$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft File: B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft (raw, json) Hash identifier: k520o4ZVfLhz5eLlEi7bsVUtQmbi4aaJJZLWMMMF94w= Subject key identifier: 09:9D:FE:B6:11:2A:AC:DE:43:BA:B5:45:32:F7:7A:B0:00:2E:96:5F Authority key identifier: B7:D2:E8:6F:D3:DA:15:BD:13:4C:A2:15:5C:3A:9F:DA:71:8B:37:49 Certificate issuer: /CN=B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749 Certificate serial: 550084DF5CF477B45CCAAA1442025DB0077638B4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft Manifest number: 0E Signing time: Tue 06 May 2025 04:49:11 +0000 Manifest this update: Tue 06 May 2025 04:44:11 +0000 Manifest next update: Wed 07 May 2025 06:34:11 +0000 Files and hashes: 1: 326131343a373538303a6330303a3a2f34302d3438203d3e20313938303235.roa (hash: 3eo92HTpLxu+/Kjst/g+aIrgcCeedR/rWPVZHkoZXZY=) 2: B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl (hash: UkAZqXMb5GykQ3tklGoi2Q7SG2l8BsD2BaqJ8xNJxw4=) 3: 326131343a373538303a6330303a3a2f34302d3438203d3e20313531313934.roa (hash: IcJMioVXTHIBW9dWRoa7QtI8OxLl1FTCXI6aJvTPxUg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 06:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:00:84:df:5c:f4:77:b4:5c:ca:aa:14:42:02:5d:b0:07:76:38:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749 Validity Not Before: May 6 04:44:11 2025 GMT Not After : May 7 06:34:11 2025 GMT Subject: CN=099DFEB6112AACDE43BAB54532F77AB0002E965F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8a:c8:3b:c1:60:f9:66:75:28:d4:f2:0b:09: 96:c2:79:a9:65:d6:b9:1e:50:2a:91:c2:a9:57:58: 37:9f:e5:70:72:2c:dc:dd:71:09:86:09:6f:87:c3: 97:d9:fe:a0:5b:df:83:3c:2a:0d:18:93:ca:14:50: 69:c3:cd:b8:fa:b0:04:3e:3a:3a:17:f5:42:02:5f: 88:6c:46:2e:5f:fb:58:59:c2:e2:a0:4a:31:ef:7c: f3:f2:b1:d7:2e:24:dc:47:9c:41:ea:e1:44:2b:01: fd:6f:11:40:e7:be:7c:87:5d:05:34:40:0c:41:27: dd:e0:76:85:93:67:2e:03:49:81:ad:73:05:ac:86: 0e:96:b6:53:86:bc:5b:30:90:42:ee:84:e9:a3:d0: 50:0f:fe:dd:e9:5f:2d:ea:e2:e7:e9:5a:19:50:13: a0:b3:85:56:67:92:6f:6a:49:c9:af:a4:9e:b5:87: 69:9f:5e:31:31:d9:dd:31:1f:43:1a:ec:11:d3:64: 0d:ad:53:fd:c7:b2:b7:f3:e4:a0:4c:ac:08:c3:4e: db:0b:97:2e:4f:8f:2a:07:1d:42:74:ec:f2:0b:24: ea:15:70:ca:e9:98:00:a5:98:d6:29:3b:4a:e7:a2: 9b:4b:8d:0f:af:ac:b6:87:d3:a4:e0:8d:2a:32:a9: b0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9D:FE:B6:11:2A:AC:DE:43:BA:B5:45:32:F7:7A:B0:00:2E:96:5F X509v3 Authority Key Identifier: keyid:B7:D2:E8:6F:D3:DA:15:BD:13:4C:A2:15:5C:3A:9F:DA:71:8B:37:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a7:72:97:c7:0b:f1:b5:1f:ea:fb:3a:53:eb:4b:cf:75:9a: ec:55:f4:95:18:84:1a:b9:ba:86:7d:24:76:4f:77:72:43:34: 51:b2:c9:a2:b5:16:f8:28:d6:2f:3c:45:b0:be:92:45:23:b7: b2:80:1a:b9:e9:08:d1:8a:68:cf:2e:d1:15:09:29:58:a8:4a: 72:c1:3e:27:2b:26:4a:f4:02:9b:a5:30:1e:b6:4b:46:50:c9: a8:a0:22:c9:55:51:dd:90:d7:16:d6:f6:5f:43:ee:25:0e:b5: 40:d0:05:31:7e:c1:83:98:26:aa:fa:79:31:90:ca:3e:43:ff: 34:5b:3a:99:39:3b:26:66:d8:b6:1e:49:f3:32:77:59:fe:92: 26:47:29:16:48:af:7b:1d:c6:31:58:f4:f2:a5:a7:7a:cc:c5: 0e:52:71:a8:75:76:bc:9b:bf:ee:99:f3:8c:6d:d5:fc:9f:a0: d0:77:bd:84:36:e7:45:32:26:b4:db:b1:33:ad:90:b4:6b:b4: 27:d6:18:b8:00:d9:e6:85:98:99:68:df:fd:a2:40:5f:d1:5d: fc:94:4b:65:13:c3:e2:37:ff:de:7e:79:35:3b:7e:e4:f5:17: 50:00:58:a9:e7:07:3e:09:af:62:bc:ea:0e:62:b2:89:be:6c: 23:50:8e:e6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVQCE31z0d7RcyqoUQgJdsAd2OLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdEMkU4NkZEM0RBMTVCRDEzNENBMjE1NUMzQTlGREE3 MThCMzc0OTAeFw0yNTA1MDYwNDQ0MTFaFw0yNTA1MDcwNjM0MTFaMDMxMTAvBgNV BAMTKDA5OURGRUI2MTEyQUFDREU0M0JBQjU0NTMyRjc3QUIwMDAyRTk2NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIisg7wWD5ZnUo1PILCZbCeall 1rkeUCqRwqlXWDef5XByLNzdcQmGCW+Hw5fZ/qBb34M8Kg0Yk8oUUGnDzbj6sAQ+ OjoX9UICX4hsRi5f+1hZwuKgSjHvfPPysdcuJNxHnEHq4UQrAf1vEUDnvnyHXQU0 QAxBJ93gdoWTZy4DSYGtcwWshg6WtlOGvFswkELuhOmj0FAP/t3pXy3q4ufpWhlQ E6CzhVZnkm9qScmvpJ61h2mfXjEx2d0xH0Ma7BHTZA2tU/3Hsrfz5KBMrAjDTtsL ly5PjyoHHUJ07PILJOoVcMrpmAClmNYpO0rnoptLjQ+vrLaH06TgjSoyqbDHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUCZ3+thEqrN5DurVFMvd6sAAull8wHwYDVR0j BBgwFoAUt9Lob9PaFb0TTKIVXDqf2nGLN0kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzZmZDRlYTEtYTI2Ni00ZGVhLWI0OGEtMTVkYTM1NDUy MTA5LzEvQjdEMkU4NkZEM0RBMTVCRDEzNENBMjE1NUMzQTlGREE3MThCMzc0OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CN0QyRTg2RkQzREExNUJEMTM0Q0EyMTU1 QzNBOUZEQTcxOEIzNzQ5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M2ZmQ0ZWExLWEyNjYtNGRlYS1iNDhhLTE1ZGEzNTQ1MjEwOS8xL0I3RDJFODZG RDNEQTE1QkQxMzRDQTIxNTVDM0E5RkRBNzE4QjM3NDkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/p3KX xwvxtR/q+zpT60vPdZrsVfSVGIQaubqGfSR2T3dyQzRRssmitRb4KNYvPEWwvpJF I7eygBq56QjRimjPLtEVCSlYqEpywT4nKyZK9AKbpTAetktGUMmooCLJVVHdkNcW 1vZfQ+4lDrVA0AUxfsGDmCaq+nkxkMo+Q/80WzqZOTsmZti2HknzMndZ/pImRykW SK97HcYxWPTypad6zMUOUnGodXa8m7/umfOMbdX8n6DQd72ENudFMia027EzrZC0 a7Qn1hi4ANnmhZiZaN/9okBf0V38lEtlE8PiN//efnk1O37k9RdQAFip5wc+Ca9i vOoOYrKJvmwjUI7m -----END CERTIFICATE-----Generated at Tue May 6 22:24:51 2025 by rpki-client