$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft File: B3F1737E90F240D7ABB33C72F84D71482FE62679.mft (raw, json) Hash identifier: nfH6bkf5KqxuKVfNsHjode8h1kWjxHuh8tabjrnA7nw= Subject key identifier: 95:55:56:F8:75:6A:73:96:C7:76:F4:D5:64:38:9A:1A:D4:F6:2C:F6 Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 Certificate issuer: /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Certificate serial: 0FE67EDB8F676F8C4C45C3C3773BB18FB34D5EEA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft Manifest number: 48 Signing time: Sat 23 Aug 2025 17:26:06 +0000 Manifest this update: Sat 23 Aug 2025 17:21:06 +0000 Manifest next update: Sun 24 Aug 2025 17:26:06 +0000 Files and hashes: 1: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: dERySCDhc3+rlKwMAYMhD9XvddhhgSjXbVZeRoj98gc=) 2: B3F1737E90F240D7ABB33C72F84D71482FE62679.crl (hash: o3mVlsXA+VF7cfnRZu5Dyp2btpoy7A8YXnLDU9yj0tQ=) 3: 326130373a353463373a353939393a3a2f34382d3438203d3e20323136343535.roa (hash: SvnI/kKkXn3yiVhNqVKN9Taah5WCLs8Rw+D4PBjSrbo=) 4: 326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa (hash: 7mCuwzfIey+Hcqy/Vhuj4zUx9bQcgkzpUeh+UNvlKO4=) 5: 326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa (hash: FG+PaaelFQQTh0Pl3BlClI1RFrk+FdkeBozLHlfkasU=) 6: 326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa (hash: x50UL+Ve3n2XGikbTbQdFLaQIWslIjcJnasiyHq58lM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 13:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e6:7e:db:8f:67:6f:8c:4c:45:c3:c3:77:3b:b1:8f:b3:4d:5e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Validity Not Before: Aug 23 17:21:06 2025 GMT Not After : Aug 24 17:26:06 2025 GMT Subject: CN=955556F8756A7396C776F4D564389A1AD4F62CF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:28:9f:2a:9b:9f:1e:fe:46:dd:c4:1d:f0:57: 65:fb:fc:60:b4:55:8e:e5:32:3f:56:a2:f0:40:f5: 3b:b2:ea:42:63:1f:0f:e0:33:c2:fc:53:09:06:7e: cf:32:85:b3:c9:7d:84:e9:f3:c6:6b:1c:d0:61:73: 5b:5c:91:f1:95:c3:f7:17:b5:dd:74:8d:fe:96:b1: eb:ad:b8:67:1c:f3:3f:3b:69:99:51:55:ed:3f:99: a6:42:35:3a:a5:f4:fd:57:0c:0c:6d:93:8d:54:7d: a9:5e:e7:62:ab:70:dc:5c:95:a3:7a:1a:9d:27:5c: 68:8e:03:5d:ba:f8:bf:d1:e0:3a:3c:33:29:3c:17: b9:aa:5f:e7:45:65:8a:13:fc:d6:e0:55:86:7c:94: 9e:1c:30:f3:7e:ed:05:62:aa:58:f5:71:17:36:0a: 4f:0e:3b:60:8c:50:ef:87:9d:2f:87:2d:e1:de:93: f4:6f:68:93:c1:63:3e:d1:06:55:78:97:61:cc:e1: a1:b5:8e:3e:28:c5:f5:98:3b:c6:b3:92:e4:b9:80: b9:2b:82:85:3c:81:a5:9a:9e:84:44:1a:51:32:1f: e0:dc:55:36:8d:cd:bd:97:d0:1a:dd:75:ce:37:b4: 74:cb:7b:b5:e7:05:64:57:94:3d:f6:d3:e0:12:63: 12:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:55:56:F8:75:6A:73:96:C7:76:F4:D5:64:38:9A:1A:D4:F6:2C:F6 X509v3 Authority Key Identifier: keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:81:59:ee:2f:5d:38:45:d7:8d:ee:0d:68:78:73:2a:5b:fc: 46:ed:a3:8a:77:76:c3:2b:72:b2:5d:3e:79:c4:f8:d7:e8:ff: 0c:3a:5c:33:e2:9a:f6:87:41:ab:c5:c2:6b:d2:37:18:91:09: 5b:2d:da:c8:2f:12:54:47:b1:e9:9d:55:6d:02:4b:46:1e:11: c0:b7:ea:a7:82:cf:43:6c:4d:fe:31:a4:95:48:62:33:ce:a5: 49:df:f1:42:13:63:2c:e4:94:7c:28:cd:40:1f:55:51:5f:8d: 71:b6:50:5e:68:8a:78:dd:6c:70:09:b8:1a:85:9b:1f:bc:20: c4:78:da:ed:c7:59:bc:9e:e0:6e:7b:6c:cb:dc:78:39:50:1e: fa:c7:12:29:96:72:3b:31:b2:7b:7f:54:60:76:60:23:6f:23: 2e:20:b5:3e:1f:5e:e7:95:2d:b8:12:c7:d5:9d:72:04:3a:ec: c3:45:c2:dc:97:f1:67:ea:47:08:86:f0:08:97:cd:f5:a3:dc: c4:7a:85:96:d1:ed:28:3f:63:e7:be:1a:42:19:5d:74:00:8f: 64:76:34:e9:06:c4:98:50:9c:2f:59:1c:cf:fb:4e:40:1f:0e: 7b:3b:31:c8:19:d2:1c:92:e6:ad:b5:ce:ce:b3:b8:22:59:e6: 15:25:6a:88 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUD+Z+249nb4xMRcPDdzuxj7NNXuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgy RkU2MjY3OTAeFw0yNTA4MjMxNzIxMDZaFw0yNTA4MjQxNzI2MDZaMDMxMTAvBgNV BAMTKDk1NTU1NkY4NzU2QTczOTZDNzc2RjRENTY0Mzg5QTFBRDRGNjJDRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUKJ8qm58e/kbdxB3wV2X7/GC0 VY7lMj9WovBA9Tuy6kJjHw/gM8L8UwkGfs8yhbPJfYTp88ZrHNBhc1tckfGVw/cX td10jf6WseutuGcc8z87aZlRVe0/maZCNTql9P1XDAxtk41Ufale52KrcNxclaN6 Gp0nXGiOA126+L/R4Do8Myk8F7mqX+dFZYoT/NbgVYZ8lJ4cMPN+7QViqlj1cRc2 Ck8OO2CMUO+HnS+HLeHek/RvaJPBYz7RBlV4l2HM4aG1jj4oxfWYO8azkuS5gLkr goU8gaWanoREGlEyH+DcVTaNzb2X0Brddc43tHTLe7XnBWRXlD320+ASYxK3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUlVVW+HVqc5bHdvTVZDiaGtT2LPYwHwYDVR0j BBgwFoAUs/FzfpDyQNerszxy+E1xSC/mJnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzIvQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgyRkU2MjY3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9CM0YxNzM3RTkwRjI0MEQ3QUJCMzNDNzJG ODRENzE0ODJGRTYyNjc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8yL0IzRjE3MzdF OTBGMjQwRDdBQkIzM0M3MkY4NEQ3MTQ4MkZFNjI2NzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBvgVnu L104RdeN7g1oeHMqW/xG7aOKd3bDK3KyXT55xPjX6P8MOlwz4pr2h0GrxcJr0jcY kQlbLdrILxJUR7HpnVVtAktGHhHAt+qngs9DbE3+MaSVSGIzzqVJ3/FCE2Ms5JR8 KM1AH1VRX41xtlBeaIp43WxwCbgahZsfvCDEeNrtx1m8nuBue2zL3Hg5UB76xxIp lnI7MbJ7f1RgdmAjbyMuILU+H17nlS24EsfVnXIEOuzDRcLcl/Fn6kcIhvAIl831 o9zEeoWW0e0oP2PnvhpCGV10AI9kdjTpBsSYUJwvWRzP+05AHw57OzHIGdIckuat tc7Os7giWeYVJWqI -----END CERTIFICATE-----Generated at Sat Aug 23 22:32:03 2025 by rpki-client