$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json) Hash identifier: lSn04kJjg+cBxN00P8HgxIEEOsxRfwrsi03apJa/M4Q= Subject key identifier: 40:B0:5F:E2:7B:83:9D:C7:0A:5E:1B:DE:72:92:A9:FF:FB:04:7F:15 Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Certificate serial: 46C2915A5973983F619B43E5B43226C6C369CE05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft Manifest number: D4 Signing time: Sat 28 Jun 2025 04:13:33 +0000 Manifest this update: Sat 28 Jun 2025 04:08:33 +0000 Manifest next update: Sun 29 Jun 2025 06:47:33 +0000 Files and hashes: 1: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: +yFHbjFdcl3OkH9bM82B/wbQvRBlEBGqJ0LTOyulC0Q=) 2: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: HpScHbb988kJhVJx95dv1Mpq4xQO/x11Bn62bq0CneI=) 3: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: M972A2zux5bp2vtM/yV/ifXNBlJMRB7g6qDIDzpgNsU=) 4: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: aQBGW4UwEpZw1viUGTiicR7R7bF3eHxKluau3FSxHVQ=) 5: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: RPFyh+9f4VeLKwhSKFsibkww2V1WrimAJUdSq1OTL10=) 6: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: kUiBrX3+9cuSC9lMhoz9V2p165UrI0C31waBU1/3ZFc=) 7: AS215248.asa (hash: GFt+WeOjsAQoZKjYNcrA7zUmVSH7b01JtVj28qjRWk8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 06:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:c2:91:5a:59:73:98:3f:61:9b:43:e5:b4:32:26:c6:c3:69:ce:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Validity Not Before: Jun 28 04:08:33 2025 GMT Not After : Jun 29 06:47:33 2025 GMT Subject: CN=40B05FE27B839DC70A5E1BDE7292A9FFFB047F15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:31:85:34:2f:f2:6d:2e:ca:2e:7b:be:c6:9d: 62:7b:82:86:34:96:5f:0e:08:38:7c:fd:53:c5:10: 7a:b6:63:47:d0:f5:88:0c:60:31:01:52:4b:e9:4c: 62:6d:13:a5:c7:cd:6b:49:5b:ee:be:4a:50:47:11: b5:3d:27:4f:31:ce:20:1e:ea:2a:c4:14:7d:6a:43: 6c:9a:1a:e4:83:f4:7a:6a:83:9b:3b:7d:a2:61:7c: 38:ff:cc:a7:73:5a:c6:d8:86:b1:f1:2a:83:15:94: 70:e1:00:6d:26:7f:cc:af:6f:f9:23:28:6e:d7:e0: 9c:ac:d8:5a:4c:c4:3d:ae:d4:6e:99:dc:57:0c:d7: 6e:6c:c2:9c:52:fa:44:31:dc:cf:97:c3:13:25:44: 8b:80:be:44:74:6d:d3:1d:90:7c:30:e6:b6:7a:35: 14:41:10:e8:4a:07:a9:c4:7a:93:f5:b9:24:11:6c: 00:e6:62:ff:ce:c7:75:46:97:1f:d4:00:b3:14:86: 11:47:eb:5c:c6:6c:36:5b:74:44:a4:fb:54:65:ba: 14:00:3a:52:8f:0a:cf:e8:ab:75:5c:6d:aa:38:17: bb:0c:ba:9b:d6:49:49:42:1d:09:4b:4b:01:0a:a5: cd:2e:1d:dd:84:0b:d8:4c:fb:27:e3:68:2d:8a:02: 46:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B0:5F:E2:7B:83:9D:C7:0A:5E:1B:DE:72:92:A9:FF:FB:04:7F:15 X509v3 Authority Key Identifier: keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:aa:d7:9a:0e:85:fa:e5:db:db:ea:c5:87:d4:26:f6:34:3e: c7:ef:10:b1:78:06:11:ee:21:db:36:29:a8:50:88:27:2d:e6: b9:11:45:eb:89:76:1c:55:e5:3f:0e:51:42:ee:bf:ac:9b:7e: ca:ce:ae:56:73:55:9e:18:39:aa:d5:69:43:56:87:41:13:a8: 02:1c:78:c9:eb:eb:a5:2e:ab:53:24:35:8b:0d:77:41:e4:75: 78:e8:44:07:82:e8:fe:d1:13:2a:00:3a:79:fe:cd:2f:27:99: b2:33:4d:2a:f1:cf:28:df:17:93:9a:2d:d8:38:e7:e1:4c:82: 1f:2f:29:19:59:30:3d:e1:f6:5f:8c:30:9c:5a:03:43:94:38: 41:78:cf:f7:4e:bf:1a:7e:ef:46:bf:4d:56:41:da:37:24:c3: 85:d5:10:14:a5:3e:7b:77:f1:66:8e:38:6c:31:dc:da:1b:05: 86:f6:d1:ee:29:60:45:68:a8:0d:51:35:93:36:e5:1c:a5:12: aa:c9:ee:07:85:89:30:c5:d6:1c:9d:97:fd:38:04:eb:31:b9: d9:2f:b4:d4:ba:3d:58:81:76:1b:36:98:62:8a:48:18:1e:ec: 45:00:81:67:4a:33:a2:6c:a6:91:7a:82:d0:ac:be:6e:91:51: c9:f2:d7:74 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURsKRWllzmD9hm0PltDImxsNpzgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3 ZTc5N2I2ODAeFw0yNTA2MjgwNDA4MzNaFw0yNTA2MjkwNjQ3MzNaMDMxMTAvBgNV BAMTKDQwQjA1RkUyN0I4MzlEQzcwQTVFMUJERTcyOTJBOUZGRkIwNDdGMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7MYU0L/JtLsoue77GnWJ7goY0 ll8OCDh8/VPFEHq2Y0fQ9YgMYDEBUkvpTGJtE6XHzWtJW+6+SlBHEbU9J08xziAe 6irEFH1qQ2yaGuSD9Hpqg5s7faJhfDj/zKdzWsbYhrHxKoMVlHDhAG0mf8yvb/kj KG7X4Jys2FpMxD2u1G6Z3FcM125swpxS+kQx3M+XwxMlRIuAvkR0bdMdkHww5rZ6 NRRBEOhKB6nEepP1uSQRbADmYv/Ox3VGlx/UALMUhhFH61zGbDZbdESk+1RluhQA OlKPCs/oq3Vcbao4F7sMupvWSUlCHQlLSwEKpc0uHd2EC9hM+yfjaC2KAkY/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQLBf4nuDnccKXhvecpKp//sEfxUwHwYDVR0j BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1 NWUyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZDE5ZGIyMC00 NjUzLTQ4ZDQtOGZjNC01ODBkMTM2OWI3YzQvMC81Q0RDMDRCQjIzRUFBNENFQ0M3 OTFERkUwNEJCMDI4QjdFNzk3QjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6rXmg6F+uXb2+rFh9Qm 9jQ+x+8QsXgGEe4h2zYpqFCIJy3muRFF64l2HFXlPw5RQu6/rJt+ys6uVnNVnhg5 qtVpQ1aHQROoAhx4yevrpS6rUyQ1iw13QeR1eOhEB4Lo/tETKgA6ef7NLyeZsjNN KvHPKN8Xk5ot2Djn4UyCHy8pGVkwPeH2X4wwnFoDQ5Q4QXjP906/Gn7vRr9NVkHa NyTDhdUQFKU+e3fxZo44bDHc2hsFhvbR7ilgRWioDVE1kzblHKUSqsnuB4WJMMXW HJ2X/TgE6zG52S+01Lo9WIF2GzaYYopIGB7sRQCBZ0ozomymkXqC0Ky+bpFRyfLX dA== -----END CERTIFICATE-----Generated at Sat Jun 28 20:13:24 2025 by rpki-client