$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft File: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json) Hash identifier: H1djO7DrPWYzutGkDDRHRVCNCbFw6v8RoHNKFMEZZ3Y= Subject key identifier: 0D:59:57:38:AB:45:1B:57:42:66:33:BB:08:DE:14:07:BD:56:4E:85 Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 7E3298C060A4994E503AB1AE543DC8778FB60543 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft Manifest number: C8 Signing time: Mon 05 May 2025 21:40:17 +0000 Manifest this update: Mon 05 May 2025 21:35:17 +0000 Manifest next update: Tue 06 May 2025 23:25:17 +0000 Files and hashes: 1: 3138352e3231332e3235312e302f32342d3234203d3e203632323430.roa (hash: r8RD1SHQl6OybEgdZXTaDzaRDBKJoFWuS6Yc77FVHmo=) 2: 3138352e3231332e3235302e302f32342d3234203d3e20323132323338.roa (hash: ygSJr7gJnzCgddZdASy6lFYbTZobnImgktqUZvda03k=) 3: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: 8/mMTd8OI6hx+rEazKaA5i9flVTt9So8wwSfFF6xpVo=) 4: 3139342e33342e3235352e302f32342d3234203d3e203536353934.roa (hash: x2RfjpSN3xicSqXOSngzYM3QyNU0bV4bA1DJ2SOK7nM=) 5: 3139342e33342e3235342e302f32342d3234203d3e20313532363732.roa (hash: hBCTJH2VP/g2W82hp9JFwDkEQwn2f5ZxdgSFMedjM7Q=) 6: 3139342e33342e3235322e302f32342d3234203d3e203239383032.roa (hash: MPp6Igfxvoo4H6VVtRMvz7wqXYqi9rOeS8G4+bL/Qls=) 7: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: 4O3foUV7f18NUYJQaeBYgK+aW1lr+7o+ea8CcQjVzCw=) 8: 38352e3131372e3232382e302f32342d3234203d3e20323135303236.roa (hash: WUrbTcKV2+qO0uflme+Vda37GmhrcRAgBhkN6Ok9SGQ=) 9: 38352e3131372e3232392e302f32342d3234203d3e20323132323338.roa (hash: qWG9h0hKE/+rc67V6b0QtNqJKNBV/dmrN+3owun/5GY=) 10: 38352e3131372e3233312e302f32342d3234203d3e203536353934.roa (hash: UV54BiPkSqZcI5HHAY2kqiR/Mb+BJaMnW0h9cdeDsZM=) 11: 3138352e3231332e3234382e302f32342d3234203d3e203239383032.roa (hash: TocpFgr3lw4Jm1vyRTcynQHMSP/aSZA84xcK/bfrENk=) 12: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: +JT0RkyFdfSdUd+ZDVKOzgA2f3vXTY7nu77fDiTzRFk=) 13: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: tD+eYvXQsGkCcpnz6s7EBRYpOf8Iu4vdb3Qy27wUI6g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 18:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:32:98:c0:60:a4:99:4e:50:3a:b1:ae:54:3d:c8:77:8f:b6:05:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: May 5 21:35:17 2025 GMT Not After : May 6 23:25:17 2025 GMT Subject: CN=0D595738AB451B57426633BB08DE1407BD564E85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:72:9d:10:e2:3c:a6:fb:d5:7f:14:68:45:38: ba:b2:45:04:73:77:ce:97:1a:e9:89:bb:e8:91:77: 32:e1:30:bd:a7:93:86:5c:d8:d5:e5:83:1a:fc:a6: db:c3:da:61:63:f2:59:18:00:de:a0:37:75:ab:a7: 76:d7:ee:fc:de:df:08:42:28:fb:01:9d:5d:1b:19: 39:a9:f3:0a:26:59:ff:d0:1d:16:32:d7:a1:75:30: 82:48:27:9c:8a:8a:d0:a2:37:30:0d:9d:0f:c5:5e: 00:0d:20:f0:82:d7:ce:e1:2c:30:36:b9:4a:48:ae: 4f:12:88:b2:08:58:19:63:9a:71:50:02:37:25:d1: 02:ba:e1:ce:a7:ba:49:ef:15:d7:54:00:c0:61:28: f0:31:64:df:33:73:d2:ee:6a:14:17:9a:ff:3d:82: d4:92:96:3c:51:15:06:b9:b9:57:f1:db:91:58:79: cc:5a:0f:4d:e5:6a:70:2a:76:04:8b:72:b0:8e:00: b0:d5:01:fd:20:72:7a:3e:f8:42:08:8a:01:d4:32: 9e:c5:f8:f0:83:ca:1a:b2:89:ab:3b:d5:76:e9:c2: 92:c9:cc:14:6a:cb:33:8c:96:5e:64:2f:f0:77:f7: 31:da:21:8d:36:2d:8c:cc:2b:a3:e8:41:45:68:2e: fe:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:59:57:38:AB:45:1B:57:42:66:33:BB:08:DE:14:07:BD:56:4E:85 X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:86:22:93:4c:c1:bf:48:b9:a1:b7:45:91:a3:41:99:cc:b5: 98:f1:a0:48:a4:55:78:63:ae:dc:d2:b4:36:a6:37:ae:9d:a5: 27:b6:da:34:83:d6:be:7f:2d:c2:1a:ad:85:00:7f:5b:2b:38: 4a:8c:0e:bd:50:5d:57:2c:1c:3b:c2:03:8b:54:61:0e:88:62: af:37:6a:1a:2b:20:3b:88:d7:e9:f7:de:9b:aa:6b:3f:4d:a5: ac:b5:03:6a:3d:f5:32:39:77:cf:15:bd:d3:a5:4b:f7:79:a6: 5d:01:31:c6:1d:4c:6c:de:3a:0d:b8:20:4a:cd:e8:4a:4b:f7: 5b:89:fa:8b:af:28:98:14:a0:66:bb:6b:f1:38:f3:f2:18:93: 27:d4:25:59:a4:f4:7f:50:54:21:cf:e4:75:9b:4f:81:fd:c4: 1a:aa:35:2f:3e:59:aa:99:d8:23:14:f4:3a:f0:16:5b:8b:a1: a5:75:86:ad:40:70:a3:1d:a6:01:8d:bd:37:5d:98:63:78:76: 0c:9c:d0:95:b5:a9:3c:0a:40:43:39:87:7e:9e:45:c4:df:65: e4:1c:50:e9:c9:fd:d5:8d:a1:00:22:08:15:e9:31:9e:ca:d9: 91:39:c0:86:90:6d:52:0a:db:66:d3:e0:58:a1:3c:2a:31:f1: 47:98:73:5a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfjKYwGCkmU5QOrGuVD3Id4+2BUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNTA1MDUyMTM1MTdaFw0yNTA1MDYyMzI1MTdaMDMxMTAvBgNV BAMTKDBENTk1NzM4QUI0NTFCNTc0MjY2MzNCQjA4REUxNDA3QkQ1NjRFODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfcp0Q4jym+9V/FGhFOLqyRQRz d86XGumJu+iRdzLhML2nk4Zc2NXlgxr8ptvD2mFj8lkYAN6gN3Wrp3bX7vze3whC KPsBnV0bGTmp8womWf/QHRYy16F1MIJIJ5yKitCiNzANnQ/FXgANIPCC187hLDA2 uUpIrk8SiLIIWBljmnFQAjcl0QK64c6nuknvFddUAMBhKPAxZN8zc9LuahQXmv89 gtSSljxRFQa5uVfx25FYecxaD03lanAqdgSLcrCOALDVAf0gcno++EIIigHUMp7F +PCDyhqyias71XbpwpLJzBRqyzOMll5kL/B39zHaIY02LYzMK6PoQUVoLv7VAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDVlXOKtFG1dCZjO7CN4UB71WToUwHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTEzZGRhNi03 YWRlLTQ0NWQtOGM2ZS00NDhhNzhlNDhjYTEvMS8wRDdGRkFFMzAwREVGMDg3NkJG ODQ4OTBGQjZFQTE3QkU4NDFBNEQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIYik0zBv0i5obdFkaNB mcy1mPGgSKRVeGOu3NK0NqY3rp2lJ7baNIPWvn8twhqthQB/Wys4SowOvVBdVywc O8IDi1RhDohirzdqGisgO4jX6ffem6prP02lrLUDaj31Mjl3zxW906VL93mmXQEx xh1MbN46DbggSs3oSkv3W4n6i68omBSgZrtr8Tjz8hiTJ9QlWaT0f1BUIc/kdZtP gf3EGqo1Lz5ZqpnYIxT0OvAWW4uhpXWGrUBwox2mAY29N12YY3h2DJzQlbWpPApA QzmHfp5FxN9l5BxQ6cn91Y2hACIIFekxnsrZkTnAhpBtUgrbZtPgWKE8KjHxR5hz Wg== -----END CERTIFICATE-----Generated at Tue May 6 03:07:08 2025 by rpki-client