$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft File: 3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft (raw, json) Hash identifier: GZn63RCrQGnDScgrVYGUx90plIT5HMdeQnWOKwpLgeg= Subject key identifier: CC:75:5B:EF:0F:72:E3:66:74:EF:DD:D1:48:11:AA:6B:84:21:42:CA Authority key identifier: 3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA Certificate issuer: /CN=3F0D5C989D06DEE4CEF73B76423F7D1B248305CA Certificate serial: 7B178CBE888FDF0CD78DA97FAEA9D0BEFECEACC5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft Manifest number: 36 Signing time: Sun 29 Jun 2025 17:51:54 +0000 Manifest this update: Sun 29 Jun 2025 17:46:54 +0000 Manifest next update: Mon 30 Jun 2025 18:50:54 +0000 Files and hashes: 1: 326130393a353463373a313030303a3a2f34382d3438203d3e20323134323939.roa (hash: polSfU3C8waUTNHXjjV/PtCyw7FXJG9dpAnmbVhvFpA=) 2: 326130393a353463373a313030313a3a2f34382d3438203d3e20323134323939.roa (hash: sMFqJHE6ZX3ycW3EXnTJu0zQlY1y10K2aBBpHFeENOs=) 3: 326130393a353463373a316562653a3a2f34382d3438203d3e20323134323939.roa (hash: HE6NA8iuF7m/BEGtvKSapzIZyTFfFUeBBMBI1WKr7Q4=) 4: 326130353a646663333a666434303a3a2f34342d3438203d3e20323134323939.roa (hash: tzPv+0SYW7c4BhO+NRENEMHDxJFYhSgi+7F5pSL26rM=) 5: 3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.crl (hash: e+iqWpHaHbmLcEm0CJWK0gQgEv0nihvZo2n+F/0VaSk=) 6: 326130393a353463373a316562653a3a2f34382d3438203d3e20323039383636.roa (hash: TaPYx3TgPHUyddmtxy9zzW0mG+lkUufKcfpaVs06+uc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.crl rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:17:8c:be:88:8f:df:0c:d7:8d:a9:7f:ae:a9:d0:be:fe:ce:ac:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F0D5C989D06DEE4CEF73B76423F7D1B248305CA Validity Not Before: Jun 29 17:46:54 2025 GMT Not After : Jun 30 18:50:54 2025 GMT Subject: CN=CC755BEF0F72E36674EFDDD14811AA6B842142CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d9:01:dd:dd:21:f5:f9:65:d4:fa:91:97:f3: 54:15:28:1d:9b:53:20:66:b2:b1:3a:34:7d:45:26: f4:9f:99:a9:72:4a:1e:bb:92:c2:09:b1:c1:72:47: a7:7f:4f:03:d6:84:1b:c9:fa:14:06:e5:3b:a3:de: 6d:11:2b:dd:e7:e0:45:36:cc:15:4a:a2:37:c6:ff: 2b:b7:83:5b:37:19:6b:37:43:65:f3:5d:3d:36:36: b7:48:dd:99:88:95:42:f9:a7:65:21:75:a8:e9:99: e2:92:e2:9b:b9:20:ea:8e:fb:1a:53:24:ea:17:8b: 11:ff:40:17:c1:7b:cb:e0:9f:7d:92:d5:b1:53:78: ad:10:fa:a7:01:2e:e6:cb:83:09:02:4c:cb:50:55: 14:60:2c:3a:c8:f5:a5:2b:bc:a4:f2:1c:10:bc:a8: 4b:23:a8:61:ec:b3:1a:0f:9d:62:85:7b:d0:19:6b: 29:91:37:0c:ab:84:41:fa:0c:5a:0f:64:49:eb:2c: 11:27:87:33:0f:0a:85:8a:0e:06:83:88:bf:8c:03: 40:1c:87:98:67:65:be:b1:9e:6d:9c:91:d0:69:e6: 6e:2f:6d:d5:4e:ef:cc:18:16:f6:c0:1f:1b:05:2d: 56:21:98:89:c0:be:26:a5:9b:97:55:f1:80:4b:e6: 48:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:75:5B:EF:0F:72:E3:66:74:EF:DD:D1:48:11:AA:6B:84:21:42:CA X509v3 Authority Key Identifier: keyid:3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:e7:2a:3d:be:55:05:7e:b0:74:97:92:92:be:78:1a:38:d3: 7c:4d:27:ae:b4:73:ef:a1:8f:a5:c4:11:93:1f:d5:be:47:4e: 16:bb:ad:96:c7:7c:88:79:5d:1c:56:11:cf:1c:89:26:6d:a9: 38:d2:ed:2c:03:f6:16:7b:7c:e2:24:dc:92:da:97:2f:2e:96: f7:48:d3:ed:12:7c:e7:76:5b:02:25:e5:bd:1f:ca:8f:0e:c9: db:ad:6c:7d:d2:63:97:12:bd:2a:ad:16:a8:89:55:8c:92:31: 31:b3:3a:93:45:37:ad:82:11:c1:19:74:d5:cb:8a:80:28:76: 0f:fe:46:07:d7:06:4b:82:9f:77:fa:88:dc:a7:62:6c:b1:d3: ec:79:0a:c1:71:49:fd:e5:42:d0:e8:8c:4c:b9:b3:7c:25:b2: f6:e1:15:16:6b:a8:b3:e2:a1:49:25:54:d6:35:33:9d:e9:f2: 4a:bb:8b:6f:b6:19:66:cd:a4:4e:44:86:94:e7:49:80:01:4e: 7f:a2:db:45:ca:4d:0f:d2:1d:3c:ad:55:70:0f:f3:da:7e:c5: 19:3e:f9:e3:73:49:6e:4a:8c:3c:73:47:d7:4a:d3:0f:f1:85: 9b:df:85:31:60:5b:60:1b:4b:72:6c:16:4f:54:81:f6:90:ed: 1d:11:39:97 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUexeMvoiP3wzXjal/rqnQvv7OrMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YwRDVDOTg5RDA2REVFNENFRjczQjc2NDIzRjdEMUIy NDgzMDVDQTAeFw0yNTA2MjkxNzQ2NTRaFw0yNTA2MzAxODUwNTRaMDMxMTAvBgNV BAMTKENDNzU1QkVGMEY3MkUzNjY3NEVGREREMTQ4MTFBQTZCODQyMTQyQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN2QHd3SH1+WXU+pGX81QVKB2b UyBmsrE6NH1FJvSfmalySh67ksIJscFyR6d/TwPWhBvJ+hQG5Tuj3m0RK93n4EU2 zBVKojfG/yu3g1s3GWs3Q2XzXT02NrdI3ZmIlUL5p2UhdajpmeKS4pu5IOqO+xpT JOoXixH/QBfBe8vgn32S1bFTeK0Q+qcBLubLgwkCTMtQVRRgLDrI9aUrvKTyHBC8 qEsjqGHssxoPnWKFe9AZaymRNwyrhEH6DFoPZEnrLBEnhzMPCoWKDgaDiL+MA0Ac h5hnZb6xnm2ckdBp5m4vbdVO78wYFvbAHxsFLVYhmInAvialm5dV8YBL5khBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUzHVb7w9y42Z0793RSBGqa4QhQsowHwYDVR0j BBgwFoAUPw1cmJ0G3uTO9zt2Qj99GySDBcowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2Y4MWUyMzUtODE1OC00MDdlLWJjZmYtZjA5NjM0ODM1 N2EyLzEvM0YwRDVDOTg5RDA2REVFNENFRjczQjc2NDIzRjdEMUIyNDgzMDVDQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy8zRjBENUM5ODlEMDZERUU0Q0VGNzNCNzY0 MjNGN0QxQjI0ODMwNUNBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2NmODFlMjM1LTgxNTgtNDA3ZS1iY2ZmLWYwOTYzNDgzNTdhMi8xLzNGMEQ1Qzk4 OUQwNkRFRTRDRUY3M0I3NjQyM0Y3RDFCMjQ4MzA1Q0EubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAm5yo9 vlUFfrB0l5KSvngaONN8TSeutHPvoY+lxBGTH9W+R04Wu62Wx3yIeV0cVhHPHIkm bak40u0sA/YWe3ziJNyS2pcvLpb3SNPtEnzndlsCJeW9H8qPDsnbrWx90mOXEr0q rRaoiVWMkjExszqTRTetghHBGXTVy4qAKHYP/kYH1wZLgp93+ojcp2JssdPseQrB cUn95ULQ6IxMubN8JbL24RUWa6iz4qFJJVTWNTOd6fJKu4tvthlmzaRORIaU50mA AU5/ottFyk0P0h08rVVwD/PafsUZPvnjc0luSow8c0fXStMP8YWb34UxYFtgG0ty bBZPVIH2kO0dETmX -----END CERTIFICATE-----Generated at Mon Jun 30 01:16:36 2025 by rpki-client