDUyNzNCQzkzNDY4QzRDQUEzRUM0MDBBQTAzQUI0MzY5NzJBOEY4OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO/4MWK8AmpWHIsnUY0VXTloiO VIIrQS7vhPpjdZd44HP1MBWLS33JuzaIB8uC5wX1xRWjDZ/+Ui7jvtMQwY3ckP0g dofs798o64y6yQgzlOV8pZaPus4YmO1WIXBHZkqry7gXDel3qCeRjUnZCI90vO/9 6bcQmBEBQSYD512tJJrq2n5n5wwxN9AMCd5wtWPCNryTKD0hEcnCAqBJY8uT9vlL WZLt3RGfph3Bq863dtPxQf5s4kH0MXasYK+gaY25C+nnkW6lehzgogWcUwrY04j+ Nywev8uENzF8pidfHTG5x6QrC82H5P+3YWqQ0buOElcsBIlY5/1MCgDFIcvXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUUnO8k0aMTKo+xACqA6tDaXKo+I4wHwYDVR0j BBgwFoAUYgMye2pLCvuYK2QLi/8qkrHHM0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmVjYmM0MDQtYWM0My00NDliLThjN2UtOGYxZTk5ZDlh YzQ5LzMvNjIwMzMyN0I2QTRCMEFGQjk4MkI2NDBCOEJGRjJBOTJCMUM3MzM0My5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy82MjAzMzI3QjZBNEIwQUZCOTgyQjY0MEI4 QkZGMkE5MkIxQzczMzQzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZlY2JjNDA0LWFjNDMtNDQ5Yi04YzdlLThmMWU5OWQ5YWM0OS8zLzYyMDMzMjdC NkE0QjBBRkI5ODJCNjQwQjhCRkYyQTkyQjFDNzMzNDMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB8x9sy XUvZwzhZgpswruEbTG80UNTxQ3KYjkCnRLaCRbOedYC+pDsgKiyReaKWforj509P 0rtGD1MswTQwdWlCRJ6Q+ddIODjkLH14kdpx1qllv1EDvwURFEfvwQ/HF+Hn05cv qiomICF7F8LH3HelVr4G9HZ8kpycstRaQjfmDx1Z5fulajwmuyC9QP9E9duT7xZq ZaZrBywwlugN07/fziJSA7tEnlUAtGrfsGvMZGSmVkwsumZ+xY6eAcz6R7tP8K7x Aj9eSf9wAQreEO6ZEV+pHzXlNWnm39USIKT5SWkUS8sqAZhMCc7NSsXZ8T9Fiv3Q ZCXJtTPBFRRO4o2p -----END CERTIFICATE-----Generated at Tue Jun 17 03:41:58 2025 by rpki-client