$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft File: A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json) Hash identifier: L6DIkIOmJRJ4dG9heC8orXbjxV8mcGPs9zwyi7QUFBE= Subject key identifier: 03:7D:85:3C:BE:DE:09:D1:44:F5:8E:6D:1C:93:BD:71:59:4B:C2:09 Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Certificate serial: 5EFB50639D29AC32FDA13A2561613A93176C7C18 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft Manifest number: 01C3 Signing time: Tue 06 May 2025 19:57:53 +0000 Manifest this update: Tue 06 May 2025 19:52:53 +0000 Manifest next update: Wed 07 May 2025 23:50:53 +0000 Files and hashes: 1: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: 3jz7qBAt/x3hx0KhMiyloYsGBxxi20xg/aBSp+sZaDE=) 2: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: Vempd3ps8UPnFvtx6+Ga9r0Fz/m4sP8yDO51fnwduTg=) 3: 326131343a373538313a393330303a3a2f34302d3438203d3e20323135333634.roa (hash: z6xFfxTzAOT/hYwAJ2DQkeBnVgxJoH9HtbYNG39WwF0=) 4: 326131343a373538313a393261303a3a2f34382d3438203d3e20323135333634.roa (hash: 52dW85fH8WieO38THcEAcWvAx0hfdz1p014Uu9iYIzA=) 5: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: n13ozOgN/szcSy8ou42QXiXUX+yXlpqcLn3ozZcZDlw=) 6: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: 7y+IF+YiEYwNGzvsTXFIi6gR5k9xR+YfHH916lLnRc0=) 7: 326131343a373538313a6666303a3a2f34382d3438203d3e20323135333634.roa (hash: KFn9WdvuXZqN8qHQEq155lH4XfWV3U3t3rO+sW/3ok4=) 8: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: RAw4xHnz744j8Drchm7/2YRwAZJQJ11XhSimRLX8qA4=) 9: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: ZEC+FF7f6pTQCAI//mUYvs5HLV+Ku71q7R0YQM5kzz8=) 10: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 69Xsi44laAcnxP50J1kp3cC9fZOYKoWYPgQjGZJBXKc=) 11: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: abPKPZr1WbPPFAA4OnjFEi0/3aO9abAcwCp0LqclAy8=) 12: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: 2yQ0bEhC7Gkr/ukKqOai4xHLU4JxFvk3/3RqPzbvcuw=) 13: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: 92vCLzxUkC0A+QO3tY7K98mZLDwvzT8NNa/AXo3xL2c=) 14: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: +u1GgR4ItR9W4eiEMw3maPQx96v0QxpGp/K8rZa1bfY=) 15: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: /qvikyZ1jwoQhEkEJgEO8D+K9YIohf2J0C8X3+ZK7FI=) 16: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: 4fHLejJ946NktWTU2sxiTGZMT9qoCr17W/uS0Esd5lw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 14:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:fb:50:63:9d:29:ac:32:fd:a1:3a:25:61:61:3a:93:17:6c:7c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Validity Not Before: May 6 19:52:53 2025 GMT Not After : May 7 23:50:53 2025 GMT Subject: CN=037D853CBEDE09D144F58E6D1C93BD71594BC209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0a:0b:d3:f2:38:e9:ec:78:07:1b:d3:e1:a3: 96:56:4c:5b:48:81:eb:57:1b:37:54:a1:fc:7e:f9: 92:a6:60:b1:f5:f0:d9:98:66:20:af:72:d0:a1:db: 3a:fc:e1:95:53:8c:d7:3e:63:f7:18:96:08:fd:ba: ec:e6:66:fe:25:a9:2d:fa:43:d9:55:9b:cb:e0:58: b7:03:49:7c:56:76:30:e2:8f:e7:b3:f6:7c:dd:bb: ca:0f:fa:70:96:72:74:b0:de:d7:1b:29:dd:e4:aa: 76:1e:a8:81:5b:82:95:88:fb:8d:42:9d:04:01:4f: cd:dd:d8:36:f4:eb:7e:88:9c:a3:17:ca:44:8f:ab: 80:1a:32:21:0e:70:cc:4b:8b:8a:e0:db:79:6d:cc: 4d:34:12:90:e6:38:b9:70:20:4a:43:b0:43:59:dd: 8d:ba:f8:f5:4e:64:04:e2:f0:9c:ed:58:77:f8:0b: 9d:4a:93:00:08:84:0d:6a:c1:68:6e:cf:36:cd:72: 7d:2d:51:dc:dd:a1:08:64:a1:1d:d4:48:57:c7:a5: 85:35:f2:b2:17:8c:ce:ec:2e:6b:f5:16:e0:b2:58: dd:60:d0:dd:49:69:37:57:b4:a9:8b:9b:87:b7:c6: ca:1b:f8:31:bd:f4:0c:5a:88:36:61:6f:f2:33:f7: 11:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7D:85:3C:BE:DE:09:D1:44:F5:8E:6D:1C:93:BD:71:59:4B:C2:09 X509v3 Authority Key Identifier: keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:27:f6:a3:00:18:1f:f6:bc:31:ef:15:5e:8f:f5:7b:8a:4f: 85:a0:ff:33:7a:c2:4a:3d:f7:6c:de:d1:96:77:3e:4c:1a:db: e1:c6:2f:b9:9d:ac:6d:5e:0d:01:df:a9:8e:a6:fa:54:f3:42: 2c:90:44:9c:03:b5:c3:7c:6a:2f:ab:c2:ad:03:7e:fa:d8:3c: 09:2d:aa:c7:06:de:b2:82:61:c2:fd:2c:29:5e:a9:d1:fb:d2: 7e:c6:cb:a7:95:56:82:b5:22:e9:9b:f8:86:4d:59:f7:b5:3f: 8f:58:43:03:15:b7:f5:e1:41:a7:54:2a:e1:79:f4:2e:0b:cf: 9b:3e:dc:73:83:e9:e5:51:ca:7e:51:10:32:36:f9:8c:f5:65: 0f:c2:bd:8f:f3:e8:11:e9:57:d2:d6:dc:b8:89:f8:d9:7e:c2: c9:8a:f2:94:70:08:b6:c2:8c:a6:63:75:7a:c8:5f:dd:ea:ea: e2:cc:03:be:93:ad:24:cf:34:bc:4b:1b:3f:c9:02:ce:0d:e8: a3:9f:50:bc:10:59:d9:c6:b3:5c:f3:a2:06:90:fb:3f:56:7e: e3:d5:68:d4:53:71:51:ce:b6:4a:1a:e0:3a:04:86:fa:be:e4: 6d:34:ba:8d:d3:23:37:54:18:ff:3c:2c:2c:1d:20:fc:e7:1f: ee:f1:08:b2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXvtQY50prDL9oTolYWE6kxdsfBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3 NzdEQTkyNjAeFw0yNTA1MDYxOTUyNTNaFw0yNTA1MDcyMzUwNTNaMDMxMTAvBgNV BAMTKDAzN0Q4NTNDQkVERTA5RDE0NEY1OEU2RDFDOTNCRDcxNTk0QkMyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0CgvT8jjp7HgHG9Pho5ZWTFtI getXGzdUofx++ZKmYLH18NmYZiCvctCh2zr84ZVTjNc+Y/cYlgj9uuzmZv4lqS36 Q9lVm8vgWLcDSXxWdjDij+ez9nzdu8oP+nCWcnSw3tcbKd3kqnYeqIFbgpWI+41C nQQBT83d2Db0636InKMXykSPq4AaMiEOcMxLi4rg23ltzE00EpDmOLlwIEpDsENZ 3Y26+PVOZATi8JztWHf4C51KkwAIhA1qwWhuzzbNcn0tUdzdoQhkoR3USFfHpYU1 8rIXjM7sLmv1FuCyWN1g0N1JaTdXtKmLm4e3xsob+DG99AxaiDZhb/Iz9xExAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUA32FPL7eCdFE9Y5tHJO9cVlLwgkwHwYDVR0j BBgwFoAUoe5dCaD10Nh2EQExdcYuNXd9qSYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw NDhjLzAvQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3NzdEQTkyNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BMUVFNUQwOUEwRjVEMEQ4NzYxMTAxMzE3 NUM2MkUzNTc3N0RBOTI2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg1NWM3ZDVhLTE1YzQtNDU4OS04NWZhLWI0OTFhMDcxMDQ4Yy8wL0ExRUU1RDA5 QTBGNUQwRDg3NjExMDEzMTc1QzYyRTM1Nzc3REE5MjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCYJ/aj ABgf9rwx7xVej/V7ik+FoP8zesJKPfds3tGWdz5MGtvhxi+5naxtXg0B36mOpvpU 80IskEScA7XDfGovq8KtA3762DwJLarHBt6ygmHC/SwpXqnR+9J+xsunlVaCtSLp m/iGTVn3tT+PWEMDFbf14UGnVCrhefQuC8+bPtxzg+nlUcp+URAyNvmM9WUPwr2P 8+gR6VfS1ty4ifjZfsLJivKUcAi2woymY3V6yF/d6urizAO+k60kzzS8Sxs/yQLO Deijn1C8EFnZxrNc86IGkPs/Vn7j1WjUU3FRzrZKGuA6BIb6vuRtNLqN0yM3VBj/ PCwsHSD85x/u8Qiy -----END CERTIFICATE-----Generated at Tue May 6 23:27:09 2025 by rpki-client