$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft File: 75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft (raw, json) Hash identifier: cTjMpb0JHOVCWScyXHpg5aZsK16InO4C/RMl5f/JMsQ= Subject key identifier: D1:AE:03:4F:E5:AF:9F:49:63:C0:FD:1A:51:B8:2A:15:BD:97:93:00 Authority key identifier: 75:D5:C2:EC:D3:0F:68:0D:B5:D1:69:87:F4:57:FE:B4:5D:8B:A9:70 Certificate issuer: /CN=75D5C2ECD30F680DB5D16987F457FEB45D8BA970 Certificate serial: 0A3E38CF3331BB50BB5470FCDDE4EC663D958CAC Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft Manifest number: 019C Signing time: Sun 29 Jun 2025 11:50:49 +0000 Manifest this update: Sun 29 Jun 2025 11:45:49 +0000 Manifest next update: Mon 30 Jun 2025 14:11:49 +0000 Files and hashes: 1: 5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.cer (hash: s62YWKeFlE1bDzhZO2SkyAxMHud2ywPfovj8Y4ybUvA=) 2: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: DeNLRbWhS9WKIEvlMBYaR+2p0F2qMHWNHV7i4if0F4Q=) 3: 326130363a396634313a3a2f33322d3438203d3e20323135303835.roa (hash: ZKnqXWpL638YuDEQpZ7F3g5bqELtKVJQB4+caqr2NiE=) 4: 75D5C2ECD30F680DB5D16987F457FEB45D8BA970.crl (hash: DKi+4HU2sboOsydJ2GVlOiQXsE6oKOD/gO34u0A1caA=) 5: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: +oN/MdgSycgZ3iltmrx2LnazIG402VP1RhBuB1dJOWQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:3e:38:cf:33:31:bb:50:bb:54:70:fc:dd:e4:ec:66:3d:95:8c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75D5C2ECD30F680DB5D16987F457FEB45D8BA970 Validity Not Before: Jun 29 11:45:49 2025 GMT Not After : Jun 30 14:11:49 2025 GMT Subject: CN=D1AE034FE5AF9F4963C0FD1A51B82A15BD979300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:67:76:ca:31:ff:74:05:63:ab:17:3d:4e:91: 6c:e3:7d:c8:e7:08:c9:06:8b:28:8a:ff:4a:b2:30: 4b:7b:e2:98:ba:72:b7:48:99:ca:63:b7:c1:da:11: 3b:eb:99:23:d2:1d:79:b7:7f:46:d1:b7:42:c1:78: eb:3b:89:bd:88:fa:50:9a:cc:6d:b4:e2:e0:d4:66: 09:a7:83:67:42:14:14:bc:ba:d6:b0:45:d3:57:92: d9:01:c9:26:cd:d9:98:47:f0:1c:9f:14:f3:cf:11: 82:59:d9:23:10:4b:02:de:6c:74:ee:69:01:e9:df: d5:66:89:eb:85:e0:f6:a7:33:44:31:42:d4:c7:c6: d8:f2:8e:53:54:2a:0d:5f:28:84:d0:85:97:9f:b5: b0:49:3e:73:38:ab:61:0f:26:fc:99:71:78:e1:24: 77:ec:7b:20:d6:d6:fd:a0:5d:93:89:af:44:56:ce: e2:0e:78:86:af:85:b0:2c:b2:c8:b2:35:21:f2:74: 5c:94:b2:7a:82:5c:fd:4c:03:2a:63:1c:9c:13:4a: 0a:58:5e:42:dd:97:9c:d4:4b:c0:14:16:7b:5f:1b: df:d5:55:3d:d9:bf:69:49:27:ad:53:01:33:44:e8: 6d:fe:54:e4:fd:83:06:d8:f7:7c:ea:85:e1:b6:90: a2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AE:03:4F:E5:AF:9F:49:63:C0:FD:1A:51:B8:2A:15:BD:97:93:00 X509v3 Authority Key Identifier: keyid:75:D5:C2:EC:D3:0F:68:0D:B5:D1:69:87:F4:57:FE:B4:5D:8B:A9:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:5b:6e:69:ef:57:5b:32:f8:51:ce:cc:46:1c:77:2a:4e:67: 2c:77:85:e5:3c:eb:a2:44:fc:a6:2d:53:8f:0a:1b:fb:69:24: 40:f5:88:30:af:7d:59:db:43:23:5a:da:40:2c:7e:29:a6:53: 93:10:a1:12:ad:5f:a7:ce:a1:4c:b7:08:21:9c:5e:02:10:d0: f8:a0:55:31:26:65:c4:a5:ce:0a:f3:f8:16:c8:73:57:b9:ea: b3:eb:c0:16:f0:f7:aa:e8:fb:2b:ab:fb:b7:43:65:c4:49:ee: a1:d3:8b:24:54:f4:9c:f7:99:ac:18:d5:50:22:ad:e2:8a:b0: ca:4e:f3:e3:9a:cf:83:17:e3:ac:45:a8:09:93:27:ba:94:5b: f2:40:63:b3:bd:cc:45:18:37:2d:13:32:e9:a6:71:39:26:80: 38:8c:16:2f:47:5d:ef:c4:d9:63:a4:2e:9f:4e:5b:44:87:aa: 35:06:bb:ed:55:f2:81:5a:19:28:6a:d3:96:42:e5:41:e4:66: 9c:d6:00:9a:a5:e5:11:f1:9f:42:21:b7:68:cc:d0:27:75:f5: 94:87:65:be:82:a6:b0:d8:ba:2a:96:8b:8b:b2:08:67:b6:32: 2a:6a:48:68:aa:fd:92:17:78:4c:f0:86:60:4a:be:92:93:54: ad:a7:a2:e9 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUCj44zzMxu1C7VHD83eTsZj2VjKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVENUMyRUNEMzBGNjgwREI1RDE2OTg3RjQ1N0ZFQjQ1 RDhCQTk3MDAeFw0yNTA2MjkxMTQ1NDlaFw0yNTA2MzAxNDExNDlaMDMxMTAvBgNV BAMTKEQxQUUwMzRGRTVBRjlGNDk2M0MwRkQxQTUxQjgyQTE1QkQ5NzkzMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZ3bKMf90BWOrFz1OkWzjfcjn CMkGiyiK/0qyMEt74pi6crdImcpjt8HaETvrmSPSHXm3f0bRt0LBeOs7ib2I+lCa zG204uDUZgmng2dCFBS8utawRdNXktkBySbN2ZhH8ByfFPPPEYJZ2SMQSwLebHTu aQHp39VmieuF4PanM0QxQtTHxtjyjlNUKg1fKITQhZeftbBJPnM4q2EPJvyZcXjh JHfseyDW1v2gXZOJr0RWzuIOeIavhbAsssiyNSHydFyUsnqCXP1MAypjHJwTSgpY XkLdl5zUS8AUFntfG9/VVT3Zv2lJJ61TATNE6G3+VOT9gwbY93zqheG2kKIbAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU0a4DT+Wvn0ljwP0aUbgqFb2XkwAwHwYDVR0j BBgwFoAUddXC7NMPaA210WmH9Ff+tF2LqXAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzEvNzVENUMyRUNEMzBGNjgwREI1RDE2OTg3RjQ1N0ZFQjQ1RDhCQTk3MC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNzVENUMyRUNEMzBGNjgwREI1RDE2OTg3RjQ1N0ZFQjQ1RDhC QTk3MC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03 ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMS83NUQ1QzJFQ0QzMEY2ODBEQjVE MTY5ODdGNDU3RkVCNDVEOEJBOTcwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFtuae9XWzL4Uc7MRhx3 Kk5nLHeF5TzrokT8pi1Tjwob+2kkQPWIMK99WdtDI1raQCx+KaZTkxChEq1fp86h TLcIIZxeAhDQ+KBVMSZlxKXOCvP4FshzV7nqs+vAFvD3quj7K6v7t0NlxEnuodOL JFT0nPeZrBjVUCKt4oqwyk7z45rPgxfjrEWoCZMnupRb8kBjs73MRRg3LRMy6aZx OSaAOIwWL0dd78TZY6Qun05bRIeqNQa77VXygVoZKGrTlkLlQeRmnNYAmqXlEfGf QiG3aMzQJ3X1lIdlvoKmsNi6KpaLi7IIZ7YyKmpIaKr9khd4TPCGYEq+kpNUraei 6Q== -----END CERTIFICATE-----Generated at Sun Jun 29 22:33:55 2025 by rpki-client