$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: 0P9fzoTpjSPIxfX9b5mnuhdRz8T6URi5xTzr4nYpOsY= Subject key identifier: 56:59:C0:5B:4F:75:3A:4F:60:27:6D:58:C7:0F:73:D5:4B:FA:34:9C Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 7A4A5076721D97143573532223C733AA1FA3E129 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 0220 Signing time: Tue 06 May 2025 03:33:59 +0000 Manifest this update: Tue 06 May 2025 03:28:59 +0000 Manifest next update: Wed 07 May 2025 05:34:59 +0000 Files and hashes: 1: 326131343a373538303a393130303a3a2f34302d3438203d3e20323136323939.roa (hash: c4wfh1kOphA8Axvw6+dnj3lAut4b1kpMpQW/rZEnV+o=) 2: 326131343a373538303a393030303a3a2f34302d3438203d3e20323134363433.roa (hash: TpBOht4fHdBbgzn8V6oN1sv1lzMWI2nPHKIFH/SJnHk=) 3: 326131343a373538303a393130303a3a2f34302d3438203d3e20323031333836.roa (hash: HGfpWKFgSmhSbJJ0S3ZdUrJxu8/156bUgg5vlqYKRis=) 4: 326131343a373538303a393430303a3a2f33392d3438203d3e20313430393135.roa (hash: mVqYPHXZFgCW00Y2ej0uNLFZlmcciaFr8mPxKhhXZIs=) 5: 326131343a373538303a393630303a3a2f34302d3438203d3e20313533333736.roa (hash: a3qLcUPi+RQppEqo978zrfnO/2oaV9TKnigMH0wuHZQ=) 6: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: cFxWp20cVK0UfiJxxcLtUOXevD3OgB7dMefIF5hBHOk=) 7: 326131343a373538303a393230303a3a2f34302d3438203d3e20313430393135.roa (hash: n6lsjVYHHKKKPmzUm98edFKQEZTX7R3BteBSBE3ZmTg=) 8: 326131343a373538313a653030303a3a2f33362d3438203d3e20323134363433.roa (hash: x9Ws2a9hchs2I1MVNTnPpvnZFWRirIvQpeIuGTe39hw=) 9: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: 7JHPLjMgEJHFnRbyYTKQ4dxni2elwSUWhnq1IDQ/DHU=) 10: 326131343a373538303a393330303a3a2f34302d3438203d3e20323136323939.roa (hash: 0JNkK9KnjI4w2zV41Uw2bLOQhv0TkTdwPhPOAejMVJo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 03:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:4a:50:76:72:1d:97:14:35:73:53:22:23:c7:33:aa:1f:a3:e1:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: May 6 03:28:59 2025 GMT Not After : May 7 05:34:59 2025 GMT Subject: CN=5659C05B4F753A4F60276D58C70F73D54BFA349C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:41:70:e4:f6:48:a7:11:8e:e5:51:b2:1d:38: 63:9e:8c:8c:a2:17:3e:7b:a7:71:6a:57:65:a1:28: 4f:c2:78:d3:0b:9a:b4:48:f3:0c:e0:8f:e9:ba:5b: 42:97:7a:5f:58:56:d5:c4:13:b3:42:51:6d:e1:b3: 9b:47:b1:51:d0:62:5e:a6:7d:7c:fd:c8:71:fe:b2: 1b:e4:72:e5:b5:82:b4:1d:4e:64:b4:28:61:4d:69: b1:d5:cd:44:91:ab:ea:f4:50:e8:cf:2c:03:f3:cd: 4b:09:3f:c6:e5:11:a3:b4:08:6a:ff:8f:a1:30:68: 65:71:73:e2:30:53:1b:f8:af:36:a0:b3:35:b1:4b: 8d:1c:bd:4a:3f:4b:60:a6:2b:68:3e:da:77:cb:69: c0:98:ef:9e:99:2c:8b:d9:24:a1:8a:d8:ee:dd:a3: c0:90:c6:17:b6:92:35:12:01:a0:87:eb:ba:fa:da: 22:de:84:ec:34:6a:16:aa:f2:4d:3b:b0:5c:37:15: 6f:88:84:98:3f:87:c8:bf:f4:99:d3:00:f6:a2:59: f8:08:b5:0b:88:93:3b:a6:79:3e:40:bd:55:49:40: 28:0c:ff:eb:98:6b:65:72:e3:63:84:ab:00:f2:89: 41:04:41:71:83:0f:53:46:e2:45:e0:02:98:29:6c: 82:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:59:C0:5B:4F:75:3A:4F:60:27:6D:58:C7:0F:73:D5:4B:FA:34:9C X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:fb:6f:97:a4:49:02:6c:ec:07:7b:43:cd:b2:ce:09:de:22: 43:44:f9:d1:01:e3:ef:40:37:9e:06:a4:1d:6a:0f:8a:4e:30: ba:9f:7e:20:91:3d:3e:28:4a:41:a3:56:7a:7a:53:b6:6c:74: 19:78:e5:76:2f:02:ee:77:aa:b3:eb:02:79:aa:99:c9:70:98: 8b:19:a6:db:22:46:3c:eb:6b:53:ef:cc:96:8f:7e:58:65:b4: 7b:04:dc:f6:12:ed:25:c5:af:94:93:8e:4d:c8:e5:a6:2b:3b: 3a:fb:97:0c:16:32:f0:eb:93:f4:cf:24:81:4d:4d:00:01:ea: b9:e9:5b:e0:55:9a:83:59:e5:f2:1c:d9:3c:a0:58:71:fd:ef: d7:05:90:38:81:c7:21:ac:3a:f0:e1:c8:35:39:ef:08:4c:54: 54:cc:fe:08:e2:a9:56:5a:a0:3b:20:d6:09:28:ea:32:56:c9: fc:3a:c9:c0:93:6d:13:1e:da:6b:09:ce:fa:ee:56:c9:25:f8: db:c8:f3:09:be:7b:a3:5d:c5:7b:03:7c:fd:5d:1d:c7:0f:6a: 32:a2:30:bc:15:54:69:72:61:8b:ea:c1:44:c0:54:e5:dd:d0: 93:af:3f:80:f7:ae:a3:db:fc:70:90:74:b4:1d:18:64:69:2e: 49:fb:27:86 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUekpQdnIdlxQ1c1MiI8czqh+j4SkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNTA1MDYwMzI4NTlaFw0yNTA1MDcwNTM0NTlaMDMxMTAvBgNV BAMTKDU2NTlDMDVCNEY3NTNBNEY2MDI3NkQ1OEM3MEY3M0Q1NEJGQTM0OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7QXDk9kinEY7lUbIdOGOejIyi Fz57p3FqV2WhKE/CeNMLmrRI8wzgj+m6W0KXel9YVtXEE7NCUW3hs5tHsVHQYl6m fXz9yHH+shvkcuW1grQdTmS0KGFNabHVzUSRq+r0UOjPLAPzzUsJP8blEaO0CGr/ j6EwaGVxc+IwUxv4rzagszWxS40cvUo/S2CmK2g+2nfLacCY756ZLIvZJKGK2O7d o8CQxhe2kjUSAaCH67r62iLehOw0ahaq8k07sFw3FW+IhJg/h8i/9JnTAPaiWfgI tQuIkzumeT5AvVVJQCgM/+uYa2Vy42OEqwDyiUEEQXGDD1NG4kXgApgpbIJBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUVlnAW091Ok9gJ21Yxw9z1Uv6NJwwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBh+2+X pEkCbOwHe0PNss4J3iJDRPnRAePvQDeeBqQdag+KTjC6n34gkT0+KEpBo1Z6elO2 bHQZeOV2LwLud6qz6wJ5qpnJcJiLGabbIkY862tT78yWj35YZbR7BNz2Eu0lxa+U k45NyOWmKzs6+5cMFjLw65P0zySBTU0AAeq56VvgVZqDWeXyHNk8oFhx/e/XBZA4 gcchrDrw4cg1Oe8ITFRUzP4I4qlWWqA7INYJKOoyVsn8OsnAk20THtprCc767lbJ JfjbyPMJvnujXcV7A3z9XR3HD2oyojC8FVRpcmGL6sFEwFTl3dCTrz+A966j2/xw kHS0HRhkaS5J+yeG -----END CERTIFICATE-----Generated at Tue May 6 19:20:38 2025 by rpki-client