$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft File: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft (raw, json) Hash identifier: FNKiG5aC6WtQmP2ypBu+6FDFGCXKeuhHorC2ePByS4k= Subject key identifier: 12:1D:34:71:0C:CD:73:2D:65:84:C0:A4:0F:89:47:D8:B1:13:C3:87 Authority key identifier: B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C Certificate issuer: /CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C Certificate serial: 25BAF64A64FD0D3F6559C5C6D54A1F571D3722AE Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft Manifest number: 17 Signing time: Sat 23 Aug 2025 04:11:59 +0000 Manifest this update: Sat 23 Aug 2025 04:06:59 +0000 Manifest next update: Sun 24 Aug 2025 04:41:59 +0000 Files and hashes: 1: 326130623a396534373a666666663a3a2f34382d3438203d3e20323132333936.roa (hash: 75MQYcrJ2fBMIggMxPD0oPJNZ5TBWMJfZ5gCQQu+izk=) 2: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl (hash: CT8c1hlqSviqewLs+6AEAXvVpladHyy1G9pm94fbMKs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 04:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ba:f6:4a:64:fd:0d:3f:65:59:c5:c6:d5:4a:1f:57:1d:37:22:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C Validity Not Before: Aug 23 04:06:59 2025 GMT Not After : Aug 24 04:41:59 2025 GMT Subject: CN=121D34710CCD732D6584C0A40F8947D8B113C387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b2:72:02:6d:31:a1:63:a1:b1:83:9b:a0:83: 08:2c:85:fc:97:04:40:ce:34:68:78:2c:4e:80:0f: 72:08:17:d2:66:4b:ef:c7:30:0b:eb:84:a8:95:93: ba:12:07:90:96:5a:29:c6:bb:a6:78:81:08:44:66: bd:70:b4:f0:7c:79:84:6e:8d:7d:ef:9c:1e:e6:d2: fd:f8:d8:55:bb:5b:5f:b7:9a:a0:9f:83:8f:28:71: 98:31:90:17:60:c3:aa:2e:11:25:ab:0c:5d:87:bc: 10:57:72:77:af:a3:b5:d0:33:1a:88:d2:cf:b0:b0: 2a:b3:05:49:4f:d6:70:51:96:f0:87:79:d5:22:fa: 8c:02:8f:e3:a7:69:e8:f8:43:91:cd:fc:fa:10:5d: b6:af:6d:5d:db:12:24:7d:68:31:b8:f9:d1:8a:b2: e4:08:d4:e9:73:01:83:51:5c:5f:7e:15:d6:ff:e1: 62:7e:24:bc:ae:38:12:fa:cb:76:2c:1f:1a:44:f9: 17:ca:48:1c:f9:c2:b7:b9:e6:bb:38:e9:df:f1:41: 81:4d:48:b2:39:ed:82:b0:72:34:50:f6:93:13:11: 7b:ac:fc:17:1d:91:73:29:c8:07:28:ea:de:c9:98: 0d:db:d0:c1:83:5d:b6:4b:b1:a2:e1:89:d8:32:94: 96:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1D:34:71:0C:CD:73:2D:65:84:C0:A4:0F:89:47:D8:B1:13:C3:87 X509v3 Authority Key Identifier: keyid:B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:33:da:42:18:3e:69:7e:ff:90:da:e9:50:d7:32:de:17:e7: bf:f4:b9:fe:d2:be:8c:2f:ea:84:10:73:ce:43:85:40:8f:7a: 34:5f:f6:96:b4:dd:20:03:90:c9:17:7f:7c:17:9a:db:42:72: 4e:5c:03:a0:d7:4d:63:61:6a:75:7a:b8:fe:ec:06:bd:90:bb: 4d:32:70:6c:38:79:18:3b:88:12:d5:d2:a4:4c:3a:42:41:a3: 21:e1:b3:e6:08:b0:24:fc:d9:46:a1:5b:80:89:6d:36:96:70: 5d:e3:dd:76:1f:62:7c:e4:6c:7f:da:a6:a4:ac:1f:33:03:60: 13:ed:d3:69:62:db:08:b9:79:bb:6d:2b:8c:16:ae:2e:f0:0d: bc:3e:e1:da:73:33:47:07:27:16:66:35:d2:b6:0b:89:0d:69: 02:e2:ba:7f:03:41:a0:04:5c:11:26:74:3a:51:61:a8:48:bb: 40:0d:64:c0:d3:06:20:fe:ae:37:c4:c0:01:f3:6c:fe:6d:b7: 8c:20:5a:f6:f3:d9:f2:96:7f:55:05:39:9d:3d:49:26:b2:ca: 00:32:26:38:c1:6a:8e:de:e6:7a:52:9a:b7:83:b3:46:c2:c7: 87:48:42:e3:ff:bf:e0:3f:2e:63:b0:c8:30:d6:a7:87:86:d7: dc:19:4b:ea -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUJbr2SmT9DT9lWcXG1UofVx03Iq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFD Q0RFRTM1QzAeFw0yNTA4MjMwNDA2NTlaFw0yNTA4MjQwNDQxNTlaMDMxMTAvBgNV BAMTKDEyMUQzNDcxMENDRDczMkQ2NTg0QzBBNDBGODk0N0Q4QjExM0MzODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgsnICbTGhY6Gxg5uggwgshfyX BEDONGh4LE6AD3IIF9JmS+/HMAvrhKiVk7oSB5CWWinGu6Z4gQhEZr1wtPB8eYRu jX3vnB7m0v342FW7W1+3mqCfg48ocZgxkBdgw6ouESWrDF2HvBBXcnevo7XQMxqI 0s+wsCqzBUlP1nBRlvCHedUi+owCj+Onaej4Q5HN/PoQXbavbV3bEiR9aDG4+dGK suQI1OlzAYNRXF9+Fdb/4WJ+JLyuOBL6y3YsHxpE+RfKSBz5wre55rs46d/xQYFN SLI57YKwcjRQ9pMTEXus/BcdkXMpyAco6t7JmA3b0MGDXbZLsaLhidgylJYBAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUEh00cQzNcy1lhMCkD4lH2LETw4cwHwYDVR0j BBgwFoAUtfXsXFZ/1Im+c5AoYuvugcze41wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl OTUwLzUvQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFDQ0RFRTM1Qy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFDQ0RF RTM1Qy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMmNmOGJhNy1j YjAyLTQxOGItYmUwNC00ZDlmM2EwN2U5NTAvNS9CNUY1RUM1QzU2N0ZENDg5QkU3 MzkwMjg2MkVCRUU4MUNDREVFMzVDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjPaQhg+aX7/kNrpUNcy 3hfnv/S5/tK+jC/qhBBzzkOFQI96NF/2lrTdIAOQyRd/fBea20JyTlwDoNdNY2Fq dXq4/uwGvZC7TTJwbDh5GDuIEtXSpEw6QkGjIeGz5giwJPzZRqFbgIltNpZwXePd dh9ifORsf9qmpKwfMwNgE+3TaWLbCLl5u20rjBauLvANvD7h2nMzRwcnFmY10rYL iQ1pAuK6fwNBoARcESZ0OlFhqEi7QA1kwNMGIP6uN8TAAfNs/m23jCBa9vPZ8pZ/ VQU5nT1JJrLKADImOMFqjt7melKat4OzRsLHh0hC4/+/4D8uY7DIMNanh4bX3BlL 6g== -----END CERTIFICATE-----Generated at Sat Aug 23 22:48:47 2025 by rpki-client