$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft File: CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft (raw, json) Hash identifier: MRxRDK0D4d/bmCL4zm4nr/U6kcsfMHbNHkXtg6glYuQ= Subject key identifier: 39:C2:7A:3A:BC:11:7E:5B:CE:DD:A9:73:D3:AA:F5:57:E7:0A:6D:19 Authority key identifier: CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD Certificate issuer: /CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD Certificate serial: 672AC5981335AF09626C6415A489FE1790DAE05F Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft Manifest number: 0187 Signing time: Sun 29 Jun 2025 16:19:04 +0000 Manifest this update: Sun 29 Jun 2025 16:14:04 +0000 Manifest next update: Mon 30 Jun 2025 19:19:04 +0000 Files and hashes: 1: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: 4NAkvNhOgG+FdQOl5H1HgnY8A0ca/GD2rGJr4GFMtSI=) 2: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: ahz6gPUt4YrcLpOD9Ozfm8bYrgH1OTsLIpfe4cqXpMc=) 3: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: Q5gjl44KzFA6g8+tW8lygBoA3oaZ4qvSEamF1iUuuio=) 4: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: Nyn9oM7uD3t9zeyaIzVAMa0fIXr9id1B4aigY0eVgwU=) 5: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: wTqD67Uqf1W/idPthA4sHinaJ2FPLZ88IN640ixPrCU=) 6: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: vFXjegY0vnmzgiKwFkv4TNQvgCv0y7neNveGux2ZS+w=) 7: CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl (hash: M3LXTPkLBs/voB8IA5ysFK1HB9HIdP9Uh/tc/7RF59k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2a:c5:98:13:35:af:09:62:6c:64:15:a4:89:fe:17:90:da:e0:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD Validity Not Before: Jun 29 16:14:04 2025 GMT Not After : Jun 30 19:19:04 2025 GMT Subject: CN=39C27A3ABC117E5BCEDDA973D3AAF557E70A6D19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:06:3d:0c:59:89:6d:d9:81:d8:27:a9:b5:44: fd:4a:40:94:60:0f:7e:06:8a:2e:a8:a9:50:88:cd: 11:6f:74:32:28:a4:dc:4b:bd:b6:c8:d7:2c:b3:11: ae:ec:33:2c:0f:7d:5c:aa:08:3f:82:7d:6b:03:bc: fd:c1:f3:ee:22:0e:50:cd:6f:40:a7:f2:c4:a6:7d: 8f:ae:1a:70:14:97:e5:e5:21:d8:7a:2f:a0:d1:91: 3f:8b:97:9b:eb:ad:5a:c9:31:43:c3:f4:5e:9c:c2: 25:9b:c6:d6:0c:f0:a0:1c:0a:4e:1f:39:18:32:ef: 34:18:62:1c:7a:4c:58:ca:fa:ac:86:fa:82:b3:dd: 7d:1e:4b:65:a1:c8:aa:f4:02:2d:c1:4d:07:1c:5f: 4d:b8:e2:56:ce:41:df:b9:dc:f8:ef:48:52:39:06: 68:34:56:fd:7f:42:a5:74:0f:6d:2d:26:2b:e2:88: a6:ce:79:f0:66:df:72:da:a4:d2:8a:61:5e:ab:12: bc:3d:cc:18:7e:8b:36:62:3e:9a:bf:c8:8c:3d:1c: 52:02:9e:82:1b:e3:c7:6a:03:df:d1:c7:61:d1:6d: 31:43:6e:86:3f:13:4d:a5:aa:61:21:bd:0d:33:a2: 4e:9c:e6:64:a0:12:21:dc:94:6a:20:a1:21:35:2f: f5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C2:7A:3A:BC:11:7E:5B:CE:DD:A9:73:D3:AA:F5:57:E7:0A:6D:19 X509v3 Authority Key Identifier: keyid:CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:14:1a:ce:df:9e:10:12:f9:60:89:43:40:a5:81:ca:83:d8: 88:65:5f:92:46:11:86:e5:7b:e0:eb:69:90:aa:0b:a5:1d:a7: c3:db:8d:37:4e:9d:a0:b2:2b:97:0c:ed:49:00:be:8d:17:aa: 0e:f4:d4:17:57:5a:cc:2a:a3:23:45:bb:9d:ff:bf:76:64:49: 66:d3:cc:03:5f:81:1b:a2:32:51:91:25:36:9c:41:8d:c9:34: 51:52:41:5c:df:08:03:25:ce:42:de:97:c4:d6:4c:05:80:a5: f9:7d:07:62:b4:3e:9a:bb:d9:ff:4e:9b:03:2f:05:a2:a5:77: 55:b4:5b:46:e3:a0:74:48:34:88:b9:1c:5a:d0:6f:2f:18:b6: 7d:6e:41:fd:c0:94:38:cf:da:e4:bb:74:4f:1b:61:85:14:89: 2d:ea:8f:6d:9c:4d:6c:43:49:dd:8d:fe:e6:67:2e:86:5e:27: 6b:b6:b7:dd:bb:85:4a:d7:11:2e:36:ed:29:27:12:44:2a:ab: 0d:a3:ec:ca:87:e0:01:d5:fc:96:71:dd:38:d2:cf:a8:71:1f: c9:92:e7:28:94:04:cc:2b:91:07:0e:91:1c:39:c6:aa:f2:fc: e1:fa:2d:d4:5f:85:d9:05:c0:f7:cc:a4:38:ec:1b:a8:d1:2b: e2:2f:ab:ae -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUZyrFmBM1rwlibGQVpIn+F5Da4F8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgz Rjk1NTFDRDAeFw0yNTA2MjkxNjE0MDRaFw0yNTA2MzAxOTE5MDRaMDMxMTAvBgNV BAMTKDM5QzI3QTNBQkMxMTdFNUJDRUREQTk3M0QzQUFGNTU3RTcwQTZEMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVBj0MWYlt2YHYJ6m1RP1KQJRg D34Gii6oqVCIzRFvdDIopNxLvbbI1yyzEa7sMywPfVyqCD+CfWsDvP3B8+4iDlDN b0Cn8sSmfY+uGnAUl+XlIdh6L6DRkT+Ll5vrrVrJMUPD9F6cwiWbxtYM8KAcCk4f ORgy7zQYYhx6TFjK+qyG+oKz3X0eS2WhyKr0Ai3BTQccX0244lbOQd+53PjvSFI5 Bmg0Vv1/QqV0D20tJiviiKbOefBm33LapNKKYV6rErw9zBh+izZiPpq/yIw9HFIC noIb48dqA9/Rx2HRbTFDboY/E02lqmEhvQ0zok6c5mSgEiHclGogoSE1L/VHAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUOcJ6OrwRflvO3alz06r1V+cKbRkwHwYDVR0j BBgwFoAUzhtPQ2e2pV80ypgaDWynWD+VUc0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzEvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1NTFDRC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1 NTFDRC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvMS9DRTFCNEY0MzY3QjZBNTVGMzRD QTk4MUEwRDZDQTc1ODNGOTU1MUNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhQazt+eEBL5YIlDQKWB yoPYiGVfkkYRhuV74OtpkKoLpR2nw9uNN06doLIrlwztSQC+jReqDvTUF1dazCqj I0W7nf+/dmRJZtPMA1+BG6IyUZElNpxBjck0UVJBXN8IAyXOQt6XxNZMBYCl+X0H YrQ+mrvZ/06bAy8FoqV3VbRbRuOgdEg0iLkcWtBvLxi2fW5B/cCUOM/a5Lt0Txth hRSJLeqPbZxNbENJ3Y3+5mcuhl4na7a33buFStcRLjbtKScSRCqrDaPsyofgAdX8 lnHdONLPqHEfyZLnKJQEzCuRBw6RHDnGqvL84fot1F+F2QXA98ykOOwbqNEr4i+r rg== -----END CERTIFICATE-----Generated at Sun Jun 29 23:24:33 2025 by rpki-client