$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft File: 893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft (raw, json) Hash identifier: MljCnJOKNZavLig9/C8psvHDkDa38i8Ma01Bn2qq+nQ= Subject key identifier: 2A:DA:A0:BA:3B:8D:9E:5F:EC:B6:34:74:34:A7:D6:6D:40:11:B9:BC Authority key identifier: 89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B Certificate issuer: /CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B Certificate serial: 3EA5BC1EFB56753190DF8E77E2E8DB4BA4D97DE0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft Manifest number: 27 Signing time: Thu 08 May 2025 23:39:57 +0000 Manifest this update: Thu 08 May 2025 23:34:57 +0000 Manifest next update: Sat 10 May 2025 01:40:57 +0000 Files and hashes: 1: 893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl (hash: 1Ky4On/4zm+DlPA7NnRWaFW3yQnLgMgk0j6AFU4Z3no=) 2: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: v+wGdsPoD53cB+FPJFplibwWU1IDMTKf0BLLWvOrDJw=) 3: 326131343a373538313a366664303a3a2f34342d3434203d3e20323135393334.roa (hash: vaAEu3pMRFdmKcI/nWa8WyzQWeHMb/mh9I6YRbEX9FY=) 4: 326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa (hash: bkcmt94VX2qT5AatBWPB20wqy19gXukXDxeJ3DXH2P8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a5:bc:1e:fb:56:75:31:90:df:8e:77:e2:e8:db:4b:a4:d9:7d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B Validity Not Before: May 8 23:34:57 2025 GMT Not After : May 10 01:40:57 2025 GMT Subject: CN=2ADAA0BA3B8D9E5FECB6347434A7D66D4011B9BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:94:88:2a:90:1e:4f:29:32:c3:d9:e2:e1:e1: a7:7c:89:40:91:e4:03:f0:a8:f0:de:be:67:23:2f: 6a:a8:99:d0:ed:0b:71:94:49:83:b2:be:01:2e:e0: 1b:36:26:0f:c9:fc:89:ab:7a:ef:2b:0d:b9:33:be: 98:ad:bb:a8:3a:d7:7c:e3:ce:24:c6:4a:21:73:9c: 89:83:95:8e:4c:ff:30:6d:35:7f:d2:b1:64:c1:a9: 90:b0:60:c9:86:6a:cc:c2:3f:76:cc:29:08:39:95: 35:b7:30:67:ad:7d:4b:95:7e:58:de:27:02:9b:d1: 4f:20:19:43:01:fc:d8:24:e1:6c:9f:a2:98:81:0c: 8a:5f:57:78:cb:5c:36:9b:10:d4:af:ad:2e:c3:54: 38:03:78:e6:a8:fc:0b:12:e2:40:9b:5a:92:27:80: 87:57:24:32:46:56:e3:b3:38:e3:00:f0:4d:23:8b: 02:b4:29:0a:17:43:7d:a4:6c:ea:8b:d3:95:0c:35: f0:0d:6e:72:d4:32:d1:36:33:ae:83:4e:af:c4:ef: ef:f7:be:60:7f:eb:ac:e2:8c:75:3c:f2:ad:f7:13: da:28:e5:63:78:42:e1:5f:38:ab:ed:01:72:13:94: 0f:3c:79:ab:f1:08:d1:c1:d8:f1:09:5e:f6:4b:76: c9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DA:A0:BA:3B:8D:9E:5F:EC:B6:34:74:34:A7:D6:6D:40:11:B9:BC X509v3 Authority Key Identifier: keyid:89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:66:be:6a:e3:cb:b5:4f:b8:04:eb:7d:7c:a0:4f:d9:33:3a: 70:53:63:34:c8:4d:ec:a7:d3:c7:80:a6:ff:c6:27:d7:45:b6: 10:30:03:bc:b4:05:b0:74:8d:b7:94:df:d6:39:14:69:a9:0d: bd:41:bd:66:09:53:93:a4:08:63:2e:e8:8f:aa:9c:96:9a:c0: 50:f5:70:ec:c1:a9:53:de:28:28:44:22:15:14:2e:67:1f:fa: 4a:f4:6b:06:51:e2:63:c6:19:27:c9:39:ff:80:5a:55:22:ce: 57:2d:be:99:62:6c:c8:1a:63:c3:0c:7e:84:4a:44:3e:93:3c: 13:f4:ac:8b:a9:8e:da:f2:d2:98:9d:64:b7:8c:d3:a0:12:96: 3b:7a:40:25:e8:92:96:54:f6:3a:c3:85:27:11:97:09:32:5f: 3f:6c:77:0e:cc:ea:f1:90:ef:ec:b7:af:a2:64:c2:f8:2b:bf: 48:80:30:f3:df:4f:3d:bf:a7:0b:8f:78:a7:f5:56:74:a5:bd: a4:09:b5:56:e8:f1:88:d1:d2:aa:95:87:0b:f3:60:aa:1c:42: b0:fc:71:77:e6:72:03:5e:9b:38:12:66:19:0c:ad:fa:63:b6: 3d:79:ee:1e:a0:f7:ec:ed:5a:db:05:51:7d:3b:ae:72:9f:25: 6d:73:14:b3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPqW8HvtWdTGQ34534ujbS6TZfeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBC OEYxMjA2QjAeFw0yNTA1MDgyMzM0NTdaFw0yNTA1MTAwMTQwNTdaMDMxMTAvBgNV BAMTKDJBREFBMEJBM0I4RDlFNUZFQ0I2MzQ3NDM0QTdENjZENDAxMUI5QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhlIgqkB5PKTLD2eLh4ad8iUCR 5APwqPDevmcjL2qomdDtC3GUSYOyvgEu4Bs2Jg/J/Imreu8rDbkzvpitu6g613zj ziTGSiFznImDlY5M/zBtNX/SsWTBqZCwYMmGaszCP3bMKQg5lTW3MGetfUuVflje JwKb0U8gGUMB/Ngk4WyfopiBDIpfV3jLXDabENSvrS7DVDgDeOao/AsS4kCbWpIn gIdXJDJGVuOzOOMA8E0jiwK0KQoXQ32kbOqL05UMNfANbnLUMtE2M66DTq/E7+/3 vmB/66zijHU88q33E9oo5WN4QuFfOKvtAXITlA88eavxCNHB2PEJXvZLdsmdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUKtqgujuNnl/stjR0NKfWbUARubwwHwYDVR0j BBgwFoAUiT/UG94ibFTyrSs92hnBoLjxIGswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFjZmEzMTgtMmE1Yy00MjQxLWFmYmItMzg3ZDcxZThj NTk2LzEvODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBCOEYxMjA2Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTNGRDQxQkRFMjI2QzU0RjJBRDJCM0RE QTE5QzFBMEI4RjEyMDZCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhY2ZhMzE4LTJhNWMtNDI0MS1hZmJiLTM4N2Q3MWU4YzU5Ni8xLzg5M0ZENDFC REUyMjZDNTRGMkFEMkIzRERBMTlDMUEwQjhGMTIwNkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABZr5q 48u1T7gE6318oE/ZMzpwU2M0yE3sp9PHgKb/xifXRbYQMAO8tAWwdI23lN/WORRp qQ29Qb1mCVOTpAhjLuiPqpyWmsBQ9XDswalT3igoRCIVFC5nH/pK9GsGUeJjxhkn yTn/gFpVIs5XLb6ZYmzIGmPDDH6ESkQ+kzwT9KyLqY7a8tKYnWS3jNOgEpY7ekAl 6JKWVPY6w4UnEZcJMl8/bHcOzOrxkO/st6+iZML4K79IgDDz3089v6cLj3in9VZ0 pb2kCbVW6PGI0dKqlYcL82CqHEKw/HF35nIDXps4EmYZDK36Y7Y9ee4eoPfs7Vrb BVF9O65ynyVtcxSz -----END CERTIFICATE-----Generated at Fri May 9 06:46:22 2025 by rpki-client