$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: EjEhD1DGEeJOxNadY3ByRjZsK/2pYenWNjz7q/keqUI= Subject key identifier: 0D:36:62:62:6C:D0:45:19:01:83:85:7F:20:4A:65:E0:85:08:16:5A Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 2CB1AC7C53F9284AC01C2EA8C0743CE08524E7E3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 0223 Signing time: Fri 09 May 2025 22:44:09 +0000 Manifest this update: Fri 09 May 2025 22:39:09 +0000 Manifest next update: Sun 11 May 2025 02:08:09 +0000 Files and hashes: 1: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=) 2: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: q2xlTBcniTZJqJb7DfYqmd/ddVQGTpI02v9PDgKghMs=) 3: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk=) 4: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: 17qN8Bd0gWBZvDkn96RHqKMURz1HVyJmOiwn1OSD2G0=) 5: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=) 6: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo=) 7: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) 8: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: hLmxywOTn2v4iv//wqgMLMQxfJouQHupbxrvDFSX9Zg=) 9: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: 7RQ0gXCWkNwXJyLVMAjMT4ifOZKJ140AG/jnIia+kz4=) 10: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: PeIsCkDSoavJPo2g0zxTJ1XkAim2DieAEnHktN86nIs=) 11: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: polxJUQuuGvo82QFQvRtgLcGzpMrITqZaH9JMW5PByU=) 12: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: s8PXZ6xun7QdEzluX2KYTIUVTeLEFzlJ1flicK9iKH8=) 13: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Z++XNVAKl2i3elIZ9myp5G2o2TKjv3Anv7s5uuElaws=) 14: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg=) 15: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: GcV9N8X9s2uHdEzyPc2IWdnUBlbIkV9Ott353G6xxsA=) 16: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=) 17: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 02:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b1:ac:7c:53:f9:28:4a:c0:1c:2e:a8:c0:74:3c:e0:85:24:e7:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: May 9 22:39:09 2025 GMT Not After : May 11 02:08:09 2025 GMT Subject: CN=0D3662626CD045190183857F204A65E08508165A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:12:96:00:ff:a9:20:1f:ff:bf:6e:ef:f5:f3: ca:83:0c:1e:a8:47:f2:eb:ad:ab:7a:fd:f4:cb:bc: 5c:48:74:12:81:99:de:ec:d5:b9:28:66:6c:2f:08: b4:4b:92:da:57:5e:4d:50:5d:1b:c4:fa:10:09:b2: d9:86:e6:d0:06:85:91:d5:8b:01:c4:56:77:5c:18: 65:70:7e:03:55:ed:2b:ce:fc:00:42:90:0f:31:54: 6e:3e:bf:da:2d:fe:29:a5:eb:e6:8b:37:1a:30:4a: ed:f5:e7:5e:1b:3e:7c:36:46:2b:5f:72:0f:72:d0: 75:a8:94:4e:cb:9e:77:1d:3d:bc:37:e3:b2:cd:92: 8f:ef:0b:59:97:53:ec:f0:52:b9:1b:b4:7c:11:d2: 39:3c:70:b1:61:92:1e:14:28:1e:03:59:ef:8d:8d: 94:d5:2e:17:5c:9d:d1:21:1a:de:e8:85:a3:61:a5: fd:05:76:eb:33:7f:0b:9f:3d:d4:59:c7:7c:bf:07: f3:72:05:f9:e7:62:bb:f0:19:e4:a2:c4:b9:d3:a4: a1:75:17:d3:14:e4:a7:ba:78:d3:87:f4:ca:cf:5a: e8:79:d9:64:f4:ad:5b:dc:b3:36:0a:6f:66:71:85: 46:97:74:46:41:27:2d:a5:61:7b:72:77:bd:8b:2f: 5c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:36:62:62:6C:D0:45:19:01:83:85:7F:20:4A:65:E0:85:08:16:5A X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:90:e4:85:24:68:f2:5b:1c:fa:08:0a:6b:4c:30:c9:0d:74: e1:e3:74:c4:9d:78:db:89:2a:e3:e5:b0:db:6d:e8:ab:9b:03: 3d:69:b1:47:07:69:12:e3:81:7f:b3:90:21:ef:70:a7:32:2e: c9:f7:d6:71:fd:a7:18:46:83:8f:71:40:8a:d7:06:b7:c6:21: 9a:0c:19:21:e4:2e:ef:09:7f:7b:f9:3a:ae:12:bf:77:a0:09: 33:f8:db:24:25:df:e8:3b:ef:29:4b:1f:6f:26:33:7b:48:ee: 4d:c7:75:6b:bd:b8:c2:a6:d5:36:28:f0:79:b1:b4:42:9a:b0: f2:57:9f:98:bd:cb:66:a3:68:a8:fc:3c:37:4a:fd:a8:8a:40: da:1b:de:5f:31:1b:f1:2e:88:2d:f3:c6:2a:cf:e4:ec:b3:6c: 50:75:f5:71:fe:b0:ca:7d:d1:81:cb:ab:ed:d1:f1:ab:74:68: ad:35:9a:9c:bc:54:94:37:62:5a:01:18:85:5a:da:ef:59:a2: e1:63:9d:2c:9c:33:58:44:34:60:56:11:06:96:da:8a:71:d9: 6d:5b:b1:f0:74:bc:c5:4e:35:36:53:42:76:10:b6:4f:3d:bb: 68:d2:be:4a:d2:65:29:cc:06:cb:eb:d8:7e:9e:80:80:52:32: dc:b6:22:7b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULLGsfFP5KErAHC6owHQ84IUk5+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNTA1MDkyMjM5MDlaFw0yNTA1MTEwMjA4MDlaMDMxMTAvBgNV BAMTKDBEMzY2MjYyNkNEMDQ1MTkwMTgzODU3RjIwNEE2NUUwODUwODE2NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnEpYA/6kgH/+/bu/188qDDB6o R/Lrrat6/fTLvFxIdBKBmd7s1bkoZmwvCLRLktpXXk1QXRvE+hAJstmG5tAGhZHV iwHEVndcGGVwfgNV7SvO/ABCkA8xVG4+v9ot/iml6+aLNxowSu31514bPnw2Ritf cg9y0HWolE7LnncdPbw347LNko/vC1mXU+zwUrkbtHwR0jk8cLFhkh4UKB4DWe+N jZTVLhdcndEhGt7ohaNhpf0FduszfwufPdRZx3y/B/NyBfnnYrvwGeSixLnTpKF1 F9MU5Ke6eNOH9MrPWuh52WT0rVvcszYKb2ZxhUaXdEZBJy2lYXtyd72LL1xdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUDTZiYmzQRRkBg4V/IEpl4IUIFlowHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpkOSF JGjyWxz6CAprTDDJDXTh43TEnXjbiSrj5bDbbeirmwM9abFHB2kS44F/s5Ah73Cn Mi7J99Zx/acYRoOPcUCK1wa3xiGaDBkh5C7vCX97+TquEr93oAkz+NskJd/oO+8p Sx9vJjN7SO5Nx3VrvbjCptU2KPB5sbRCmrDyV5+Yvctmo2io/Dw3Sv2oikDaG95f MRvxLogt88Yqz+Tss2xQdfVx/rDKfdGBy6vt0fGrdGitNZqcvFSUN2JaARiFWtrv WaLhY50snDNYRDRgVhEGltqKcdltW7HwdLzFTjU2U0J2ELZPPbto0r5K0mUpzAbL 69h+noCAUjLctiJ7 -----END CERTIFICATE-----Generated at Sat May 10 14:36:07 2025 by rpki-client