$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft File: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft (raw, json) Hash identifier: wvMFghW2imjEOO++g5fOodfS/waUQaLOlpOLhEBByRk= Subject key identifier: 04:7C:1C:D5:C5:12:29:F1:82:3A:3A:97:A3:A8:F6:00:7D:A3:15:5F Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 Certificate issuer: /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Certificate serial: 053366BB397A4E06B3ED3DFD29ACB7A5729F7DE5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft Manifest number: 21 Signing time: Tue 06 May 2025 18:44:37 +0000 Manifest this update: Tue 06 May 2025 18:39:37 +0000 Manifest next update: Wed 07 May 2025 21:20:37 +0000 Files and hashes: 1: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl (hash: XEYx2BwGmdmoo8G8SVuhROIu0IgscqLMTSpv9svzA7s=) 2: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: /zrjZ0ZqEzRDQ5mOWK+S06L45z9UxNhwijRkpqGoHX0=) 3: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: 3uRQGY7O+ZvtbHNtgC5MF4VJ4PR1W0vGtZuXeGQdfrI=) 4: 326131343a373538303a356666663a3a2f34382d3438203d3e20323134333434.roa (hash: pH1DpsNoBXAL0l4o2dyKb1VUo6J4k0AUCBSFbohk97k=) 5: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: 0tk68iktR4A+Tmx1ow+QCPfURRQdgNg7+hqUgrcV4SU=) 6: 326131343a373538303a666634323a3a2f34382d3438203d3e20323134333434.roa (hash: 9k9VorkprwzOj4hWnDvwpKS020LK9HlBFwzRrzgLjKw=) 7: 326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa (hash: apRB5OfhlgNP9CjlOyLXHwJtDJcG7Ul2o20dXFYOVFQ=) 8: 326131343a373538303a666634353a3a2f34382d3438203d3e20323134333434.roa (hash: 8IkTFY6NhSlGUxhiOR1gV0K8W7L2BzrfJSsZgSDz+CM=) 9: 326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa (hash: gWNOGizaCWeT+eChfA6O1CcYgC4CppF3JVd8ZgY0qsY=) 10: 326131343a373538303a666634303a3a2f34382d3438203d3e20323134333434.roa (hash: dPCGiKkWz0E9rMprVOstBFLQuVK9OG6CBSKX+fk7UXw=) 11: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: Kr++/O1eWk2rhooTEwkNaOpIKHaAHhcWSp5UY9Du6eM=) 12: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: i94AFUzw6e810fYgj7x6pZ8Yx8k5H6Glrkwkeys08UU=) 13: 326131343a373538303a666634343a3a2f34382d3438203d3e20323134333434.roa (hash: wAwmvjP2Xs/JgKfPKl1DdsDpWK9Z2qkOeMDP05em2JQ=) 14: 326131343a373538303a666634313a3a2f34382d3438203d3e20323134333434.roa (hash: pdCqfiQKAk5mpE38Sur9HB4NVG9NXvRtOzzMMORY0Ss=) 15: 326131343a373538303a666634663a3a2f34382d3438203d3e20323134333434.roa (hash: 6pA9NNrKrI4+zxZxo4gukhaJn6WiNbtje4w/VFUeaKs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 21:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:33:66:bb:39:7a:4e:06:b3:ed:3d:fd:29:ac:b7:a5:72:9f:7d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Validity Not Before: May 6 18:39:37 2025 GMT Not After : May 7 21:20:37 2025 GMT Subject: CN=047C1CD5C51229F1823A3A97A3A8F6007DA3155F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:de:65:26:78:65:eb:84:ea:b5:fa:c6:54:cd: fa:45:a5:c2:16:7a:27:23:a7:9a:54:34:6e:72:e4: af:f8:ba:9b:16:f4:cd:9a:8b:4c:ad:f2:6e:31:23: d8:99:dd:a6:d1:94:ca:47:56:c2:07:49:99:29:2f: 10:b1:94:96:61:20:da:86:d3:c6:31:06:1b:43:dd: 7d:cc:d6:a1:e7:12:82:ea:93:bb:6a:03:8c:27:ac: 96:88:c2:06:b9:9d:0b:9a:75:69:36:23:cf:e7:e5: 75:ec:f9:c6:35:9f:8a:65:d4:e8:1d:0a:ef:72:e3: 42:41:56:29:c7:9c:a0:ac:8b:f1:59:c9:70:c4:9b: 9d:3d:b2:25:03:46:8b:87:7a:f2:a6:83:98:83:8a: 6a:bf:ef:1f:18:f4:4d:3d:3b:f9:bb:1e:19:33:e7: 7d:93:a7:ab:6a:1b:81:5f:d2:d7:ef:ee:b3:10:a6: ec:81:80:5f:0d:75:c6:c0:f4:a8:c5:09:bc:44:fd: a5:1e:14:91:aa:3e:e0:16:06:cd:bb:78:32:37:77: eb:68:ae:af:32:bd:b1:68:7a:2b:67:0a:17:f6:49: da:3c:05:71:d8:25:c6:0e:4d:84:27:68:bb:e8:fc: ba:cd:c1:3a:7d:3f:14:fd:c8:9b:69:60:5c:6a:33: f3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7C:1C:D5:C5:12:29:F1:82:3A:3A:97:A3:A8:F6:00:7D:A3:15:5F X509v3 Authority Key Identifier: keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:95:ec:3c:7f:f6:57:7a:ca:d4:4e:08:b4:e4:7d:ba:1a:dc: c5:5f:3a:eb:e7:bb:91:ba:4f:75:1f:bf:56:36:34:f2:d9:23: ba:c3:69:d6:69:84:24:b8:c1:12:94:3a:29:51:85:ee:d4:d0: 4f:02:ad:ed:0c:1f:7d:5e:f4:ee:c8:09:2f:2b:a2:83:75:2b: 9b:10:e2:97:8f:7a:12:41:50:5a:cf:e1:e5:0c:1d:58:e4:fb: 9a:b5:ba:23:5b:60:f0:22:65:56:22:9c:15:73:28:50:10:0c: 23:8f:7c:87:a9:c4:56:41:a5:e9:2d:9f:05:45:a5:54:38:e9: f3:14:0d:49:d7:a9:2c:85:be:7b:1c:e3:c1:c3:18:6b:b3:d0: 38:5b:a5:c4:4f:8e:d0:10:3d:17:ae:54:56:e4:08:29:82:34: 0c:5d:bb:2b:23:e9:ae:46:3c:cd:2a:ae:fd:de:1e:42:68:7f: e6:76:95:42:eb:80:97:00:3c:3e:53:ea:65:d0:13:f5:e2:dd: 44:b6:42:37:cb:bb:70:63:77:11:b5:8b:28:a3:31:e3:31:b7: 1a:a2:b4:50:23:f6:21:db:32:a7:d9:ec:08:5f:28:40:5b:75: d4:6d:53:ec:fa:4c:1a:b2:e8:bc:82:76:ce:d9:34:bc:db:41: 0a:89:2a:05 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBTNmuzl6Tgaz7T39Kay3pXKffeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJB ODcyMzk0NTAeFw0yNTA1MDYxODM5MzdaFw0yNTA1MDcyMTIwMzdaMDMxMTAvBgNV BAMTKDA0N0MxQ0Q1QzUxMjI5RjE4MjNBM0E5N0EzQThGNjAwN0RBMzE1NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC13mUmeGXrhOq1+sZUzfpFpcIW eicjp5pUNG5y5K/4upsW9M2ai0yt8m4xI9iZ3abRlMpHVsIHSZkpLxCxlJZhINqG 08YxBhtD3X3M1qHnEoLqk7tqA4wnrJaIwga5nQuadWk2I8/n5XXs+cY1n4pl1Ogd Cu9y40JBVinHnKCsi/FZyXDEm509siUDRouHevKmg5iDimq/7x8Y9E09O/m7Hhkz 532Tp6tqG4Ff0tfv7rMQpuyBgF8NdcbA9KjFCbxE/aUeFJGqPuAWBs27eDI3d+to rq8yvbFoeitnChf2Sdo8BXHYJcYOTYQnaLvo/LrNwTp9PxT9yJtpYFxqM/OpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUBHwc1cUSKfGCOjqXo6j2AH2jFV8wHwYDVR0j BBgwFoAUh6TITUNm27FakJClWqLc66hyOUUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMw MWRhLzEvODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJBODcyMzk0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84N0E0Qzg0RDQzNjZEQkIxNUE5MDkwQTU1 QUEyRENFQkE4NzIzOTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2E1ZDRjMDBiLWQxMDUtNDkwNi1iOTgxLTFkMDM0M2UzMDFkYS8xLzg3QTRDODRE NDM2NkRCQjE1QTkwOTBBNTVBQTJEQ0VCQTg3MjM5NDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7lew8 f/ZXesrUTgi05H26GtzFXzrr57uRuk91H79WNjTy2SO6w2nWaYQkuMESlDopUYXu 1NBPAq3tDB99XvTuyAkvK6KDdSubEOKXj3oSQVBaz+HlDB1Y5PuatbojW2DwImVW IpwVcyhQEAwjj3yHqcRWQaXpLZ8FRaVUOOnzFA1J16kshb57HOPBwxhrs9A4W6XE T47QED0XrlRW5AgpgjQMXbsrI+muRjzNKq793h5CaH/mdpVC64CXADw+U+pl0BP1 4t1EtkI3y7twY3cRtYsoozHjMbcaorRQI/Yh2zKn2ewIXyhAW3XUbVPs+kwasui8 gnbO2TS820EKiSoF -----END CERTIFICATE-----Generated at Wed May 7 03:01:51 2025 by rpki-client