$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: Z0jJ/4a1mTlczlpTU5KrWVT4Qydm+SDROel5sqJdMxc= Subject key identifier: CC:44:B1:B1:DA:9C:CF:44:BB:17:A2:66:89:E3:F8:31:58:79:D7:27 Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 549689E465219B79C0CF987AD5EA4CB8CB70D34E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 03BD Signing time: Mon 05 May 2025 23:15:17 +0000 Manifest this update: Mon 05 May 2025 23:10:17 +0000 Manifest next update: Tue 06 May 2025 23:49:17 +0000 Files and hashes: 1: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: qGNft1uCzkGwuPJH7iDQ4xUhWrhNnduWexIhT+DgvI8=) 2: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: ujOzcUFn73GlYynt8yef9LZrmhEywDFvXOhmuSoBoLw=) 3: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: oQj2no095+LyjZGzWOfw+sSJOW/7fRxpgUOPswu5nqM=) 4: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: OKc3uZvr3kmY38TGv/j5cCd/d8TD6IBU2hGWJY9u+K0=) 5: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: 34jZl9D2kDPIKys9qacMhDXzqWtghxq0kf/LjN/5OJA=) 6: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: DuCHe81tO8TVOKBTNFQCS5fRuYDjbGZfxshPpJZXNzc=) 7: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: dPumV3w+l5K00Z5figZidyPpD2Xj/WObq95u77jhIK4=) 8: 3138352e322e3136322e302f32332d3234203d3e20323135323639.roa (hash: sEO5Q+LtE+juFIMx1yqrmSkIjuvpVFxY8R1aiQqtGzs=) 9: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: qxlkfW/nLMV9I5WoI6HQ89q00naILT20Rguml63Zf0A=) 10: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: hY/iIpaGanxmxatebFYi3ijTkZjHjUc/Iwjsijc0S+E=) 11: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: LBMUHWugPGnJtw9mI4PuIshgxiedjcAOS8XKlWg3eYE=) 12: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: cwrS6A/oM7uVoRnag/rHPBb4Qk8hZAq3bZyA0gVPCzk=) 13: 36322e3131322e3134342e302f32302d3230203d3e20313734.roa (hash: J2/lofmMncXQORl24ezDIUdcUuekO85jv8NmK3P2fLk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 23:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:96:89:e4:65:21:9b:79:c0:cf:98:7a:d5:ea:4c:b8:cb:70:d3:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: May 5 23:10:17 2025 GMT Not After : May 6 23:49:17 2025 GMT Subject: CN=CC44B1B1DA9CCF44BB17A26689E3F8315879D727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:82:84:19:b5:b9:11:f8:4d:11:a7:58:ce:79: 20:bd:92:5f:03:89:fd:c3:9f:69:67:c8:5f:62:3b: 94:50:45:10:9b:19:8f:f3:2d:a7:77:a2:6a:ed:c0: 45:e9:e4:ee:3e:14:ce:98:23:36:57:a3:9f:84:81: 4d:c4:3a:d0:dd:da:d4:e3:bc:98:74:0b:0a:e3:bb: c3:15:ee:7c:fd:fa:e2:a9:7a:b0:f0:e4:da:1d:00: 7b:43:f0:ba:d7:2d:23:32:b7:11:d3:e0:e3:7f:82: 93:54:bf:54:01:45:1a:c6:6d:0c:13:53:56:73:da: 1f:20:38:1e:fd:cc:4c:64:a7:88:cb:69:cc:72:87: c2:1d:2b:0b:5e:82:40:d1:64:92:5f:29:0c:1d:36: 39:d5:8d:71:09:d1:20:e6:13:60:7b:46:86:7e:97: c8:e2:7a:b1:b2:74:9d:2b:ab:08:ad:b6:ae:30:20: e3:8c:1e:e8:4a:c6:8e:40:8c:1d:bd:2f:e4:08:32: a5:cd:b8:ee:a1:f9:48:24:c2:eb:88:53:cd:af:56: 8b:97:3f:ad:8e:4b:08:e2:ab:a8:22:41:cf:d2:e0: 4e:2a:a7:a6:75:0b:39:d0:ff:6b:2f:f4:d7:fd:96: 72:3c:6a:5e:bc:68:d9:da:26:27:7e:40:97:5b:bd: 98:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:44:B1:B1:DA:9C:CF:44:BB:17:A2:66:89:E3:F8:31:58:79:D7:27 X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:01:3a:15:a3:71:53:47:36:aa:c0:be:e4:51:7a:94:79:a0: e4:31:8c:eb:cf:3c:01:5c:3e:f1:7f:02:1f:06:d3:9b:ae:c8: fc:71:c7:e3:73:d4:0d:8f:35:bb:63:4a:5f:69:90:28:99:b8: a6:e8:6e:1c:02:b6:77:4a:60:63:12:a0:48:52:32:fa:62:8a: e8:d2:1d:70:ae:a0:94:a9:6a:d9:f0:dd:a4:78:6d:1f:1d:03: ac:82:ff:a6:49:50:cf:c3:8f:c6:25:75:f6:94:53:42:42:ee: c7:72:1f:4f:16:9b:63:3f:f4:77:3e:be:2c:02:63:e4:a3:e4: 22:e4:37:53:3e:af:6b:dd:b5:59:4e:30:9c:58:77:a6:19:eb: cf:03:66:e5:58:23:ca:8a:2b:61:6c:5f:31:f4:63:39:ac:f4: 7b:f6:ab:be:a3:57:b7:f8:ab:28:3c:aa:14:16:b8:a2:76:df: ae:71:d5:4f:ed:81:6b:3e:d9:f9:1d:23:df:23:33:1a:6e:57: f0:e2:5b:61:05:08:3f:65:bc:40:0f:f3:3a:29:b1:30:d8:1c: 35:05:06:56:72:fc:11:73:52:35:1c:24:0c:2e:bc:9b:42:14: 7c:9e:e4:ee:8c:7e:ab:a6:37:48:d1:88:4e:cc:48:dd:92:ed: db:76:71:7d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVJaJ5GUhm3nAz5h61epMuMtw004wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNTA1MDUyMzEwMTdaFw0yNTA1MDYyMzQ5MTdaMDMxMTAvBgNV BAMTKENDNDRCMUIxREE5Q0NGNDRCQjE3QTI2Njg5RTNGODMxNTg3OUQ3MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLgoQZtbkR+E0Rp1jOeSC9kl8D if3Dn2lnyF9iO5RQRRCbGY/zLad3omrtwEXp5O4+FM6YIzZXo5+EgU3EOtDd2tTj vJh0Cwrju8MV7nz9+uKperDw5NodAHtD8LrXLSMytxHT4ON/gpNUv1QBRRrGbQwT U1Zz2h8gOB79zExkp4jLacxyh8IdKwtegkDRZJJfKQwdNjnVjXEJ0SDmE2B7RoZ+ l8jierGydJ0rqwittq4wIOOMHuhKxo5AjB29L+QIMqXNuO6h+UgkwuuIU82vVouX P62OSwjiq6giQc/S4E4qp6Z1CznQ/2sv9Nf9lnI8al68aNnaJid+QJdbvZhnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzESxsdqcz0S7F6JmieP4MVh51ycwHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQE6FaNxU0c2qsC+5FF6 lHmg5DGM6888AVw+8X8CHwbTm67I/HHH43PUDY81u2NKX2mQKJm4puhuHAK2d0pg YxKgSFIy+mKK6NIdcK6glKlq2fDdpHhtHx0DrIL/pklQz8OPxiV19pRTQkLux3If TxabYz/0dz6+LAJj5KPkIuQ3Uz6va921WU4wnFh3phnrzwNm5VgjyoorYWxfMfRj Oaz0e/arvqNXt/irKDyqFBa4onbfrnHVT+2Baz7Z+R0j3yMzGm5X8OJbYQUIP2W8 QA/zOimxMNgcNQUGVnL8EXNSNRwkDC68m0IUfJ7k7ox+q6Y3SNGITsxI3ZLt23Zx fQ== -----END CERTIFICATE-----Generated at Tue May 6 11:32:56 2025 by rpki-client