$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: qpQzMg5nQa0hw1FZQSt07AlZ4FFHVE2e3/nSsFYlZME= Subject key identifier: DD:63:37:C0:A6:41:F5:63:69:CA:CE:F7:EF:11:59:27:10:9A:6C:39 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 1775F364D7B563D1568F0378FE7EE2E96CBD20C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 0138 Signing time: Sat 28 Jun 2025 14:39:10 +0000 Manifest this update: Sat 28 Jun 2025 14:34:10 +0000 Manifest next update: Sun 29 Jun 2025 16:27:10 +0000 Files and hashes: 1: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: TDSLNd9plHJwOulPeBHo1vNBDKxJTlWmh9i0dzSd4do=) 2: 3134312e3139332e3232382e302f32342d3234203d3e2039333034.roa (hash: s5WbNe5Whw4ZMD9Ltnk2u5lg9JZnAEnQMp+26m9SqMs=) 3: 3134312e3139332e3232382e302f32342d3234203d3e20313937353337.roa (hash: GmuqQ5cRPqO0r6kNpS31Skpj+V6x9N2OgVf2PPKwFIs=) 4: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: aWzsWkNz9PJPPmM8i0/IefYTbT3Y07R53lZGD0EHqrg=) 5: 38362e35342e3137322e302f32342d3234203d3e2032383536.roa (hash: kIjLwSREHkERxqQgCNkVDjeNAzY3bReXXhmulizNBno=) 6: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: XANILh55Y47pKYCtpvAwh7NY7o2+It7Uny62gFnXOq8=) 7: 3134312e3139332e3232382e302f32342d3234203d3e203130313033.roa (hash: wXEZYM8r4N3Bh60WvsuoRKA5OSB618zkHXVaZhvbDno=) 8: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: DDeP4uYwqP8b0ON0e+nML7HE4UFDik7BChJ/x0EHl9Q=) 9: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: 0b6sszxsKulqMcqV3D3Yqcg5IxC3pSU5gc82mTsDYlA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:75:f3:64:d7:b5:63:d1:56:8f:03:78:fe:7e:e2:e9:6c:bd:20:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Jun 28 14:34:10 2025 GMT Not After : Jun 29 16:27:10 2025 GMT Subject: CN=DD6337C0A641F56369CACEF7EF115927109A6C39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a3:5c:62:3e:32:33:9b:f5:2e:54:94:1f:97: 3f:2e:ff:50:df:67:6b:c5:82:c6:bd:51:fc:4e:a7: ea:17:37:24:80:11:b3:22:e4:00:6c:37:ec:fd:6a: a2:bc:e3:25:b5:2d:eb:39:f4:7b:dd:8c:b3:e5:b3: bd:14:76:a4:72:12:c8:2f:df:94:ae:b2:63:e7:16: e1:88:07:92:15:2e:c1:f2:a9:1f:46:20:55:37:ed: a3:2c:2b:b4:72:42:57:55:77:b5:1f:58:28:c4:b7: b5:6b:df:f1:7c:73:32:a7:10:cd:26:5e:ef:16:4e: 50:66:48:c2:da:48:84:b7:8a:53:ad:e5:db:a5:04: 66:1d:9f:5b:05:dd:dc:b7:f8:9f:5b:b8:64:e4:95: 5a:60:89:e2:d1:72:31:54:9c:c0:91:74:9e:9f:a1: 01:79:c4:f3:1f:f0:b7:3e:f1:53:1b:08:ac:f0:48: c2:17:dd:0b:0e:7b:dd:ee:e0:ca:e0:f8:5f:e2:79: f0:7d:4f:bb:1a:35:6b:bf:6b:c1:27:e1:c1:0b:19: c6:46:9f:5e:ce:58:15:69:07:0b:a4:56:52:4f:c3: d0:74:b7:0c:72:65:00:5a:47:22:54:08:df:6b:b7: 8d:b4:91:53:2d:c8:c5:c6:60:8d:71:ae:80:4b:b5: 13:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:63:37:C0:A6:41:F5:63:69:CA:CE:F7:EF:11:59:27:10:9A:6C:39 X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:08:15:64:4a:b1:1e:40:31:5a:a6:f7:fc:6c:f5:07:12:d2: 1b:1c:0e:96:65:d4:2b:ac:8c:c5:9a:0e:fd:69:fc:ca:c5:70: 72:4c:80:93:26:a0:52:11:ac:e6:78:d4:7b:48:f1:5d:44:a5: e3:0e:cf:3f:38:63:c0:11:5f:47:dc:48:34:9f:0b:73:44:67: 03:06:57:d2:8e:83:25:77:fd:ae:03:36:b8:a0:62:4d:4b:7a: 54:c9:92:aa:06:82:5c:fa:84:0c:58:9d:70:4e:81:73:19:3f: a2:70:1d:d1:ef:e0:26:70:d4:a3:e3:a3:85:b7:9f:e5:9f:65: 45:88:30:1a:3a:49:1e:04:9b:6f:42:78:60:84:59:a3:e5:0f: 7f:f3:e4:d9:8b:2b:ce:0b:cb:9b:c3:1f:b3:c0:9c:76:c4:04: 15:57:5d:6a:c8:5f:e1:0d:b8:83:ee:53:87:74:5d:ce:1e:3b: 0b:0d:36:26:21:78:38:f9:17:12:2b:92:7d:51:62:bb:a3:d4: bc:36:f2:d4:94:55:4e:7d:9e:4b:89:5a:3b:67:be:4f:fb:bc: 84:e5:8b:93:10:1d:e9:d8:7c:45:3f:de:47:e3:8b:49:01:44: 18:4b:8f:2a:65:5a:eb:d8:f2:44:b1:7a:4f:06:06:89:04:32: 1b:70:c8:c3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUF3XzZNe1Y9FWjwN4/n7i6Wy9IMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNTA2MjgxNDM0MTBaFw0yNTA2MjkxNjI3MTBaMDMxMTAvBgNV BAMTKERENjMzN0MwQTY0MUY1NjM2OUNBQ0VGN0VGMTE1OTI3MTA5QTZDMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNo1xiPjIzm/UuVJQflz8u/1Df Z2vFgsa9UfxOp+oXNySAEbMi5ABsN+z9aqK84yW1Les59HvdjLPls70UdqRyEsgv 35SusmPnFuGIB5IVLsHyqR9GIFU37aMsK7RyQldVd7UfWCjEt7Vr3/F8czKnEM0m Xu8WTlBmSMLaSIS3ilOt5dulBGYdn1sF3dy3+J9buGTklVpgieLRcjFUnMCRdJ6f oQF5xPMf8Lc+8VMbCKzwSMIX3QsOe93u4Mrg+F/iefB9T7saNWu/a8En4cELGcZG n17OWBVpBwukVlJPw9B0twxyZQBaRyJUCN9rt420kVMtyMXGYI1xroBLtRNDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU3WM3wKZB9WNpys737xFZJxCabDkwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwgVZEqxHkAxWqb3/Gz1 BxLSGxwOlmXUK6yMxZoO/Wn8ysVwckyAkyagUhGs5njUe0jxXUSl4w7PPzhjwBFf R9xINJ8Lc0RnAwZX0o6DJXf9rgM2uKBiTUt6VMmSqgaCXPqEDFidcE6Bcxk/onAd 0e/gJnDUo+Ojhbef5Z9lRYgwGjpJHgSbb0J4YIRZo+UPf/Pk2YsrzgvLm8Mfs8Cc dsQEFVddashf4Q24g+5Th3Rdzh47Cw02JiF4OPkXEiuSfVFiu6PUvDby1JRVTn2e S4laO2e+T/u8hOWLkxAd6dh8RT/eR+OLSQFEGEuPKmVa69jyRLF6TwYGiQQyG3DI ww== -----END CERTIFICATE-----Generated at Sat Jun 28 22:02:06 2025 by rpki-client