$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft File: D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft (raw, json) Hash identifier: QK1j20RHBwDVYVyDw/plUAqBH9DZMIYf91bRSyEh34I= Subject key identifier: 55:EF:E4:13:D7:34:7E:29:B8:F1:73:C9:6A:97:70:5F:67:D7:86:5F Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44 Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444 Certificate serial: 34ABBA4E2C915753C0DD933F4604E271BD571879 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft Manifest number: 0455 Signing time: Sat 28 Jun 2025 19:39:11 +0000 Manifest this update: Sat 28 Jun 2025 19:34:11 +0000 Manifest next update: Sun 29 Jun 2025 21:03:11 +0000 Files and hashes: 1: D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl (hash: 2ZBcSEcJeYqH7bBHvTLRR7EmrqRxUa7+xZb3lEnkMdA=) 2: 37382e32342e3132352e302f32342d3234203d3e203534333339.roa (hash: 7W/JQiIhBxvV9lPwlVaE2K95jNPOksJaHe90LVwGv1I=) 3: 39332e39322e31382e302f32342d3234203d3e203534333339.roa (hash: WMxtcl2Ju6TLrgTtLUBAyAfGF8Gn9pZV9umXAbbzoJo=) 4: 37382e32342e3132362e302f32332d3234203d3e203131343236.roa (hash: QHhKDdx7KbEi2pWBI66gL/yJWrRkXWlW9Ll3iu5yUnk=) 5: 37382e32342e3132312e302f32342d3234203d3e203631333137.roa (hash: PNy4BBOReJ4B4LRwKHBjnzscIyK0n1F3JT7zrSI8uHw=) 6: 37382e32342e3132322e302f32342d3234203d3e2037303138.roa (hash: RiGLyTpjx/lhYnZMR/g3INSwpo5JHGzbqqOnRRhQZa8=) 7: 39332e39322e32302e302f32342d3234203d3e2035353131.roa (hash: Anw+Ot0jzMET4Sk6hQNdmMLNf7QzBxX2vhTMbwb0Hp4=) 8: 34352e38362e39352e302f32342d3234203d3e2031323939.roa (hash: /PtUIUP6p+pYilANAGMh758nc28Pq3mfIoxxpFoEqi0=) 9: 34352e38362e39342e302f32342d3234203d3e2039303039.roa (hash: gq03q2PZTenb5MfLZJOhv7nheUzD9xSGdvhncjMBFfc=) 10: 37382e32342e3132342e302f32342d3234203d3e203534333339.roa (hash: KBQWp2YW6b35tXBZxmWFRr/DTme9e2nhX14tjQgVgwA=) 11: 39332e39322e31392e302f32342d3234203d3e203631333137.roa (hash: bCly8plczaq5qd0H9MlQ1Z8xZKSunOI/jFWKgR1UqBg=) 12: 37382e32342e3132332e302f32342d3234203d3e2037303138.roa (hash: /Sw/kTcH9aO7bMcRnVprTh49TII5UJ49lP8PepQkn1Y=) 13: 39332e39322e32312e302f32342d3234203d3e203631333137.roa (hash: fW+zXQmtdqPL01ivRHM0ry5dwDotUJmdzQHE3ZemyUE=) 14: 34352e38362e39332e302f32342d3234203d3e203631333137.roa (hash: NqyxGOr6BTHAA7xjzWV4b78ltaPMAi4BS7tCqdtupR8=) 15: 39332e39322e32322e302f32332d3234203d3e203534333339.roa (hash: MlVhq9YMUDch69apYFS1riPDRY/vCEBSVcnZ0AXUbzA=) 16: 37382e32342e3132342e302f32332d3234203d3e20383334.roa (hash: NsnuSxYl6unNGzK/UX953Nm8V+PIcPCCM5lN4meDmN4=) 17: 34352e38362e39322e302f32342d3234203d3e20323039313831.roa (hash: gFPXsCrn7VghMZpPQmlNius+Qe9koRj6iqpgIDQpOY8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ab:ba:4e:2c:91:57:53:c0:dd:93:3f:46:04:e2:71:bd:57:18:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444 Validity Not Before: Jun 28 19:34:11 2025 GMT Not After : Jun 29 21:03:11 2025 GMT Subject: CN=55EFE413D7347E29B8F173C96A97705F67D7865F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:12:f1:d3:18:0a:23:e7:5f:2b:7d:aa:27:9c: 46:a0:f7:e4:d7:df:0e:1f:d3:ac:7d:b4:93:06:46: 03:99:d5:4c:2c:29:3b:e6:6b:28:1c:d2:e0:02:47: 23:27:1e:d8:f0:85:d6:5d:9e:f5:7b:f7:1f:f8:6c: a6:11:43:8d:1f:3f:0b:95:77:ec:ad:f5:c2:55:81: 67:1a:8a:7c:f3:e6:46:ec:6f:59:88:8a:c6:69:24: 50:d9:d7:23:b0:04:91:a8:0d:44:11:a3:f1:59:6a: bb:88:ba:f5:70:8d:52:4d:17:32:af:4a:ef:e8:d2: 67:2f:09:9d:12:19:f1:7e:e2:28:b1:7d:cd:e7:ad: 54:14:93:06:89:eb:ff:be:ff:8d:20:69:0f:ef:35: 3f:be:b6:4d:73:32:13:1b:3e:1c:b6:3f:1d:c7:d5: 65:80:1c:03:cc:68:df:c0:7f:8b:7d:97:13:10:a8: 75:31:ce:c1:a8:1f:b3:7c:9b:60:ad:e9:99:36:a9: 30:ab:78:07:43:78:de:cc:5d:52:b4:eb:bc:ad:7e: 07:ac:22:0e:f8:1d:d3:16:21:c5:28:8f:e8:b2:e7: e7:f9:92:a0:e2:55:0d:57:d6:c7:17:56:ed:c9:fa: c4:9c:33:52:b1:92:f6:63:08:fd:4b:7f:99:a5:a2: 70:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EF:E4:13:D7:34:7E:29:B8:F1:73:C9:6A:97:70:5F:67:D7:86:5F X509v3 Authority Key Identifier: keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:44:e6:be:64:b8:1b:3f:c6:df:52:5c:d2:8b:38:fa:58:cf: b6:c4:e6:df:6d:d3:69:fd:40:f6:49:19:2f:2e:92:09:d3:94: ce:29:99:36:39:a1:e0:a2:6f:0d:ba:2d:2d:ee:4b:1d:de:45: af:71:55:37:03:0c:cf:ce:f9:06:fc:bb:81:13:fe:bf:9b:63: 84:a9:f5:75:97:4b:57:d6:ce:de:29:6f:9e:d0:6a:b5:60:42: 56:63:f2:13:20:6c:44:b7:b9:b3:fe:53:c6:af:ac:fb:f7:70: 5b:8c:a0:55:c4:cd:9a:ed:10:cb:15:04:78:27:c3:a8:11:3f: 36:6a:02:0d:4e:d3:94:65:2e:0a:23:10:0e:e6:19:46:a7:24: 20:27:06:fc:a5:35:59:26:eb:94:7a:f6:e6:49:6e:34:02:1b: 08:70:ed:61:93:37:7c:d3:09:b6:a8:1a:de:15:a8:5c:d3:d5: 70:11:47:b5:13:87:e6:26:6d:2a:b4:9e:08:51:83:3e:e6:aa: 4d:37:d7:45:8c:09:08:fa:d2:bd:dc:9b:8f:59:5e:18:08:43: 39:54:cd:ce:51:9a:f3:32:86:b2:0a:d5:52:cd:9a:bd:1b:6f: fb:f2:0a:c0:17:e3:6a:f8:75:d0:a2:07:7e:b0:27:8d:7c:5d: f8:03:a9:af -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNKu6TiyRV1PA3ZM/RgTicb1XGHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDAxYmEwMTNiYzFlNmQ4NmYwZDZkNThlYWZhNTRlMjdm YWRhMzQ0NDAeFw0yNTA2MjgxOTM0MTFaFw0yNTA2MjkyMTAzMTFaMDMxMTAvBgNV BAMTKDU1RUZFNDEzRDczNDdFMjlCOEYxNzNDOTZBOTc3MDVGNjdENzg2NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTEvHTGAoj518rfaonnEag9+TX 3w4f06x9tJMGRgOZ1UwsKTvmaygc0uACRyMnHtjwhdZdnvV79x/4bKYRQ40fPwuV d+yt9cJVgWcainzz5kbsb1mIisZpJFDZ1yOwBJGoDUQRo/FZaruIuvVwjVJNFzKv Su/o0mcvCZ0SGfF+4iixfc3nrVQUkwaJ6/++/40gaQ/vNT++tk1zMhMbPhy2Px3H 1WWAHAPMaN/Af4t9lxMQqHUxzsGoH7N8m2Ct6Zk2qTCreAdDeN7MXVK067ytfges Ig74HdMWIcUoj+iy5+f5kqDiVQ1X1scXVu3J+sScM1KxkvZjCP1Lf5mlonDjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUVe/kE9c0fim48XPJapdwX2fXhl8wHwYDVR0j BBgwFoAU0BugE7webYbw1tWOr6VOJ/raNEQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYtNjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5 NDMxLzEvRDAxQkEwMTNCQzFFNkQ4NkYwRDZENThFQUZBNTRFMjdGQURBMzQ0NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBCdWdFN3dlYllidzF0V09yNlZPSl9y YU5FUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNTIyYTUyZi02 NTM0LTQxNjUtYTZhNy1lZjlmNzRlZjk0MzEvMS9EMDFCQTAxM0JDMUU2RDg2RjBE NkQ1OEVBRkE1NEUyN0ZBREEzNDQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUTmvmS4Gz/G31Jc0os4 +ljPtsTm323Taf1A9kkZLy6SCdOUzimZNjmh4KJvDbotLe5LHd5Fr3FVNwMMz875 Bvy7gRP+v5tjhKn1dZdLV9bO3ilvntBqtWBCVmPyEyBsRLe5s/5Txq+s+/dwW4yg VcTNmu0QyxUEeCfDqBE/NmoCDU7TlGUuCiMQDuYZRqckICcG/KU1WSbrlHr25klu NAIbCHDtYZM3fNMJtqga3hWoXNPVcBFHtROH5iZtKrSeCFGDPuaqTTfXRYwJCPrS vdybj1leGAhDOVTNzlGa8zKGsgrVUs2avRtv+/IKwBfjavh10KIHfrAnjXxd+AOp rw== -----END CERTIFICATE-----Generated at Sat Jun 28 23:06:03 2025 by rpki-client