$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft File: 5E5179BB1757068D7028510FEEB1177AA7CC8818.mft (raw, json) Hash identifier: RgdlFqCbFsAiI/6Wz4a3p9x8mUclvkewaeMp0jR8u7E= Subject key identifier: 89:FE:3F:FE:31:C4:74:B8:E6:1F:B2:76:B5:B7:4D:DD:7A:45:1D:42 Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18 Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818 Certificate serial: 75F033615E11B6101B2826D3F3AD461717BA8190 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft Manifest number: 04C7 Signing time: Sat 28 Jun 2025 19:29:11 +0000 Manifest this update: Sat 28 Jun 2025 19:24:11 +0000 Manifest next update: Sun 29 Jun 2025 22:04:11 +0000 Files and hashes: 1: 3139322e3130392e31312e302f32342d3234203d3e203136323736.roa (hash: qRWEBAMqR9/oXRv8A+nfXFduPkpHZgx8k4TEVcf/LOk=) 2: 38332e3135302e3231362e302f32322d3234203d3e203631333137.roa (hash: 57aAYCaE5TgSVJlVlCOXKPFo7D7BRt8yiBp9fnzIrpI=) 3: 38332e3135302e3231382e302f32342d3234203d3e20313939343135.roa (hash: yCFgEcnTSAhMVf29HMHp04B1k4DqC3mlqJPDdmg8wFQ=) 4: 38332e3135302e3231362e302f32342d3234203d3e203630353538.roa (hash: JKcEyzkTVqyttDFURXSxmaVQ+BAZuAcc4gW4DE+3N8E=) 5: 38332e3135302e3231392e302f32342d3234203d3e203533333430.roa (hash: woOa8XrslJUNd/zhwfkw+8SfH4VdemvQujuqkpyzwss=) 6: 5E5179BB1757068D7028510FEEB1177AA7CC8818.crl (hash: 2P49OVmVgICKTFaaLwMvShBGY8x+cR440MzKt6VSNe0=) 7: 38332e3135302e3231372e302f32342d3234203d3e20323132353034.roa (hash: k8RY7QTEncAN/MOxUGAuMRRlssrdtl7ahwCsdlVrRY0=) 8: 3139322e3130392e31302e302f32342d3234203d3e203239383032.roa (hash: zPOJooX1SbIfEdoUfLmfFj+bOWKjqS7oznOqpFqjTp4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f0:33:61:5e:11:b6:10:1b:28:26:d3:f3:ad:46:17:17:ba:81:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818 Validity Not Before: Jun 28 19:24:11 2025 GMT Not After : Jun 29 22:04:11 2025 GMT Subject: CN=89FE3FFE31C474B8E61FB276B5B74DDD7A451D42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bb:6e:a0:a1:95:ac:d6:ff:49:6d:61:0e:ac: 1a:7b:6a:61:25:1b:29:25:36:cb:70:9a:3b:0e:c9: 56:8e:07:47:0a:58:d6:85:50:54:58:b3:8d:21:ab: 5f:a0:d9:48:08:97:c3:d6:f7:d6:92:09:54:75:f8: b3:4c:37:ef:9d:a0:5d:4c:80:1d:a7:35:c5:3b:06: d0:b4:60:cd:f7:7e:d4:c7:b8:9b:ac:ad:d3:09:19: 9a:dd:be:71:e4:b6:02:90:6f:64:af:63:a3:d8:53: 40:9d:24:a9:af:c0:d3:50:b1:a9:4e:1d:5c:54:79: 2d:00:22:47:45:6e:fe:bf:12:44:4c:c3:8a:df:43: c7:81:9a:2c:1e:d7:81:48:1d:94:87:b1:6b:13:8e: 41:f2:a0:cb:4a:db:f3:14:98:91:32:e1:f1:b9:13: 0f:6e:67:e4:fc:dc:a9:84:2b:72:d4:8a:4e:66:f7: b3:7c:19:f5:dd:6d:ca:bc:d7:9d:2f:fa:af:90:81: a3:a5:14:9a:36:34:f2:02:0a:f3:52:20:a4:56:2c: 72:27:07:a1:4a:6b:73:3e:b2:4a:f0:d2:db:bd:ce: c0:6f:38:b0:9e:30:23:77:66:ca:c8:d0:2d:15:10: f9:cf:51:40:42:0b:67:d3:65:94:62:79:72:c0:69: 1e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FE:3F:FE:31:C4:74:B8:E6:1F:B2:76:B5:B7:4D:DD:7A:45:1D:42 X509v3 Authority Key Identifier: keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:b9:f0:bf:91:6e:c7:cc:f3:41:e9:a4:0f:40:c8:0b:3d:34: 02:8c:c8:f4:0a:8c:e9:47:5c:af:80:ba:64:63:03:c0:ab:5c: 4f:d1:7a:0c:68:15:65:eb:16:5f:7d:0a:72:c7:35:2f:a2:04: 81:e6:c0:d2:eb:4f:e3:ce:1d:3b:d4:22:ae:14:1e:6e:6d:e3: 8b:41:52:ca:8b:ec:42:49:9b:86:12:26:6e:72:0d:5e:d2:ac: db:88:af:cc:d8:60:7f:b4:60:50:1b:9d:39:98:86:e1:5d:fa: 61:ab:d3:bd:4d:59:7e:fc:7c:5d:cb:01:06:b2:4b:ac:ca:c9: fc:f1:33:93:14:98:59:f5:6f:b1:20:27:94:68:7b:6f:0e:cd: cf:33:ef:d8:48:ea:5f:cb:df:1b:5c:4c:1c:15:a4:81:31:a1: f8:dc:9f:c7:28:1a:7e:0b:1a:3b:c0:32:16:35:17:f7:bb:4a: 9b:f2:d8:80:d8:34:00:44:9b:45:60:83:63:92:65:48:d7:f7: e0:47:81:71:1c:76:e5:f0:41:81:3b:f7:85:82:17:36:8d:55: dd:2c:fa:77:5b:14:08:fd:95:93:2a:3d:fc:b3:bb:eb:e6:b1: 37:16:54:a7:3e:1d:13:62:81:88:c3:fe:61:e8:0c:3c:37:1a: df:f0:05:7e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdfAzYV4RthAbKCbT861GFxe6gZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWU1MTc5YmIxNzU3MDY4ZDcwMjg1MTBmZWViMTE3N2Fh N2NjODgxODAeFw0yNTA2MjgxOTI0MTFaFw0yNTA2MjkyMjA0MTFaMDMxMTAvBgNV BAMTKDg5RkUzRkZFMzFDNDc0QjhFNjFGQjI3NkI1Qjc0REREN0E0NTFENDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCu26goZWs1v9JbWEOrBp7amEl GyklNstwmjsOyVaOB0cKWNaFUFRYs40hq1+g2UgIl8PW99aSCVR1+LNMN++doF1M gB2nNcU7BtC0YM33ftTHuJusrdMJGZrdvnHktgKQb2SvY6PYU0CdJKmvwNNQsalO HVxUeS0AIkdFbv6/EkRMw4rfQ8eBmiwe14FIHZSHsWsTjkHyoMtK2/MUmJEy4fG5 Ew9uZ+T83KmEK3LUik5m97N8GfXdbcq8150v+q+QgaOlFJo2NPICCvNSIKRWLHIn B6FKa3M+skrw0tu9zsBvOLCeMCN3ZsrI0C0VEPnPUUBCC2fTZZRieXLAaR41AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUif4//jHEdLjmH7J2tbdN3XpFHUIwHwYDVR0j BBgwFoAUXlF5uxdXBo1wKFEP7rEXeqfMiBgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODNlNDc1N2YtZDM3Zi00ZmQ2LWE2OWItZDc0YmRkNmI4 N2RjLzAvNUU1MTc5QkIxNzU3MDY4RDcwMjg1MTBGRUVCMTE3N0FBN0NDODgxOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hsRjV1eGRYQm8xd0tGRVA3ckVYZXFm TWlCZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84M2U0NzU3Zi1k MzdmLTRmZDYtYTY5Yi1kNzRiZGQ2Yjg3ZGMvMC81RTUxNzlCQjE3NTcwNjhENzAy ODUxMEZFRUIxMTc3QUE3Q0M4ODE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbnwv5Fux8zzQemkD0DI Cz00AozI9AqM6Udcr4C6ZGMDwKtcT9F6DGgVZesWX30Kcsc1L6IEgebA0utP484d O9QirhQebm3ji0FSyovsQkmbhhImbnINXtKs24ivzNhgf7RgUBudOZiG4V36YavT vU1Zfvx8XcsBBrJLrMrJ/PEzkxSYWfVvsSAnlGh7bw7NzzPv2EjqX8vfG1xMHBWk gTGh+NyfxygafgsaO8AyFjUX97tKm/LYgNg0AESbRWCDY5JlSNf34EeBcRx25fBB gTv3hYIXNo1V3Sz6d1sUCP2Vkyo9/LO76+axNxZUpz4dE2KBiMP+YegMPDca3/AF fg== -----END CERTIFICATE-----Generated at Sat Jun 28 21:18:31 2025 by rpki-client