$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft File: B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft (raw, json) Hash identifier: y2IoPhx5v93O9YKorpkmsQ71u62CFmTblPoXSVbSkf0= Subject key identifier: E8:15:68:FA:37:53:81:5E:81:81:66:A8:B9:00:CD:39:AE:B7:6F:7D Authority key identifier: B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65 Certificate issuer: /CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65 Certificate serial: 22FC6CC551CA5608D50721E64116905B8A36A2A7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft Manifest number: 46 Signing time: Sat 23 Aug 2025 02:43:50 +0000 Manifest this update: Sat 23 Aug 2025 02:38:50 +0000 Manifest next update: Sun 24 Aug 2025 05:32:50 +0000 Files and hashes: 1: B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl (hash: RTi42yTEhh6J21wWrgnuzZ95D9F1G3oja4mELm7CYsk=) 2: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: pe/tp2bLBPulUkbhZe9b5ATBM6Rh5HMZWo4IJTXGPDU=) 3: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: tIjYpQd9GyWainiE9GzQFbd7ZqDFGn1arDb1AExxerU=) 4: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: ikPIiFRhFNPp4wzJn8w9YCg2eDdJG03INaF7Jeb4D9A=) 5: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: t/2Kihb52wxLH3GVF+LrphldGHxVkV2gtesMFke+X4A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:fc:6c:c5:51:ca:56:08:d5:07:21:e6:41:16:90:5b:8a:36:a2:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65 Validity Not Before: Aug 23 02:38:50 2025 GMT Not After : Aug 24 05:32:50 2025 GMT Subject: CN=E81568FA3753815E818166A8B900CD39AEB76F7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e2:24:29:a3:6a:ce:3c:7e:ab:4c:3e:60:06: 8d:f6:84:d6:c6:e5:b9:8c:44:2b:45:08:9d:b5:b9: 4c:3c:4e:70:88:e3:73:58:f1:9b:be:e6:78:e6:cf: df:62:72:c7:79:ce:b1:be:1e:f2:63:2d:42:bc:56: 50:02:41:a6:1d:dc:3b:f3:6c:72:51:b5:d9:e3:9b: a6:13:2d:70:8c:8c:80:42:a7:e3:d6:3b:ba:04:0f: 9f:22:9c:f3:c0:46:11:fe:fb:4c:ea:be:e3:90:8c: 93:e4:a0:87:8e:14:88:4a:9c:c1:3b:be:f4:2f:a7: 16:69:01:db:66:e2:63:f3:f4:1f:0c:dd:38:82:05: 23:6d:96:06:4c:31:09:ce:2e:68:79:8b:06:1b:f2: 29:cf:28:f7:42:d9:e4:60:5c:00:6e:b7:9f:e4:40: 32:e4:ac:42:42:69:f9:42:13:d0:cf:a8:da:57:4f: c1:67:70:27:0e:63:48:54:03:a9:75:79:3d:26:76: b2:93:80:6b:d2:f5:6d:46:0d:1b:2a:6d:a8:9a:d3: 62:26:5a:28:55:0b:3e:e7:67:56:76:d6:04:32:10: a7:9c:0c:53:bb:c9:92:88:5a:08:b9:70:5b:16:6a: fc:97:01:f9:f3:da:ef:98:b1:c7:06:6e:41:27:72: ef:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:15:68:FA:37:53:81:5E:81:81:66:A8:B9:00:CD:39:AE:B7:6F:7D X509v3 Authority Key Identifier: keyid:B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:07:2a:c4:d1:86:ac:fc:e4:9b:72:a3:24:70:d2:20:57:b2: d4:b9:f5:93:ad:9e:8d:36:bf:83:50:55:5d:b9:0f:98:67:59: 60:f8:f8:4d:c6:29:ad:96:ed:ef:20:94:9b:c5:44:f7:c3:a2: bd:bf:e6:13:29:e0:bd:d5:e3:2a:01:52:63:dc:4c:94:b7:87: 40:6c:0d:b2:bb:63:4b:bb:33:b0:23:d0:b1:55:de:4a:0b:68: 82:d9:65:39:8b:ab:46:46:98:c6:2d:86:b8:23:10:46:53:79: 33:96:67:66:32:af:1d:6b:85:be:c6:e4:40:19:4f:07:87:e5: 00:af:05:90:14:b1:61:00:9e:04:9d:c1:6a:bb:c8:e0:02:f3: 0a:aa:33:e5:b5:c9:f2:93:a9:cb:99:f9:c0:22:c0:68:38:36: 59:99:5e:c9:32:9a:60:f9:74:58:ea:1f:40:c4:d8:3e:08:55: f8:25:10:a5:64:7d:e6:18:0e:88:84:4f:17:c7:99:b4:84:fe: fb:63:88:86:ae:1f:f1:01:da:9b:77:b3:68:f6:14:87:e4:dd: a6:a6:01:af:1b:d0:ab:7a:3f:24:76:46:cd:90:f2:65:17:41: db:1c:16:cb:b9:d4:bf:84:df:c9:19:6e:12:15:57:13:28:87: e6:c8:41:56 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUIvxsxVHKVgjVByHmQRaQW4o2oqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERC RkQ2OEQ2NTAeFw0yNTA4MjMwMjM4NTBaFw0yNTA4MjQwNTMyNTBaMDMxMTAvBgNV BAMTKEU4MTU2OEZBMzc1MzgxNUU4MTgxNjZBOEI5MDBDRDM5QUVCNzZGN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm4iQpo2rOPH6rTD5gBo32hNbG 5bmMRCtFCJ21uUw8TnCI43NY8Zu+5njmz99icsd5zrG+HvJjLUK8VlACQaYd3Dvz bHJRtdnjm6YTLXCMjIBCp+PWO7oED58inPPARhH++0zqvuOQjJPkoIeOFIhKnME7 vvQvpxZpAdtm4mPz9B8M3TiCBSNtlgZMMQnOLmh5iwYb8inPKPdC2eRgXABut5/k QDLkrEJCaflCE9DPqNpXT8FncCcOY0hUA6l1eT0mdrKTgGvS9W1GDRsqbaia02Im WihVCz7nZ1Z21gQyEKecDFO7yZKIWgi5cFsWavyXAfnz2u+YsccGbkEncu+rAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU6BVo+jdTgV6BgWaouQDNOa63b30wHwYDVR0j BBgwFoAUtkeeCQSzAZdbGdK/9Cvgjb/WjWUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzkvQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERCRkQ2OEQ2NS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERCRkQ2 OEQ2NS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03 Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvOS9CNjQ3OUUwOTA0QjMwMTk3NUIx OUQyQkZGNDJCRTA4REJGRDY4RDY1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQcqxNGGrPzkm3KjJHDS IFey1Ln1k62ejTa/g1BVXbkPmGdZYPj4TcYprZbt7yCUm8VE98Oivb/mEyngvdXj KgFSY9xMlLeHQGwNsrtjS7szsCPQsVXeSgtogtllOYurRkaYxi2GuCMQRlN5M5Zn ZjKvHWuFvsbkQBlPB4flAK8FkBSxYQCeBJ3BarvI4ALzCqoz5bXJ8pOpy5n5wCLA aDg2WZleyTKaYPl0WOofQMTYPghV+CUQpWR95hgOiIRPF8eZtIT++2OIhq4f8QHa m3ezaPYUh+TdpqYBrxvQq3o/JHZGzZDyZRdB2xwWy7nUv4TfyRluEhVXEyiH5shB Vg== -----END CERTIFICATE-----Generated at Sat Aug 23 19:51:27 2025 by rpki-client