$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft File: 6578E79662000496EB1540D8BD8FA65ED8D63A62.mft (raw, json) Hash identifier: pb5HXacJ71mRMoI5y31UajuXvhXtfKe/mgZh6cTjXp4= Subject key identifier: 16:D5:C4:35:40:47:74:EC:D2:35:39:91:F4:6F:31:6A:38:47:BA:12 Authority key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 Certificate issuer: /CN=6578E79662000496EB1540D8BD8FA65ED8D63A62 Certificate serial: 4BF32CF3C08E5E8D7AAA95FDE04CF927EE7189AB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft Manifest number: 37 Signing time: Sat 23 Aug 2025 06:36:16 +0000 Manifest this update: Sat 23 Aug 2025 06:31:16 +0000 Manifest next update: Sun 24 Aug 2025 10:27:16 +0000 Files and hashes: 1: 6578E79662000496EB1540D8BD8FA65ED8D63A62.crl (hash: oHZG9tRhc6fnzVt6sAT+87wsd6D+l0p8D4ok8ZmssqI=) 2: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (hash: CAs4yn2E+Z/tR5i90G5tFQhJLWheBQDwrBHMrZXdGBo=) 3: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (hash: 52mHsWa4VgNp8igpY75YRE/bqiZx2ZdwnVE8gr1/unY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 10:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f3:2c:f3:c0:8e:5e:8d:7a:aa:95:fd:e0:4c:f9:27:ee:71:89:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62 Validity Not Before: Aug 23 06:31:16 2025 GMT Not After : Aug 24 10:27:16 2025 GMT Subject: CN=16D5C435404774ECD2353991F46F316A3847BA12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:95:2c:a5:41:d7:eb:30:a8:a7:ba:64:f9:b5: 00:93:43:17:f1:a7:93:55:fb:50:91:7f:f5:53:cd: 09:60:80:0e:f1:34:48:5e:87:5e:b8:ec:ca:8c:de: 1b:d8:39:f3:01:ce:bc:a6:14:7b:81:dd:88:ba:4b: c6:4e:5f:56:ac:77:b9:a4:ee:e4:96:6c:2c:03:b8: 2c:8c:d0:a2:ca:a0:6b:e7:b6:92:36:a9:60:4e:fc: 5e:08:55:6d:60:c2:b4:9d:ac:66:54:05:96:61:aa: 2d:a8:b8:73:45:1f:11:b6:3b:3f:48:af:2b:8c:4d: 74:86:f9:fb:91:2f:8a:68:29:b2:29:33:b0:25:a5: 85:c6:5e:98:9b:4d:da:b7:96:0d:d6:39:43:de:86: 44:c7:d7:89:9e:be:35:c8:22:87:8f:fc:74:6b:38: f8:2b:44:d9:8a:7a:29:f0:f3:cc:78:c6:cc:cf:8e: 02:bb:44:54:ce:0e:5e:ec:3f:23:db:96:15:c1:4a: 8f:e4:89:cb:71:a5:ce:0d:95:76:72:14:2c:ec:80: dc:4f:ac:02:73:01:86:0e:18:50:ce:d1:a1:aa:76: ad:1f:5f:44:0e:93:df:00:8f:0a:74:59:62:6a:e7: f2:c4:bd:d7:67:8d:58:25:63:9c:5b:43:72:06:25: 96:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D5:C4:35:40:47:74:EC:D2:35:39:91:F4:6F:31:6A:38:47:BA:12 X509v3 Authority Key Identifier: keyid:65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:68:93:ac:99:21:13:56:20:a3:af:29:7d:d9:b9:5b:73:12: 59:0a:cb:b1:31:f0:8d:16:6f:ce:12:c3:89:c9:f8:b0:d3:b0: 10:c8:82:02:64:a7:96:d5:70:c6:26:24:f0:83:46:5d:e8:d0: 13:1b:04:6e:df:88:dc:b9:21:7d:ec:98:15:21:dc:21:4f:26: 9e:65:36:34:c6:ab:78:cc:c2:4c:09:34:e4:d7:09:f8:16:5b: 6b:c2:d3:0e:da:2f:90:cc:80:5c:03:d2:b0:26:1e:3f:60:b8: dc:90:65:35:a7:49:55:c8:61:51:6e:84:d7:f0:8b:94:1e:91: 13:c0:c3:90:c7:38:87:24:17:31:04:a1:be:d6:a1:0a:b9:49: 87:ba:49:ab:8c:ad:c8:16:b4:8f:b1:98:06:37:8a:98:a4:69: 22:60:43:7c:95:05:98:28:44:5a:fa:3e:fd:d2:ae:a8:82:73: 8f:fe:52:a3:83:aa:6d:d9:a2:cd:c6:68:34:c4:d7:19:23:95: 82:23:1b:78:24:4a:2c:f1:04:34:62:ec:f5:64:7f:f4:f1:61: 8a:2c:27:90:1a:04:3b:45:b2:bd:8e:13:c1:6a:27:f9:ef:ef: 5b:35:ba:07:69:3e:49:d4:6c:56:ff:d3:c6:eb:ce:83:11:1c: 36:89:4d:80 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUS/Ms88COXo16qpX94Ez5J+5xiaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVE OEQ2M0E2MjAeFw0yNTA4MjMwNjMxMTZaFw0yNTA4MjQxMDI3MTZaMDMxMTAvBgNV BAMTKDE2RDVDNDM1NDA0Nzc0RUNEMjM1Mzk5MUY0NkYzMTZBMzg0N0JBMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQColSylQdfrMKinumT5tQCTQxfx p5NV+1CRf/VTzQlggA7xNEheh1647MqM3hvYOfMBzrymFHuB3Yi6S8ZOX1asd7mk 7uSWbCwDuCyM0KLKoGvntpI2qWBO/F4IVW1gwrSdrGZUBZZhqi2ouHNFHxG2Oz9I ryuMTXSG+fuRL4poKbIpM7AlpYXGXpibTdq3lg3WOUPehkTH14mevjXIIoeP/HRr OPgrRNmKeinw88x4xszPjgK7RFTODl7sPyPblhXBSo/kictxpc4NlXZyFCzsgNxP rAJzAYYOGFDO0aGqdq0fX0QOk98Ajwp0WWJq5/LEvddnjVglY5xbQ3IGJZYTAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUFtXENUBHdOzSNTmR9G8xajhHuhIwHwYDVR0j BBgwFoAUZXjnlmIABJbrFUDYvY+mXtjWOmIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzgvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2M0E2Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2 M0E2Mi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1l NWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvOC82NTc4RTc5NjYyMDAwNDk2RUIx NTQwRDhCRDhGQTY1RUQ4RDYzQTYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2iTrJkhE1Ygo68pfdm5 W3MSWQrLsTHwjRZvzhLDicn4sNOwEMiCAmSnltVwxiYk8INGXejQExsEbt+I3Lkh feyYFSHcIU8mnmU2NMareMzCTAk05NcJ+BZba8LTDtovkMyAXAPSsCYeP2C43JBl NadJVchhUW6E1/CLlB6RE8DDkMc4hyQXMQShvtahCrlJh7pJq4ytyBa0j7GYBjeK mKRpImBDfJUFmChEWvo+/dKuqIJzj/5So4OqbdmizcZoNMTXGSOVgiMbeCRKLPEE NGLs9WR/9PFhiiwnkBoEO0WyvY4TwWon+e/vWzW6B2k+SdRsVv/TxuvOgxEcNolN gA== -----END CERTIFICATE-----Generated at Sat Aug 23 17:27:06 2025 by rpki-client