$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft File: B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json) Hash identifier: G8p+N8vANeOtR11RK1XOaP4K69dLT/fGWyKw2+/vXkk= Subject key identifier: 60:27:97:6F:64:7D:7D:79:78:AF:07:0C:A2:5B:FF:67:60:DE:98:28 Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac Certificate serial: 3AB725CD6658A4A4A76FC983074DB0F38A2507C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft Manifest number: 01E7 Signing time: Sun 11 May 2025 02:15:34 +0000 Manifest this update: Sun 11 May 2025 02:10:34 +0000 Manifest next update: Mon 12 May 2025 02:56:34 +0000 Files and hashes: 1: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: xYNp6X5CyKTqd1xlZ4VBwAmo2Jm+BgTzOth7VLRGmZo=) 2: 326130623a366338303a3a2f33322d3332203d3e20323135383338.roa (hash: kEt2cGR+/Q700kchrRZoRuY0FKyYF1rSAaCa413pKew=) 3: 3138352e3138362e32342e302f32342d3234203d3e20323135383338.roa (hash: nTMWfEhxo36lxHJvP1+YWdrKCSryelFli2OhT4xBMNI=) 4: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: FBdBmLEGxXhvarnPJcmElFlCgeLSIQ6GXw75K+usirs=) 5: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: zbKaWYwmjPPC167P5YL6I94JcPZEWN0HKnmqpfcR9u4=) 6: 326130623a366338313a3a2f33322d3332203d3e20323135383338.roa (hash: 5mcUsW8Gu/iSzerp0Wwk+smZAmRaAGiznqu01bMcUDg=) 7: 3138352e3138362e32372e302f32342d3234203d3e203631333137.roa (hash: jD3TEx8Q8JwdsmzwyDZ9zaukL1sMlGUp0uzFac23xJs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 02:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b7:25:cd:66:58:a4:a4:a7:6f:c9:83:07:4d:b0:f3:8a:25:07:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac Validity Not Before: May 11 02:10:34 2025 GMT Not After : May 12 02:56:34 2025 GMT Subject: CN=6027976F647D7D7978AF070CA25BFF6760DE9828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b5:88:4a:14:0e:34:74:18:db:c2:45:52:12: c9:77:ca:2a:c8:ab:ef:50:1d:7d:c7:5d:bb:a2:9e: dc:4d:d5:84:c0:2a:ee:fa:d3:72:fe:12:ce:04:39: d4:7e:69:17:fc:df:e9:c2:38:8d:54:54:65:e1:79: f6:69:7f:41:56:33:97:0e:bc:55:ad:30:cf:7d:d2: 9e:a4:cb:91:3a:3d:5e:1b:0f:48:4d:d5:14:e7:45: 52:e9:54:9b:2a:1b:ef:aa:11:b1:7c:0d:0a:98:d3: ba:e3:58:87:39:cb:ea:9c:6f:41:e0:56:db:68:62: 35:94:68:31:e2:41:25:e5:2f:a5:a0:b7:e7:f8:d9: 0e:c5:25:47:73:29:58:7f:8f:dd:75:6a:5e:67:9d: 09:17:c8:2d:3e:50:ac:7f:c4:16:10:dc:bc:fe:51: 03:8f:3c:80:c1:2a:bd:11:cf:18:e4:98:5f:98:a5: 3e:f3:73:99:d3:de:26:6f:90:0f:ff:fa:c6:4c:b2: 54:f6:d8:67:d6:f8:22:a9:16:12:9c:ed:0d:e2:f7: de:80:cd:6d:45:c8:35:f5:d8:78:a4:cb:0d:e7:36: 31:49:85:04:52:d3:69:2d:ec:29:5d:d4:66:97:2e: f6:da:c4:96:65:b0:06:28:40:e3:c0:71:51:8d:b6: a0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:27:97:6F:64:7D:7D:79:78:AF:07:0C:A2:5B:FF:67:60:DE:98:28 X509v3 Authority Key Identifier: keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:31:bd:54:d2:49:be:1f:06:8e:03:ab:32:66:39:85:83:26: 78:2c:3c:9f:e4:9b:ec:f6:8a:16:7d:86:42:16:e4:92:13:e6: 80:8a:b3:45:3c:e4:37:fc:b0:ad:62:9e:17:3b:9f:02:12:69: 35:96:3f:a9:2f:be:ad:f8:a6:18:f9:f1:a8:fb:03:51:4d:cd: 00:1f:81:82:98:c4:87:fc:84:34:a2:76:db:13:48:71:4e:6d: 11:43:08:2d:f7:01:cd:14:d7:eb:cc:b3:96:f9:3d:3f:c3:28: f1:21:14:76:db:03:51:19:f8:70:24:93:e0:fc:63:b6:0c:e5: f9:57:f8:4c:0f:c0:0a:e5:e4:10:ed:4d:c2:9e:75:66:a7:e2: 8f:b5:ec:87:d2:4d:51:43:44:05:fd:5d:d0:94:85:26:7e:ce: 20:bf:c6:2c:09:89:f8:73:85:e9:c5:d5:a5:82:b8:bf:60:cb: 22:5a:bb:18:c0:77:b9:2e:9f:f6:7a:58:fa:0a:af:6d:d2:5b: 76:06:f7:7e:22:5d:be:4d:23:11:40:3b:d0:d6:52:f8:af:16: 19:a1:df:d7:ba:07:19:75:d3:41:9b:5d:d5:41:5e:87:4c:9f: f0:32:3d:6b:98:2a:15:12:c5:17:4b:29:44:d9:4b:33:d9:7b: 99:1d:80:31 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOrclzWZYpKSnb8mDB02w84olB8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjNkMDI4MGY1MDA2OTVhNDMyMDQyNTFjOTgzMDQ1NGNh OGEyZTdhYzAeFw0yNTA1MTEwMjEwMzRaFw0yNTA1MTIwMjU2MzRaMDMxMTAvBgNV BAMTKDYwMjc5NzZGNjQ3RDdENzk3OEFGMDcwQ0EyNUJGRjY3NjBERTk4MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGtYhKFA40dBjbwkVSEsl3yirI q+9QHX3HXbuintxN1YTAKu7603L+Es4EOdR+aRf83+nCOI1UVGXhefZpf0FWM5cO vFWtMM990p6ky5E6PV4bD0hN1RTnRVLpVJsqG++qEbF8DQqY07rjWIc5y+qcb0Hg VttoYjWUaDHiQSXlL6Wgt+f42Q7FJUdzKVh/j911al5nnQkXyC0+UKx/xBYQ3Lz+ UQOPPIDBKr0RzxjkmF+YpT7zc5nT3iZvkA//+sZMslT22GfW+CKpFhKc7Q3i996A zW1FyDX12Hikyw3nNjFJhQRS02kt7Cld1GaXLvbaxJZlsAYoQOPAcVGNtqCzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUYCeXb2R9fXl4rwcMolv/Z2DemCgwHwYDVR0j BBgwFoAUs9AoD1AGlaQyBCUcmDBFTKii56wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdhZTI1ZjMtNzA2Yi00N2VkLWJiNzQtNDY2ODRhZTBl ZjJiLzAvQjNEMDI4MEY1MDA2OTVBNDMyMDQyNTFDOTgzMDQ1NENBOEEyRTdBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M5QW9EMUFHbGFReUJDVWNtREJGVEtp aTU2dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2FlMjVmMy03 MDZiLTQ3ZWQtYmI3NC00NjY4NGFlMGVmMmIvMC9CM0QwMjgwRjUwMDY5NUE0MzIw NDI1MUM5ODMwNDU0Q0E4QTJFN0FDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyjG9VNJJvh8GjgOrMmY5 hYMmeCw8n+Sb7PaKFn2GQhbkkhPmgIqzRTzkN/ywrWKeFzufAhJpNZY/qS++rfim GPnxqPsDUU3NAB+BgpjEh/yENKJ22xNIcU5tEUMILfcBzRTX68yzlvk9P8Mo8SEU dtsDURn4cCST4Pxjtgzl+Vf4TA/ACuXkEO1Nwp51Zqfij7Xsh9JNUUNEBf1d0JSF Jn7OIL/GLAmJ+HOF6cXVpYK4v2DLIlq7GMB3uS6f9npY+gqvbdJbdgb3fiJdvk0j EUA70NZS+K8WGaHf17oHGXXTQZtd1UFeh0yf8DI9a5gqFRLFF0spRNlLM9l7mR2A MQ== -----END CERTIFICATE-----Generated at Sun May 11 18:53:08 2025 by rpki-client