$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: blEZuXUXSewCf0gSUg0BDJFi7m2+tPlkF9YCC9Jx4sY= Subject key identifier: 35:55:13:84:2C:09:73:9A:F1:3C:37:0B:08:97:30:D3:D5:08:23:7F Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 0ABFE3DE7665B6EB7D4681938753F6E22A142465 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: F0 Signing time: Tue 06 May 2025 08:05:17 +0000 Manifest this update: Tue 06 May 2025 08:00:17 +0000 Manifest next update: Wed 07 May 2025 10:44:17 +0000 Files and hashes: 1: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: m5L6k+FV7mWE/EVqPb4+bssQT5P9yrNrgfj7ugkviow=) 2: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: DDeP4uYwqP8b0ON0e+nML7HE4UFDik7BChJ/x0EHl9Q=) 3: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: aWzsWkNz9PJPPmM8i0/IefYTbT3Y07R53lZGD0EHqrg=) 4: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: TDSLNd9plHJwOulPeBHo1vNBDKxJTlWmh9i0dzSd4do=) 5: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: 0b6sszxsKulqMcqV3D3Yqcg5IxC3pSU5gc82mTsDYlA=) 6: 3134312e3139332e3232382e302f32342d3234203d3e20313937353337.roa (hash: GmuqQ5cRPqO0r6kNpS31Skpj+V6x9N2OgVf2PPKwFIs=) 7: 3134312e3139332e3232382e302f32342d3234203d3e203130313033.roa (hash: wXEZYM8r4N3Bh60WvsuoRKA5OSB618zkHXVaZhvbDno=) 8: 3134312e3139332e3232382e302f32342d3234203d3e2039333034.roa (hash: s5WbNe5Whw4ZMD9Ltnk2u5lg9JZnAEnQMp+26m9SqMs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 10:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:bf:e3:de:76:65:b6:eb:7d:46:81:93:87:53:f6:e2:2a:14:24:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: May 6 08:00:17 2025 GMT Not After : May 7 10:44:17 2025 GMT Subject: CN=355513842C09739AF13C370B089730D3D508237F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:75:f6:44:67:03:11:03:68:d8:5c:a7:97:cd: ea:8e:32:da:ab:16:ed:12:3b:72:76:a1:aa:10:ea: c6:a6:7d:f8:92:81:4b:76:ae:4e:6e:f7:75:87:76: 6e:ee:f8:74:37:5f:8b:d7:7a:83:e1:71:ac:d8:24: b1:29:cd:33:13:11:88:a2:91:91:83:30:27:0c:b0: c5:38:b9:fd:9a:a7:d6:ec:14:a6:48:9f:2a:c5:dd: a5:ca:bd:ca:6f:2e:91:dd:f5:3d:44:70:25:58:5f: af:df:a1:58:c0:61:90:9f:39:e5:bb:2d:81:49:17: b0:c3:99:e0:68:7b:b4:a5:6f:58:82:63:16:87:2a: 9e:57:01:50:29:3a:3f:5c:ab:f4:85:50:12:5b:1d: 88:70:5a:d3:77:63:67:2d:88:69:7b:f8:8b:17:0c: f7:01:46:15:2c:6f:d2:f2:2c:62:a8:1a:b3:27:eb: 87:05:6c:64:8f:71:e5:da:a3:5b:ee:4f:89:bf:3e: 4d:fa:70:09:58:c9:f0:fc:1c:a5:e0:3e:76:3a:be: 30:91:28:55:a9:eb:96:51:1b:31:f7:e2:7d:86:85: 4b:a0:a2:2d:a7:3b:73:75:73:9b:0c:8a:1b:3a:cb: d7:3e:a9:75:f2:ae:7a:3e:7b:f7:5d:fa:ca:e6:d6: b0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:55:13:84:2C:09:73:9A:F1:3C:37:0B:08:97:30:D3:D5:08:23:7F X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7b:e1:e2:66:a8:b8:9e:8d:ee:06:38:f9:4b:3c:b3:0d:38: 00:8d:76:39:f8:6c:d8:9e:ea:b4:7e:cd:e2:de:f6:94:c5:32: 1b:a3:75:18:05:c5:a6:67:ce:f3:d5:e5:d6:92:8d:77:0c:a8: 7f:ff:64:ea:a7:95:95:32:8e:5b:64:42:10:39:c6:2e:1c:25: dd:ed:97:37:4a:bc:13:22:02:eb:7b:7c:12:da:e0:b8:c2:f5: 4c:5e:cd:96:a0:e3:d7:15:18:55:8c:bb:e3:b5:85:2e:e2:1d: cd:8d:8a:bd:55:93:9d:5d:fd:14:dc:42:e8:97:9d:5a:3b:0c: cc:35:d3:88:a5:58:7b:5f:d3:24:96:f8:ea:ef:47:c6:79:21: f4:eb:d3:87:1b:54:f7:59:fd:b6:76:77:6e:04:a8:0f:54:90: a2:a6:fd:4b:8c:b8:a8:0d:a2:dd:2a:ce:96:58:6b:04:66:df: d4:58:17:ca:04:94:bc:af:bc:27:b9:59:e1:91:ea:80:83:e7: 83:b3:66:fc:56:cf:99:3b:2b:84:5c:89:4a:56:ff:e0:fc:10: ea:47:31:82:7b:ca:65:88:ad:84:cb:47:10:03:57:23:ec:88: ae:5f:14:1d:c8:26:88:14:4c:ea:59:63:d6:b6:f2:a7:19:30: b9:6f:48:ce -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCr/j3nZltut9RoGTh1P24ioUJGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNTA1MDYwODAwMTdaFw0yNTA1MDcxMDQ0MTdaMDMxMTAvBgNV BAMTKDM1NTUxMzg0MkMwOTczOUFGMTNDMzcwQjA4OTczMEQzRDUwODIzN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHdfZEZwMRA2jYXKeXzeqOMtqr Fu0SO3J2oaoQ6samffiSgUt2rk5u93WHdm7u+HQ3X4vXeoPhcazYJLEpzTMTEYii kZGDMCcMsMU4uf2ap9bsFKZInyrF3aXKvcpvLpHd9T1EcCVYX6/foVjAYZCfOeW7 LYFJF7DDmeBoe7Slb1iCYxaHKp5XAVApOj9cq/SFUBJbHYhwWtN3Y2ctiGl7+IsX DPcBRhUsb9LyLGKoGrMn64cFbGSPceXao1vuT4m/Pk36cAlYyfD8HKXgPnY6vjCR KFWp65ZRGzH34n2GhUugoi2nO3N1c5sMihs6y9c+qXXyrno+e/dd+srm1rBLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNVUThCwJc5rxPDcLCJcw09UII38wHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnvh4maouJ6N7gY4+Us8 sw04AI12Ofhs2J7qtH7N4t72lMUyG6N1GAXFpmfO89Xl1pKNdwyof/9k6qeVlTKO W2RCEDnGLhwl3e2XN0q8EyIC63t8EtrguML1TF7NlqDj1xUYVYy747WFLuIdzY2K vVWTnV39FNxC6JedWjsMzDXTiKVYe1/TJJb46u9Hxnkh9OvThxtU91n9tnZ3bgSo D1SQoqb9S4y4qA2i3SrOllhrBGbf1FgXygSUvK+8J7lZ4ZHqgIPng7Nm/FbPmTsr hFyJSlb/4PwQ6kcxgnvKZYithMtHEANXI+yIrl8UHcgmiBRM6llj1rbypxkwuW9I zg== -----END CERTIFICATE-----Generated at Tue May 6 15:18:22 2025 by rpki-client