$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft File: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft (raw, json) Hash identifier: ElzMrrnruM+BnosB7xBxAdxh0hqDQy2WpY0LLoZ0bus= Subject key identifier: C1:F7:48:CC:35:95:C0:79:A8:20:4D:77:A4:76:22:69:31:37:FF:A9 Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 Certificate issuer: /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Certificate serial: 0D2C37C7ACC9C29817484310FC1AC78C0E8C5DEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft Manifest number: 0306 Signing time: Thu 08 May 2025 19:35:17 +0000 Manifest this update: Thu 08 May 2025 19:30:17 +0000 Manifest next update: Fri 09 May 2025 20:29:17 +0000 Files and hashes: 1: AS202881.asa (hash: n7g3r7+FlCCQyP417H6Uudw0ZEIUQH6oYUZ2fSNBDRU=) 2: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl (hash: ER2jRxf7cMiLNUF9LUvXPWdt9cVymPbtMV+bzGffm8Y=) 3: 323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa (hash: 3wDhadYEfX0Hhy3fPxID0nH+bbX55tStnGOk9S2bMKU=) 4: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (hash: tHiNPLeborN3MzxDKSTEAgj3ZJMcJjV9OqmGVy4ABhE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 15:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:2c:37:c7:ac:c9:c2:98:17:48:43:10:fc:1a:c7:8c:0e:8c:5d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Validity Not Before: May 8 19:30:17 2025 GMT Not After : May 9 20:29:17 2025 GMT Subject: CN=C1F748CC3595C079A8204D77A47622693137FFA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c8:25:8c:fc:0a:52:34:1d:f2:3c:22:cc:e8: 00:d7:24:71:5f:de:8f:33:a4:32:4f:fb:5d:2a:5c: 8d:11:f5:37:c2:61:53:95:34:54:c9:6d:d4:25:11: fd:78:ee:dd:08:51:f7:c3:ac:56:40:01:5e:ca:67: 87:49:10:09:37:88:7b:52:f7:26:45:cd:09:30:42: fa:ce:2b:7b:b0:29:47:91:fe:a6:fc:59:40:53:93: 0a:44:bd:b2:f5:e6:9f:79:bd:c0:d7:89:2e:e9:6b: f2:ba:3f:09:a7:82:8f:b8:ca:55:2e:28:b8:95:b8: b8:76:a4:45:b2:ab:18:b6:b3:86:8f:d4:f5:56:bb: 1c:5a:07:6c:ed:31:1a:d5:07:e5:71:18:95:33:4c: 95:25:4e:5c:7a:f1:df:4a:88:8e:eb:b1:87:1d:c5: 69:d8:38:16:bd:a8:25:95:7d:34:10:a3:14:aa:d7: 1c:bc:f9:0a:34:08:d3:d0:e9:89:15:ab:2c:7e:4d: 59:ba:1f:c3:10:ab:6e:71:9f:85:33:25:23:4d:8a: 82:e0:56:88:56:45:12:93:15:8d:e4:b3:f0:c5:a4: f2:29:60:48:94:46:ce:d5:9c:a2:b1:66:ce:79:ff: 1f:df:cd:6b:4d:37:31:38:0b:fa:b9:cc:4b:cf:f8: 76:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F7:48:CC:35:95:C0:79:A8:20:4D:77:A4:76:22:69:31:37:FF:A9 X509v3 Authority Key Identifier: keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f8:52:83:cb:c9:10:2c:35:87:90:94:2c:80:9d:fe:cd:27: 11:9f:62:e5:1b:f6:5f:96:1d:1a:f5:33:95:dc:8e:10:24:70: af:fe:c3:70:fe:da:a1:f3:ae:f7:d2:2b:65:97:2e:50:95:ce: c7:d2:69:9d:5f:2d:23:f0:2d:26:ab:dd:85:9a:e0:2e:b4:2b: 6d:bc:75:57:ff:3a:72:32:d1:52:6b:8c:e6:59:83:7d:a0:5d: e0:89:dd:ea:2f:35:6e:c9:dd:94:ed:15:75:17:d0:8f:40:f1: ed:6c:4c:37:23:9f:5a:f3:4e:e0:90:f5:75:eb:3a:b4:83:ae: b3:ec:a7:90:ba:1d:85:55:a7:fb:59:cc:9e:64:e5:2c:5d:1d: 44:02:83:78:eb:44:1d:e0:e5:4b:9e:1c:9c:8f:74:43:15:ad: ad:20:94:04:c2:05:85:54:44:da:a5:27:64:ac:fa:51:e5:88: bd:b1:8b:8d:6a:86:f7:3a:8b:08:ac:2c:fc:e5:dc:5e:27:c5: 83:8b:d7:41:6b:cd:cf:6b:3c:c6:88:49:c7:dc:58:b0:6b:36: 27:38:b8:66:63:e7:16:87:55:5b:f9:d5:54:1b:0d:39:0a:0b: ec:6e:92:93:ad:da:55:e4:8a:46:f8:7e:41:38:2f:df:72:7e: 02:5b:4b:ae -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDSw3x6zJwpgXSEMQ/BrHjA6MXeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDY0Mjk3NWY1MzVmNDVmZDlmNmQ4ZmVhNjI2YmM2ZDI0 YmM5ZDhkODAeFw0yNTA1MDgxOTMwMTdaFw0yNTA1MDkyMDI5MTdaMDMxMTAvBgNV BAMTKEMxRjc0OENDMzU5NUMwNzlBODIwNEQ3N0E0NzYyMjY5MzEzN0ZGQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOyCWM/ApSNB3yPCLM6ADXJHFf 3o8zpDJP+10qXI0R9TfCYVOVNFTJbdQlEf147t0IUffDrFZAAV7KZ4dJEAk3iHtS 9yZFzQkwQvrOK3uwKUeR/qb8WUBTkwpEvbL15p95vcDXiS7pa/K6Pwmngo+4ylUu KLiVuLh2pEWyqxi2s4aP1PVWuxxaB2ztMRrVB+VxGJUzTJUlTlx68d9KiI7rsYcd xWnYOBa9qCWVfTQQoxSq1xy8+Qo0CNPQ6YkVqyx+TVm6H8MQq25xn4UzJSNNioLg VohWRRKTFY3ks/DFpPIpYEiURs7VnKKxZs55/x/fzWtNNzE4C/q5zEvP+HbhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUwfdIzDWVwHmoIE13pHYiaTE3/6kwHwYDVR0j BBgwFoAU1kKXX1NfRf2fbY/qYmvG0kvJ2NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2 OTgwLzMvRDY0Mjk3NUY1MzVGNDVGRDlGNkQ4RkVBNjI2QkM2RDI0QkM5RDhEOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFrS1hYMU5mUmYyZmJZX3FZbXZHMGt2 SjJOZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMy9ENjQyOTc1RjUzNUY0NUZEOUY2 RDhGRUE2MjZCQzZEMjRCQzlEOEQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/hSg8vJECw1h5CULICd /s0nEZ9i5Rv2X5YdGvUzldyOECRwr/7DcP7aofOu99IrZZcuUJXOx9JpnV8tI/At JqvdhZrgLrQrbbx1V/86cjLRUmuM5lmDfaBd4Ind6i81bsndlO0VdRfQj0Dx7WxM NyOfWvNO4JD1des6tIOus+ynkLodhVWn+1nMnmTlLF0dRAKDeOtEHeDlS54cnI90 QxWtrSCUBMIFhVRE2qUnZKz6UeWIvbGLjWqG9zqLCKws/OXcXifFg4vXQWvNz2s8 xohJx9xYsGs2Jzi4ZmPnFodVW/nVVBsNOQoL7G6Sk63aVeSKRvh+QTgv33J+AltL rg== -----END CERTIFICATE-----Generated at Thu May 8 22:25:50 2025 by rpki-client