$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json) Hash identifier: /P5lLbC4viiaP/IH+wIu5H8zAeI4byKthzRL4YuYfeU= Subject key identifier: BB:B0:3F:FD:48:EA:F8:93:E3:23:E5:18:0F:AF:8E:03:B0:14:5F:51 Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 605035DC548332999D95A1E95642860B4E3E199A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft Manifest number: 0154 Signing time: Mon 05 May 2025 07:41:08 +0000 Manifest this update: Mon 05 May 2025 07:36:08 +0000 Manifest next update: Tue 06 May 2025 11:40:08 +0000 Files and hashes: 1: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: WtqgmDwc3f4nCSOQ8ixLkNx8sXt7FaBWfi7I6des1c8=) 2: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: sx/iVfyDskrQoK42os+6TyQoUVUvVUXlGN9RH2id0Fo=) 3: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: YeBU5ew7EbaM3M5c2zGWzk0Q7RzGkO4TGKp/4byQ64k=) 4: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: Wm3IDAOfkV81JSuZK/Na7XnsHjZUJzGcxe64BY1WIhs=) 5: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: 9fvE/EKZJ0AUA6jRvgotTKUfh3uMQWCtvLablu7TiLY=) 6: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: kmFg1Ubyi8msuCXkZq9wTUwo9VmgSHMiCqLO0oSubS4=) 7: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: pyzsZjErsKF/r6TDE4GaASJZY8jmD+uruFgv90V9cVg=) 8: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: U56VGJcjuLrEYPpG7oABc/1/udX8BKChn+eBmuJZDts=) 9: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: iavCedfpEd5k0rIG/kL5F/xxOAMPmZq43N15rLvPbic=) 10: 326130643a623238373a656330303a3a2f34302d3430203d3e20323135363634.roa (hash: ZkXNpKW61UGEN6+3Eq/nkumIj3yuGpDt69ocmobqC/8=) 11: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: Qv46t81qHTc4uf1Bxldy1f/G+l9sAnh7axBU+G8+9tQ=) 12: 326130643a623238373a656363303a3a2f34322d3432203d3e20323135363634.roa (hash: GLrga7I6TmqAcqHZCyQLyo7wEkxzFEUlvkIYE9Jlscs=) 13: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: 5lNL9wmLDlet0KrRB5Z2lMcDOBbA6gqsqoS0zWeKarw=) 14: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: c2RB9eXCBfxJlDT4HkDMcwgNvqb60hlJr2OXlYSIxw4=) 15: AS41720.asa (hash: +RbH8buX1T5kTWMGsS+k2hctRH6+R8V1cu3+Qe3+/Rs=) 16: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: YrKMLBs8xCiL955bvB/8G11UYsLmajFWAxqi9VeJEB4=) 17: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: bYPPd9HcHavTcfcGpM+ulmmDEDFMIVr0C3fR7prPNz4=) 18: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: o5Ji9Nl0S0iVZZtmrV/Dia6lTq3wC3uyRf91AZlTL/E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 10:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:50:35:dc:54:83:32:99:9d:95:a1:e9:56:42:86:0b:4e:3e:19:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: May 5 07:36:08 2025 GMT Not After : May 6 11:40:08 2025 GMT Subject: CN=BBB03FFD48EAF893E323E5180FAF8E03B0145F51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e2:7a:41:49:d8:47:ac:44:a5:5a:b7:ca:bc: fa:e8:8b:47:44:45:70:b2:d9:40:b4:0f:e3:87:28: 42:8b:de:a1:42:b6:ad:ac:dd:22:be:ae:55:77:b8: 78:c7:08:87:2c:af:0d:a7:c8:1b:e3:08:bf:1b:89: c5:47:49:bc:f1:ca:3c:cb:e2:fc:4e:bc:48:04:5d: 5a:35:0b:c8:a9:73:33:9a:45:66:a7:4d:d7:85:59: 6b:94:ea:76:54:7a:9a:bc:b7:f4:41:b6:02:b5:e1: 00:e4:21:1a:52:aa:91:9f:a7:0c:74:52:44:5b:83: 69:0e:ba:a9:f7:33:a5:55:44:be:e4:24:df:d8:c5: cd:03:cd:65:12:ef:25:44:61:f9:f9:13:1c:b7:6b: 19:d7:41:9c:79:72:a2:a2:2c:6f:1a:e7:e0:73:63: 18:3d:94:0f:a6:cd:cc:aa:90:fb:d4:e0:3a:3f:6c: 25:aa:08:f5:f5:a6:e3:9b:f9:3e:04:d4:42:04:b7: ce:ac:7f:fb:8d:65:d2:05:2e:57:81:80:71:3b:89: 70:cc:87:96:1a:ac:84:08:17:92:0e:fc:e7:fe:cc: 50:fe:08:a4:17:de:ab:6e:0e:19:32:d9:ee:bc:b8: ef:98:cb:81:2e:d2:7d:2d:e4:4e:1f:ba:fc:70:eb: ff:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B0:3F:FD:48:EA:F8:93:E3:23:E5:18:0F:AF:8E:03:B0:14:5F:51 X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:03:6e:51:01:2a:c9:10:43:9c:95:5a:44:0e:eb:33:f2:b7: 5c:8e:f0:41:20:53:8b:91:f7:06:71:0c:17:47:74:8c:26:75: 42:fb:4d:3b:ee:3e:aa:4f:50:86:ed:d9:69:37:87:4b:34:8b: f8:ea:5b:7a:dd:16:cb:26:a9:6f:9e:c1:48:1b:f2:76:d1:57: 99:74:c6:76:cf:cc:53:1d:02:43:b4:5f:d8:64:7f:57:d9:17: 51:5d:7e:b5:7e:45:d1:2d:c2:2f:c4:48:9e:85:cc:de:37:9c: 0b:7f:18:dd:92:e5:16:f7:17:08:50:2d:41:b1:6a:2a:8e:0d: 34:86:75:4a:38:03:a0:7d:46:7a:23:c4:03:92:a7:79:26:ba: 51:f9:63:d5:95:23:0f:a8:3d:e5:e8:f4:9f:3b:e5:47:4c:38: 5b:1c:4b:1e:d6:9b:25:6a:c8:aa:b5:16:6c:69:a7:55:9a:2a: 7b:f2:a6:76:10:f6:2d:dd:64:0b:63:a8:f1:2d:d0:a0:8a:b9: 10:f8:c2:48:4c:27:46:3b:e9:d5:76:91:9b:f2:9a:1b:a3:9b: 47:f2:70:0a:df:9b:5a:aa:50:30:db:41:4b:f7:fa:89:64:16: 37:39:a6:29:75:08:8c:50:c0:e4:72:12:d9:52:6e:e8:08:3a: 1d:73:fc:5d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYFA13FSDMpmdlaHpVkKGC04+GZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNTA1MDUwNzM2MDhaFw0yNTA1MDYxMTQwMDhaMDMxMTAvBgNV BAMTKEJCQjAzRkZENDhFQUY4OTNFMzIzRTUxODBGQUY4RTAzQjAxNDVGNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT4npBSdhHrESlWrfKvProi0dE RXCy2UC0D+OHKEKL3qFCtq2s3SK+rlV3uHjHCIcsrw2nyBvjCL8bicVHSbzxyjzL 4vxOvEgEXVo1C8ipczOaRWanTdeFWWuU6nZUepq8t/RBtgK14QDkIRpSqpGfpwx0 UkRbg2kOuqn3M6VVRL7kJN/Yxc0DzWUS7yVEYfn5Exy3axnXQZx5cqKiLG8a5+Bz Yxg9lA+mzcyqkPvU4Do/bCWqCPX1puOb+T4E1EIEt86sf/uNZdIFLleBgHE7iXDM h5YarIQIF5IO/Of+zFD+CKQX3qtuDhky2e68uO+Yy4Eu0n0t5E4fuvxw6/+dAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUu7A//Ujq+JPjI+UYD6+OA7AUX1EwHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02 MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwNuUQEqyRBDnJVaRA7r M/K3XI7wQSBTi5H3BnEMF0d0jCZ1QvtNO+4+qk9Qhu3ZaTeHSzSL+Opbet0Wyyap b57BSBvydtFXmXTGds/MUx0CQ7Rf2GR/V9kXUV1+tX5F0S3CL8RInoXM3jecC38Y 3ZLlFvcXCFAtQbFqKo4NNIZ1SjgDoH1GeiPEA5KneSa6Uflj1ZUjD6g95ej0nzvl R0w4WxxLHtabJWrIqrUWbGmnVZoqe/KmdhD2Ld1kC2Oo8S3QoIq5EPjCSEwnRjvp 1XaRm/KaG6ObR/JwCt+bWqpQMNtBS/f6iWQWNzmmKXUIjFDA5HIS2VJu6Ag6HXP8 XQ== -----END CERTIFICATE-----Generated at Mon May 5 14:03:54 2025 by rpki-client