$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/4/26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.mft File: 26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.mft (raw, json) Hash identifier: wFMhyA7REX7WhddtU5ZE040gonpdgFrf2LSRMWqthMs= Subject key identifier: 79:58:A9:17:E3:C1:F9:F3:6C:8F:92:4C:CC:CB:FA:E8:4F:EF:CE:67 Authority key identifier: 26:86:0E:EE:FB:78:34:ED:15:DC:9B:A7:F2:CA:8C:8B:A4:FA:05:32 Certificate issuer: /CN=26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532 Certificate serial: 7D2DD27315E7442BD27BBE0F65C9F306724A47D2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/4/26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.mft Manifest number: 0B Signing time: Sun 29 Jun 2025 18:30:28 +0000 Manifest this update: Sun 29 Jun 2025 18:25:28 +0000 Manifest next update: Mon 30 Jun 2025 21:11:28 +0000 Files and hashes: 1: 26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.crl (hash: O8BTEMQMqapNU7VssirzilfOXSaG+UGuuDdfFo8z4Vc=) 2: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: M7xni9tUw4FgGBy+9A8F+8BP803MsR5hQGX9/GC08aM=) 3: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: SMLoi7kFU1bRNzNiJpgxjQRJ+ZMVz7lk2QlI7T9ohXM=) 4: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: vRUJh5dVmPJFZAT5nThUuB5lHodEzpKLW+z3vniJchw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/4/26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/4/26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:2d:d2:73:15:e7:44:2b:d2:7b:be:0f:65:c9:f3:06:72:4a:47:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532 Validity Not Before: Jun 29 18:25:28 2025 GMT Not After : Jun 30 21:11:28 2025 GMT Subject: CN=7958A917E3C1F9F36C8F924CCCCBFAE84FEFCE67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a6:04:19:74:dc:37:15:31:a8:b3:1a:32:82: 74:9a:71:ce:cd:8d:f5:92:0b:a8:0e:71:86:e7:ae: 96:f6:d5:36:70:c5:7a:c6:15:27:17:08:c7:bf:4c: e5:af:f6:a2:28:d0:ec:0a:59:01:44:fd:ef:df:8c: 25:f8:f1:bd:ae:72:d8:c1:e5:dc:fc:a5:0c:08:d6: 3a:05:43:88:3e:58:28:d3:31:35:24:5d:45:73:84: d0:18:66:3e:ee:21:13:f2:1b:10:98:31:98:4d:66: 10:e2:a7:ae:27:b8:c8:20:9a:f0:02:98:d3:72:af: e5:4e:ad:5c:83:a1:31:75:ea:34:d8:4c:a0:e3:a1: f0:59:23:d5:8d:97:06:d4:e7:96:de:ba:4e:6b:ac: 92:63:18:0e:c2:5d:73:a6:a0:0f:89:5a:c2:4d:bd: c2:87:95:70:25:30:61:52:57:67:7b:92:32:66:b3: 41:23:1c:fa:44:7d:07:f6:01:04:72:7e:12:fb:e3: 02:8a:fd:74:ba:f4:34:5f:c8:ba:f3:d7:6a:91:8c: 9a:69:3d:0a:09:dc:2a:ed:aa:fc:d8:48:a4:5d:6c: f3:dd:f7:14:7d:b5:39:cf:ad:17:cc:25:51:23:4a: 98:94:4b:29:cc:5b:e0:1c:99:14:6b:35:c4:c0:99: bc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:58:A9:17:E3:C1:F9:F3:6C:8F:92:4C:CC:CB:FA:E8:4F:EF:CE:67 X509v3 Authority Key Identifier: keyid:26:86:0E:EE:FB:78:34:ED:15:DC:9B:A7:F2:CA:8C:8B:A4:FA:05:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/4/26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/4/26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:60:a1:1c:e2:01:fd:e3:cc:b6:d2:44:34:79:3b:2f:11:88: cf:ed:60:93:0e:cd:b8:50:28:f3:9a:7b:83:6b:e1:52:b7:4e: 19:c0:d0:d7:fb:80:2e:d6:3d:37:e2:e0:78:22:bc:d2:a7:44: 58:8b:89:24:ea:da:eb:df:5e:fb:39:dc:10:a5:86:7a:46:88: 4a:20:69:ee:35:dd:47:98:55:44:f0:cb:7c:50:b9:23:1e:32: 56:28:96:26:f7:fc:96:ea:dc:83:f0:40:06:16:d1:4c:0b:03: a4:c1:33:9d:38:5c:a1:2b:63:7a:57:c8:06:5d:1a:88:18:e3: 84:0c:01:10:6a:71:ca:16:12:a5:cf:1b:90:da:2f:d9:b1:2c: f8:34:88:72:3c:76:5a:92:53:20:2e:e3:c1:8f:48:25:13:23: 49:a4:23:3a:5f:f2:2e:d2:cd:46:ec:20:2a:31:e1:8c:b5:3b: 94:2e:3d:3f:b9:45:28:46:55:90:bd:5c:55:78:82:bc:79:d7: b7:b3:2c:0f:9c:60:b1:8f:ac:60:6b:aa:d8:44:61:19:62:72: 56:01:8e:e0:c6:f3:c3:f3:11:6c:20:7d:c0:9a:fd:cc:af:af: 69:cd:22:80:d0:0d:23:50:19:9a:1f:57:99:1c:9a:ff:69:55: d5:50:6d:2c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfS3ScxXnRCvSe74PZcnzBnJKR9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY4NjBFRUVGQjc4MzRFRDE1REM5QkE3RjJDQThDOEJB NEZBMDUzMjAeFw0yNTA2MjkxODI1MjhaFw0yNTA2MzAyMTExMjhaMDMxMTAvBgNV BAMTKDc5NThBOTE3RTNDMUY5RjM2QzhGOTI0Q0NDQ0JGQUU4NEZFRkNFNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMpgQZdNw3FTGosxoygnSacc7N jfWSC6gOcYbnrpb21TZwxXrGFScXCMe/TOWv9qIo0OwKWQFE/e/fjCX48b2uctjB 5dz8pQwI1joFQ4g+WCjTMTUkXUVzhNAYZj7uIRPyGxCYMZhNZhDip64nuMggmvAC mNNyr+VOrVyDoTF16jTYTKDjofBZI9WNlwbU55beuk5rrJJjGA7CXXOmoA+JWsJN vcKHlXAlMGFSV2d7kjJms0EjHPpEfQf2AQRyfhL74wKK/XS69DRfyLrz12qRjJpp PQoJ3CrtqvzYSKRdbPPd9xR9tTnPrRfMJVEjSpiUSynMW+AcmRRrNcTAmby/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUeVipF+PB+fNsj5JMzMv66E/vzmcwHwYDVR0j BBgwFoAUJoYO7vt4NO0V3Jun8sqMi6T6BTIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzQvMjY4NjBFRUVGQjc4MzRFRDE1REM5QkE3RjJDQThDOEJBNEZBMDUzMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy8yNjg2MEVFRUZCNzgzNEVEMTVEQzlCQTdG MkNBOEM4QkE0RkEwNTMyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy80LzI2ODYwRUVF RkI3ODM0RUQxNURDOUJBN0YyQ0E4QzhCQTRGQTA1MzIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBIYKEc 4gH948y20kQ0eTsvEYjP7WCTDs24UCjzmnuDa+FSt04ZwNDX+4Au1j034uB4IrzS p0RYi4kk6trr3177OdwQpYZ6RohKIGnuNd1HmFVE8Mt8ULkjHjJWKJYm9/yW6tyD 8EAGFtFMCwOkwTOdOFyhK2N6V8gGXRqIGOOEDAEQanHKFhKlzxuQ2i/ZsSz4NIhy PHZaklMgLuPBj0glEyNJpCM6X/Iu0s1G7CAqMeGMtTuULj0/uUUoRlWQvVxVeIK8 ede3sywPnGCxj6xga6rYRGEZYnJWAY7gxvPD8xFsIH3Amv3Mr69pzSKA0A0jUBma H1eZHJr/aVXVUG0s -----END CERTIFICATE-----Generated at Mon Jun 30 00:45:29 2025 by rpki-client