$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft File: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft (raw, json) Hash identifier: 1Vg3HJlJxGfSdVe4yGVksSadwiN53GKsWbEvmGht2K4= Subject key identifier: 6D:5A:40:39:23:0D:B9:44:27:E4:A5:88:59:43:9F:56:1F:05:2E:2F Authority key identifier: 72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 Certificate issuer: /CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Certificate serial: 17C2078254E4FB3199C433FA138969CC247A7907 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft Manifest number: 53 Signing time: Sat 28 Jun 2025 14:21:30 +0000 Manifest this update: Sat 28 Jun 2025 14:16:30 +0000 Manifest next update: Sun 29 Jun 2025 18:11:30 +0000 Files and hashes: 1: 326131333a363134303a3a2f32392d3332203d3e203331313834.roa (hash: HEAzsbwZSQMPtZWHDUG9J3+dKm/03SetBs7lrO1nkwI=) 2: 3139332e32322e3235332e302f32342d3234203d3e203331313834.roa (hash: WrMYNrMKiwcHb7Layep1L0ANnPM7z3AEErZKMOJmYxg=) 3: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl (hash: HWU1s0nHQ8VKMwfxyZuZ/fVSGAY7yrHsQI7o7yiYyfA=) 4: 3139352e37342e34302e302f32322d3234203d3e203331313834.roa (hash: OWTrG12il6+R+m95Ctsd+LQNgEyVIDW3AMDlydaSO3g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c2:07:82:54:e4:fb:31:99:c4:33:fa:13:89:69:cc:24:7a:79:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1 Validity Not Before: Jun 28 14:16:30 2025 GMT Not After : Jun 29 18:11:30 2025 GMT Subject: CN=6D5A4039230DB94427E4A58859439F561F052E2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:d0:aa:b6:7e:8d:4c:75:40:49:d7:73:dc: e4:e2:4a:60:de:b4:34:7b:0c:7b:40:48:70:6d:f9: a2:14:1b:88:eb:30:55:2a:24:99:a2:e5:e6:ff:53: 1d:33:bc:59:94:84:49:4f:0b:28:b9:c6:77:49:04: 8b:1a:f5:ec:5d:90:97:2f:10:a1:32:8c:0f:39:a8: e2:66:44:75:33:42:43:05:bd:e2:85:f2:ca:5f:1d: 8f:1b:15:d1:4f:41:40:7d:d2:39:25:ed:31:e2:22: 1a:16:6d:70:ec:f7:b9:40:0e:46:ac:e4:13:bf:1f: 22:2b:7f:fe:fe:0d:e5:9c:dc:e6:17:7b:0e:33:a0: e5:49:20:9b:61:e0:c2:93:8a:94:bc:68:71:3c:f1: 41:45:6e:68:bd:58:a7:ab:f4:3d:76:6e:ce:c6:0c: 63:d1:b0:da:a5:0b:e3:3a:de:1d:89:0a:ca:9f:3d: 07:dc:22:72:7f:a4:40:e2:8a:dc:ed:6d:85:5d:08: 7d:2a:0f:cb:f8:4b:b1:93:a3:b0:ff:90:59:3b:50: 6a:3e:46:1a:6c:6f:f6:b4:9c:12:49:81:32:cd:51: f7:5a:a6:26:c2:e1:a6:b1:9c:6a:80:dc:62:0c:4f: 32:59:b8:9f:b3:cd:33:7f:96:92:bc:44:b0:f5:eb: 2d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5A:40:39:23:0D:B9:44:27:E4:A5:88:59:43:9F:56:1F:05:2E:2F X509v3 Authority Key Identifier: keyid:72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:1e:3c:1a:65:ea:3f:57:89:a6:1f:fa:fb:a0:9d:7a:01:22: 28:0a:c5:b5:7b:0e:a2:21:35:b3:4e:c9:ab:15:cb:e4:86:f6: 31:56:83:3a:60:6f:55:10:94:53:6e:be:86:6c:da:59:c1:d4: 60:90:84:38:14:9e:8e:18:c3:07:8d:e7:e4:1d:d8:0b:09:64: 1d:f1:cc:ff:1a:75:18:9c:0d:9e:94:0e:cf:89:aa:50:a1:ea: 32:30:a9:56:bc:16:6a:5a:5e:c6:1d:ae:29:02:91:58:0a:84: 46:ca:c3:a3:95:2b:ac:b7:77:32:f9:80:f8:2d:ab:90:5a:98: c8:d4:a8:e1:04:c9:64:d0:9b:c4:d8:3c:1c:be:11:15:ed:89: 77:6a:01:22:94:1f:87:81:fc:7c:39:c6:8f:32:4b:85:4b:b4: 89:a6:ab:d3:0f:61:33:32:6a:f0:bf:7c:07:68:a0:4f:0c:ec: 0f:d6:0e:fd:fd:d8:b7:42:3f:77:39:22:c4:63:62:ef:9d:59: d7:81:ed:fd:bf:b2:43:39:0f:fd:80:50:ff:e2:36:f4:22:34: a7:66:ee:d7:44:fd:20:22:ed:51:08:4d:b0:c4:38:13:41:29: b6:47:d6:e7:b5:f8:f0:47:76:cd:9a:7c:ed:49:0a:59:e3:43: cd:a2:4e:87 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUF8IHglTk+zGZxDP6E4lpzCR6eQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJmM2VlMTY5ZjliZDcxZjc4YTQyZDFhNzJmZTBmMmE4 MjQ4MjJkMTAeFw0yNTA2MjgxNDE2MzBaFw0yNTA2MjkxODExMzBaMDMxMTAvBgNV BAMTKDZENUE0MDM5MjMwREI5NDQyN0U0QTU4ODU5NDM5RjU2MUYwNTJFMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBj9Cqtn6NTHVASddz3OTiSmDe tDR7DHtASHBt+aIUG4jrMFUqJJmi5eb/Ux0zvFmUhElPCyi5xndJBIsa9exdkJcv EKEyjA85qOJmRHUzQkMFveKF8spfHY8bFdFPQUB90jkl7THiIhoWbXDs97lADkas 5BO/HyIrf/7+DeWc3OYXew4zoOVJIJth4MKTipS8aHE88UFFbmi9WKer9D12bs7G DGPRsNqlC+M63h2JCsqfPQfcInJ/pEDiitztbYVdCH0qD8v4S7GTo7D/kFk7UGo+ Rhpsb/a0nBJJgTLNUfdapibC4aaxnGqA3GIMTzJZuJ+zzTN/lpK8RLD16y1BAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUbVpAOSMNuUQn5KWIWUOfVh8FLi8wHwYDVR0j BBgwFoAUcvPuFp+b1x94pC0acv4PKoJIItEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjgyYjVlMDAtMmFjMy00OWYxLWEyOWItMjZhNWZkZjBm YTQxLzAvNzJGM0VFMTY5RjlCRDcxRjc4QTQyRDFBNzJGRTBGMkE4MjQ4MjJEMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2N2UHVGcC1iMXg5NHBDMGFjdjRQS29K SUl0RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yODJiNWUwMC0y YWMzLTQ5ZjEtYTI5Yi0yNmE1ZmRmMGZhNDEvMC83MkYzRUUxNjlGOUJENzFGNzhB NDJEMUE3MkZFMEYyQTgyNDgyMkQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFR48GmXqP1eJph/6+6Cd egEiKArFtXsOoiE1s07JqxXL5Ib2MVaDOmBvVRCUU26+hmzaWcHUYJCEOBSejhjD B43n5B3YCwlkHfHM/xp1GJwNnpQOz4mqUKHqMjCpVrwWalpexh2uKQKRWAqERsrD o5UrrLd3MvmA+C2rkFqYyNSo4QTJZNCbxNg8HL4RFe2Jd2oBIpQfh4H8fDnGjzJL hUu0iaar0w9hMzJq8L98B2igTwzsD9YO/f3Yt0I/dzkixGNi751Z14Ht/b+yQzkP /YBQ/+I29CI0p2bu10T9ICLtUQhNsMQ4E0EptkfW57X48Ed2zZp87UkKWeNDzaJO hw== -----END CERTIFICATE-----Generated at Sat Jun 28 22:32:51 2025 by rpki-client