$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.mft File: 5BE6F0781C3A7A74F993C53DC07FC424ED911592.mft (raw, json) Hash identifier: BG6ATVTROGfZutaHHy/3SXTLtNsNTTap0HKXjQbDYA4= Subject key identifier: 89:64:38:8A:64:4F:AE:F2:57:19:59:F0:2E:12:BE:52:7F:06:D1:F8 Authority key identifier: 5B:E6:F0:78:1C:3A:7A:74:F9:93:C5:3D:C0:7F:C4:24:ED:91:15:92 Certificate issuer: /CN=5BE6F0781C3A7A74F993C53DC07FC424ED911592 Certificate serial: 1931D08B9895593D08A98C3E14DE5992A99C3F84 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.mft Manifest number: 53 Signing time: Sat 28 Jun 2025 18:02:02 +0000 Manifest this update: Sat 28 Jun 2025 17:57:02 +0000 Manifest next update: Sun 29 Jun 2025 20:57:02 +0000 Files and hashes: 1: 326131343a373538303a666666323a3a2f34382d3438203d3e20323037343237.roa (hash: be9i66kYT9S8FN11kLwpL53RT8mHbO1o0DQS826QI9o=) 2: 5BE6F0781C3A7A74F993C53DC07FC424ED911592.crl (hash: VOtctKaykqOR7/Wjo8Qku+e8f34hgPVMXOOiyFunT8s=) 3: 326131343a373538303a3330303a3a2f34382d3438203d3e20323037343237.roa (hash: d4zl7cmcGUAAv9RizmWWAY0eQtY35rFHYQeuDAs5cgc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.crl rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 20:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:31:d0:8b:98:95:59:3d:08:a9:8c:3e:14:de:59:92:a9:9c:3f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BE6F0781C3A7A74F993C53DC07FC424ED911592 Validity Not Before: Jun 28 17:57:02 2025 GMT Not After : Jun 29 20:57:02 2025 GMT Subject: CN=8964388A644FAEF2571959F02E12BE527F06D1F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:46:96:c4:31:62:b9:94:8f:1f:b3:f5:2b:78: 6d:fa:eb:61:c2:27:eb:7a:f0:8e:98:9b:db:51:83: ad:df:01:f1:d8:f1:b8:8a:ab:6d:e7:ba:6f:ac:2d: 02:3a:18:69:6f:8b:02:d3:cd:4c:56:5f:9b:b6:a4: a5:ea:f8:85:cd:db:aa:99:b7:2b:d3:1c:8e:ac:d1: 06:c8:7e:93:b2:17:d9:a3:cc:ee:6a:94:85:31:65: 0f:96:c4:9a:79:00:d4:4e:15:c0:8e:10:da:39:45: 85:bb:9c:87:e8:39:88:ae:37:f2:6a:06:a5:1e:95: 9d:5c:94:92:7a:2b:4c:21:37:ac:73:6e:8c:ec:83: 44:97:54:08:52:69:7e:da:af:75:d4:6a:a7:10:07: dd:cc:1a:a8:60:98:0f:a8:9e:70:63:1d:01:f9:47: fa:84:07:02:d0:23:6d:9f:f5:b4:81:0c:ab:c7:ba: 9d:ed:57:eb:c9:8c:1a:42:29:ae:0a:81:94:48:7a: 22:74:b0:ee:17:51:76:c8:ca:da:a9:97:bc:f4:1b: 75:bc:a9:c5:0d:3f:af:33:57:81:50:c0:85:39:84: 52:59:6a:b6:b7:6e:48:0d:3e:48:18:46:1b:e4:45: 81:bb:db:8b:93:f9:4c:96:22:7d:4b:31:d1:64:cf: 4c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:64:38:8A:64:4F:AE:F2:57:19:59:F0:2E:12:BE:52:7F:06:D1:F8 X509v3 Authority Key Identifier: keyid:5B:E6:F0:78:1C:3A:7A:74:F9:93:C5:3D:C0:7F:C4:24:ED:91:15:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02aed0a4-3e76-4830-bbb4-1cbc204352b3/0/5BE6F0781C3A7A74F993C53DC07FC424ED911592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d5:ca:2d:80:ae:f4:08:59:84:ab:87:72:68:f2:e2:2f:4e: f9:36:0e:5e:75:b6:15:18:09:91:c0:97:26:52:e9:00:6b:a3: 25:11:eb:e4:f1:fe:51:9a:1a:6f:67:75:9b:23:b4:6c:50:43: 52:d1:f5:7a:c7:af:0a:cd:bd:7c:56:ff:26:9f:ad:00:2a:9e: 0a:c9:cb:a8:9d:ff:c1:56:7d:6c:e9:82:7c:3a:04:b6:f1:13: c0:1d:7f:34:58:bf:1d:87:a6:35:fb:16:69:94:ab:f0:29:03: 25:4b:d5:e2:2a:9f:5e:3c:9d:6e:62:65:25:f5:fe:19:d4:7c: fd:e5:0e:80:8f:73:78:d5:3b:17:36:96:4b:43:8c:07:40:99: 2f:a0:1d:cc:33:18:11:6d:91:f2:df:16:18:4a:84:74:f8:40: 14:c0:12:49:a6:f8:ad:ef:f6:94:fa:f1:05:cd:95:ce:0f:41: 6a:7e:0c:51:69:b5:8e:2e:18:00:2f:f8:b8:db:af:5a:c1:5a: f4:c5:90:10:c9:31:32:eb:f6:b1:7c:35:61:b8:e8:fa:6a:e5: 5a:d0:52:32:bd:a9:53:1a:d8:a7:70:a1:92:7d:f4:98:ec:3c: d1:44:9e:f0:1e:23:62:12:2b:04:1a:2f:75:d2:00:5e:24:21: da:0a:8f:93 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGTHQi5iVWT0IqYw+FN5ZkqmcP4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJFNkYwNzgxQzNBN0E3NEY5OTNDNTNEQzA3RkM0MjRF RDkxMTU5MjAeFw0yNTA2MjgxNzU3MDJaFw0yNTA2MjkyMDU3MDJaMDMxMTAvBgNV BAMTKDg5NjQzODhBNjQ0RkFFRjI1NzE5NTlGMDJFMTJCRTUyN0YwNkQxRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxRpbEMWK5lI8fs/UreG3662HC J+t68I6Ym9tRg63fAfHY8biKq23num+sLQI6GGlviwLTzUxWX5u2pKXq+IXN26qZ tyvTHI6s0QbIfpOyF9mjzO5qlIUxZQ+WxJp5ANROFcCOENo5RYW7nIfoOYiuN/Jq BqUelZ1clJJ6K0whN6xzbozsg0SXVAhSaX7ar3XUaqcQB93MGqhgmA+onnBjHQH5 R/qEBwLQI22f9bSBDKvHup3tV+vJjBpCKa4KgZRIeiJ0sO4XUXbIytqpl7z0G3W8 qcUNP68zV4FQwIU5hFJZara3bkgNPkgYRhvkRYG724uT+UyWIn1LMdFkz0ztAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUiWQ4imRPrvJXGVnwLhK+Un8G0fgwHwYDVR0j BBgwFoAUW+bweBw6enT5k8U9wH/EJO2RFZIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDJhZWQwYTQtM2U3Ni00ODMwLWJiYjQtMWNiYzIwNDM1 MmIzLzAvNUJFNkYwNzgxQzNBN0E3NEY5OTNDNTNEQzA3RkM0MjRFRDkxMTU5Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81QkU2RjA3ODFDM0E3QTc0Rjk5M0M1M0RD MDdGQzQyNEVEOTExNTkyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAyYWVkMGE0LTNlNzYtNDgzMC1iYmI0LTFjYmMyMDQzNTJiMy8wLzVCRTZGMDc4 MUMzQTdBNzRGOTkzQzUzREMwN0ZDNDI0RUQ5MTE1OTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCS1cot gK70CFmEq4dyaPLiL075Ng5edbYVGAmRwJcmUukAa6MlEevk8f5RmhpvZ3WbI7Rs UENS0fV6x68Kzb18Vv8mn60AKp4Kycuonf/BVn1s6YJ8OgS28RPAHX80WL8dh6Y1 +xZplKvwKQMlS9XiKp9ePJ1uYmUl9f4Z1Hz95Q6Aj3N41TsXNpZLQ4wHQJkvoB3M MxgRbZHy3xYYSoR0+EAUwBJJpvit7/aU+vEFzZXOD0FqfgxRabWOLhgAL/i4269a wVr0xZAQyTEy6/axfDVhuOj6auVa0FIyvalTGtincKGSffSY7DzRRJ7wHiNiEisE Gi910gBeJCHaCo+T -----END CERTIFICATE-----Generated at Sun Jun 29 13:43:39 2025 by rpki-client