$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: UMQZ1ceBkNIG1tXhOhFyL5C/lv8nvlVkc5DtqD9onEs= Subject key identifier: 7C:F2:D2:FF:6B:88:4B:8D:4D:6F:B8:38:0A:1F:51:65:A9:AC:D6:C2 Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 25ABE4AA6A615D376F28271D1C5894CF1CE4EE01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 0302 Signing time: Mon 05 May 2025 23:35:17 +0000 Manifest this update: Mon 05 May 2025 23:30:17 +0000 Manifest next update: Wed 07 May 2025 00:11:17 +0000 Files and hashes: 1: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: oaLDq7aS5NFaYNW1gUs7MDdZL5P0TUUEDkjRyQGla3w=) 2: 39332e39352e3131322e302f32342d3234203d3e203231383539.roa (hash: /qKqCQ76EfJncAH1+pElYqDNRcZb1xZivyKMiSpERi8=) 3: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: iuam+Y72SFbVuzZ6DMbPvd9+i2O4uNgJ9aW8l1vNV9U=) 4: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (hash: qqVPSWZLREddEW4nL5NY3Bls+ZrG5ASHmT6xiutXttk=) 5: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: 8ja7Z+swVGTraKxezjgHzXG2GlS/dFRID6jPUC87mFI=) 6: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: VHYXVwHlQsZJAA2RsZZ50R3wIEtRSTqqZs7x2iD2WBU=) 7: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: bvqtExc4o5GUJzraVc9CM0CC2GO3x6c+ohx4q9G/dgk=) 8: 39332e39352e3131332e302f32342d3234203d3e203336353330.roa (hash: XdWmefAZyfxd+tfdlcAJ/nwVibHOt4TWi5DLte79H/Q=) 9: 39332e39352e3131332e302f32342d3234203d3e20323134303235.roa (hash: 8Gm4nO+d4zR1wraSZ/HOIsX+oVvW2ewC+6TWc3pBhYE=) 10: 39332e39352e3131342e302f32342d3234203d3e2035303635.roa (hash: MF/szlJtg3jR946D7Iy8tt2rHbx2IcEkKMT7PmewPLE=) 11: 39332e39352e3131372e302f32342d3234203d3e20323135373732.roa (hash: vLSBueodjY+0YJW63au8p8n765D5sPEn1sQkXoc5D7w=) 12: 39332e39352e3131332e302f32342d3234203d3e20323135333034.roa (hash: 3gfso9hqm5DtBYcsaGKuxKlBtoOtyxWD+cWGZp8ZZBg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 00:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ab:e4:aa:6a:61:5d:37:6f:28:27:1d:1c:58:94:cf:1c:e4:ee:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: May 5 23:30:17 2025 GMT Not After : May 7 00:11:17 2025 GMT Subject: CN=7CF2D2FF6B884B8D4D6FB8380A1F5165A9ACD6C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:63:e9:65:0a:34:a1:30:bd:e8:43:54:97:7a: 50:c2:85:42:e8:86:37:20:67:31:4f:dc:f9:22:6e: 88:88:c5:3a:6a:8e:cb:b1:7a:83:81:d1:fb:9d:e3: 54:1c:44:d6:15:16:28:65:60:b7:20:db:43:6f:05: 22:f7:99:6f:68:ed:1b:9b:b1:e8:14:09:0a:64:c3: 11:6d:27:c6:80:45:16:2c:58:f7:b3:90:59:1c:69: 4b:f5:17:00:31:20:8c:f1:5c:1e:fb:d8:fa:58:21: 4e:5c:5f:ea:3b:58:84:9b:b2:37:ea:53:8b:5d:d9: 13:71:ba:6b:68:30:78:6a:c5:54:7d:e9:51:d0:7d: 5f:e6:02:93:a9:a8:f6:e3:9b:47:5c:e5:17:5b:94: 1d:95:10:e7:7e:a7:e7:cb:33:9e:9c:b2:52:55:7e: 46:11:c8:35:3d:ce:98:c7:e3:a4:3a:11:34:95:f1: d2:84:18:65:8c:dc:ba:0b:b9:7c:bf:f3:4f:5f:99: 15:19:48:93:7a:d7:5c:1b:a2:ae:74:09:97:02:85: a9:91:f8:62:12:d1:f2:07:f6:bc:64:7e:cb:a7:6d: 2b:4e:29:6d:4e:ce:d9:7e:de:02:3c:c4:ab:bf:be: b1:46:20:11:78:45:51:cc:96:a7:50:ef:67:3d:1f: 5b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F2:D2:FF:6B:88:4B:8D:4D:6F:B8:38:0A:1F:51:65:A9:AC:D6:C2 X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:21:4c:ea:9b:f1:08:96:34:04:83:b8:8e:b5:56:7a:1c:e6: 4a:72:97:6d:97:74:e1:91:08:cd:f6:46:31:54:81:d4:8d:40: 40:f3:fb:4b:7c:9e:ca:97:3c:f9:44:1d:8f:8b:c8:33:1e:f4: a9:2a:21:a8:63:ab:f5:3e:f7:90:4c:c2:f4:f7:a4:60:75:75: da:0a:65:2c:04:f1:3d:af:3d:b3:9d:7d:9f:14:03:a1:a7:64: ac:3a:57:d3:ae:ee:02:5a:96:c0:66:8e:b6:b4:df:22:fe:06: 48:4c:de:c5:05:e9:25:3b:53:ec:8b:5c:07:b8:b0:88:c1:68: 78:83:24:9c:3f:57:80:08:21:af:42:68:2e:ef:ab:17:2a:96: 47:9f:1a:a1:8e:f8:68:ec:41:8d:bf:e9:4c:20:ac:8b:4d:55: c0:8c:23:85:63:e1:6f:5a:28:2d:91:54:32:df:17:e0:ff:33: f1:cc:0c:2b:f3:80:f4:8d:46:43:75:a1:c3:b1:f4:31:5f:34: b6:41:aa:90:14:e7:61:25:75:b8:1c:38:60:05:dc:8c:9c:55: 0f:34:6e:a1:fd:6f:70:0d:b0:a7:34:e9:1d:33:f9:53:f3:a9: bb:3b:f5:a8:bc:44:f7:48:69:48:2f:5f:eb:d5:d6:8c:c5:88: 4f:b5:15:cc -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJavkqmphXTdvKCcdHFiUzxzk7gEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNTA1MDUyMzMwMTdaFw0yNTA1MDcwMDExMTdaMDMxMTAvBgNV BAMTKDdDRjJEMkZGNkI4ODRCOEQ0RDZGQjgzODBBMUY1MTY1QTlBQ0Q2QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQY+llCjShML3oQ1SXelDChULo hjcgZzFP3PkiboiIxTpqjsuxeoOB0fud41QcRNYVFihlYLcg20NvBSL3mW9o7Rub segUCQpkwxFtJ8aARRYsWPezkFkcaUv1FwAxIIzxXB772PpYIU5cX+o7WISbsjfq U4td2RNxumtoMHhqxVR96VHQfV/mApOpqPbjm0dc5RdblB2VEOd+p+fLM56cslJV fkYRyDU9zpjH46Q6ETSV8dKEGGWM3LoLuXy/809fmRUZSJN611wboq50CZcChamR +GIS0fIH9rxkfsunbStOKW1Oztl+3gI8xKu/vrFGIBF4RVHMlqdQ72c9H1tRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUfPLS/2uIS41Nb7g4Ch9RZams1sIwHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2SFM6pvxCJY0BIO4jrVW ehzmSnKXbZd04ZEIzfZGMVSB1I1AQPP7S3yeypc8+UQdj4vIMx70qSohqGOr9T73 kEzC9PekYHV12gplLATxPa89s519nxQDoadkrDpX067uAlqWwGaOtrTfIv4GSEze xQXpJTtT7ItcB7iwiMFoeIMknD9XgAghr0JoLu+rFyqWR58aoY74aOxBjb/pTCCs i01VwIwjhWPhb1ooLZFUMt8X4P8z8cwMK/OA9I1GQ3Whw7H0MV80tkGqkBTnYSV1 uBw4YAXcjJxVDzRuof1vcA2wpzTpHTP5U/Opuzv1qLxE90hpSC9f69XWjMWIT7UV zA== -----END CERTIFICATE-----Generated at Tue May 6 12:36:19 2025 by rpki-client