$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft File: 27851163005F59C06E35A8FD365F96356EB34971.mft (raw, json) Hash identifier: D5agPuhrmNYeMF1aQ0Ya+H6gvytf+9GwL1kTVCHMLUo= Subject key identifier: 8B:06:20:2A:58:9F:68:FB:BB:C3:B0:FE:E4:92:7C:FC:80:32:41:D8 Authority key identifier: 27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 Certificate issuer: /CN=27851163005f59c06e35a8fd365f96356eb34971 Certificate serial: 1460AE128EC19D1C44FE653CC417583EE172B3B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft Manifest number: 88 Signing time: Mon 05 May 2025 11:22:37 +0000 Manifest this update: Mon 05 May 2025 11:17:37 +0000 Manifest next update: Tue 06 May 2025 11:24:37 +0000 Files and hashes: 1: AS212855.asa (hash: T3YdrgEJ1P9IU1IPBHUKuz7lJiYzWWWbNO7fDdrADAU=) 2: 27851163005F59C06E35A8FD365F96356EB34971.crl (hash: WPHijKSBnkIPs/WJbQiX1aWJaQ1S4Azq/tR1bW6lVx0=) 3: 39332e3135372e3134302e302f32342d3234203d3e20323132383535.roa (hash: hdp9Cx8dMbvUUOjRrqy1XfSIVtsUnXM8OZnay1usHT4=) 4: 323030313a3637633a6638633a3a2f34382d3438203d3e20323132383535.roa (hash: prfcq9YIMAg2ry1iZCXqsMkFnalbT+MPZdyoUmwmw6g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 10:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:60:ae:12:8e:c1:9d:1c:44:fe:65:3c:c4:17:58:3e:e1:72:b3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27851163005f59c06e35a8fd365f96356eb34971 Validity Not Before: May 5 11:17:37 2025 GMT Not After : May 6 11:24:37 2025 GMT Subject: CN=8B06202A589F68FBBBC3B0FEE4927CFC803241D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ea:01:cb:c0:df:0c:ce:7d:71:e9:87:bd:71: fb:e9:a5:f4:b9:91:02:0a:db:b9:fb:03:36:67:26: c6:7e:f8:f9:a5:fc:29:a3:d2:62:9b:fd:1a:5d:02: 5b:a3:2c:93:49:d6:84:da:3c:b0:95:10:72:53:e5: b6:37:59:8c:02:97:f3:5e:fc:ec:4b:27:c9:81:5e: f9:ea:2c:cf:43:b9:01:cd:78:82:30:14:28:98:bb: c3:cd:2c:d1:d8:dd:61:0d:78:d5:9c:79:98:59:dc: 0f:2c:8f:a2:52:05:0d:3b:02:38:57:c1:b7:b7:3d: 90:69:c6:00:a0:c4:3a:75:2f:ac:51:91:9b:b3:2d: d0:46:22:07:60:7f:0a:59:50:58:56:b3:57:33:86: b9:8d:7a:97:07:9b:04:4f:88:5b:42:52:b0:da:6f: 7d:8a:01:fa:4e:3a:77:60:e0:21:0b:d3:41:05:8e: 38:07:f9:c9:c0:bc:8b:37:a5:4a:aa:9c:96:7e:d8: 9b:fb:97:00:17:19:ff:3d:f6:a9:a8:fd:1d:c1:af: a4:10:b8:84:90:82:06:dd:53:fe:02:45:44:59:7f: aa:53:aa:07:b1:6e:e1:fb:e0:86:a9:ca:9b:02:3f: 8f:04:19:85:fd:23:5a:0c:2d:8b:72:ad:c2:4e:a9: df:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:06:20:2A:58:9F:68:FB:BB:C3:B0:FE:E4:92:7C:FC:80:32:41:D8 X509v3 Authority Key Identifier: keyid:27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7e:db:cf:a1:de:78:a2:96:4d:31:2c:9e:6a:c6:bd:a2:17: 6a:54:07:7b:23:e1:38:46:bb:e6:b1:2f:0a:93:fd:17:2a:0e: 25:a8:1c:c3:3d:1a:7c:59:32:9e:45:4b:cd:62:b0:5b:bc:7a: 97:8e:b6:0c:11:5b:89:6e:09:e2:42:64:43:ee:51:cd:ab:5b: 85:16:b5:fe:76:af:98:1d:d3:77:f1:7a:a1:71:ed:1c:e2:da: 0e:3a:9f:22:4c:90:0a:db:8b:dd:83:2a:8c:02:1a:90:52:9b: a3:45:50:3a:ad:f5:87:b2:f1:77:aa:0d:1e:bc:24:f0:c2:38: ab:b1:cf:4e:7d:36:06:10:e7:31:a0:c8:77:93:05:bf:2b:f7: 6c:f0:da:f8:ab:16:23:5a:a6:a7:4b:8d:40:be:e2:70:dc:de: 27:3b:9d:d3:ae:44:0b:2f:10:ae:78:9e:56:3a:14:54:95:65: d8:d7:b9:29:a7:39:25:1d:02:6e:f7:ab:31:4a:a5:50:22:c2: 0d:e3:6a:ca:c8:2b:a7:39:a6:a3:0d:de:97:ac:07:60:4c:15: 85:d7:41:08:e7:f3:0a:09:76:cc:36:bc:bf:ac:c3:bd:34:22: 6c:3c:cc:79:6d:13:10:2b:c5:0e:36:a0:a6:a9:af:53:85:00: be:31:95:e6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFGCuEo7BnRxE/mU8xBdYPuFys7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc4NTExNjMwMDVmNTljMDZlMzVhOGZkMzY1Zjk2MzU2 ZWIzNDk3MTAeFw0yNTA1MDUxMTE3MzdaFw0yNTA1MDYxMTI0MzdaMDMxMTAvBgNV BAMTKDhCMDYyMDJBNTg5RjY4RkJCQkMzQjBGRUU0OTI3Q0ZDODAzMjQxRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA6gHLwN8Mzn1x6Ye9cfvppfS5 kQIK27n7AzZnJsZ++Pml/Cmj0mKb/RpdAlujLJNJ1oTaPLCVEHJT5bY3WYwCl/Ne /OxLJ8mBXvnqLM9DuQHNeIIwFCiYu8PNLNHY3WENeNWceZhZ3A8sj6JSBQ07AjhX wbe3PZBpxgCgxDp1L6xRkZuzLdBGIgdgfwpZUFhWs1czhrmNepcHmwRPiFtCUrDa b32KAfpOOndg4CEL00EFjjgH+cnAvIs3pUqqnJZ+2Jv7lwAXGf899qmo/R3Br6QQ uISQggbdU/4CRURZf6pTqgexbuH74IapypsCP48EGYX9I1oMLYtyrcJOqd85AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUiwYgKlifaPu7w7D+5JJ8/IAyQdgwHwYDVR0j BBgwFoAUJ4URYwBfWcBuNaj9Nl+WNW6zSXEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2VhZmMzMmItZWMwMy00MzE5LWIxYzYtM2MxYzQ3Mjdl MDZmLzAvMjc4NTExNjMwMDVGNTlDMDZFMzVBOEZEMzY1Rjk2MzU2RUIzNDk3MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0o0VVJZd0JmV2NCdU5hajlObC1XTlc2 elNYRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zZWFmYzMyYi1l YzAzLTQzMTktYjFjNi0zYzFjNDcyN2UwNmYvMC8yNzg1MTE2MzAwNUY1OUMwNkUz NUE4RkQzNjVGOTYzNTZFQjM0OTcxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmn7bz6HeeKKWTTEsnmrG vaIXalQHeyPhOEa75rEvCpP9FyoOJagcwz0afFkynkVLzWKwW7x6l462DBFbiW4J 4kJkQ+5RzatbhRa1/navmB3Td/F6oXHtHOLaDjqfIkyQCtuL3YMqjAIakFKbo0VQ Oq31h7Lxd6oNHrwk8MI4q7HPTn02BhDnMaDId5MFvyv3bPDa+KsWI1qmp0uNQL7i cNzeJzud065ECy8QrnieVjoUVJVl2Ne5Kac5JR0CbverMUqlUCLCDeNqysgrpzmm ow3el6wHYEwVhddBCOfzCgl2zDa8v6zDvTQibDzMeW0TECvFDjagpqmvU4UAvjGV 5g== -----END CERTIFICATE-----Generated at Mon May 5 18:52:02 2025 by rpki-client