$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft File: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft (raw, json) Hash identifier: NC0tn58+xmFqq9zRjci+rhJhehvIxmL44BJjDnVuZGM= Subject key identifier: 27:D9:12:FA:AC:1B:AA:7C:2B:A4:15:81:48:3F:1E:A9:AD:9C:9A:22 Authority key identifier: 94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C Certificate issuer: /CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Certificate serial: 74542EE1D7224159CDEBF9DE71FDFB28D3338625 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft Manifest number: 6B Signing time: Sun 29 Jun 2025 06:49:07 +0000 Manifest this update: Sun 29 Jun 2025 06:44:07 +0000 Manifest next update: Mon 30 Jun 2025 07:48:07 +0000 Files and hashes: 1: 326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa (hash: MnToG5/hHH9Scp/i63sn6+7U3FU6WhprF2dCg9QmzZ4=) 2: 326131343a373538343a333030323a3a2f34382d3438203d3e203530313034.roa (hash: Crxg8Afd9H4uvcM/AEMgGkuEVpajXoOdPvRiA2PLFc4=) 3: 326131343a373538343a333030313a3a2f34382d3438203d3e20313532333638.roa (hash: RycjpThYIZhrgAMUdYbKLisjcTcczyRyV0B6ob/yXcs=) 4: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl (hash: 1HKznxcnP37FCV/CFHikbbfE2ipdTdOL6KTk/uRJq0E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:54:2e:e1:d7:22:41:59:cd:eb:f9:de:71:fd:fb:28:d3:33:86:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Validity Not Before: Jun 29 06:44:07 2025 GMT Not After : Jun 30 07:48:07 2025 GMT Subject: CN=27D912FAAC1BAA7C2BA41581483F1EA9AD9C9A22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ee:cb:c2:73:21:00:e3:73:6d:a7:63:19:e2: 05:b6:81:d2:44:4d:7a:42:39:2c:45:c4:1e:c0:2c: 23:9f:cf:ef:8c:5f:49:bb:aa:a7:23:58:d9:70:12: 5a:c9:51:0c:6d:d2:74:82:ac:52:71:5b:c3:4a:50: e1:db:0f:3b:48:ba:93:fc:0d:5f:c4:dd:34:3d:9a: 87:dd:96:49:0c:a7:80:84:98:2c:2a:8a:37:4a:a5: 41:4d:26:53:a9:00:06:94:73:05:8a:19:4f:33:7d: 86:53:8e:e1:06:c1:5b:28:da:1d:c8:71:46:f5:bb: 50:20:5e:27:d6:bb:98:44:fa:c2:28:e6:97:72:f9: a3:fb:f9:de:22:70:c2:76:26:0a:dc:a0:cc:51:fd: 91:36:85:2b:ea:13:64:8c:56:51:54:e4:38:db:83: 20:47:5e:34:71:da:01:37:95:e8:ed:a2:86:e4:84: af:8b:13:99:05:a3:e1:9e:df:29:7f:5d:c1:b8:de: 9e:8e:97:28:1f:ea:75:dd:d8:51:88:ec:ff:65:16: 33:5f:2e:da:a4:43:51:2c:2f:52:13:b0:7c:c6:ec: 52:e6:ee:3c:e8:ba:22:db:90:ef:5f:02:2e:b3:45: 58:7a:8c:a0:7f:87:df:d7:55:8c:98:f2:19:71:43: 72:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D9:12:FA:AC:1B:AA:7C:2B:A4:15:81:48:3F:1E:A9:AD:9C:9A:22 X509v3 Authority Key Identifier: keyid:94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:f7:f2:73:28:4c:b0:29:aa:d4:70:3f:82:5d:0e:1d:17:b7: 81:7e:d9:20:2a:e4:c3:91:02:75:0d:c5:11:63:da:55:93:4b: 2d:b3:e3:36:c1:02:e1:75:59:24:4c:d4:84:76:db:2c:7b:9d: 8c:2f:aa:21:23:65:ac:a1:9a:40:ad:16:30:7e:10:17:ad:1e: f2:29:19:b7:33:aa:73:5f:8a:f4:36:0c:95:ed:a7:cc:04:cc: d4:54:61:03:38:93:4c:1e:ac:4d:fc:23:78:d3:ae:db:90:cf: ac:b7:10:4b:c4:8b:0e:50:65:dc:e2:e6:b1:10:71:33:cb:2d: e2:41:78:e4:75:9d:5d:0d:f9:9c:7f:3b:b5:96:15:d4:77:a8: 0b:9e:a3:62:31:cc:44:0f:0b:f3:b0:7e:68:a8:5c:cd:cd:b5: be:9f:1f:9f:21:71:d6:54:1d:f4:c4:75:a9:17:3f:98:38:36: a0:b2:59:b7:f9:83:1a:ff:f9:7a:fb:0e:a4:06:ae:0d:04:20: cd:44:96:c8:01:14:e3:31:dc:c4:0c:a4:a5:46:8c:d6:65:14: 93:9f:96:dc:dc:dc:6e:fb:f6:ca:f3:c6:53:08:94:9e:a2:24: e8:de:10:27:7c:d2:7c:2a:54:2a:a1:51:e6:76:e5:8c:d5:a9: 03:dc:d2:61 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdFQu4dciQVnN6/necf37KNMzhiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkx QjI3QUQ5QzAeFw0yNTA2MjkwNjQ0MDdaFw0yNTA2MzAwNzQ4MDdaMDMxMTAvBgNV BAMTKDI3RDkxMkZBQUMxQkFBN0MyQkE0MTU4MTQ4M0YxRUE5QUQ5QzlBMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG7svCcyEA43Ntp2MZ4gW2gdJE TXpCOSxFxB7ALCOfz++MX0m7qqcjWNlwElrJUQxt0nSCrFJxW8NKUOHbDztIupP8 DV/E3TQ9mofdlkkMp4CEmCwqijdKpUFNJlOpAAaUcwWKGU8zfYZTjuEGwVso2h3I cUb1u1AgXifWu5hE+sIo5pdy+aP7+d4icMJ2JgrcoMxR/ZE2hSvqE2SMVlFU5Djb gyBHXjRx2gE3lejtoobkhK+LE5kFo+Ge3yl/XcG43p6Olygf6nXd2FGI7P9lFjNf LtqkQ1EsL1ITsHzG7FLm7jzouiLbkO9fAi6zRVh6jKB/h9/XVYyY8hlxQ3JVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJ9kS+qwbqnwrpBWBSD8eqa2cmiIwHwYDVR0j BBgwFoAUlG3hXTS+riTinqFqP+HmWRsnrZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzcvOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkxQjI3QUQ5Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85NDZERTE1RDM0QkVBRTI0RTI5RUExNkEz RkUxRTY1OTFCMjdBRDlDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzFiZDMwNmI0LWU1YzMtNDhmOS1iMmVlLTM2YTliZGRlZDhjNC83Lzk0NkRFMTVE MzRCRUFFMjRFMjlFQTE2QTNGRTFFNjU5MUIyN0FEOUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBi9/Jz KEywKarUcD+CXQ4dF7eBftkgKuTDkQJ1DcURY9pVk0sts+M2wQLhdVkkTNSEdtss e52ML6ohI2WsoZpArRYwfhAXrR7yKRm3M6pzX4r0NgyV7afMBMzUVGEDOJNMHqxN /CN4067bkM+stxBLxIsOUGXc4uaxEHEzyy3iQXjkdZ1dDfmcfzu1lhXUd6gLnqNi McxEDwvzsH5oqFzNzbW+nx+fIXHWVB30xHWpFz+YODagslm3+YMa//l6+w6kBq4N BCDNRJbIARTjMdzEDKSlRozWZRSTn5bc3Nxu+/bK88ZTCJSeoiTo3hAnfNJ8KlQq oVHmduWM1akD3NJh -----END CERTIFICATE-----Generated at Sun Jun 29 14:43:50 2025 by rpki-client