$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: 17oiDyiGxIp4KhBc5VzTRITSfOGmgdajDvE5T1lZd7k= Subject key identifier: FB:6B:C4:40:FA:2D:00:F0:EF:B9:01:70:4A:DA:7A:00:26:8D:DC:29 Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 3B043C6CE4BE1AD2DB1BC5FD11C89CAE963CD45F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 6E Signing time: Mon 05 May 2025 01:10:15 +0000 Manifest this update: Mon 05 May 2025 01:05:15 +0000 Manifest next update: Tue 06 May 2025 04:01:15 +0000 Files and hashes: 1: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: i+j0/SqL92pXqr/Yt38MmbwZjTIQClt05q1Bhtl74qs=) 2: 3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa (hash: 562I7wk8pDZNtdMzcEoC9Q7KQUjR9i2cYfXfdpaRXg8=) 3: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 0IUSu+qptfP2e6dJnAny9tG4Cb2xcvVtmtBD0i4piak=) 4: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: l5Vbn16MGIlqcPHNFeyJwGoXNSxpPkLnOpJ3u/+IWTk=) 5: 3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa (hash: JOjM4S47fNK82HVGI3kzft2889UH/2/CmD3owvdrCqM=) 6: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: nkla74pmgzof6BdGTx/D9Sn3aXq/+fT/xyCtH2Ux1lE=) 7: 3137382e3234382e37362e302f32342d3234203d3e203134363138.roa (hash: gLI3Umjl7KNVwUD5xzL37MyINDkuT/mVnAgaZRKcvdM=) 8: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: aYbyRGpjGAy7pzSZSZu9mIeZ8V/FjY5/eUQvPy2nJ/Y=) 9: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 0e4l5EqcD9+SWWVL79QZba03Lu9mdjyR/TfDJr390dA=) 10: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: 0fCZnPcUR/TU0KGeDhdE4rzY8AMOIFMDCEwGzQYi3Zw=) 11: 3137382e3234382e37362e302f32342d3234203d3e203136353039.roa (hash: VMPEDd4AiAWOyP12MEXNDl8a/3agebdZRrB7U/AB7yA=) 12: 3137382e3234382e37362e302f32342d3234203d3e203230343733.roa (hash: vu2iy0iZ67Pvg675grFRJrEvojZ1gcd0BfsDMPqVCIA=) 13: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: IZUL7zEfrS59nO5eqaFvUNxkfEHC3BRjyZY2ApRcoSg=) 14: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: LnJ/05IgVINSSDv4l3ajCKuAD4mr9PXKyWCylRmwux0=) 15: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: IDuy7mlGaLMOCgzEdx2/1ouXbZ90tr9UBkMDq0knNXg=) 16: 3137382e3234382e37382e302f32342d3234203d3e203530343334.roa (hash: YkOazOq21Qlmm7bdCMGG0Hrr8r5LE8n78fAPs3qYxzs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 May 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:04:3c:6c:e4:be:1a:d2:db:1b:c5:fd:11:c8:9c:ae:96:3c:d4:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: May 5 01:05:15 2025 GMT Not After : May 6 04:01:15 2025 GMT Subject: CN=FB6BC440FA2D00F0EFB901704ADA7A00268DDC29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:41:c3:a7:bb:72:bd:d8:29:b6:e7:f6:68:1f: bb:64:54:37:67:2f:ac:5a:c5:ee:fc:db:8a:96:c1: d8:e4:0b:3e:e7:29:3e:ed:b4:17:dd:71:d9:35:c9: b5:b4:bf:81:1a:47:d4:53:f3:11:22:a2:09:e2:14: 5c:01:aa:5c:07:7a:e9:f3:3c:cd:f1:d7:81:cb:2d: 84:61:fd:5d:a5:3b:8c:e5:1f:83:66:bb:b2:b3:6b: dd:bd:85:44:9e:98:78:38:77:56:3c:49:ca:f8:49: a0:65:f2:52:ab:c6:eb:89:33:e5:f5:02:b7:f4:4f: 0b:2a:2d:03:a9:b0:1d:18:e6:d9:8b:bf:f6:27:e4: b7:6f:28:e0:40:9c:3e:dc:aa:33:c4:99:93:e0:b6: f8:7e:af:39:d2:82:ed:9c:c9:5a:c9:ab:6a:70:bd: bb:0e:32:aa:c3:db:26:56:9c:be:af:a9:c4:bc:4b: 6b:ac:e7:b5:05:b9:05:57:26:e2:54:a1:ee:be:18: 81:89:23:52:12:81:3b:a1:2d:ac:1b:dc:a6:25:32: ba:4c:97:df:64:f6:5d:24:51:ca:4c:40:1c:6c:cb: bf:87:d4:e5:9c:0c:5b:09:b2:e7:37:e4:a8:f3:e8: 65:3a:3b:76:08:e3:8d:35:c2:d0:bd:1a:bb:31:bb: 2d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:6B:C4:40:FA:2D:00:F0:EF:B9:01:70:4A:DA:7A:00:26:8D:DC:29 X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:a4:39:4e:35:1a:59:f2:9f:18:f4:58:f5:3e:33:fa:a7:9c: b9:6f:62:25:94:fd:39:64:f1:7a:e4:7f:29:b8:49:c4:87:6a: 4d:a6:2d:38:ca:d1:e0:df:6d:1f:0b:83:c3:b1:d0:73:a5:f5: 3a:05:62:c4:6e:8a:88:2d:79:a9:7f:9f:10:07:56:dc:7e:25: 3a:77:e2:4e:d8:57:95:cb:db:2e:ae:6a:25:ff:e1:2f:be:42: ef:c7:8c:18:69:e9:c3:ee:ff:bf:7a:ea:aa:01:14:8b:25:1b: 76:79:9a:2f:1d:8c:30:ff:18:2f:14:01:b7:4a:3c:86:48:f3: 4f:18:b7:ef:ee:1d:3e:59:3b:e9:3c:f2:89:d9:be:8c:f7:85: 2b:96:9e:0d:3a:3e:3a:4f:b3:13:a4:66:9e:97:74:6d:43:60: 4d:83:22:cd:5c:17:dd:74:93:32:80:70:14:07:e3:17:0e:3c: e0:19:53:f0:d3:7a:17:f1:28:40:02:d0:b4:62:80:48:fb:4d: 15:41:c0:96:7e:6c:7e:6d:f7:7a:7e:d2:36:bd:0f:d6:fd:a1: f8:5d:1b:dd:4a:a6:e1:d9:fa:bc:c0:df:73:75:e9:d8:a8:da: b6:32:ad:a6:e1:73:7d:e9:38:52:ee:19:b0:e3:31:b6:4b:fa: b4:8e:57:05 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOwQ8bOS+GtLbG8X9EcicrpY81F8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNTA1MDUwMTA1MTVaFw0yNTA1MDYwNDAxMTVaMDMxMTAvBgNV BAMTKEZCNkJDNDQwRkEyRDAwRjBFRkI5MDE3MDRBREE3QTAwMjY4RERDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIQcOnu3K92Cm25/ZoH7tkVDdn L6xaxe7824qWwdjkCz7nKT7ttBfdcdk1ybW0v4EaR9RT8xEiogniFFwBqlwHeunz PM3x14HLLYRh/V2lO4zlH4Nmu7Kza929hUSemHg4d1Y8Scr4SaBl8lKrxuuJM+X1 Arf0TwsqLQOpsB0Y5tmLv/Yn5LdvKOBAnD7cqjPEmZPgtvh+rznSgu2cyVrJq2pw vbsOMqrD2yZWnL6vqcS8S2us57UFuQVXJuJUoe6+GIGJI1ISgTuhLawb3KYlMrpM l99k9l0kUcpMQBxsy7+H1OWcDFsJsuc35Kjz6GU6O3YI4401wtC9Grsxuy1pAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+2vEQPotAPDvuQFwStp6ACaN3CkwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqQ5TjUaWfKfGPRY9T4z +qecuW9iJZT9OWTxeuR/KbhJxIdqTaYtOMrR4N9tHwuDw7HQc6X1OgVixG6KiC15 qX+fEAdW3H4lOnfiTthXlcvbLq5qJf/hL75C78eMGGnpw+7/v3rqqgEUiyUbdnma Lx2MMP8YLxQBt0o8hkjzTxi37+4dPlk76Tzyidm+jPeFK5aeDTo+Ok+zE6Rmnpd0 bUNgTYMizVwX3XSTMoBwFAfjFw484BlT8NN6F/EoQALQtGKASPtNFUHAln5sfm33 en7SNr0P1v2h+F0b3Uqm4dn6vMDfc3Xp2KjatjKtpuFzfek4Uu4ZsOMxtkv6tI5X BQ== -----END CERTIFICATE-----Generated at Mon May 5 08:26:24 2025 by rpki-client