$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft File: 2E2674263AECD572673F87614919CA492C79FAEA.mft (raw, json) Hash identifier: F88zq5QGLLHru8HhQ0Sj662Gos7/K9r6B+Zb+uetyWI= Subject key identifier: D3:A8:A3:94:32:3F:EF:77:94:7E:C9:17:20:1B:9D:F1:CA:86:5D:D4 Authority key identifier: 2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA Certificate issuer: /CN=2e2674263aecd572673f87614919ca492c79faea Certificate serial: 750114A23F464D1487CDDA782F2AE16E7B532597 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft Manifest number: 84 Signing time: Tue 06 May 2025 08:55:17 +0000 Manifest this update: Tue 06 May 2025 08:50:17 +0000 Manifest next update: Wed 07 May 2025 09:55:17 +0000 Files and hashes: 1: 34352e36362e36332e302f32342d3234203d3e20323135323837.roa (hash: a+NefOZI9c+guc+ruHs8N5wkKndV4yX37TtMje6y7/I=) 2: 2E2674263AECD572673F87614919CA492C79FAEA.crl (hash: rP4W7FZpnKR/QolU9RvfKMyLfO4CZp7DB71EeJB443I=) 3: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: tU7tyCca1tIOx1hnSKjuKCDiTN546CQQQvHB6q/i7qk=) 4: 34352e36362e36302e302f32342d3234203d3e20323132323338.roa (hash: ssodqkYmRGRZcJb/W05Q2ExCVHy1b+Elgef7gRr5nMs=) 5: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: imRIoujslgfIw1o5CZvn1r7w9Uct08AIqiMVjfiL8o4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 09:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:01:14:a2:3f:46:4d:14:87:cd:da:78:2f:2a:e1:6e:7b:53:25:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2674263aecd572673f87614919ca492c79faea Validity Not Before: May 6 08:50:17 2025 GMT Not After : May 7 09:55:17 2025 GMT Subject: CN=D3A8A394323FEF77947EC917201B9DF1CA865DD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8b:52:da:00:49:7b:cd:28:fe:27:69:b8:2e: f0:03:f5:7f:78:90:c8:60:e8:ef:b4:d5:a1:68:98: 9f:af:c9:b5:e2:47:3b:4e:eb:6c:8e:f0:82:9f:3f: 15:84:cb:8a:a6:ac:44:19:df:c0:b4:a8:1f:ee:e0: d3:88:6a:77:08:56:80:6f:94:fd:03:a3:bd:dd:27: 12:95:fd:b4:52:81:9f:b6:e4:d2:ff:ca:ab:a8:43: 44:f9:ad:24:bf:ad:9d:c7:3d:3d:d1:c1:eb:3f:89: 08:38:21:08:38:8d:31:e3:d0:ea:d9:6d:bf:57:c7: db:01:04:78:eb:b9:d7:4c:8f:6d:80:8e:d5:c1:43: cd:1c:86:83:f9:f4:94:d6:ac:e5:b3:5f:45:bc:18: 46:d6:e6:61:61:7a:2d:e0:24:14:77:d0:ee:55:f6: 2c:09:d4:5c:65:77:83:95:5e:96:2b:c1:93:81:e1: f1:f6:80:60:ab:ae:f1:20:c7:3c:b8:87:79:91:7f: ce:66:20:34:65:0c:e5:5f:12:3c:cf:d6:83:f9:a5: aa:75:80:2c:5a:82:82:15:d1:e0:71:1d:41:e2:8c: 75:4c:43:d6:59:77:aa:5b:d8:fd:32:2c:61:d8:03: da:b2:61:e7:8d:9b:df:1d:44:d2:96:fb:98:74:8e: 62:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A8:A3:94:32:3F:EF:77:94:7E:C9:17:20:1B:9D:F1:CA:86:5D:D4 X509v3 Authority Key Identifier: keyid:2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:f3:0c:64:31:5a:88:9f:46:cb:f3:09:3b:aa:ce:79:03:6f: 37:9d:45:34:ca:78:1b:29:ae:f1:94:79:ed:0f:b0:d2:d8:97: fa:1d:ee:9d:0e:66:c0:cb:94:a2:77:a5:51:ce:b1:0f:4b:35: 68:ae:27:c3:d4:25:e6:cf:0b:d4:13:ad:18:1c:86:75:07:c9: 5e:1e:23:58:e2:bc:ae:ff:56:b2:12:25:89:5c:89:9e:83:ad: 3e:5d:d3:11:ee:12:3e:a4:79:fa:7e:5b:5d:7d:20:86:b4:44: fc:44:7c:8b:7a:89:8c:e0:82:5b:d3:c7:49:fe:86:32:43:28: 08:a9:db:58:e3:3f:05:9d:93:5c:bd:fb:bc:fc:ae:59:83:75: e6:22:c4:1d:ff:a9:45:78:9e:b3:2a:36:28:fd:c6:54:12:de: 1d:30:51:83:49:63:f8:79:7a:51:64:f9:5b:97:6e:05:a3:aa: 43:f4:36:63:f8:9d:e1:57:bd:fb:45:3e:52:a6:b2:47:0f:f4: 87:65:b2:eb:77:15:fe:82:76:c6:73:09:59:b1:38:aa:3e:13: 13:a9:68:10:d7:df:0a:a0:d4:25:3d:d7:9d:ed:c0:0c:49:42: e1:84:52:62:f1:a1:db:fc:11:e7:16:33:0a:c2:13:d5:44:6e: a3:37:82:dc -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdQEUoj9GTRSHzdp4LyrhbntTJZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmUyNjc0MjYzYWVjZDU3MjY3M2Y4NzYxNDkxOWNhNDky Yzc5ZmFlYTAeFw0yNTA1MDYwODUwMTdaFw0yNTA1MDcwOTU1MTdaMDMxMTAvBgNV BAMTKEQzQThBMzk0MzIzRkVGNzc5NDdFQzkxNzIwMUI5REYxQ0E4NjVERDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYi1LaAEl7zSj+J2m4LvAD9X94 kMhg6O+01aFomJ+vybXiRztO62yO8IKfPxWEy4qmrEQZ38C0qB/u4NOIancIVoBv lP0Do73dJxKV/bRSgZ+25NL/yquoQ0T5rSS/rZ3HPT3Rwes/iQg4IQg4jTHj0OrZ bb9Xx9sBBHjruddMj22AjtXBQ80choP59JTWrOWzX0W8GEbW5mFhei3gJBR30O5V 9iwJ1Fxld4OVXpYrwZOB4fH2gGCrrvEgxzy4h3mRf85mIDRlDOVfEjzP1oP5pap1 gCxagoIV0eBxHUHijHVMQ9ZZd6pb2P0yLGHYA9qyYeeNm98dRNKW+5h0jmJjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU06ijlDI/73eUfskXIBud8cqGXdQwHwYDVR0j BBgwFoAULiZ0Jjrs1XJnP4dhSRnKSSx5+uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmQ3YzIzMWUtYTMzYy00NTU1LWI0MmUtZDAyMDkzODQ5 Mjk5LzAvMkUyNjc0MjYzQUVDRDU3MjY3M0Y4NzYxNDkxOUNBNDkyQzc5RkFFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xpWjBKanJzMVhKblA0ZGhTUm5LU1N4 NS11by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZDdjMjMxZS1h MzNjLTQ1NTUtYjQyZS1kMDIwOTM4NDkyOTkvMC8yRTI2NzQyNjNBRUNENTcyNjcz Rjg3NjE0OTE5Q0E0OTJDNzlGQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuPMMZDFaiJ9Gy/MJO6rO eQNvN51FNMp4Gymu8ZR57Q+w0tiX+h3unQ5mwMuUonelUc6xD0s1aK4nw9Ql5s8L 1BOtGByGdQfJXh4jWOK8rv9WshIliVyJnoOtPl3TEe4SPqR5+n5bXX0ghrRE/ER8 i3qJjOCCW9PHSf6GMkMoCKnbWOM/BZ2TXL37vPyuWYN15iLEHf+pRXiesyo2KP3G VBLeHTBRg0lj+Hl6UWT5W5duBaOqQ/Q2Y/id4Ve9+0U+UqayRw/0h2Wy63cV/oJ2 xnMJWbE4qj4TE6loENffCqDUJT3Xne3ADElC4YRSYvGh2/wR5xYzCsIT1URuozeC 3A== -----END CERTIFICATE-----Generated at Wed May 7 01:20:06 2025 by rpki-client