$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.mft File: F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.mft (raw, json) Hash identifier: T/6aj5iStoNlTZAwkPPUS1jkufZbOweGUYMx82OpqSM= Subject key identifier: FC:97:C8:C1:43:E6:21:73:AF:F9:5B:0D:36:29:AE:A7:1D:EC:3F:2A Authority key identifier: F8:17:E6:F7:FB:2A:DE:48:7E:A7:B5:C6:D3:6B:E9:D4:5D:69:D1:6B Certificate issuer: /CN=F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B Certificate serial: 3C4C38DD0A6F236C89419D935BEFCAB99F6972F7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.mft Manifest number: 04AF Signing time: Sun 29 Jun 2025 10:48:15 +0000 Manifest this update: Sun 29 Jun 2025 10:43:15 +0000 Manifest next update: Mon 30 Jun 2025 11:19:15 +0000 Files and hashes: 1: F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.crl (hash: 5JO+Cswq52et5yfFuXDOzt8Kgpjb+wTyxDkIJhHaQhs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 11:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:4c:38:dd:0a:6f:23:6c:89:41:9d:93:5b:ef:ca:b9:9f:69:72:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B Validity Not Before: Jun 29 10:43:15 2025 GMT Not After : Jun 30 11:19:15 2025 GMT Subject: CN=FC97C8C143E62173AFF95B0D3629AEA71DEC3F2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:b8:ad:f4:b2:e3:dd:be:6c:30:c3:74:45:24: ec:e4:9f:b9:1c:41:d2:28:9f:89:6f:06:8e:19:76: 43:f8:61:b0:aa:6d:c5:ea:42:c0:5f:39:70:43:26: 5b:72:96:08:1b:68:f4:14:e7:2c:1a:3b:a7:8c:a0: bf:a6:ef:b3:e3:14:ae:82:31:c0:98:32:a7:91:b1: 79:e1:f0:30:57:c7:fd:d4:3a:10:29:98:24:fe:c7: f3:75:b0:e0:1a:af:4f:a9:78:f8:4d:99:b4:ab:0f: b3:d8:bf:c6:7b:71:60:93:ca:22:7a:6a:0e:24:6f: fc:4b:e3:bb:b9:7f:f5:ec:61:ba:8c:c2:f7:b5:e5: 0e:ae:82:cf:f6:35:b0:14:57:85:a8:69:7c:0d:7f: a2:0d:80:56:72:eb:66:c1:6b:f7:b7:1e:c5:5f:50: 51:fb:8b:5e:e3:7f:8b:6c:75:ed:06:76:54:e2:a8: aa:b9:60:9b:cf:83:a3:d5:92:89:36:96:a3:be:ea: be:b4:52:c3:33:59:da:c5:66:44:45:da:37:b0:90: 44:89:73:a9:02:9c:02:35:17:9b:a3:f0:c4:1c:77: d6:4b:fb:bb:83:2a:36:fd:25:48:a2:f4:49:8d:79: db:c0:11:5e:1d:a9:2f:29:98:c3:51:19:65:76:ee: a2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:97:C8:C1:43:E6:21:73:AF:F9:5B:0D:36:29:AE:A7:1D:EC:3F:2A X509v3 Authority Key Identifier: keyid:F8:17:E6:F7:FB:2A:DE:48:7E:A7:B5:C6:D3:6B:E9:D4:5D:69:D1:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:67:a1:9c:c7:07:dd:65:65:ab:05:53:65:17:e2:45:51:f8: 57:02:63:df:ac:93:07:ac:11:50:80:d4:53:be:2c:4f:09:6c: 7e:87:d9:71:0c:d3:05:fd:cb:64:f8:4d:68:33:5b:04:78:d8: 76:5b:32:00:98:02:9f:71:e6:b6:93:d1:8d:3e:e6:b5:b5:f3: 22:1d:c7:75:bc:98:9e:64:8a:68:11:9b:38:92:52:54:fb:c4: 87:bb:0c:65:f5:8a:c3:43:24:e3:dc:12:94:7e:b8:1c:d0:e9: 9b:5b:5d:52:67:e4:d6:cc:c0:47:e4:45:c8:38:54:2a:a9:fc: 24:9d:c1:57:e6:65:f5:09:20:cc:de:97:55:96:1a:d4:39:ef: 65:2c:88:3b:ce:ad:54:96:70:a1:1f:41:52:1a:fd:d2:00:d6: 51:94:e0:d4:c6:0a:9c:09:6b:38:f7:02:23:dc:8e:c3:de:33: 73:be:a9:e2:a9:d0:ca:e2:d5:9c:1a:8e:4e:54:f7:38:2b:29: 6d:24:c2:87:ef:56:6b:f9:0c:88:bf:ec:da:7a:30:84:e0:4f: e9:0f:98:e1:81:d5:8b:62:25:6a:e7:db:5c:0e:f0:4d:7e:4f: 80:c7:6b:da:a3:f3:de:aa:c5:e4:53:7a:9f:15:e2:c8:69:31: 14:99:79:4e -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUPEw43QpvI2yJQZ2TW+/KuZ9pcvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgxN0U2RjdGQjJBREU0ODdFQTdCNUM2RDM2QkU5RDQ1 RDY5RDE2QjAeFw0yNTA2MjkxMDQzMTVaFw0yNTA2MzAxMTE5MTVaMDMxMTAvBgNV BAMTKEZDOTdDOEMxNDNFNjIxNzNBRkY5NUIwRDM2MjlBRUE3MURFQzNGMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9uK30suPdvmwww3RFJOzkn7kc QdIon4lvBo4ZdkP4YbCqbcXqQsBfOXBDJltylggbaPQU5ywaO6eMoL+m77PjFK6C McCYMqeRsXnh8DBXx/3UOhApmCT+x/N1sOAar0+pePhNmbSrD7PYv8Z7cWCTyiJ6 ag4kb/xL47u5f/XsYbqMwve15Q6ugs/2NbAUV4WoaXwNf6INgFZy62bBa/e3HsVf UFH7i17jf4tsde0GdlTiqKq5YJvPg6PVkok2lqO+6r60UsMzWdrFZkRF2jewkESJ c6kCnAI1F5uj8MQcd9ZL+7uDKjb9JUii9EmNedvAEV4dqS8pmMNRGWV27qLBAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU/JfIwUPmIXOv+VsNNimupx3sPyowHwYDVR0j BBgwFoAU+Bfm9/sq3kh+p7XG02vp1F1p0WswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzQvRjgxN0U2RjdGQjJBREU0ODdFQTdCNUM2RDM2QkU5RDQ1RDY5RDE2Qi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvRjgxN0U2RjdGQjJBREU0ODdFQTdCNUM2RDM2QkU5RDQ1RDY5 RDE2Qi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03 Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvNC9GODE3RTZGN0ZCMkFERTQ4N0VB N0I1QzZEMzZCRTlENDVENjlEMTZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGehnMcH3WVlqwVTZRfi RVH4VwJj36yTB6wRUIDUU74sTwlsfofZcQzTBf3LZPhNaDNbBHjYdlsyAJgCn3Hm tpPRjT7mtbXzIh3HdbyYnmSKaBGbOJJSVPvEh7sMZfWKw0Mk49wSlH64HNDpm1td Umfk1szAR+RFyDhUKqn8JJ3BV+Zl9QkgzN6XVZYa1DnvZSyIO86tVJZwoR9BUhr9 0gDWUZTg1MYKnAlrOPcCI9yOw94zc76p4qnQyuLVnBqOTlT3OCspbSTCh+9Wa/kM iL/s2nowhOBP6Q+Y4YHVi2IlaufbXA7wTX5PgMdr2qPz3qrF5FN6nxXiyGkxFJl5 Tg== -----END CERTIFICATE-----Generated at Sun Jun 29 23:40:48 2025 by rpki-client