$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft File: D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft (raw, json) Hash identifier: AQHSiupYoeDdsshMIWfE3Gf2xyVT/sJl2au0dhPmlRU= Subject key identifier: 4C:D0:64:0B:57:AD:04:05:1C:57:C0:15:35:F8:65:C9:3D:D7:E9:4B Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44 Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444 Certificate serial: 273E4AD260508D42685FBD94099B70049C83C9CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft Manifest number: 0411 Signing time: Fri 09 May 2025 21:20:31 +0000 Manifest this update: Fri 09 May 2025 21:15:31 +0000 Manifest next update: Sun 11 May 2025 00:29:31 +0000 Files and hashes: 1: 37382e32342e3132312e302f32342d3234203d3e203631333137.roa (hash: PNy4BBOReJ4B4LRwKHBjnzscIyK0n1F3JT7zrSI8uHw=) 2: 34352e38362e39342e302f32342d3234203d3e2039303039.roa (hash: gq03q2PZTenb5MfLZJOhv7nheUzD9xSGdvhncjMBFfc=) 3: 37382e32342e3132332e302f32342d3234203d3e2037303138.roa (hash: /Sw/kTcH9aO7bMcRnVprTh49TII5UJ49lP8PepQkn1Y=) 4: 39332e39322e32302e302f32342d3234203d3e2035353131.roa (hash: Anw+Ot0jzMET4Sk6hQNdmMLNf7QzBxX2vhTMbwb0Hp4=) 5: 37382e32342e3132362e302f32332d3234203d3e203131343236.roa (hash: QHhKDdx7KbEi2pWBI66gL/yJWrRkXWlW9Ll3iu5yUnk=) 6: 39332e39322e31382e302f32342d3234203d3e203534333339.roa (hash: WMxtcl2Ju6TLrgTtLUBAyAfGF8Gn9pZV9umXAbbzoJo=) 7: 34352e38362e39322e302f32342d3234203d3e20323039313831.roa (hash: axad6y4WO54wAX0JBbPnOOK6hI/gTIiMU9ubKRwS/L8=) 8: 39332e39322e31392e302f32342d3234203d3e203631333137.roa (hash: bCly8plczaq5qd0H9MlQ1Z8xZKSunOI/jFWKgR1UqBg=) 9: 37382e32342e3132352e302f32342d3234203d3e203534333339.roa (hash: 7W/JQiIhBxvV9lPwlVaE2K95jNPOksJaHe90LVwGv1I=) 10: 37382e32342e3132342e302f32332d3234203d3e20383334.roa (hash: aR9bXXTYwrcEpOUA5zP1Au4UdLHmUATKygkKxMy2Hyo=) 11: 37382e32342e3132342e302f32342d3234203d3e203534333339.roa (hash: KBQWp2YW6b35tXBZxmWFRr/DTme9e2nhX14tjQgVgwA=) 12: 34352e38362e39332e302f32342d3234203d3e203631333137.roa (hash: 1x2zpcTAYyd8XetSB0JjPvLUa4clQe7hwjPf8ExgQOI=) 13: 37382e32342e3132322e302f32342d3234203d3e2037303138.roa (hash: RiGLyTpjx/lhYnZMR/g3INSwpo5JHGzbqqOnRRhQZa8=) 14: 39332e39322e32322e302f32332d3234203d3e203534333339.roa (hash: MlVhq9YMUDch69apYFS1riPDRY/vCEBSVcnZ0AXUbzA=) 15: 34352e38362e39352e302f32342d3234203d3e2031323939.roa (hash: yQKHHpn8wCUHU+dOg286104MyMwPlf9k9qfBkCNGEsg=) 16: 39332e39322e32312e302f32342d3234203d3e203631333137.roa (hash: fW+zXQmtdqPL01ivRHM0ry5dwDotUJmdzQHE3ZemyUE=) 17: D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl (hash: 4zPi/S/Qb8F6nL9/3ds1Iu3psQKs4yfT6SXHMJSWPng=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 00:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:3e:4a:d2:60:50:8d:42:68:5f:bd:94:09:9b:70:04:9c:83:c9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444 Validity Not Before: May 9 21:15:31 2025 GMT Not After : May 11 00:29:31 2025 GMT Subject: CN=4CD0640B57AD04051C57C01535F865C93DD7E94B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:dd:d9:90:8c:5c:2e:a9:07:77:4c:1b:96: 26:29:77:99:d4:07:1e:b7:a4:21:5c:7a:42:ad:17: ae:64:dd:30:d4:7a:40:58:c4:ec:bd:0f:d3:1e:be: 9b:ec:e0:67:ba:ca:24:3c:c5:66:d6:9a:3f:36:59: 0b:d2:a8:59:61:09:ec:b1:a2:45:dc:ba:27:62:67: 42:2a:f1:47:79:8d:85:54:ca:80:78:56:b0:2c:ab: fa:d4:f6:bc:ae:fd:59:23:b9:d8:69:e7:4d:1b:f0: 8e:cb:1c:29:1c:82:d0:27:c6:27:11:cb:3f:b5:14: 4b:36:a0:57:33:37:48:58:36:bf:af:89:c7:05:e7: 8a:3a:fd:df:47:00:58:82:7d:af:80:1a:f7:df:07: d3:13:ce:cc:34:a6:45:ff:b2:f3:ec:e0:6d:e5:34: 87:fb:27:c5:7c:dd:99:f9:19:c7:b2:1b:49:70:02: 53:85:fd:4a:b2:9f:87:56:0a:5c:e4:a9:0f:f4:d0: d1:a2:c7:e9:1e:11:db:80:78:b7:77:6a:4b:de:d5: 6f:af:34:4f:00:c9:2e:f6:63:41:36:b5:80:0c:61: 07:f0:4f:8f:85:65:4d:c0:4e:5c:0b:22:67:4f:a3: 29:7e:a4:ca:14:5e:cd:f7:1b:27:b1:aa:6a:cb:a3: 55:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D0:64:0B:57:AD:04:05:1C:57:C0:15:35:F8:65:C9:3D:D7:E9:4B X509v3 Authority Key Identifier: keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:3e:d0:74:39:68:98:64:0f:a4:b0:35:04:85:31:ef:43:26: 06:ff:87:e1:04:8b:9f:0d:b1:4b:d8:fa:90:dd:56:bf:29:08: 83:f0:cf:f2:af:20:7f:ee:60:ec:84:0d:21:95:99:7a:6d:5e: e5:01:20:3a:5d:63:10:7a:22:af:af:36:ba:4b:b3:1d:23:86: b7:e0:18:a0:3e:de:40:de:67:4a:b6:95:c7:c5:56:fb:3b:39: a0:fd:08:e7:b8:61:55:1b:d3:26:4f:38:f0:05:91:7f:b9:f4: 22:fe:04:db:5b:f7:ee:a8:d6:0a:17:8a:53:e8:7d:27:4f:c9: 8e:7b:8c:19:09:ed:ba:ad:72:92:74:39:09:69:58:38:77:b0: 79:3b:ba:9a:93:8d:c3:71:66:99:90:e4:d3:11:62:33:c2:0e: cb:26:f1:29:39:04:10:c3:6d:54:87:5a:42:b5:ca:61:1d:ed: d3:55:34:12:3b:a3:21:e0:b4:5b:3f:82:46:02:66:00:27:7d: ad:3a:68:fc:1d:65:3b:c0:c6:5d:6a:d6:2f:93:c5:29:d5:a8: f4:97:2e:f2:55:2d:73:2c:82:6a:3f:e5:41:c9:11:d9:99:66: 7e:30:11:f2:e1:f1:39:7d:34:52:74:4b:8c:06:5f:ca:a5:a8: 95:2a:e6:b7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJz5K0mBQjUJoX72UCZtwBJyDycowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDAxYmEwMTNiYzFlNmQ4NmYwZDZkNThlYWZhNTRlMjdm YWRhMzQ0NDAeFw0yNTA1MDkyMTE1MzFaFw0yNTA1MTEwMDI5MzFaMDMxMTAvBgNV BAMTKDRDRDA2NDBCNTdBRDA0MDUxQzU3QzAxNTM1Rjg2NUM5M0REN0U5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Vt3ZkIxcLqkHd0wbliYpd5nU Bx63pCFcekKtF65k3TDUekBYxOy9D9Mevpvs4Ge6yiQ8xWbWmj82WQvSqFlhCeyx okXcuidiZ0Iq8Ud5jYVUyoB4VrAsq/rU9ryu/Vkjudhp500b8I7LHCkcgtAnxicR yz+1FEs2oFczN0hYNr+viccF54o6/d9HAFiCfa+AGvffB9MTzsw0pkX/svPs4G3l NIf7J8V83Zn5GceyG0lwAlOF/Uqyn4dWClzkqQ/00NGix+keEduAeLd3akve1W+v NE8AyS72Y0E2tYAMYQfwT4+FZU3ATlwLImdPoyl+pMoUXs33GyexqmrLo1X5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUTNBkC1etBAUcV8AVNfhlyT3X6UswHwYDVR0j BBgwFoAU0BugE7webYbw1tWOr6VOJ/raNEQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYtNjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5 NDMxLzEvRDAxQkEwMTNCQzFFNkQ4NkYwRDZENThFQUZBNTRFMjdGQURBMzQ0NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBCdWdFN3dlYllidzF0V09yNlZPSl9y YU5FUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNTIyYTUyZi02 NTM0LTQxNjUtYTZhNy1lZjlmNzRlZjk0MzEvMS9EMDFCQTAxM0JDMUU2RDg2RjBE NkQ1OEVBRkE1NEUyN0ZBREEzNDQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACT7QdDlomGQPpLA1BIUx 70MmBv+H4QSLnw2xS9j6kN1WvykIg/DP8q8gf+5g7IQNIZWZem1e5QEgOl1jEHoi r682ukuzHSOGt+AYoD7eQN5nSraVx8VW+zs5oP0I57hhVRvTJk848AWRf7n0Iv4E 21v37qjWCheKU+h9J0/JjnuMGQntuq1yknQ5CWlYOHeweTu6mpONw3FmmZDk0xFi M8IOyybxKTkEEMNtVIdaQrXKYR3t01U0EjujIeC0Wz+CRgJmACd9rTpo/B1lO8DG XWrWL5PFKdWo9Jcu8lUtcyyCaj/lQckR2ZlmfjAR8uHxOX00UnRLjAZfyqWolSrm tw== -----END CERTIFICATE-----Generated at Sat May 10 13:52:49 2025 by rpki-client