$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft File: 6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft (raw, json) Hash identifier: L52qXMsLsejCfcAbOVHI7Ya4LCcaV3sZYuFCtqjJUx0= Subject key identifier: 39:17:4D:A8:B7:19:B6:DC:01:E2:C0:5C:55:F1:F8:55:D7:2D:11:EA Authority key identifier: 62:03:32:7B:6A:4B:0A:FB:98:2B:64:0B:8B:FF:2A:92:B1:C7:33:43 Certificate issuer: /CN=6203327B6A4B0AFB982B640B8BFF2A92B1C73343 Certificate serial: 1900116391591E011CFBC9357449A6CDEA3B29B4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft Manifest number: C1 Signing time: Sun 29 Jun 2025 21:51:27 +0000 Manifest this update: Sun 29 Jun 2025 21:46:27 +0000 Manifest next update: Tue 01 Jul 2025 00:45:27 +0000 Files and hashes: 1: 326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa (hash: 1uuqh7vWgIM0zB+uNA1obgzEdiTwrJmrg/6SIClfVTE=) 2: 6203327B6A4B0AFB982B640B8BFF2A92B1C73343.crl (hash: XEYdauRWVBFHk/9l229VrlR689MNicaJArSu+uMF9ho=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.crl rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 00:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:00:11:63:91:59:1e:01:1c:fb:c9:35:74:49:a6:cd:ea:3b:29:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6203327B6A4B0AFB982B640B8BFF2A92B1C73343 Validity Not Before: Jun 29 21:46:27 2025 GMT Not After : Jul 1 00:45:27 2025 GMT Subject: CN=39174DA8B719B6DC01E2C05C55F1F855D72D11EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ac:b5:ba:37:63:5c:7d:60:49:88:f1:48:65: f2:77:f1:ca:8e:5c:dc:89:e5:d3:03:88:86:19:a5: da:b6:05:12:52:46:7a:3b:2c:fc:ed:a4:bf:e2:a9: d7:85:e9:34:37:3b:6e:06:8e:cd:56:a2:9f:3c:6e: 55:d3:5b:d8:58:67:0b:4f:2a:a1:2a:01:d4:ab:8b: c3:2d:88:1f:d1:28:a1:94:9b:4b:90:81:70:95:46: 7b:19:aa:4e:3b:e3:9f:41:7a:5e:c9:20:7a:bd:2c: 5d:f5:98:3a:08:b6:e7:30:8d:11:7b:ea:7c:50:77: ff:32:60:6b:f2:71:ec:48:80:57:52:3f:27:63:4e: 48:c4:35:01:31:ba:d8:47:c6:54:60:50:b4:23:d4: 3b:80:ca:d4:5d:7a:c4:80:5d:21:3e:fa:46:fb:1e: c1:7b:7c:29:ae:b9:dc:5e:67:ff:e6:ad:35:7a:47: ec:44:4a:53:cd:19:f3:3c:33:c2:57:42:74:56:ea: 2f:3e:ed:57:e5:96:4c:42:8c:69:f4:fd:f6:94:90: eb:22:53:36:17:39:e2:f4:89:ec:5c:d7:e1:fa:35: 1c:78:67:30:49:54:c5:d8:cf:e7:96:d8:b9:14:0a: 9f:e9:b0:df:1c:07:08:cd:35:64:01:40:35:ba:61: 84:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:17:4D:A8:B7:19:B6:DC:01:E2:C0:5C:55:F1:F8:55:D7:2D:11:EA X509v3 Authority Key Identifier: keyid:62:03:32:7B:6A:4B:0A:FB:98:2B:64:0B:8B:FF:2A:92:B1:C7:33:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:cd:3b:7d:16:26:fb:67:11:f4:59:c5:b9:d8:47:96:ea:86: 31:e6:45:aa:8a:14:42:94:1b:ee:db:c3:c6:58:37:26:c4:b7: e7:d9:96:89:ea:7c:00:d9:7d:4d:87:9c:16:cf:28:10:89:ef: b4:87:d4:16:4e:63:b8:87:c7:45:a4:61:2c:b1:56:1e:f7:90: 8d:62:dd:2f:e9:00:34:c5:1d:90:ab:85:1e:2b:e9:e4:cb:c8: 8e:83:a1:98:01:9c:a7:d1:18:7a:ec:24:25:4d:b5:02:59:e8: 72:de:01:96:02:cf:34:8b:4f:f6:a0:4a:61:a3:aa:d4:e2:24: 02:22:1d:2b:dc:b9:28:f3:bc:e2:56:78:c1:d8:4f:2e:0a:98: a9:24:4c:97:88:83:25:eb:d2:fe:ae:7f:7f:fb:f4:3a:52:5c: 0f:35:b5:98:31:47:13:10:0c:dd:7c:33:bc:93:8e:80:81:f0: e3:df:c6:ae:0f:76:60:ff:2b:09:d2:31:51:d1:43:4e:40:11: b9:a1:53:5c:46:a5:2c:82:33:12:7e:03:4e:c6:7c:aa:08:c3: 91:44:47:1e:b7:1f:39:97:94:4b:58:ba:3f:cc:17:b5:ba:6b: 0a:32:66:db:b6:f1:c5:a8:9f:b5:ba:78:d9:ba:48:b5:78:17: 39:9d:fb:78 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGQARY5FZHgEc+8k1dEmmzeo7KbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIwMzMyN0I2QTRCMEFGQjk4MkI2NDBCOEJGRjJBOTJC MUM3MzM0MzAeFw0yNTA2MjkyMTQ2MjdaFw0yNTA3MDEwMDQ1MjdaMDMxMTAvBgNV BAMTKDM5MTc0REE4QjcxOUI2REMwMUUyQzA1QzU1RjFGODU1RDcyRDExRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rLW6N2NcfWBJiPFIZfJ38cqO XNyJ5dMDiIYZpdq2BRJSRno7LPztpL/iqdeF6TQ3O24Gjs1Wop88blXTW9hYZwtP KqEqAdSri8MtiB/RKKGUm0uQgXCVRnsZqk47459Bel7JIHq9LF31mDoItucwjRF7 6nxQd/8yYGvycexIgFdSPydjTkjENQExuthHxlRgULQj1DuAytRdesSAXSE++kb7 HsF7fCmuudxeZ//mrTV6R+xESlPNGfM8M8JXQnRW6i8+7VfllkxCjGn0/faUkOsi UzYXOeL0iexc1+H6NRx4ZzBJVMXYz+eW2LkUCp/psN8cBwjNNWQBQDW6YYQXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUORdNqLcZttwB4sBcVfH4VdctEeowHwYDVR0j BBgwFoAUYgMye2pLCvuYK2QLi/8qkrHHM0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmVjYmM0MDQtYWM0My00NDliLThjN2UtOGYxZTk5ZDlh YzQ5LzMvNjIwMzMyN0I2QTRCMEFGQjk4MkI2NDBCOEJGRjJBOTJCMUM3MzM0My5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy82MjAzMzI3QjZBNEIwQUZCOTgyQjY0MEI4 QkZGMkE5MkIxQzczMzQzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZlY2JjNDA0LWFjNDMtNDQ5Yi04YzdlLThmMWU5OWQ5YWM0OS8zLzYyMDMzMjdC NkE0QjBBRkI5ODJCNjQwQjhCRkYyQTkyQjFDNzMzNDMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAEzTt9 Fib7ZxH0WcW52EeW6oYx5kWqihRClBvu28PGWDcmxLfn2ZaJ6nwA2X1Nh5wWzygQ ie+0h9QWTmO4h8dFpGEssVYe95CNYt0v6QA0xR2Qq4UeK+nky8iOg6GYAZyn0Rh6 7CQlTbUCWehy3gGWAs80i0/2oEpho6rU4iQCIh0r3Lko87ziVnjB2E8uCpipJEyX iIMl69L+rn9/+/Q6UlwPNbWYMUcTEAzdfDO8k46AgfDj38auD3Zg/ysJ0jFR0UNO QBG5oVNcRqUsgjMSfgNOxnyqCMORREcetx85l5RLWLo/zBe1umsKMmbbtvHFqJ+1 unjZuki1eBc5nft4 -----END CERTIFICATE-----Generated at Mon Jun 30 18:18:38 2025 by rpki-client