$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: 3zU2V7uFeXXxhGNo07LnbmnQUay8AiTq0mhGvRR8EBY= Subject key identifier: BB:C7:3C:B0:3B:CC:DE:9A:D8:16:D8:AE:C0:FF:7F:4A:24:C9:37:62 Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 32E754867B899441AD85D72228FEF476E9DFCDE4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: 01AF Signing time: Sun 29 Jun 2025 10:21:57 +0000 Manifest this update: Sun 29 Jun 2025 10:16:57 +0000 Manifest next update: Mon 30 Jun 2025 14:19:57 +0000 Files and hashes: 1: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: E/b6IuXntW6ezN7Ldz+SXpAnnNbK9U9+MF9l/pqOR54=) 2: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: 8Iv1HdyRUhjcvQFIVfomOSyv77EzHn71qEiaLSvjvAE=) 3: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: 6SMGzy0qxU/C5+Cz9d8WI56z67FiL2uOHLuZUmmEFig=) 4: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: ikRuOA2n8u4zq4qR5S8PkgRSZxYIGPGee0tyFklQIEM=) 5: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: HVQR2cbKt8VVrQisjkBAhrhp4KsXJej/OLSmUeqTsY0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e7:54:86:7b:89:94:41:ad:85:d7:22:28:fe:f4:76:e9:df:cd:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: Jun 29 10:16:57 2025 GMT Not After : Jun 30 14:19:57 2025 GMT Subject: CN=BBC73CB03BCCDE9AD816D8AEC0FF7F4A24C93762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b1:eb:3c:2e:51:fc:95:fe:bf:96:81:36:b8: da:ca:7e:fe:89:d2:dc:d5:c2:cc:91:65:f6:99:b8: 60:91:b3:0c:87:69:67:c6:e0:74:78:a5:d7:87:e0: 36:ad:25:ba:66:ea:b3:0a:c0:36:32:2b:97:2a:e5: 8a:a2:23:c6:d5:8c:da:60:72:9b:bb:28:b3:0e:8d: 9e:8b:57:59:c4:73:18:61:8f:b8:0f:67:29:8d:a4: 7e:82:aa:6d:9f:3e:a9:15:2a:cb:6d:c9:5d:3b:eb: 04:79:a9:90:72:74:b6:0c:c8:aa:5c:08:20:45:c7: 62:71:f1:cc:44:c8:f9:12:d9:77:d3:35:b2:1d:7a: 15:89:7a:ff:42:a9:1c:a1:02:18:bf:70:2e:8b:92: e4:a0:cf:fd:cb:c7:6d:a7:8a:e3:17:5f:81:fa:58: bd:e2:d0:3e:fb:52:30:f7:65:e8:4c:5b:f0:aa:58: 2b:c5:09:8b:5e:ab:52:9f:91:c6:66:04:d0:b0:ec: 6e:68:33:dc:b2:69:41:1b:f5:ed:ad:f8:04:2c:c6: ac:63:b2:c0:eb:7c:9e:43:04:26:d2:b6:e5:30:df: 5e:dd:d4:ab:43:a8:04:76:f0:4c:42:e6:ee:66:99: 4c:7e:e8:73:7d:0a:8f:2d:c2:be:99:37:31:38:66: f3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C7:3C:B0:3B:CC:DE:9A:D8:16:D8:AE:C0:FF:7F:4A:24:C9:37:62 X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:0e:76:c6:e4:e3:d9:f3:26:e4:3d:84:0a:17:05:69:6c:e3: 35:3c:28:47:38:7f:03:52:39:4b:1e:35:e0:11:c1:01:be:3c: 2c:ee:0c:62:32:b2:f6:88:6a:30:1c:b5:41:71:fb:1d:5f:db: 9a:b3:29:cd:55:41:68:2d:7c:34:f4:95:05:b5:c0:66:20:04: d9:32:9d:d4:fb:a1:d4:f8:ea:23:cb:17:65:d1:56:d9:26:e1: 27:b3:17:bb:b6:01:de:22:2a:b1:3c:3f:8e:59:03:be:ea:5c: 6b:fa:a2:dc:02:a0:51:60:00:0a:a8:63:66:63:01:e4:03:f0: 55:cc:33:08:9d:aa:fe:25:09:e9:b9:fa:bf:3b:d0:51:e9:9c: fb:52:03:00:08:6c:2d:a1:03:d4:12:45:b1:02:91:a2:9f:b2: e4:9e:d1:00:56:47:60:a2:3a:ac:d8:32:0c:96:49:4a:7e:08: 71:88:0b:a8:6e:f0:f7:54:8c:80:e6:86:ec:38:68:d8:c5:be: f8:c4:f0:95:d3:5a:46:b6:57:99:f1:d6:00:cd:29:f5:26:ea: 13:12:54:c3:a1:38:f3:0d:21:d4:c2:26:22:41:34:d7:32:74: 2f:99:2b:15:b5:f7:79:0c:d0:b1:42:79:35:e9:ec:53:d1:f5: 47:b0:a8:8b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMudUhnuJlEGthdciKP70dunfzeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNTA2MjkxMDE2NTdaFw0yNTA2MzAxNDE5NTdaMDMxMTAvBgNV BAMTKEJCQzczQ0IwM0JDQ0RFOUFEODE2RDhBRUMwRkY3RjRBMjRDOTM3NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeses8LlH8lf6/loE2uNrKfv6J 0tzVwsyRZfaZuGCRswyHaWfG4HR4pdeH4DatJbpm6rMKwDYyK5cq5YqiI8bVjNpg cpu7KLMOjZ6LV1nEcxhhj7gPZymNpH6Cqm2fPqkVKsttyV076wR5qZBydLYMyKpc CCBFx2Jx8cxEyPkS2XfTNbIdehWJev9CqRyhAhi/cC6LkuSgz/3Lx22niuMXX4H6 WL3i0D77UjD3ZehMW/CqWCvFCYteq1KfkcZmBNCw7G5oM9yyaUEb9e2t+AQsxqxj ssDrfJ5DBCbStuUw317d1KtDqAR28ExC5u5mmUx+6HN9Co8twr6ZNzE4ZvOVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUu8c8sDvM3prYFtiuwP9/SiTJN2IwHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwDnbG 5OPZ8ybkPYQKFwVpbOM1PChHOH8DUjlLHjXgEcEBvjws7gxiMrL2iGowHLVBcfsd X9uasynNVUFoLXw09JUFtcBmIATZMp3U+6HU+Oojyxdl0VbZJuEnsxe7tgHeIiqx PD+OWQO+6lxr+qLcAqBRYAAKqGNmYwHkA/BVzDMInar+JQnpufq/O9BR6Zz7UgMA CGwtoQPUEkWxApGin7LkntEAVkdgojqs2DIMlklKfghxiAuobvD3VIyA5obsOGjY xb74xPCV01pGtleZ8dYAzSn1JuoTElTDoTjzDSHUwiYiQTTXMnQvmSsVtfd5DNCx Qnk16exT0fVHsKiL -----END CERTIFICATE-----Generated at Sun Jun 29 13:36:21 2025 by rpki-client