$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: xviYULN0Mys9sYwPA0R+RBAulqO81uP/ozygGRZpsIg= Subject key identifier: C2:D8:D5:46:DC:2D:5B:4C:4F:E7:73:6E:B2:0C:3B:A4:F9:A2:FE:61 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 14882C43009675170DB4FCC4EF6EA874A8960F9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 43 Signing time: Wed 07 May 2025 22:30:23 +0000 Manifest this update: Wed 07 May 2025 22:25:23 +0000 Manifest next update: Fri 09 May 2025 01:55:23 +0000 Files and hashes: 1: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: hZUNrJfyUHgUntGAqdSVlBaE4wglKTi9y0zmmly1bMY=) 2: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: Bvg0bczZRvr0hNeXj13n0Q8N1O34FXLeiihKmXvd96c=) 3: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: lmVh0tkdqz2ZaktlfIJzzJLuyL6wItEcUEPI+PVNqdo=) 4: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: bLMKUTu2LDh7TH4JEFo2TwGKCx3JiqqNy6hRd14etMM=) 5: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: yq+hWHhfyocRCOJbnYGyzdHlkfHxXD4gPxuVgEPCc0g=) 6: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: E+WPtm+HS9AVsakqcLrBjACoAm/NbChhrd4PG4s+X5o=) 7: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: 4eRihxuyWrFmyrmWNHP+q80BiQuGj/+XTMKJH0kDcVI=) 8: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: sUFXVk5mJuzGXi+txvF0jHfWX/7COhdmW+wdhnGLLbA=) 9: 3139342e3132342e3233342e302f32342d3234203d3e203534333339.roa (hash: wdUsagydvVBIUao6PJHWRop4oPMEKXc9pJyNsG4SW9o=) 10: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: 0XA7loK9zcLZ4LH8gJRLIhKhFochpbrC40dXD0XEE/8=) 11: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: qgpa17rXBGEZyX0zTURKp2TS7HA9WA0LAdj3r9yq+jg=) 12: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: ad3eCylfdMfYW/Id31ooquQQLvZwumdWGj+lszfaEsA=) 13: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: MbX2Jo3+qNy9yJ51qumhhpSA5fjjpKXnL9+Ixdd7q/M=) 14: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: yb9MurfzS6NOo34/MdI6XNlbF0vlP8iEGBVpyfBDFG8=) 15: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: Wt7cVymDfWBwMzR8hqsJLmmyo1G55vHli1MG8ova8P4=) 16: 3139342e3132342e3233342e302f32342d3234203d3e20393936.roa (hash: ZoxbCHQMtNZPfbUxrxLpOcXkuKUfw+Blft69mSm2oZk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 01:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:88:2c:43:00:96:75:17:0d:b4:fc:c4:ef:6e:a8:74:a8:96:0f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: May 7 22:25:23 2025 GMT Not After : May 9 01:55:23 2025 GMT Subject: CN=C2D8D546DC2D5B4C4FE7736EB20C3BA4F9A2FE61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c5:24:dc:ec:8f:18:75:f4:92:e8:de:c1:3d: bc:ed:04:6b:4e:6a:b0:ce:5f:a2:fa:30:9a:1c:ee: 79:83:10:f6:4a:f2:a3:e8:00:c8:29:6e:9e:ee:6f: b4:24:78:84:c4:d8:84:1c:d0:da:63:4a:5e:b9:e8: ff:94:cb:c8:71:0a:f5:1a:d1:07:6a:3b:ed:eb:ea: 45:01:14:f2:6c:d6:4a:a9:62:56:16:8d:ea:43:2a: 60:e0:66:8c:8f:b0:30:34:a8:cd:09:2b:9a:fa:27: 69:6b:bc:35:44:1e:2a:a3:64:81:3f:56:2c:f5:b3: 43:86:f0:71:4f:c8:a7:9f:4d:1e:ab:35:05:cd:0e: 14:e1:f0:34:8d:77:d6:fc:95:73:71:bf:bc:03:28: ca:fb:dd:9a:13:99:da:7f:d2:e3:dd:f5:68:c4:8d: 2a:d1:d0:f7:f7:38:58:58:fc:1f:4e:a2:b1:72:6d: 8b:d0:83:67:8f:4b:56:04:ca:02:5e:1f:7e:1e:f8: ae:a8:cd:27:36:6e:7d:ef:30:04:fb:70:32:aa:ad: 8a:cd:bb:0b:23:fe:f1:43:56:f0:10:a5:81:1b:62: 36:e0:be:b5:67:98:19:58:00:83:58:e7:16:2a:14: fc:ae:6b:cf:9d:f4:2d:d5:f7:20:9c:2f:1a:f7:e5: 31:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D8:D5:46:DC:2D:5B:4C:4F:E7:73:6E:B2:0C:3B:A4:F9:A2:FE:61 X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a2:a1:73:5c:52:66:34:82:7b:a8:1c:4c:12:d5:e9:30:61: af:21:5e:1c:ae:41:96:21:4a:dd:12:01:e9:e1:6b:f0:96:b2: 42:c2:56:0b:9d:f8:60:33:63:02:2c:44:60:8a:ef:fe:5a:50: 0a:49:15:91:14:81:03:90:5d:b4:ff:8c:b1:4b:95:7f:98:d2: be:6a:84:1e:c7:38:1c:e9:cd:a3:19:41:29:03:47:0a:f4:90: df:0d:cf:9a:a9:15:b9:3c:46:01:af:ea:b6:53:93:f2:3b:20: 70:4d:39:3e:ff:b7:83:42:86:b1:9c:86:d5:f1:48:70:3e:5b: 64:bc:66:b3:a3:a2:94:47:7f:75:45:fa:98:82:dd:54:95:c1: f6:47:24:65:99:89:8d:86:ca:6c:fa:b9:0c:b0:88:89:76:54: a2:96:df:eb:1f:98:0b:72:bd:9f:63:f2:0e:41:bb:e5:35:95: be:61:d1:b6:10:87:27:82:df:8c:de:d0:b5:36:d1:0f:46:12: 0d:e1:7d:d0:9e:15:be:b0:02:85:26:8b:e0:91:d7:0c:d6:3e: 5e:f0:8c:25:f7:78:fd:aa:18:c6:85:bf:64:39:4e:c8:4e:36: af:86:ca:46:aa:5c:8a:45:cd:aa:ff:ce:84:b6:ae:86:f9:d0: d4:30:99:c9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFIgsQwCWdRcNtPzE726odKiWD58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNTA1MDcyMjI1MjNaFw0yNTA1MDkwMTU1MjNaMDMxMTAvBgNV BAMTKEMyRDhENTQ2REMyRDVCNEM0RkU3NzM2RUIyMEMzQkE0RjlBMkZFNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKxSTc7I8YdfSS6N7BPbztBGtO arDOX6L6MJoc7nmDEPZK8qPoAMgpbp7ub7QkeITE2IQc0NpjSl656P+Uy8hxCvUa 0QdqO+3r6kUBFPJs1kqpYlYWjepDKmDgZoyPsDA0qM0JK5r6J2lrvDVEHiqjZIE/ Viz1s0OG8HFPyKefTR6rNQXNDhTh8DSNd9b8lXNxv7wDKMr73ZoTmdp/0uPd9WjE jSrR0Pf3OFhY/B9OorFybYvQg2ePS1YEygJeH34e+K6ozSc2bn3vMAT7cDKqrYrN uwsj/vFDVvAQpYEbYjbgvrVnmBlYAINY5xYqFPyua8+d9C3V9yCcLxr35TFbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUwtjVRtwtW0xP53Nusgw7pPmi/mEwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6Khc1xSZjSCe6gcTBLV 6TBhryFeHK5BliFK3RIB6eFr8JayQsJWC534YDNjAixEYIrv/lpQCkkVkRSBA5Bd tP+MsUuVf5jSvmqEHsc4HOnNoxlBKQNHCvSQ3w3PmqkVuTxGAa/qtlOT8jsgcE05 Pv+3g0KGsZyG1fFIcD5bZLxms6OilEd/dUX6mILdVJXB9kckZZmJjYbKbPq5DLCI iXZUopbf6x+YC3K9n2PyDkG75TWVvmHRthCHJ4LfjN7QtTbRD0YSDeF90J4VvrAC hSaL4JHXDNY+XvCMJfd4/aoYxoW/ZDlOyE42r4bKRqpcikXNqv/OhLauhvnQ1DCZ yQ== -----END CERTIFICATE-----Generated at Thu May 8 19:03:40 2025 by rpki-client