$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft File: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft (raw, json) Hash identifier: 10oNwLlmTFAVUvBMs+Cm3HQs5KdglkZ6DxD2oDFtrh4= Subject key identifier: D1:23:4F:E3:01:31:A4:82:BD:8C:8C:34:DF:3C:F5:7E:5E:09:53:39 Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A Certificate issuer: /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a Certificate serial: 23AE2E9B6171820C7C21C458F026E3D6F0294219 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft Manifest number: 0326 Signing time: Wed 07 May 2025 00:55:21 +0000 Manifest this update: Wed 07 May 2025 00:50:21 +0000 Manifest next update: Thu 08 May 2025 04:36:21 +0000 Files and hashes: 1: 3138352e35352e38332e302f32342d3234203d3e20323135333034.roa (hash: PnN+57bozSHdWFkbA1ybh7RNeGA5AtI46mBnx5Wb0e0=) 2: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl (hash: Ff2ACHDuONlRbjQ7mzKAAgn8snRcmdWSlk9uu6cwzjc=) 3: 3138352e35352e38332e302f32342d3234203d3e203536333637.roa (hash: EO5FUx9wp3K/AGFAPlrZs/bk9YuV/xgCtjavIzvd3sk=) 4: 3138352e33372e3231362e302f32332d3234203d3e203433363431.roa (hash: R1hn+hKIX3uDtuYXayOgRshxOBIjYwYDCqH1e+zmsz0=) 5: 3138352e33372e3231382e302f32332d3234203d3e20323132323338.roa (hash: huwsUB31uBfbleT8W3liIVEEjjwoWiPQyT4oqqDXvCQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 04:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ae:2e:9b:61:71:82:0c:7c:21:c4:58:f0:26:e3:d6:f0:29:42:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a Validity Not Before: May 7 00:50:21 2025 GMT Not After : May 8 04:36:21 2025 GMT Subject: CN=D1234FE30131A482BD8C8C34DF3CF57E5E095339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c5:11:60:7d:3e:1f:3c:b6:60:e7:86:59:f8: 93:52:21:9a:bc:5c:d5:47:bd:83:6f:b3:dd:ea:e9: cd:96:c9:82:6f:1f:f3:d4:49:0d:fd:7d:49:21:81: 8c:3f:3f:9d:db:b6:0d:4b:67:b1:2e:1a:4b:f6:f9: eb:27:19:08:d2:69:55:e6:52:48:2c:73:31:3e:90: cd:41:99:30:4e:6a:ca:d4:a4:07:2d:38:45:f0:fc: 64:e0:06:4c:c8:ae:8b:ee:84:9e:d9:f4:41:df:8d: 33:cd:94:45:da:4a:bc:ad:96:e8:19:cd:a5:6f:ff: 4c:66:a2:d8:86:5e:4c:ef:5d:52:69:4f:62:6b:38: cc:88:44:05:b6:32:84:c2:ca:fe:a7:76:f9:1e:2a: ec:f2:91:11:8a:cf:13:2d:47:c2:95:95:c4:05:8f: b4:5c:9a:93:2b:b9:1e:27:da:ec:57:3a:98:d2:93: 22:17:57:6e:89:a3:6a:9b:b4:30:bb:ea:cc:f4:b7: f8:2d:96:02:01:aa:22:e2:af:53:3f:52:54:4c:8a: 66:a8:b3:3c:8b:92:37:2c:d1:98:d6:5c:1c:4c:79: a6:47:30:d3:d4:5c:05:76:3d:1d:b6:f5:5b:f9:a2: 6d:a4:3e:be:6a:18:67:07:88:8f:1a:cb:70:f1:84: 2e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:23:4F:E3:01:31:A4:82:BD:8C:8C:34:DF:3C:F5:7E:5E:09:53:39 X509v3 Authority Key Identifier: keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:3b:3a:31:61:7e:9a:f2:30:ad:0d:e9:cf:d7:f4:2a:8a:d1: e8:4a:43:64:86:75:98:2b:cc:72:69:13:8c:60:8f:be:13:42: c8:e3:fb:d2:d6:c5:c8:eb:89:bc:e6:29:ac:94:85:28:d0:13: 4e:df:cc:79:cc:ab:89:68:45:b5:6d:32:8a:ab:9d:52:98:72: 69:d8:7d:bb:67:9c:c2:82:ad:5a:2a:f9:61:05:0d:fd:c1:b0: b6:34:10:b6:46:13:bc:c9:ff:ec:de:02:0f:0c:0f:ce:d4:e2: 10:24:c9:5e:49:c6:1a:24:4b:4d:d7:62:f8:49:e2:a7:51:d8: 17:a7:a9:52:bc:c2:94:2a:2f:ba:a9:bf:92:fe:af:97:fb:1c: bd:ec:3e:8f:1e:0a:7d:27:95:b9:cb:c5:36:1b:10:9b:fc:50: bb:dd:88:d0:e8:99:0d:84:bb:dc:e0:f5:48:e9:66:16:81:30: bb:8d:ef:51:4e:bd:e4:5c:3e:f4:ef:ea:48:ab:82:04:65:02: f3:d8:f5:4c:88:e8:24:46:df:4f:6e:ad:32:e4:3d:ab:80:dd: 36:69:11:06:e1:ae:1b:b8:bf:66:0e:bf:b3:cb:7c:f4:ec:9f: 76:5d:53:9f:8e:f9:9b:ff:2c:be:0c:78:9a:45:e6:6e:52:13: cd:2e:57:c7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUI64um2Fxggx8IcRY8Cbj1vApQhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWRiOWYzZTZkOGU0YjU3YzQ5MzAxYWE2MjFlZjFmOTAz ODllMDU3YTAeFw0yNTA1MDcwMDUwMjFaFw0yNTA1MDgwNDM2MjFaMDMxMTAvBgNV BAMTKEQxMjM0RkUzMDEzMUE0ODJCRDhDOEMzNERGM0NGNTdFNUUwOTUzMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoxRFgfT4fPLZg54ZZ+JNSIZq8 XNVHvYNvs93q6c2WyYJvH/PUSQ39fUkhgYw/P53btg1LZ7EuGkv2+esnGQjSaVXm UkgsczE+kM1BmTBOasrUpActOEXw/GTgBkzIrovuhJ7Z9EHfjTPNlEXaSrytlugZ zaVv/0xmotiGXkzvXVJpT2JrOMyIRAW2MoTCyv6ndvkeKuzykRGKzxMtR8KVlcQF j7RcmpMruR4n2uxXOpjSkyIXV26Jo2qbtDC76sz0t/gtlgIBqiLir1M/UlRMimao szyLkjcs0ZjWXBxMeaZHMNPUXAV2PR229Vv5om2kPr5qGGcHiI8ay3DxhC77AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU0SNP4wExpIK9jIw03zz1fl4JUzkwHwYDVR0j BBgwFoAU7bnz5tjktXxJMBqmIe8fkDieBXowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmNmYTRhMmMtZTE0NS00MTRkLWE2MmYtMDlhM2Y5YjU3 NWZkLzAvRURCOUYzRTZEOEU0QjU3QzQ5MzAxQUE2MjFFRjFGOTAzODlFMDU3QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdibno1dGprdFh4Sk1CcW1JZThma0Rp ZUJYby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82Y2ZhNGEyYy1l MTQ1LTQxNGQtYTYyZi0wOWEzZjliNTc1ZmQvMC9FREI5RjNFNkQ4RTRCNTdDNDkz MDFBQTYyMUVGMUY5MDM4OUUwNTdBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDs6MWF+mvIwrQ3pz9f0 KorR6EpDZIZ1mCvMcmkTjGCPvhNCyOP70tbFyOuJvOYprJSFKNATTt/MecyriWhF tW0yiqudUphyadh9u2ecwoKtWir5YQUN/cGwtjQQtkYTvMn/7N4CDwwPztTiECTJ XknGGiRLTddi+Enip1HYF6epUrzClCovuqm/kv6vl/scvew+jx4KfSeVucvFNhsQ m/xQu92I0OiZDYS73OD1SOlmFoEwu43vUU695Fw+9O/qSKuCBGUC89j1TIjoJEbf T26tMuQ9q4DdNmkRBuGuG7i/Zg6/s8t89Oyfdl1Tn475m/8svgx4mkXmblITzS5X xw== -----END CERTIFICATE-----Generated at Wed May 7 10:04:36 2025 by rpki-client