$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: YcZZgWATB4pcgZZYf5MtX+YYxFA/jvF4W6k9Jp4xpwY= Subject key identifier: BC:FA:54:19:BD:18:EB:50:D6:5C:0B:F6:E4:5C:C6:6E:2F:EB:EB:E1 Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 6B7A92D4A1015351AE65E36578872435760F2826 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: 34 Signing time: Thu 08 May 2025 07:55:23 +0000 Manifest this update: Thu 08 May 2025 07:50:23 +0000 Manifest next update: Fri 09 May 2025 11:32:23 +0000 Files and hashes: 1: 3231332e3135372e3132322e302f32342d3234203d3e20383334.roa (hash: XBixnko3qtEccfsl7C8E/1A0CemeZocPCP9lkkwrqDw=) 2: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: cK22q6rO6KtktflqsQYlSr1z73xEpoVM/WNGnd6YIEI=) 3: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: obPbW0ZKO9rq4yp7c5UqzqijavPW0CV78gaYhHaBReI=) 4: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: oXC9Asr9SJ7DSslxSZaWUX9xWnSBbY5iUxbxwvvcFUI=) 5: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: fkThFrWbc2SNg5nWL/DjCmp7efO9LKVSLfyHO63Odeo=) 6: 3231332e3135372e3132332e302f32342d3234203d3e20313337353137.roa (hash: 101KeXXnBE7X7QLTvc7Gr7DVuO0YIAuTdg47tJ4yQUU=) 7: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: U2rsj2GmpPBYV9RPLITNHzbaDI2Gxelnlov5msxX9eI=) 8: 3231332e3135372e3132312e302f32342d3234203d3e20383334.roa (hash: KzRDONoUEdWtAmYoE3nM54cz2mZ3OTHGtsETHEM2i5I=) 9: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: YYFksjWHw6zjNPv5N6TtODGPT875Dn19vcgTuJg2trE=) 10: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: u6D0nQIamyf1rwT6EphlkmgpGmdsHhrROhbEzSFSSxQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:7a:92:d4:a1:01:53:51:ae:65:e3:65:78:87:24:35:76:0f:28:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: May 8 07:50:23 2025 GMT Not After : May 9 11:32:23 2025 GMT Subject: CN=BCFA5419BD18EB50D65C0BF6E45CC66E2FEBEBE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:ee:23:ef:f4:43:85:37:23:13:f3:16:e1: d4:98:94:c2:23:86:e4:6c:86:87:2c:1e:87:94:dc: 03:c0:5f:fe:8e:30:5c:66:7b:c6:f7:1e:50:7a:55: 70:7a:8c:63:82:ae:ce:26:0a:25:3a:ed:b9:8a:e6: 51:e9:57:6c:5e:5d:af:a1:3a:48:5e:c5:9e:7f:50: d2:19:e8:47:1c:b0:1c:b5:7a:82:cf:1f:67:bf:37: 67:a2:e6:b7:9a:e4:b6:c4:bf:e2:db:34:e8:bc:e8: 6b:72:71:85:f5:49:fc:83:b7:be:2a:ce:c2:d0:73: 98:80:38:e3:35:65:59:4e:73:fc:c4:38:e9:e4:39: 4d:f8:65:4f:09:ef:ac:50:64:cc:91:75:c1:90:0b: bb:50:06:fe:a2:24:97:d4:b3:00:1a:cc:f3:60:4b: 7f:0e:2e:89:72:f0:a5:72:b2:e4:2c:c8:f5:49:0c: b0:c0:19:38:dc:c7:13:2c:56:89:19:b8:f7:30:6b: 20:32:66:37:bc:8a:f3:aa:86:ea:89:e6:fa:1d:d8: ab:47:ea:ed:b8:28:e0:36:de:d8:98:de:47:b6:61: 12:ef:91:f7:cb:f7:19:14:02:e5:c0:ad:de:6d:74: a1:c7:3a:e2:18:09:0e:04:a5:f4:10:a8:80:12:68: e8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FA:54:19:BD:18:EB:50:D6:5C:0B:F6:E4:5C:C6:6E:2F:EB:EB:E1 X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:de:26:d9:24:c5:7a:f3:cb:db:37:29:cb:94:87:93:ac:18: 82:16:59:22:8a:4f:4d:03:e4:04:cb:9e:35:f3:b7:dc:19:d7: 33:f1:61:bc:9c:7d:01:14:52:e9:c2:c3:a5:e1:f5:80:f1:80: ba:6b:31:88:67:b4:88:42:6d:0f:c7:c2:61:27:d5:07:11:8b: 0e:32:d4:bb:d4:15:37:ce:d9:16:50:c7:1d:3b:59:1a:44:d3: 88:70:bf:3a:61:60:b5:05:48:d2:f2:4e:af:f9:8a:5d:9f:9a: c9:67:6a:48:f1:73:92:fc:7f:b1:ff:e9:23:3b:56:c7:be:9c: 08:81:b8:ad:fa:8e:fa:45:ff:7b:b2:74:01:19:cb:ef:f4:e8: f2:fd:7f:27:2e:9e:4f:da:61:45:6c:f4:cb:e2:5e:78:d5:40: 2a:84:6a:ee:ec:d5:eb:f9:96:e5:b4:1a:d2:6a:b6:71:76:9c: 76:6f:33:13:2f:d3:77:73:de:e3:81:8a:d0:88:7f:d4:88:8d: 47:fc:dc:68:5d:c4:2a:24:7e:fa:09:20:c1:0d:25:15:05:2d: 08:13:94:46:3a:a5:bc:a1:4e:40:75:f9:77:73:8f:23:47:87: 57:3c:f7:a7:7f:2d:f7:b1:25:71:18:16:2e:89:82:ce:d1:75: a6:f8:8b:57 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUa3qS1KEBU1GuZeNleIckNXYPKCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNTA1MDgwNzUwMjNaFw0yNTA1MDkxMTMyMjNaMDMxMTAvBgNV BAMTKEJDRkE1NDE5QkQxOEVCNTBENjVDMEJGNkU0NUNDNjZFMkZFQkVCRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAO+4j7/RDhTcjE/MW4dSYlMIj huRshocsHoeU3APAX/6OMFxme8b3HlB6VXB6jGOCrs4mCiU67bmK5lHpV2xeXa+h OkhexZ5/UNIZ6EccsBy1eoLPH2e/N2ei5rea5LbEv+LbNOi86GtycYX1SfyDt74q zsLQc5iAOOM1ZVlOc/zEOOnkOU34ZU8J76xQZMyRdcGQC7tQBv6iJJfUswAazPNg S38OLoly8KVysuQsyPVJDLDAGTjcxxMsVokZuPcwayAyZje8ivOqhuqJ5vod2KtH 6u24KOA23tiY3ke2YRLvkffL9xkUAuXArd5tdKHHOuIYCQ4EpfQQqIASaOjDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvPpUGb0Y61DWXAv25FzGbi/r6+EwHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYt4m2STFevPL2zcpy5SH k6wYghZZIopPTQPkBMueNfO33BnXM/FhvJx9ARRS6cLDpeH1gPGAumsxiGe0iEJt D8fCYSfVBxGLDjLUu9QVN87ZFlDHHTtZGkTTiHC/OmFgtQVI0vJOr/mKXZ+ayWdq SPFzkvx/sf/pIztWx76cCIG4rfqO+kX/e7J0ARnL7/To8v1/Jy6eT9phRWz0y+Je eNVAKoRq7uzV6/mW5bQa0mq2cXacdm8zEy/Td3Pe44GK0Ih/1IiNR/zcaF3EKiR+ +gkgwQ0lFQUtCBOURjqlvKFOQHX5d3OPI0eHVzz3p38t97ElcRgWLomCztF1pviL Vw== -----END CERTIFICATE-----Generated at Thu May 8 15:49:23 2025 by rpki-client