$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft File: 75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft (raw, json) Hash identifier: BOMCWnqUiXby9izeRsRNpJKZwmMI0JIhSwGgUZB3Uus= Subject key identifier: 1A:99:C5:C1:8E:2B:97:16:DA:3F:6A:4C:C4:17:6F:0E:3D:E3:82:B2 Authority key identifier: 75:D2:E4:BD:F4:BE:FC:82:AC:93:8E:CC:34:6F:0B:32:16:59:75:23 Certificate issuer: /CN=75d2e4bdf4befc82ac938ecc346f0b3216597523 Certificate serial: 03AE14C1BA48B3D49A45DC8BB881E48ACFD5EFBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft Manifest number: 01E6 Signing time: Sun 29 Jun 2025 02:29:49 +0000 Manifest this update: Sun 29 Jun 2025 02:24:49 +0000 Manifest next update: Mon 30 Jun 2025 02:38:49 +0000 Files and hashes: 1: 323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa (hash: pidPjaC/0SzUTjVt7jeHfSi0+syOL6p0IuoBQSBkar0=) 2: AS47272.asa (hash: 5A4hGWi51Dr3GUKz0JreZKxqqUyPHxsLuzlsoM4jakU=) 3: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (hash: trryrU9wIYmZgEJdzHNYY5h4S9o2VXqY8o0Zi9mSgQo=) 4: 75D2E4BDF4BEFC82AC938ECC346F0B3216597523.crl (hash: WW8ykswSmhOuwcfmE0Ax7NAgvpfYxWzXElW5U4bx+pk=) 5: 323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa (hash: 1LnjtNWO4AFu9pCH4CmYsFOHKUIy1MM7xTorxxHQjEg=) 6: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (hash: n7zi8erDwVkaEAccTf7AgcxyPGv2dh/rzzppLzmNaTU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 02:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ae:14:c1:ba:48:b3:d4:9a:45:dc:8b:b8:81:e4:8a:cf:d5:ef:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75d2e4bdf4befc82ac938ecc346f0b3216597523 Validity Not Before: Jun 29 02:24:49 2025 GMT Not After : Jun 30 02:38:49 2025 GMT Subject: CN=1A99C5C18E2B9716DA3F6A4CC4176F0E3DE382B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:91:a7:44:d5:94:09:93:6b:6b:92:7e:fb: ab:2f:67:d8:b9:48:92:f3:41:38:c2:82:16:ee:2d: a4:4b:ac:8a:97:57:f9:4c:8b:0e:f1:66:c4:c1:ad: 86:6d:f7:22:6f:e5:09:10:a4:5a:52:09:6c:e1:eb: f2:11:e1:80:a3:27:6d:80:45:c7:14:e6:a5:64:a1: 06:df:7b:e9:c9:3d:77:10:cc:e3:62:be:15:7b:29: a3:20:aa:8d:a1:9f:1c:63:c4:e0:ee:26:6b:17:40: 07:db:c4:05:5d:2d:63:bd:72:a6:20:e9:d8:ac:e9: 9c:a7:90:1b:84:6e:33:53:37:de:e7:3c:81:67:82: fd:05:19:13:34:ff:b2:a9:d2:64:25:7c:3c:f8:e2: f6:49:9c:69:7c:cb:a6:a6:69:f2:d1:5d:59:73:45: 45:37:4a:84:cd:b4:e8:61:a9:4d:27:37:29:95:37: b2:a1:95:f3:da:03:34:22:b2:3a:e6:f5:71:1d:f6: 55:bb:b7:a3:65:60:21:da:07:e9:ea:02:1a:e8:69: fd:d3:55:9e:c3:96:50:d0:2f:6d:3a:73:a8:4f:67: 85:fb:d5:88:36:ca:46:34:ce:84:26:4b:bd:c7:36: 4a:aa:e5:4f:fb:36:15:87:5a:bd:65:3c:f8:f9:cd: 7d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:99:C5:C1:8E:2B:97:16:DA:3F:6A:4C:C4:17:6F:0E:3D:E3:82:B2 X509v3 Authority Key Identifier: keyid:75:D2:E4:BD:F4:BE:FC:82:AC:93:8E:CC:34:6F:0B:32:16:59:75:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:1b:ae:27:c0:a0:19:7a:02:0b:4e:90:09:bc:c8:06:e5:3c: 4e:a4:89:0f:39:5b:a2:c2:80:8d:40:a9:32:42:d0:06:a2:08: cb:c2:5f:71:6b:3b:bd:81:a4:ff:1e:41:65:9b:28:5f:8f:28: 22:2c:c5:cb:51:49:c6:0c:3f:33:e0:3a:a2:d9:9d:c5:39:c3: a3:86:1a:4b:09:f4:37:9a:a9:3a:3b:30:3b:04:7d:45:0a:14: ca:38:ef:30:9c:4c:f9:db:47:a5:08:2d:10:54:1c:35:96:5f: 5e:20:2f:84:40:7b:ec:65:fd:2b:0c:03:2e:e9:0c:66:6e:00: 47:12:01:54:6a:8e:dc:92:b7:cd:a7:26:81:d8:fc:e4:d7:16: ab:d5:d5:0e:02:74:1c:80:7e:cf:e1:96:41:d7:c5:38:fe:2d: 1d:94:68:2a:05:42:bb:a9:0f:06:87:a1:d7:ae:a2:6b:86:6d: 6a:06:be:a3:73:4c:99:3b:27:06:44:7f:8e:d9:90:02:1b:f9: d3:0e:cf:bd:0e:c2:27:ca:40:d1:45:67:c4:50:e0:92:8f:8e: ad:fb:8d:62:71:86:e4:76:e6:34:32:fb:ea:1b:c6:4c:05:1d: 82:1f:21:b1:e1:69:d9:72:87:8d:af:5f:15:97:b2:01:89:5b: d7:03:00:b5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUA64UwbpIs9SaRdyLuIHkis/V77swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVkMmU0YmRmNGJlZmM4MmFjOTM4ZWNjMzQ2ZjBiMzIx NjU5NzUyMzAeFw0yNTA2MjkwMjI0NDlaFw0yNTA2MzAwMjM4NDlaMDMxMTAvBgNV BAMTKDFBOTlDNUMxOEUyQjk3MTZEQTNGNkE0Q0M0MTc2RjBFM0RFMzgyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjZGnRNWUCZNra5J++6svZ9i5 SJLzQTjCghbuLaRLrIqXV/lMiw7xZsTBrYZt9yJv5QkQpFpSCWzh6/IR4YCjJ22A RccU5qVkoQbfe+nJPXcQzONivhV7KaMgqo2hnxxjxODuJmsXQAfbxAVdLWO9cqYg 6dis6ZynkBuEbjNTN97nPIFngv0FGRM0/7Kp0mQlfDz44vZJnGl8y6amafLRXVlz RUU3SoTNtOhhqU0nNymVN7KhlfPaAzQisjrm9XEd9lW7t6NlYCHaB+nqAhroaf3T VZ7DllDQL206c6hPZ4X71Yg2ykY0zoQmS73HNkqq5U/7NhWHWr1lPPj5zX3/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUGpnFwY4rlxbaP2pMxBdvDj3jgrIwHwYDVR0j BBgwFoAUddLkvfS+/IKsk47MNG8LMhZZdSMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5 OTVkLzAvNzVEMkU0QkRGNEJFRkM4MkFDOTM4RUNDMzQ2RjBCMzIxNjU5NzUyMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkTGt2ZlMtX0lLc2s0N01ORzhMTWha WmRTTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0z MjU1LTQ5ZjktOWI2Yy05YzlmMzg5ODk5NWQvMC83NUQyRTRCREY0QkVGQzgyQUM5 MzhFQ0MzNDZGMEIzMjE2NTk3NTIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRuuJ8CgGXoCC06QCbzI BuU8TqSJDzlbosKAjUCpMkLQBqIIy8JfcWs7vYGk/x5BZZsoX48oIizFy1FJxgw/ M+A6otmdxTnDo4YaSwn0N5qpOjswOwR9RQoUyjjvMJxM+dtHpQgtEFQcNZZfXiAv hEB77GX9KwwDLukMZm4ARxIBVGqO3JK3zacmgdj85NcWq9XVDgJ0HIB+z+GWQdfF OP4tHZRoKgVCu6kPBoeh166ia4Ztaga+o3NMmTsnBkR/jtmQAhv50w7PvQ7CJ8pA 0UVnxFDgko+OrfuNYnGG5HbmNDL76hvGTAUdgh8hseFp2XKHja9fFZeyAYlb1wMA tQ== -----END CERTIFICATE-----Generated at Sun Jun 29 08:57:21 2025 by rpki-client