$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: CLZtHckjjBoyG3lP2i1xXBWjfS2ZI5n6B++PbYeya+4= Subject key identifier: 84:17:B3:65:43:1A:E8:65:13:A3:A9:55:C4:95:81:8A:F3:9E:5D:6E Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 13727644E4DF40ED6AFEFE21E836E8FDB40B52FF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: 47 Signing time: Sat 23 Aug 2025 14:25:56 +0000 Manifest this update: Sat 23 Aug 2025 14:20:56 +0000 Manifest next update: Sun 24 Aug 2025 15:01:56 +0000 Files and hashes: 1: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: liNvYK+5OOYj3Coe2sTyDe2DZzHH+Z6XjctIQCQDp58=) 2: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: sTs8O8KBp3/QEgTlhnDJhb+nhykdynr848iPv4Z/TIo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 15:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:72:76:44:e4:df:40:ed:6a:fe:fe:21:e8:36:e8:fd:b4:0b:52:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Aug 23 14:20:56 2025 GMT Not After : Aug 24 15:01:56 2025 GMT Subject: CN=8417B365431AE86513A3A955C495818AF39E5D6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:55:c2:5b:87:f1:90:1f:e9:8c:e0:c5:a2:e3: ae:06:16:cb:88:26:3c:44:6d:30:0c:93:c0:c4:56: f9:2e:31:dc:d7:1b:a6:81:89:7a:d6:06:eb:9a:e2: bd:35:9d:d2:dc:f6:25:b0:cc:43:ec:b9:92:c2:87: f4:ce:ab:98:90:1c:14:39:f6:96:24:b7:a3:ce:14: f0:1b:ea:2a:f8:6b:30:0c:47:f5:b5:bb:83:c0:14: 27:15:32:a2:d7:f3:d3:5e:63:67:71:5c:63:47:c4: 61:4d:e5:79:83:ee:88:69:05:bf:f5:a8:e4:1f:b6: 7f:df:3f:eb:3a:e7:f5:77:f4:cc:14:f9:a7:c1:d6: 48:f5:96:98:76:82:23:79:5f:2b:1d:d9:48:04:06: 4c:16:1b:8d:7c:dc:c7:77:6f:59:67:09:a0:a5:c3: 13:68:21:7f:c8:14:e9:77:e6:9f:52:16:42:ac:c5: ca:27:66:b1:33:36:e6:c3:5a:b0:ab:22:65:e5:48: dd:0a:82:16:a7:13:d3:84:c8:20:dd:58:62:9e:23: 87:3e:ca:cf:f5:1b:15:cf:54:2e:7e:fd:93:9e:87: 38:a2:6e:9a:86:b7:1d:37:4b:49:06:9a:d6:c8:28: c1:44:c0:ab:af:40:8c:1a:06:43:96:86:e2:2e:2d: 1d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:17:B3:65:43:1A:E8:65:13:A3:A9:55:C4:95:81:8A:F3:9E:5D:6E X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:74:3a:0e:37:d1:1e:4d:e0:0a:1d:6b:a2:4c:1b:2b:a2:13: d4:c5:bf:98:3c:aa:06:08:c8:43:2d:9d:51:0e:55:34:b8:c4: 8f:d7:52:3f:a6:6e:c6:e9:ef:0e:14:3c:bc:a7:b2:02:da:ca: eb:02:54:b1:e1:55:83:cb:ed:51:34:dd:de:9c:87:00:2a:39: 39:db:21:95:90:b0:7a:3c:41:22:1d:74:a4:5a:15:67:86:f7: 4b:2a:12:ef:06:0a:64:5d:03:ec:82:41:d4:e9:cf:b7:a1:f0: 01:4e:4e:9d:01:6a:b0:c6:cf:fa:b6:f5:5d:15:d2:8d:60:7b: 09:9c:ff:ab:9c:7e:02:37:be:6c:ed:c3:4a:4c:ae:fd:e7:d0: 38:04:9e:7f:80:80:ff:2c:3e:8c:12:99:f5:08:7f:0d:a5:fd: da:e1:2a:03:42:77:92:6c:9d:80:d7:a0:d2:7d:94:8b:5d:a6: 6a:16:90:01:47:a3:45:19:e1:b9:b8:9a:f7:d0:08:0b:62:93: 33:f6:55:70:cb:ad:5f:d2:8e:bf:e4:cb:bf:86:df:66:9e:91: b1:2a:83:c2:c2:0d:e2:2c:2b:59:08:72:3b:b0:ad:fd:71:fe: 76:17:23:c6:b7:ef:16:01:cd:6c:74:c7:09:e9:de:4b:81:d9: 65:d3:78:09 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUE3J2ROTfQO1q/v4h6Dbo/bQLUv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNTA4MjMxNDIwNTZaFw0yNTA4MjQxNTAxNTZaMDMxMTAvBgNV BAMTKDg0MTdCMzY1NDMxQUU4NjUxM0EzQTk1NUM0OTU4MThBRjM5RTVENkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnVcJbh/GQH+mM4MWi464GFsuI JjxEbTAMk8DEVvkuMdzXG6aBiXrWBuua4r01ndLc9iWwzEPsuZLCh/TOq5iQHBQ5 9pYkt6POFPAb6ir4azAMR/W1u4PAFCcVMqLX89NeY2dxXGNHxGFN5XmD7ohpBb/1 qOQftn/fP+s65/V39MwU+afB1kj1lph2giN5Xysd2UgEBkwWG4183Md3b1lnCaCl wxNoIX/IFOl35p9SFkKsxconZrEzNubDWrCrImXlSN0KghanE9OEyCDdWGKeI4c+ ys/1GxXPVC5+/ZOehziibpqGtx03S0kGmtbIKMFEwKuvQIwaBkOWhuIuLR0NAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUhBezZUMa6GUTo6lVxJWBivOeXW4wHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBrdDoO N9EeTeAKHWuiTBsrohPUxb+YPKoGCMhDLZ1RDlU0uMSP11I/pm7G6e8OFDy8p7IC 2srrAlSx4VWDy+1RNN3enIcAKjk52yGVkLB6PEEiHXSkWhVnhvdLKhLvBgpkXQPs gkHU6c+3ofABTk6dAWqwxs/6tvVdFdKNYHsJnP+rnH4CN75s7cNKTK7959A4BJ5/ gID/LD6MEpn1CH8Npf3a4SoDQneSbJ2A16DSfZSLXaZqFpABR6NFGeG5uJr30AgL YpMz9lVwy61f0o6/5Mu/ht9mnpGxKoPCwg3iLCtZCHI7sK39cf52FyPGt+8WAc1s dMcJ6d5Lgdll03gJ -----END CERTIFICATE-----Generated at Sun Aug 24 08:18:10 2025 by rpki-client