$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json) Hash identifier: i/q0t5dyg+Ha/yyUlXCqqX02CCoiGM1nEZSU7q811yQ= Subject key identifier: 50:BD:73:44:F3:E9:6E:B6:F7:E1:86:42:7C:BF:1C:12:A3:F0:5E:92 Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Certificate serial: 25938F21D36D091C2A33A01538909E7287CC241A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft Manifest number: 5E Signing time: Fri 09 May 2025 17:01:47 +0000 Manifest this update: Fri 09 May 2025 16:56:47 +0000 Manifest next update: Sat 10 May 2025 18:02:47 +0000 Files and hashes: 1: 326131343a373538303a6431303a3a2f34342d3434203d3e20313939333130.roa (hash: d85Du7DNvyLWzCRKR6UAK4BxtZR8aY0O/ltb7NM7kI0=) 2: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: u/JR7/M6BcKICssdDR7j/sPwWvJTPX2G+FFLBgXrUyU=) 3: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: aTOt34lfGuAT3OlCO0qFGpuP0EaWDqkBbckOmG+Fwg4=) 4: 326131343a373538303a6430303a3a2f34342d3434203d3e20313939333130.roa (hash: aLNGjeKxhB+lb52UO94MmUGLP8+twH+NGpyj/wZMn3g=) 5: 326131343a373538303a6432303a3a2f34342d3438203d3e20313939333130.roa (hash: MgcoEmS08l4kBvePsItue5HuyPIuQGylETDDY3NTtWk=) 6: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: jIRO9mS3d6dPjcdQf+OkOGr/dNujGogdrEuPEpLgZJI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 18:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:93:8f:21:d3:6d:09:1c:2a:33:a0:15:38:90:9e:72:87:cc:24:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB Validity Not Before: May 9 16:56:47 2025 GMT Not After : May 10 18:02:47 2025 GMT Subject: CN=50BD7344F3E96EB6F7E186427CBF1C12A3F05E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:83:48:06:59:af:63:84:6d:c9:ab:e4:41:ce: b6:ae:69:9c:43:d1:ca:03:2f:5f:49:3a:eb:9a:34: 19:14:ab:9b:30:7f:c6:f7:10:14:b1:5e:2b:15:0a: dc:e4:d4:0d:dc:8d:30:cb:c7:4f:78:6c:5d:83:e2: 95:ff:56:2d:8c:2b:0f:91:36:7e:2f:2c:cb:a8:dc: 1f:47:ac:26:9f:5a:c2:72:a8:67:08:cf:81:df:ab: 7a:92:d7:91:7c:d8:e4:92:b8:f6:ad:d6:50:86:8c: dc:ef:f0:64:71:10:98:46:2b:ce:d8:69:ff:77:b7: 6b:3a:e6:cd:d5:e8:23:e3:a5:0b:b7:8f:9d:9a:d4: e9:98:c8:4d:e2:26:33:68:a7:34:9d:83:d4:0f:2f: 77:f6:c6:e2:fa:9c:d7:ad:08:50:6b:29:9b:45:a3: ad:5f:ec:e7:15:ad:e7:2c:45:e4:5f:fc:c4:d9:2f: 65:88:87:7e:51:b6:23:a0:61:f5:39:28:5b:a7:b5: 4d:ef:fb:7c:8e:f8:3e:a7:c2:2a:1b:5c:c6:43:37: e2:f9:c4:b7:21:2d:5a:a7:60:4f:4f:15:ab:87:31: 66:d0:9d:2a:0a:a0:79:40:cf:84:f1:ba:40:fa:3e: 5f:64:5c:ad:5a:97:a8:d1:8a:eb:5f:59:e9:dc:5c: 4c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BD:73:44:F3:E9:6E:B6:F7:E1:86:42:7C:BF:1C:12:A3:F0:5E:92 X509v3 Authority Key Identifier: keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:1a:54:25:84:94:1d:a0:2b:04:62:ef:32:a4:e2:ef:ee:a6: fc:81:a2:c9:9a:58:fe:c7:e8:19:53:52:12:a0:bb:df:4b:82: 16:69:ba:3d:78:7a:aa:8c:65:38:1f:22:43:ba:dd:7a:09:71: 3f:52:b3:ae:ca:2c:e7:05:3e:ef:8f:ed:a5:60:20:3c:63:f9: 88:a3:d9:14:07:18:77:e7:70:f0:1e:bc:f7:ad:99:a4:36:6a: 29:32:3d:87:52:b5:a5:a3:4d:6a:dd:38:f1:6f:b5:9a:5f:80: ae:43:d2:f5:b4:50:89:f9:14:79:4b:09:a8:26:1f:f4:60:55: be:39:a7:d9:dd:f6:40:76:d3:f7:f1:b9:4f:d2:55:36:e9:36: 32:e6:68:57:ae:f0:c9:d4:60:dc:86:84:74:a8:8e:b1:47:72: d3:0b:d2:3b:b4:df:88:47:ea:09:b5:83:1f:f1:1f:40:9d:5b: 4e:79:e1:08:aa:82:b3:13:cb:07:7d:7e:74:06:fe:08:11:d1: 34:64:17:c2:4f:68:46:65:a6:3f:f6:7e:5e:a6:e7:58:ff:bb: 61:de:9c:9c:e9:c9:37:0e:e4:14:c7:5b:e6:41:9c:9d:32:2d: 63:24:ea:06:8f:05:4e:de:b6:c9:3f:a0:f8:a8:54:5d:fb:83: 53:30:fc:4c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJZOPIdNtCRwqM6AVOJCecofMJBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUw RjgxOTZFQjAeFw0yNTA1MDkxNjU2NDdaFw0yNTA1MTAxODAyNDdaMDMxMTAvBgNV BAMTKDUwQkQ3MzQ0RjNFOTZFQjZGN0UxODY0MjdDQkYxQzEyQTNGMDVFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMg0gGWa9jhG3Jq+RBzrauaZxD 0coDL19JOuuaNBkUq5swf8b3EBSxXisVCtzk1A3cjTDLx094bF2D4pX/Vi2MKw+R Nn4vLMuo3B9HrCafWsJyqGcIz4Hfq3qS15F82OSSuPat1lCGjNzv8GRxEJhGK87Y af93t2s65s3V6CPjpQu3j52a1OmYyE3iJjNopzSdg9QPL3f2xuL6nNetCFBrKZtF o61f7OcVrecsReRf/MTZL2WIh35RtiOgYfU5KFuntU3v+3yO+D6nwiobXMZDN+L5 xLchLVqnYE9PFauHMWbQnSoKoHlAz4TxukD6Pl9kXK1al6jRiutfWencXEwTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUUL1zRPPpbrb34YZCfL8cEqPwXpIwHwYDVR0j BBgwFoAUE+GpmPd9fB/ylVwLaI/r/g+BluswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE1NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFm YWIyLzEvMTNFMUE5OThGNzdEN0MxRkYyOTU1QzBCNjg4RkVCRkUwRjgxOTZFQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xM0UxQTk5OEY3N0Q3QzFGRjI5NTVDMEI2 ODhGRUJGRTBGODE5NkVCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAxNTc2NDdjLTkxZDYtNGEwNC04YTkxLWQxNTM4NWQxZmFiMi8xLzEzRTFBOTk4 Rjc3RDdDMUZGMjk1NUMwQjY4OEZFQkZFMEY4MTk2RUIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBGlQl hJQdoCsEYu8ypOLv7qb8gaLJmlj+x+gZU1ISoLvfS4IWabo9eHqqjGU4HyJDut16 CXE/UrOuyiznBT7vj+2lYCA8Y/mIo9kUBxh353DwHrz3rZmkNmopMj2HUrWlo01q 3Tjxb7WaX4CuQ9L1tFCJ+RR5SwmoJh/0YFW+OafZ3fZAdtP38blP0lU26TYy5mhX rvDJ1GDchoR0qI6xR3LTC9I7tN+IR+oJtYMf8R9AnVtOeeEIqoKzE8sHfX50Bv4I EdE0ZBfCT2hGZaY/9n5epudY/7th3pyc6ck3DuQUx1vmQZydMi1jJOoGjwVO3rbJ P6D4qFRd+4NTMPxM -----END CERTIFICATE-----Generated at Sat May 10 10:42:40 2025 by rpki-client