$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft File: 847138B5401830B89B52403C777718BB40B2B6B5.mft (raw, json) Hash identifier: 7XiPwijSkao9nbCkxiwBgpp5WXgD9zHxxM6X568FMIk= Subject key identifier: F1:DE:88:2C:B1:16:44:55:54:0C:72:DB:5F:30:6E:47:C0:3B:0F:BB Authority key identifier: 84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5 Certificate issuer: /CN=847138B5401830B89B52403C777718BB40B2B6B5 Certificate serial: 3A1E336254270F9C87F464632388EF7DD6A24DAA Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft Manifest number: 052E Signing time: Sun 29 Jun 2025 10:48:15 +0000 Manifest this update: Sun 29 Jun 2025 10:43:15 +0000 Manifest next update: Mon 30 Jun 2025 14:45:15 +0000 Files and hashes: 1: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: HYPQYH9q04uUtQ2nRIqre2hb3Qbqb6C2ZO6Rxb9EvzQ=) 2: 847138B5401830B89B52403C777718BB40B2B6B5.crl (hash: vuxGYEOfT03uX67EurrFI7bb8DWO2zVj//cVuMzJI7E=) 3: BE8A7AC02556C14368364036D5427F53187B6D9D.cer (hash: DgZZLJZ9Eml763gunc/aU0nCab1SiHrkxw0oRdopVbY=) 4: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: nMmiIj2RlJjYPT/1+XLEzvCEDF/otDgwrHV2q/RTde4=) 5: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: lqIlXTFIWSBiRqL977xA8LwWmhjqpimo3uxiYjVeS/M=) 6: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: B/V5ud+StvDXjqEGvB3k810Cv5LJwyUE9nhfaTbPqMk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 14:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:1e:33:62:54:27:0f:9c:87:f4:64:63:23:88:ef:7d:d6:a2:4d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847138B5401830B89B52403C777718BB40B2B6B5 Validity Not Before: Jun 29 10:43:15 2025 GMT Not After : Jun 30 14:45:15 2025 GMT Subject: CN=F1DE882CB1164455540C72DB5F306E47C03B0FBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a0:2d:37:41:a0:a6:b1:9a:29:c8:a0:bc:22: 19:e2:50:4f:33:8d:38:50:08:ad:7a:02:e7:78:56: 87:11:c3:85:f6:61:51:5b:85:3a:48:5f:ff:03:fa: db:ab:66:5c:4d:f3:a5:da:92:c7:48:21:e1:c6:02: 45:46:7b:c5:4a:60:c7:30:d8:24:0d:1f:88:8e:39: 43:86:25:f7:f8:1d:09:de:d3:02:71:70:61:0a:cb: 93:1d:8a:be:70:82:a7:e4:e2:f9:79:e5:85:ce:b8: 32:42:c8:2c:cf:94:f3:2c:1d:05:b0:3d:a2:bb:ec: 3e:2b:ff:2c:6a:54:01:79:7d:af:d1:95:29:8f:f1: 4a:94:67:12:5f:2c:a5:07:7b:25:b1:fa:fc:ad:37: 43:35:29:3a:7b:90:6f:3d:5d:83:79:98:8d:e8:e1: df:fe:fd:2a:6e:49:17:fa:79:19:5a:02:72:fd:da: 74:7b:b7:cf:e6:ca:59:17:85:78:a0:e9:0c:44:41: 07:9f:f7:d1:e7:b6:86:3f:7c:fa:e2:e7:12:5b:e9: 8b:2f:e0:81:7f:4b:ee:27:43:f8:8b:a1:84:da:d1: 39:6d:7f:86:d4:75:be:58:fc:d1:73:4c:34:89:00: ac:9c:7d:be:93:7c:6a:1d:52:e4:2a:ae:b4:55:a6: 49:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DE:88:2C:B1:16:44:55:54:0C:72:DB:5F:30:6E:47:C0:3B:0F:BB X509v3 Authority Key Identifier: keyid:84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:20:43:03:3d:dc:87:ca:71:89:c2:4d:63:51:74:ff:c6:1e: fa:b4:25:66:04:2d:67:81:99:70:99:29:2c:4b:e4:d5:ad:7f: 15:0c:a1:9e:b3:ef:67:11:87:27:7d:5f:89:5c:24:a9:d7:8e: d6:aa:3c:67:77:ba:ce:fb:e7:9b:23:ef:4a:db:e0:0f:cd:ab: 2a:62:0a:51:72:9e:3e:5c:1a:15:44:3a:11:ef:56:07:11:a3: 52:70:c4:86:3b:78:7d:04:f7:b2:3a:72:78:67:ae:4c:64:e0: 0a:ec:b8:62:5f:68:5d:37:c8:d0:da:5a:52:0a:a2:8e:43:82: aa:34:67:48:2c:a3:0d:5e:50:6d:96:ea:b4:f5:4f:9a:ab:4b: 95:7e:d5:76:82:35:16:85:77:af:07:bc:b3:bf:d6:af:06:84: d1:00:9b:40:dd:ef:b4:d4:59:c0:d3:42:e2:6f:2e:13:76:76: d7:cc:c8:4c:18:84:4c:6d:f1:6e:36:65:f5:86:df:e1:4e:6b: 43:2d:5c:57:08:bc:6c:05:db:f9:5f:21:ec:79:7b:0c:b1:4c: c2:0c:5b:6b:e3:b2:ff:b9:6c:1a:6d:ba:95:ab:9b:93:b5:9a: 28:52:7d:9e:b2:09:32:b0:66:0c:13:0a:43:27:98:03:24:a6: 70:73:5e:06 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUOh4zYlQnD5yH9GRjI4jvfdaiTaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0 MEIyQjZCNTAeFw0yNTA2MjkxMDQzMTVaFw0yNTA2MzAxNDQ1MTVaMDMxMTAvBgNV BAMTKEYxREU4ODJDQjExNjQ0NTU1NDBDNzJEQjVGMzA2RTQ3QzAzQjBGQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYoC03QaCmsZopyKC8IhniUE8z jThQCK16Aud4VocRw4X2YVFbhTpIX/8D+turZlxN86XaksdIIeHGAkVGe8VKYMcw 2CQNH4iOOUOGJff4HQne0wJxcGEKy5Mdir5wgqfk4vl55YXOuDJCyCzPlPMsHQWw PaK77D4r/yxqVAF5fa/RlSmP8UqUZxJfLKUHeyWx+vytN0M1KTp7kG89XYN5mI3o 4d/+/SpuSRf6eRlaAnL92nR7t8/mylkXhXig6QxEQQef99HntoY/fPri5xJb6Ysv 4IF/S+4nQ/iLoYTa0Tltf4bUdb5Y/NFzTDSJAKycfb6TfGodUuQqrrRVpkkzAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU8d6ILLEWRFVUDHLbXzBuR8A7D7swHwYDVR0j BBgwFoAUhHE4tUAYMLibUkA8d3cYu0CytrUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzQvODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0MEIyQjZCNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0MEIy QjZCNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03 Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvNC84NDcxMzhCNTQwMTgzMEI4OUI1 MjQwM0M3Nzc3MThCQjQwQjJCNkI1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyBDAz3ch8pxicJNY1F0 /8Ye+rQlZgQtZ4GZcJkpLEvk1a1/FQyhnrPvZxGHJ31fiVwkqdeO1qo8Z3e6zvvn myPvStvgD82rKmIKUXKePlwaFUQ6Ee9WBxGjUnDEhjt4fQT3sjpyeGeuTGTgCuy4 Yl9oXTfI0NpaUgqijkOCqjRnSCyjDV5QbZbqtPVPmqtLlX7VdoI1FoV3rwe8s7/W rwaE0QCbQN3vtNRZwNNC4m8uE3Z218zITBiETG3xbjZl9Ybf4U5rQy1cVwi8bAXb +V8h7Hl7DLFMwgxba+Oy/7lsGm26laubk7WaKFJ9nrIJMrBmDBMKQyeYAySmcHNe Bg== -----END CERTIFICATE-----Generated at Mon Jun 30 04:37:32 2025 by rpki-client