$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: YxRnV5ern6BM3l93Gb6SXh4IChtEBbRLPUcu5WjbuCw= Subject key identifier: 1B:2C:E6:B2:04:76:D3:33:6C:07:89:B8:82:06:52:02:7E:76:56:A3 Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 653663DD1B5B53E8A491BE4918A021ED943A37F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 0350 Signing time: Sun 29 Jun 2025 06:59:13 +0000 Manifest this update: Sun 29 Jun 2025 06:54:13 +0000 Manifest next update: Mon 30 Jun 2025 10:34:13 +0000 Files and hashes: 1: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: bvqtExc4o5GUJzraVc9CM0CC2GO3x6c+ohx4q9G/dgk=) 2: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: qqVPSWZLREddEW4nL5NY3Bls+ZrG5ASHmT6xiutXttk=) 3: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: oaLDq7aS5NFaYNW1gUs7MDdZL5P0TUUEDkjRyQGla3w=) 4: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: YPHG5fl9Eh7wXnHOKgfPIWeSUdY/ZQ2LQtrf1KeBggI=) 5: 39332e39352e3131332e302f32342d3234203d3e203136323736.roa (hash: cS6LWz+NEHJoa0EQVb5z92UR8C9jaztUFOxHHwpRPsY=) 6: 39332e39352e3131342e302f32342d3234203d3e2035303635.roa (hash: MF/szlJtg3jR946D7Iy8tt2rHbx2IcEkKMT7PmewPLE=) 7: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: 8ja7Z+swVGTraKxezjgHzXG2GlS/dFRID6jPUC87mFI=) 8: 39332e39352e3131322e302f32342d3234203d3e2039333034.roa (hash: zUwgNrj8/Pqn6SSwkBw/pyrAcW11nb3rzQwJkkprQBw=) 9: 39332e39352e3131372e302f32342d3234203d3e20323135373732.roa (hash: vLSBueodjY+0YJW63au8p8n765D5sPEn1sQkXoc5D7w=) 10: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: iuam+Y72SFbVuzZ6DMbPvd9+i2O4uNgJ9aW8l1vNV9U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:36:63:dd:1b:5b:53:e8:a4:91:be:49:18:a0:21:ed:94:3a:37:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Jun 29 06:54:13 2025 GMT Not After : Jun 30 10:34:13 2025 GMT Subject: CN=1B2CE6B20476D3336C0789B8820652027E7656A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:59:71:7a:3a:70:3d:4e:6a:e3:63:9b:98:51: b9:cf:0f:0e:bd:16:b3:50:7b:6a:6e:7f:34:63:b9: 3e:f1:4f:f7:0e:ee:76:1e:40:8f:de:89:34:42:a5: a2:a7:7e:78:91:60:41:2a:cb:5c:f8:61:a5:3b:24: 26:02:5a:e2:c2:84:9a:d8:50:f1:2f:a6:6e:da:63: ec:36:17:5f:04:53:4c:cc:78:1b:23:a2:cb:71:3d: 35:e9:bf:7f:29:df:ff:68:14:bc:89:13:00:3c:70: 8b:5b:8d:d9:0a:ac:46:28:66:d0:8b:35:9d:03:03: 7e:bf:64:69:a4:e5:f7:b7:4e:74:a9:6e:ec:0d:73: cb:af:f7:65:85:0d:50:3b:6d:20:d1:98:ff:ba:f6: 15:1d:ab:57:17:ec:52:cd:0f:82:34:f7:c3:b2:ad: 23:89:67:d5:5e:9f:05:b5:2e:c7:aa:c7:65:2e:7c: 9b:90:c2:d9:e6:18:10:3d:d2:9b:c5:34:df:31:59: c8:f1:0c:7f:90:7a:52:ec:76:5c:70:fe:f8:fe:44: 21:75:85:cd:95:9e:d4:3f:df:7e:ce:6b:1b:a7:35: 5c:44:25:31:70:da:2d:9d:32:d3:52:2e:4a:ff:83: 18:5d:d3:82:08:a6:a0:f3:db:fd:c3:82:0f:29:c4: d8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2C:E6:B2:04:76:D3:33:6C:07:89:B8:82:06:52:02:7E:76:56:A3 X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:b3:03:2f:48:51:0c:58:9d:a4:be:6e:b5:f6:06:94:e6:f2: 25:c5:cf:eb:30:d6:bc:26:5b:ec:73:80:37:f1:f5:c0:d8:4d: 84:ba:d5:23:a0:64:b5:96:f1:43:56:f4:21:8f:98:0f:1a:a0: 3a:ba:ce:8e:dd:46:a5:55:85:de:33:a2:61:00:7a:6b:6f:6e: 6f:7f:d6:25:d6:fe:0c:77:b0:30:0f:d4:86:d0:2c:7a:13:ff: 4c:c3:be:06:0f:b4:ec:62:e4:32:91:b4:90:61:bb:ff:bd:fa: f4:e9:01:78:c2:a3:40:7f:db:8a:6f:a0:04:63:0d:ea:1d:14: b6:0b:f7:67:bc:c7:e2:ff:da:7b:9d:07:86:18:6a:c9:85:ce: 39:cc:7a:61:0f:e9:50:20:97:af:70:b8:b9:8d:37:fc:eb:d5: 88:4c:c4:3e:a2:ee:08:b8:66:c3:d2:77:ab:8d:db:c3:1a:dc: 54:2a:43:5a:8f:a0:d6:49:36:bc:61:b5:69:ab:d7:f4:57:98: 37:11:9a:f0:0f:7d:89:d7:ea:75:3f:f5:8c:56:02:f3:73:59: e5:dc:03:da:d0:44:96:9f:fa:2a:44:02:be:2f:90:7c:c5:49: e2:55:45:32:db:34:7d:2b:0b:54:27:d0:3d:67:14:64:23:55: 47:77:e9:81 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZTZj3RtbU+ikkb5JGKAh7ZQ6N/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNTA2MjkwNjU0MTNaFw0yNTA2MzAxMDM0MTNaMDMxMTAvBgNV BAMTKDFCMkNFNkIyMDQ3NkQzMzM2QzA3ODlCODgyMDY1MjAyN0U3NjU2QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUWXF6OnA9TmrjY5uYUbnPDw69 FrNQe2pufzRjuT7xT/cO7nYeQI/eiTRCpaKnfniRYEEqy1z4YaU7JCYCWuLChJrY UPEvpm7aY+w2F18EU0zMeBsjostxPTXpv38p3/9oFLyJEwA8cItbjdkKrEYoZtCL NZ0DA36/ZGmk5fe3TnSpbuwNc8uv92WFDVA7bSDRmP+69hUdq1cX7FLND4I098Oy rSOJZ9VenwW1Lseqx2UufJuQwtnmGBA90pvFNN8xWcjxDH+QelLsdlxw/vj+RCF1 hc2VntQ/337OaxunNVxEJTFw2i2dMtNSLkr/gxhd04IIpqDz2/3Dgg8pxNh5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUGyzmsgR20zNsB4m4ggZSAn52VqMwHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabMDL0hRDFidpL5utfYG lObyJcXP6zDWvCZb7HOAN/H1wNhNhLrVI6BktZbxQ1b0IY+YDxqgOrrOjt1GpVWF 3jOiYQB6a29ub3/WJdb+DHewMA/UhtAsehP/TMO+Bg+07GLkMpG0kGG7/7369OkB eMKjQH/bim+gBGMN6h0Utgv3Z7zH4v/ae50HhhhqyYXOOcx6YQ/pUCCXr3C4uY03 /OvViEzEPqLuCLhmw9J3q43bwxrcVCpDWo+g1kk2vGG1aavX9FeYNxGa8A99idfq dT/1jFYC83NZ5dwD2tBElp/6KkQCvi+QfMVJ4lVFMts0fSsLVCfQPWcUZCNVR3fp gQ== -----END CERTIFICATE-----Generated at Sun Jun 29 10:34:21 2025 by rpki-client