$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: U3IMVT+f5/lXa1xgQM1dmPbKYxcyE0jrNIFKgtwCfaU= Subject key identifier: 96:BB:E6:6A:B8:94:81:18:60:78:4F:E6:A7:54:22:82:92:2D:EF:49 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 78466295FF09CEACDAC6F56588511C995B7B9D5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 02AC Signing time: Fri 09 May 2025 01:15:24 +0000 Manifest this update: Fri 09 May 2025 01:10:24 +0000 Manifest next update: Sat 10 May 2025 02:46:24 +0000 Files and hashes: 1: 3135392e3235332e312e302f32342d3234203d3e20383334.roa (hash: +Cgri0dz3lCclo0MuT04LNn4FtNZlpiIq1+Gu2V5CA8=) 2: 3135392e3235332e332e302f32342d3234203d3e20383334.roa (hash: bS7OWpukKM13Mrj8vwNN9Xt2FLz0eH8xziJA6OfcVmQ=) 3: 3138352e31332e3232352e302f32342d3234203d3e203631333137.roa (hash: 8TzKoFnFzYaSWN5mBXGHVTu7YevWpqGi2XUkHCPKssM=) 4: 3135392e3235332e362e302f32342d3234203d3e20383334.roa (hash: 5NdQ//spLweNzxs8zHAGi1gJMib8lPFrPng4LsW41ME=) 5: 3231372e32382e3133382e302f32342d3234203d3e20323039393736.roa (hash: oyOFvRhi/TPEOopsZuEaDpEux2304igP8lMcDVdyDmE=) 6: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (hash: k6qvY6qYLtrsDEyi8J+SScxT9enfuaIRYNZH2IHqC8o=) 7: 3138352e31332e3232362e302f32342d3234203d3e20323132323338.roa (hash: 2juSKbgGusV+FdSvpGdGhRB+b7yvZfXJLqRbkLs4Lo0=) 8: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: lhOohETkkmw/c3qgFl9Oi9JCBZWx4VBRvYUdF0z/kco=) 9: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: cKnNLC66X19KWTLeS9BLlyG6jkzxqkdJwZjUWCrZPHc=) 10: 3135392e3235332e322e302f32342d3234203d3e20383334.roa (hash: Io0uqsNFWMRzWK0hBxO5SHV2H5/pOpKQHlMKDuh/MnA=) 11: 3135392e3235332e352e302f32342d3234203d3e20383334.roa (hash: qXWeXxMIlYcVAu0mUcCl9uApcKOZzbQ6Lhjrv7db4Es=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:46:62:95:ff:09:ce:ac:da:c6:f5:65:88:51:1c:99:5b:7b:9d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: May 9 01:10:24 2025 GMT Not After : May 10 02:46:24 2025 GMT Subject: CN=96BBE66AB894811860784FE6A7542282922DEF49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d9:8a:0e:68:a9:0f:61:12:c8:a6:88:93:6b: a6:0b:1b:84:70:c5:af:c3:21:1f:9a:42:32:38:09: e8:a0:ae:6d:bb:04:06:20:e9:64:6d:76:3e:89:ee: 05:01:a9:fb:f3:5a:98:ff:c4:e6:a0:eb:fb:f1:2d: f0:a3:20:f3:9d:97:c6:b9:db:0b:fd:07:57:7e:78: b2:7d:c7:c2:3b:df:5d:15:07:1f:8a:e6:87:38:04: f7:0d:79:0e:51:c9:14:fe:ef:b2:61:38:f2:bd:0e: 27:b6:72:3e:64:7b:1f:01:26:06:70:f0:25:3b:51: 98:0c:5d:51:9b:93:a8:a2:21:48:a1:93:bf:75:a7: 35:1f:7c:48:f3:aa:69:46:f8:53:8b:c8:c7:33:f2: 1b:fe:cf:e8:f1:cb:f9:90:b6:93:7a:ca:f3:7a:dc: 8f:83:15:7f:f1:e5:b4:86:fd:a8:66:5e:62:42:c1: 7c:94:ab:cb:ab:d8:f0:d6:98:4b:87:e3:3f:e9:9c: 07:a4:fa:ef:13:e5:e9:09:ee:84:a8:e6:ef:5a:8b: 69:fb:e4:81:25:14:89:97:7b:41:d6:66:2f:fd:71: 23:fb:a5:17:bd:5f:76:bd:bb:f5:31:1e:31:19:b6: 47:d1:7c:12:9d:c5:56:49:29:ba:31:63:7c:c3:2d: 3a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BB:E6:6A:B8:94:81:18:60:78:4F:E6:A7:54:22:82:92:2D:EF:49 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ea:c2:66:af:2a:80:52:16:76:36:b9:c0:80:a2:d1:38:d6: 6f:9f:e4:e9:1f:54:76:99:b2:33:cc:97:8a:29:50:c6:62:43: 84:3d:27:9e:1f:7d:7e:5f:4b:52:1c:79:8a:8e:0e:a3:82:dc: df:96:a0:a1:50:9d:2b:b9:90:d2:85:96:3c:26:ae:d4:b9:b1: 40:e3:63:ee:f5:73:74:7b:71:bf:89:dd:f0:ce:44:4b:db:cd: 3e:f2:d2:23:59:41:03:26:94:e5:74:b9:92:66:40:ad:43:54: 35:d9:9b:4e:f3:d9:36:d1:e6:35:0f:6b:07:7d:7e:e3:c9:d9: ff:28:a6:df:4e:2d:b0:69:f2:e4:47:c1:c4:5f:6e:9b:7a:d9: c5:24:e2:5c:65:cf:76:fa:07:fe:36:1e:6d:47:b1:c4:c2:78: e2:13:8f:7e:d8:8a:4d:b0:84:d3:7c:02:3c:79:dc:af:5d:32: 89:90:be:ee:eb:52:35:c1:6c:77:b4:89:4d:03:5e:58:a7:e2: 8a:c8:d0:f4:23:24:15:ff:c9:32:e0:2b:66:ce:9f:d1:b9:b3: f7:c8:60:35:ef:0d:fe:1a:e6:75:89:2b:0a:ac:cf:cf:5f:1a: 47:b1:00:e2:39:b5:d4:73:7e:d3:d2:e5:05:15:8b:90:7f:f7: 13:89:ca:aa -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUeEZilf8JzqzaxvVliFEcmVt7nVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNTA1MDkwMTEwMjRaFw0yNTA1MTAwMjQ2MjRaMDMxMTAvBgNV BAMTKDk2QkJFNjZBQjg5NDgxMTg2MDc4NEZFNkE3NTQyMjgyOTIyREVGNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl2YoOaKkPYRLIpoiTa6YLG4Rw xa/DIR+aQjI4Ceigrm27BAYg6WRtdj6J7gUBqfvzWpj/xOag6/vxLfCjIPOdl8a5 2wv9B1d+eLJ9x8I7310VBx+K5oc4BPcNeQ5RyRT+77JhOPK9Die2cj5kex8BJgZw 8CU7UZgMXVGbk6iiIUihk791pzUffEjzqmlG+FOLyMcz8hv+z+jxy/mQtpN6yvN6 3I+DFX/x5bSG/ahmXmJCwXyUq8ur2PDWmEuH4z/pnAek+u8T5ekJ7oSo5u9ai2n7 5IElFImXe0HWZi/9cSP7pRe9X3a9u/UxHjEZtkfRfBKdxVZJKboxY3zDLTpnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlrvmariUgRhgeE/mp1QigpIt70kwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+rCZq8qgFIWdja5wICi 0TjWb5/k6R9UdpmyM8yXiilQxmJDhD0nnh99fl9LUhx5io4Oo4Lc35agoVCdK7mQ 0oWWPCau1LmxQONj7vVzdHtxv4nd8M5ES9vNPvLSI1lBAyaU5XS5kmZArUNUNdmb TvPZNtHmNQ9rB31+48nZ/yim304tsGny5EfBxF9um3rZxSTiXGXPdvoH/jYebUex xMJ44hOPftiKTbCE03wCPHncr10yiZC+7utSNcFsd7SJTQNeWKfiisjQ9CMkFf/J MuArZs6f0bmz98hgNe8N/hrmdYkrCqzPz18aR7EA4jm11HN+09LlBRWLkH/3E4nK qg== -----END CERTIFICATE-----Generated at Fri May 9 08:32:45 2025 by rpki-client