$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: cmx226hc2EulEBwBLvlIwXQjea/DdTaJZPd5pERgNZo= Subject key identifier: D6:5A:F8:E5:DD:E3:38:ED:45:B8:A6:7F:0E:60:63:2D:BE:54:37:B4 Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 5E16680CEDEA9762FC719401FA0D64F94FE4E27F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 03C0 Signing time: Sat 28 Jun 2025 11:59:09 +0000 Manifest this update: Sat 28 Jun 2025 11:54:09 +0000 Manifest next update: Sun 29 Jun 2025 12:23:09 +0000 Files and hashes: 1: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: yDRyc1h8O+mXAEgAFoITsNpFI2VU0vygznR0PJDNh0M=) 2: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: 2/naNLsZWsKbctisH+91/rgvttkXh//515D4Dxt3bfg=) 3: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: nmhaoLhqUBAnDccEuteaqmwjmYCIqjMWJmqWnwMVbc8=) 4: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: 67hzJ7+qEviKc+JKiq3KV4OqZ4fSU1BU+NXzASboCBg=) 5: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: NZcAKMAEu2FS5Zqz0hBFL7Zpu38dDC8QIhg4PJE0Lh4=) 6: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=) 7: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: T+9QQX64dOYanRzHKI9rhWnUyaZt9GgRQXrvhvIBrgs=) 8: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: YyMBgTPVms4MPnbkUVc7TpGwl6ukB7kzc/uAePl3SRA=) 9: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: 7a5GLv5oJWYIl5TJo428XWVGn85gBgnY3lEU3Dq3wIA=) 10: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: OZBNVOvtp3V7O1L8kF6JcTp/niAHFDMwWI3RV/AoyZY=) 11: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: g8GfxZyUsq5sAHB2Ct+7Z9GS7IIVHVNG2gaO8plmjSA=) 12: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 12:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:16:68:0c:ed:ea:97:62:fc:71:94:01:fa:0d:64:f9:4f:e4:e2:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Jun 28 11:54:09 2025 GMT Not After : Jun 29 12:23:09 2025 GMT Subject: CN=D65AF8E5DDE338ED45B8A67F0E60632DBE5437B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:3e:3c:3e:a1:c8:e9:da:17:83:4b:ae:98: 47:cf:aa:52:ab:25:b6:ed:84:6f:85:fa:c5:59:92: 5c:08:ef:a0:c9:31:d1:15:f5:70:ab:1d:c3:90:dc: b0:ee:ab:df:7a:a3:01:ea:50:fe:03:4f:38:07:a9: 84:fe:a6:33:5b:9d:d1:85:75:34:2f:36:e8:14:f7: e2:3a:d0:94:02:76:ee:f3:72:cc:c2:0c:0e:35:64: 16:9b:43:10:f1:85:1c:67:36:3d:cc:d2:2b:28:b9: 02:72:76:88:58:74:dd:db:4f:31:8c:d1:fc:07:b7: 7b:0a:be:97:80:31:8d:61:f3:5f:10:3c:a6:bb:0b: 26:00:4d:ec:31:3d:7c:75:a0:1a:c1:97:14:14:d7: 63:09:22:c6:b2:8c:7c:c0:52:f1:fa:92:77:7d:42: 99:d5:ec:a3:38:9d:5f:63:27:bb:a4:a7:54:5b:76: 9a:e2:95:ed:6d:fb:00:1f:0f:b5:0c:5e:88:36:03: 88:de:95:2d:5b:6c:0a:b5:09:38:71:45:b8:76:4c: 55:94:39:7d:3c:a2:b2:bc:fe:9e:78:1a:c5:fc:7f: d3:16:59:a0:0f:40:b4:d9:02:5d:d5:eb:c4:4c:aa: 4e:76:e8:65:9a:74:50:bf:27:d1:b1:a9:ad:97:34: 17:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5A:F8:E5:DD:E3:38:ED:45:B8:A6:7F:0E:60:63:2D:BE:54:37:B4 X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:c8:18:bf:a5:9f:e1:e1:9c:84:35:51:0e:81:e5:70:2f:16: 81:46:1d:56:e8:db:80:27:c6:35:3b:6a:23:78:3b:d7:75:20: 3b:52:c5:26:01:c0:af:6c:92:bf:06:39:7c:da:41:dc:ba:a6: 71:df:e3:5b:c2:a1:aa:29:38:f7:1b:af:0c:3d:9c:60:9f:78: ce:d5:a9:3d:2b:14:3e:d3:ce:3e:b5:9d:a1:86:61:73:ce:8a: 66:f4:09:58:3e:f4:77:d5:be:46:87:a2:69:dc:4c:9c:ac:ab: 22:30:d4:66:ff:4e:2b:f8:43:09:0f:c9:95:f8:2f:c8:01:f7: ab:fe:d4:e1:78:b2:9d:91:e8:c8:50:54:1b:70:ac:85:46:15: c0:1c:75:a6:96:42:52:af:e3:94:46:a5:a1:8d:63:dd:b0:6e: 6f:3d:0d:67:6f:95:c3:63:81:1b:95:6b:86:61:5e:07:18:c6: 90:30:58:e8:c7:40:ee:69:c9:b7:13:04:08:eb:50:d8:ab:0c: b9:62:ed:42:ec:f4:75:0d:b4:f9:e6:e8:99:de:1a:b5:7e:b3: 1a:d3:81:f8:f4:b1:31:23:39:18:10:77:f4:bc:e6:5c:45:3e: 48:be:9e:d1:c0:71:73:74:53:6c:c7:5c:8f:c1:9b:35:13:ca: fd:e9:84:09 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXhZoDO3ql2L8cZQB+g1k+U/k4n8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNTA2MjgxMTU0MDlaFw0yNTA2MjkxMjIzMDlaMDMxMTAvBgNV BAMTKEQ2NUFGOEU1RERFMzM4RUQ0NUI4QTY3RjBFNjA2MzJEQkU1NDM3QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr1T48PqHI6doXg0uumEfPqlKr JbbthG+F+sVZklwI76DJMdEV9XCrHcOQ3LDuq996owHqUP4DTzgHqYT+pjNbndGF dTQvNugU9+I60JQCdu7zcszCDA41ZBabQxDxhRxnNj3M0isouQJydohYdN3bTzGM 0fwHt3sKvpeAMY1h818QPKa7CyYATewxPXx1oBrBlxQU12MJIsayjHzAUvH6knd9 QpnV7KM4nV9jJ7ukp1Rbdprile1t+wAfD7UMXog2A4jelS1bbAq1CThxRbh2TFWU OX08orK8/p54GsX8f9MWWaAPQLTZAl3V68RMqk526GWadFC/J9Gxqa2XNBehAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU1lr45d3jOO1FuKZ/DmBjLb5UN7QwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcgYv6Wf4eGchDVRDoHl cC8WgUYdVujbgCfGNTtqI3g713UgO1LFJgHAr2ySvwY5fNpB3Lqmcd/jW8Khqik4 9xuvDD2cYJ94ztWpPSsUPtPOPrWdoYZhc86KZvQJWD70d9W+RoeiadxMnKyrIjDU Zv9OK/hDCQ/JlfgvyAH3q/7U4XiynZHoyFBUG3CshUYVwBx1ppZCUq/jlEaloY1j 3bBubz0NZ2+Vw2OBG5VrhmFeBxjGkDBY6MdA7mnJtxMECOtQ2KsMuWLtQuz0dQ20 +ebomd4atX6zGtOB+PSxMSM5GBB39LzmXEU+SL6e0cBxc3RTbMdcj8GbNRPK/emE CQ== -----END CERTIFICATE-----Generated at Sat Jun 28 22:43:25 2025 by rpki-client