$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/3/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.mft File: 5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.mft (raw, json) Hash identifier: 3l+GNrMkmW4GeA1zbHWswGvxOyQRuUscdBmgX48rrbw= Subject key identifier: A5:52:30:24:8F:46:3F:BF:65:97:91:12:BF:16:DE:02:03:23:F9:B1 Authority key identifier: 5C:76:E6:4D:72:F3:F9:5E:46:8F:23:BE:C4:5D:C2:F2:FF:76:93:8B Certificate issuer: /CN=5C76E64D72F3F95E468F23BEC45DC2F2FF76938B Certificate serial: 6C323A4BC834D12217DFCB3B422941E8451DA25F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/3/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.mft Manifest number: 17 Signing time: Mon 30 Jun 2025 11:30:28 +0000 Manifest this update: Mon 30 Jun 2025 11:25:28 +0000 Manifest next update: Tue 01 Jul 2025 13:10:28 +0000 Files and hashes: 1: 5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.crl (hash: 1o6IgFTmul+jo+TLXC3sOl03xwsZPIz1NX+8Q7x9YDc=) 2: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: e0ZUE2ihMqIcVzaW4KaZGqefPbQ9GLKeZeIru7vw7OQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/3/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/3/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 06:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:32:3a:4b:c8:34:d1:22:17:df:cb:3b:42:29:41:e8:45:1d:a2:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C76E64D72F3F95E468F23BEC45DC2F2FF76938B Validity Not Before: Jun 30 11:25:28 2025 GMT Not After : Jul 1 13:10:28 2025 GMT Subject: CN=A55230248F463FBF65979112BF16DE020323F9B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:17:0e:7c:64:74:55:0c:68:11:c4:f0:03:25: 68:2b:64:28:63:08:2c:d6:4a:4c:ef:e7:9a:42:c7: 7c:0e:43:fd:9b:a9:fa:c9:e0:f3:85:71:49:79:1f: 07:73:85:d0:ca:1c:36:21:d4:c3:af:52:9d:32:95: 6e:45:6b:7d:8c:8c:1a:01:24:f2:dd:14:73:5b:4a: 58:4d:19:9a:2c:8d:73:10:e5:62:19:b6:04:80:28: fa:32:cc:0a:e7:5d:82:13:1f:9f:28:da:c9:19:01: fe:bf:ff:ab:74:f3:c8:fb:d7:3d:43:04:bb:4a:c4: b1:3f:b3:87:a5:00:73:a6:52:ef:8d:29:82:82:d4: 0b:7c:bc:81:be:84:a4:12:af:8e:8b:3c:a5:b5:6c: 2d:22:ea:7c:40:a0:34:09:c2:1c:88:3a:21:46:db: 19:62:d5:7e:cd:56:1f:7f:b5:e6:39:20:a2:f7:c2: 2f:4c:ad:7a:cd:43:df:20:87:e5:54:42:e8:fa:45: 14:ae:49:62:02:e2:f5:be:96:79:81:58:a3:f4:7b: 63:86:8d:f7:b6:ee:21:90:70:2c:b1:63:82:65:46: 7d:2c:34:02:5d:be:d5:69:00:ab:b8:ad:c3:8d:2d: 11:70:cb:4d:23:f9:a6:af:b9:f6:c6:f9:6d:d1:70: fa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:52:30:24:8F:46:3F:BF:65:97:91:12:BF:16:DE:02:03:23:F9:B1 X509v3 Authority Key Identifier: keyid:5C:76:E6:4D:72:F3:F9:5E:46:8F:23:BE:C4:5D:C2:F2:FF:76:93:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/3/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/3/5C76E64D72F3F95E468F23BEC45DC2F2FF76938B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:85:56:f3:82:f8:22:f4:99:84:e9:90:08:df:83:31:75:65: 14:6d:ed:eb:f9:9d:57:f2:a4:32:20:a8:2b:f8:9c:ab:c9:bb: 56:37:75:e8:0b:a4:41:29:3a:ab:66:70:13:0a:d3:e7:91:a3: 39:2f:1c:e2:5a:7c:b2:d7:e7:bf:d2:ed:58:f5:1c:54:b9:fb: 57:30:d0:31:3a:19:df:69:a7:3b:d4:a4:9d:5b:6a:16:e7:cd: d6:e8:f5:3d:a1:c9:46:39:e9:b2:d2:36:c8:d4:e0:6a:9d:a4: 31:6b:33:90:bc:df:66:59:4a:4b:a1:ce:e6:f1:39:b2:62:69: 68:d6:d8:7c:9c:8e:dd:27:36:25:46:34:8d:7f:68:3b:bd:61: 5c:71:03:39:ca:60:1e:9c:62:0e:ea:7a:bf:fb:b8:56:8c:d7: e4:ba:c5:52:88:1a:8f:c5:39:4c:04:6f:67:fd:61:57:b0:a8: 31:3a:43:3b:9a:f9:6f:8d:d1:4b:5b:a2:75:59:3c:3a:d4:68: 81:fa:ec:45:79:86:ac:dd:9d:d9:2d:f4:e1:b1:fc:61:e1:7d: fa:ae:06:b6:a5:1e:3b:8b:0f:38:1d:59:b9:20:e5:05:5c:89: e9:3d:f3:ea:89:20:1f:1f:36:f4:ba:be:75:50:01:be:7b:b0: 6e:f0:3e:99 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbDI6S8g00SIX38s7QilB6EUdol8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3NkU2NEQ3MkYzRjk1RTQ2OEYyM0JFQzQ1REMyRjJG Rjc2OTM4QjAeFw0yNTA2MzAxMTI1MjhaFw0yNTA3MDExMzEwMjhaMDMxMTAvBgNV BAMTKEE1NTIzMDI0OEY0NjNGQkY2NTk3OTExMkJGMTZERTAyMDMyM0Y5QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUFw58ZHRVDGgRxPADJWgrZChj CCzWSkzv55pCx3wOQ/2bqfrJ4POFcUl5HwdzhdDKHDYh1MOvUp0ylW5Fa32MjBoB JPLdFHNbSlhNGZosjXMQ5WIZtgSAKPoyzArnXYITH58o2skZAf6//6t088j71z1D BLtKxLE/s4elAHOmUu+NKYKC1At8vIG+hKQSr46LPKW1bC0i6nxAoDQJwhyIOiFG 2xli1X7NVh9/teY5IKL3wi9MrXrNQ98gh+VUQuj6RRSuSWIC4vW+lnmBWKP0e2OG jfe27iGQcCyxY4JlRn0sNAJdvtVpAKu4rcONLRFwy00j+aavufbG+W3RcPrdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUpVIwJI9GP79ll5ESvxbeAgMj+bEwHwYDVR0j BBgwFoAUXHbmTXLz+V5GjyO+xF3C8v92k4swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzMvNUM3NkU2NEQ3MkYzRjk1RTQ2OEYyM0JFQzQ1REMyRjJGRjc2OTM4Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMS81Qzc2RTY0RDcyRjNGOTVFNDY4RjIzQkVD NDVEQzJGMkZGNzY5MzhCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy8zLzVDNzZFNjRE NzJGM0Y5NUU0NjhGMjNCRUM0NURDMkYyRkY3NjkzOEIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBshVbz gvgi9JmE6ZAI34MxdWUUbe3r+Z1X8qQyIKgr+JyrybtWN3XoC6RBKTqrZnATCtPn kaM5LxziWnyy1+e/0u1Y9RxUuftXMNAxOhnfaac71KSdW2oW583W6PU9oclGOemy 0jbI1OBqnaQxazOQvN9mWUpLoc7m8TmyYmlo1th8nI7dJzYlRjSNf2g7vWFccQM5 ymAenGIO6nq/+7hWjNfkusVSiBqPxTlMBG9n/WFXsKgxOkM7mvlvjdFLW6J1WTw6 1GiB+uxFeYas3Z3ZLfThsfxh4X36rga2pR47iw84HVm5IOUFXInpPfPqiSAfHzb0 ur51UAG+e7Bu8D6Z -----END CERTIFICATE-----Generated at Mon Jun 30 18:53:31 2025 by rpki-client