$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft File: 51917E722DB03952D9056BED2F6BD4BF98B78976.mft (raw, json) Hash identifier: HbEfvQXCKXRucrCFrWxxQhuzh3iQi0otQMUqO0jWq3c= Subject key identifier: A9:53:82:4E:8F:D6:3D:09:AD:7C:4D:CF:DB:F2:22:C7:E1:00:ED:46 Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Certificate serial: 4E804D4D26FE580E19F693A9DE365972E9606428 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft Manifest number: 42 Signing time: Sun 29 Jun 2025 09:00:07 +0000 Manifest this update: Sun 29 Jun 2025 08:55:07 +0000 Manifest next update: Mon 30 Jun 2025 12:00:07 +0000 Files and hashes: 1: 326131343a373538303a666635323a3a2f34382d3438203d3e20323039373130.roa (hash: vs66PWFM6L/hirNyhIXTRaz65c001j+IhkCdp8VdfS4=) 2: 51917E722DB03952D9056BED2F6BD4BF98B78976.crl (hash: TtrNqbEsq0+jy0E1o3uuc0vzX1vV5QLCleJT9qQKO9o=) 3: 326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa (hash: 5weylF9E+kZUqdJn7nMGLccAIkWjUNuo5MqarqyfkO8=) 4: 326131343a373538303a666635343a3a2f34382d3438203d3e20323039373130.roa (hash: i7VkbN6Rb5CnHlmR8BF2dlC+Uq3PFV4wJTcaolWAu+U=) 5: 326131343a373538303a666635313a3a2f34382d3438203d3e20323039373130.roa (hash: KcfiSDiqDvlLOqfaLqph9s6F4NvpySAcmNFiwDriyms=) 6: 326131343a373538303a666635333a3a2f34382d3438203d3e20323039373130.roa (hash: UpFVw7x1NBf/Uix4G0zJEj+QV4riL3tEIjso5GywhOU=) 7: 326131343a373538303a3530303a3a2f34302d3430203d3e20323039373130.roa (hash: UtWLjV2JD6X8emwUC9bu8RyXGCD7bzymrTBVIEkaVv8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 07:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:80:4d:4d:26:fe:58:0e:19:f6:93:a9:de:36:59:72:e9:60:64:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976 Validity Not Before: Jun 29 08:55:07 2025 GMT Not After : Jun 30 12:00:07 2025 GMT Subject: CN=A953824E8FD63D09AD7C4DCFDBF222C7E100ED46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d3:e1:0e:ff:8f:e4:8d:a8:57:41:98:6d:67: ff:6a:e0:a9:93:aa:d8:3e:e4:e7:7d:5a:94:ba:da: 58:b9:bd:44:4e:a5:02:ee:bc:87:22:e8:43:56:0c: 48:20:74:84:08:7f:8f:6e:58:4c:53:0d:56:12:0a: 2f:12:f6:a8:64:cb:ae:13:20:66:4f:74:10:2f:b2: c6:56:ab:73:42:e9:25:9e:3c:d7:a4:61:f6:6b:fb: 19:3c:72:67:39:bd:cd:9e:f8:e3:7b:48:f3:13:1b: 10:1f:14:09:f9:b4:bc:88:af:10:97:20:a9:75:cd: 14:0f:e7:41:ac:03:89:d7:38:d4:82:80:19:ff:ff: e3:02:7b:11:52:1d:c6:fa:dd:62:88:21:64:6b:da: 07:1a:82:e8:d3:f4:fa:46:4a:d8:03:cb:f6:f0:cd: 0a:86:41:06:6f:3e:7f:c8:27:7c:7e:48:4d:f7:d3: 96:b7:6d:a6:a5:d3:60:84:7b:ae:f6:44:1b:3b:6d: 22:14:74:8d:4a:49:81:9b:2a:6a:eb:cd:c0:66:58: 3e:66:bb:31:30:60:db:3c:09:1d:d7:d7:99:66:61: 46:88:d8:7b:48:59:7d:42:2f:3a:23:2b:66:32:3a: a8:3a:ff:15:53:25:8d:8c:bb:52:e4:dc:a9:5f:85: bc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:53:82:4E:8F:D6:3D:09:AD:7C:4D:CF:DB:F2:22:C7:E1:00:ED:46 X509v3 Authority Key Identifier: keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:10:37:93:54:3f:85:a0:6d:36:ea:79:69:d4:00:f1:dc:a0: 2d:c7:48:a3:6b:09:c9:9c:99:d0:5a:e5:d9:41:87:a4:14:f9: 15:0e:29:a5:06:18:2a:f1:20:e6:90:43:0e:81:7d:b5:31:ce: 20:0a:50:cc:ee:c8:51:71:c9:3e:ba:af:9b:79:fc:1c:4f:5e: cd:59:f6:c3:5e:ae:e3:49:ff:8c:b9:6e:62:c4:f0:9f:ee:94: a0:d0:4f:8f:17:a4:3c:10:53:34:25:2a:76:f1:ca:2b:ac:1e: 08:95:07:31:da:24:74:04:50:cc:54:7a:4f:18:44:53:bc:b6: 34:1c:39:de:7e:44:8c:9e:80:15:ca:60:8a:1c:30:c3:84:b3: f5:0a:f2:32:a8:c4:bd:60:fa:40:80:d5:39:92:98:01:eb:9d: e1:b8:24:5f:dc:7d:9b:21:07:18:5a:a6:bc:ff:c2:d8:d5:c7: 1a:71:ef:bb:fc:db:9a:2d:8f:3a:d6:ac:64:7c:6a:f7:c0:d2: 58:22:95:10:57:8e:c5:13:f8:8e:df:0d:d7:71:73:d6:5c:97: 97:d9:f3:30:5f:67:b1:82:f9:0c:f3:4b:f6:6f:aa:16:c3:65: 74:3e:b8:42:ac:3d:ac:b3:ea:cd:a6:4e:08:28:96:2a:70:4b: a9:ca:be:15 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUToBNTSb+WA4Z9pOp3jZZculgZCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5 OEI3ODk3NjAeFw0yNTA2MjkwODU1MDdaFw0yNTA2MzAxMjAwMDdaMDMxMTAvBgNV BAMTKEE5NTM4MjRFOEZENjNEMDlBRDdDNERDRkRCRjIyMkM3RTEwMEVENDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb0+EO/4/kjahXQZhtZ/9q4KmT qtg+5Od9WpS62li5vUROpQLuvIci6ENWDEggdIQIf49uWExTDVYSCi8S9qhky64T IGZPdBAvssZWq3NC6SWePNekYfZr+xk8cmc5vc2e+ON7SPMTGxAfFAn5tLyIrxCX IKl1zRQP50GsA4nXONSCgBn//+MCexFSHcb63WKIIWRr2gcagujT9PpGStgDy/bw zQqGQQZvPn/IJ3x+SE3305a3baal02CEe672RBs7bSIUdI1KSYGbKmrrzcBmWD5m uzEwYNs8CR3X15lmYUaI2HtIWX1CLzojK2YyOqg6/xVTJY2Mu1Lk3KlfhbxXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUqVOCTo/WPQmtfE3P2/Iix+EA7UYwHwYDVR0j BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy RjZCRDRCRjk4Qjc4OTc2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzllY2FjNDEzLTRjZDItNDcyYy1iMDFlLTc0NDU4Y2VhMzg2Yy8wLzUxOTE3RTcy MkRCMDM5NTJEOTA1NkJFRDJGNkJENEJGOThCNzg5NzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHEDeT VD+FoG026nlp1ADx3KAtx0ijawnJnJnQWuXZQYekFPkVDimlBhgq8SDmkEMOgX21 Mc4gClDM7shRcck+uq+befwcT17NWfbDXq7jSf+MuW5ixPCf7pSg0E+PF6Q8EFM0 JSp28corrB4IlQcx2iR0BFDMVHpPGERTvLY0HDnefkSMnoAVymCKHDDDhLP1CvIy qMS9YPpAgNU5kpgB653huCRf3H2bIQcYWqa8/8LY1ccace+7/NuaLY861qxkfGr3 wNJYIpUQV47FE/iO3w3XcXPWXJeX2fMwX2exgvkM80v2b6oWw2V0PrhCrD2ss+rN pk4IKJYqcEupyr4V -----END CERTIFICATE-----Generated at Sun Jun 29 17:03:48 2025 by rpki-client