$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json) Hash identifier: Ig9nuGzgUZTolxS9ew6IQQcF8hZoCy/CojZuWMSQpOc= Subject key identifier: 91:D9:29:76:FC:8C:5E:00:0B:ED:04:3E:7A:C1:AC:77:2A:C3:23:AF Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 49126C8CDA55C5A40609599EB95914420AD09CFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft Manifest number: E4 Signing time: Tue 06 May 2025 09:29:06 +0000 Manifest this update: Tue 06 May 2025 09:24:06 +0000 Manifest next update: Wed 07 May 2025 13:20:06 +0000 Files and hashes: 1: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: jNzQvK975k0nFSky/OYcsFfueNL1XvYeIp3mtR/7WPY=) 2: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: 4XaYoumybiLIqhe0Z1I15U3yhlEPavLDyROZxZlJiXk=) 3: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: hoZQSGqkvoyh+Fwe28UicpO6RAJD80P7rklT/Di/mQU=) 4: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (hash: 4XlIN+3Y2uvivj3jKKbdxnHiR3dRqeJ7/xmTE8uipj8=) 5: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: BqbUmbythNNYP4WqssroNY2sOPvoyuRgXIRAVuIytpA=) 6: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: iK+yx/VtDctRGDFOE/NGNWTyR4u7o2tFGRI6U0bUYZU=) 7: 34332e3233302e38342e302f32342d3234203d3e203231383430.roa (hash: 0jlXbJYw2GWQ/DylqYAmM4dC2o3pqpBbNQAmAAMOqvc=) 8: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: yHVodRBAsBlx/8p8lQvX33hmgwPZB9Uj6k/5yqbIyfs=) 9: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: y9uevaBeLo1M0NZi4w3HJOyvLkMWIaZEJFCi8snsYYY=) 10: 3130332e34392e3132382e302f32342d3234203d3e20313531313036.roa (hash: JqZwwTv3XcFCl1IzFcnoBrVKvFS5JMd+d9rIxVN+6kI=) 11: 3130332e34392e3133312e302f32342d3234203d3e20313531313036.roa (hash: /tFw1lzpQWvvpuYCQnIjFSZLwGcls1xoTiwGuGyPuCE=) 12: 3130332e34392e3132392e302f32342d3234203d3e20313531313036.roa (hash: Q+cdg9uP0RhRt9m8aCTanOBYRy+8tZGQj1Gbky6i6b4=) 13: 3130332e34392e3133302e302f32342d3234203d3e20313531313036.roa (hash: QsVAhyWBBJB99iFgJf1GLSpnrLc3ar0zm6+DEGdyF9U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 13:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:12:6c:8c:da:55:c5:a4:06:09:59:9e:b9:59:14:42:0a:d0:9c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: May 6 09:24:06 2025 GMT Not After : May 7 13:20:06 2025 GMT Subject: CN=91D92976FC8C5E000BED043E7AC1AC772AC323AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:94:64:82:1b:0e:c4:30:ce:33:64:35:e8:a4: 52:0f:97:b0:51:03:11:b4:6d:2f:9f:7a:92:7a:2c: b1:62:e4:53:be:af:be:04:1a:36:49:a6:cc:73:a4: f4:12:c2:de:da:05:1c:83:37:ab:af:7f:38:b1:8b: c0:03:9b:ad:4b:2d:6e:77:76:4b:db:a7:35:38:64: 4f:3b:b7:17:ab:cb:a2:7b:3d:69:c7:2d:73:6d:d4: d1:78:1e:c4:ce:b5:80:97:bb:d3:bc:59:d1:12:d0: 4c:00:b1:df:9b:9a:04:19:e2:fc:c5:01:94:2b:57: 9c:30:87:8b:25:c6:01:db:81:3c:e0:ee:28:59:91: 81:b4:86:8b:73:4c:46:ee:5c:30:e0:c2:a8:a3:61: 21:a2:72:ff:5e:43:e6:02:29:c1:7b:9d:d2:1c:d4: 9b:0c:3e:8a:47:78:46:21:c7:60:35:ce:70:94:d0: 39:32:c3:17:1a:d0:a0:f6:b2:c5:64:a5:fb:ce:d7: 51:a1:0a:d8:5f:a6:e2:48:79:6f:d5:50:91:e5:56: 79:ad:d4:71:ab:f8:df:a9:41:49:ce:d6:cc:17:03: 4d:ef:ed:2f:b4:54:1f:0b:6e:70:35:80:97:71:16: ca:1a:15:bf:95:8f:72:d0:fd:7d:64:b8:f5:ea:f4: b5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D9:29:76:FC:8C:5E:00:0B:ED:04:3E:7A:C1:AC:77:2A:C3:23:AF X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:44:c1:6d:22:46:1d:44:43:f4:cc:3f:6f:30:59:7a:26:1c: 08:89:d6:b2:4c:46:32:09:e6:1d:12:cb:2b:57:c5:82:c2:c5: 99:80:d4:30:c6:80:d2:fd:0b:db:d0:8d:88:d3:89:4b:f6:f9: 9b:17:a7:20:4d:3b:61:7b:7f:bd:56:3c:f8:c9:c4:c7:f1:ef: d5:c4:50:69:20:e4:e7:71:bc:65:9c:36:bd:9d:09:c0:74:9c: e2:5e:91:b0:63:65:81:04:2c:3a:2d:ea:e9:ca:2a:14:de:27: 70:1d:16:47:59:6c:0c:27:43:f5:ca:12:70:40:2e:84:b7:26: 5a:47:45:fa:16:20:fc:d5:a4:be:3a:1e:66:9c:54:b1:d1:b1: 5f:44:2e:ec:e8:17:c0:c4:6b:3a:3e:20:81:50:cf:de:9e:53: 1f:2b:d3:2b:b6:7e:4e:77:c9:b7:a1:bf:5e:cf:75:51:e9:6e: 91:09:0f:7f:d4:a9:f1:fe:15:cb:c9:a4:a1:72:4c:1c:0d:de: c9:fd:3d:76:03:20:46:10:3f:14:e7:9f:aa:b3:47:4e:9b:a8: 12:69:48:f9:c4:b0:1c:61:02:1b:75:d7:35:cd:27:6b:cb:a6: f7:29:9e:58:af:c3:32:8a:19:a7:6e:e4:c0:22:89:0b:66:f3: dd:0c:47:ac -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSRJsjNpVxaQGCVmeuVkUQgrQnP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNTA1MDYwOTI0MDZaFw0yNTA1MDcxMzIwMDZaMDMxMTAvBgNV BAMTKDkxRDkyOTc2RkM4QzVFMDAwQkVEMDQzRTdBQzFBQzc3MkFDMzIzQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdlGSCGw7EMM4zZDXopFIPl7BR AxG0bS+fepJ6LLFi5FO+r74EGjZJpsxzpPQSwt7aBRyDN6uvfzixi8ADm61LLW53 dkvbpzU4ZE87txery6J7PWnHLXNt1NF4HsTOtYCXu9O8WdES0EwAsd+bmgQZ4vzF AZQrV5wwh4slxgHbgTzg7ihZkYG0hotzTEbuXDDgwqijYSGicv9eQ+YCKcF7ndIc 1JsMPopHeEYhx2A1znCU0Dkywxca0KD2ssVkpfvO11GhCthfpuJIeW/VUJHlVnmt 1HGr+N+pQUnO1swXA03v7S+0VB8LbnA1gJdxFsoaFb+Vj3LQ/X1kuPXq9LWZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUkdkpdvyMXgAL7QQ+esGsdyrDI68wHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02 ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5 QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkTBbSJGHURD9Mw/bzBZ eiYcCInWskxGMgnmHRLLK1fFgsLFmYDUMMaA0v0L29CNiNOJS/b5mxenIE07YXt/ vVY8+MnEx/Hv1cRQaSDk53G8ZZw2vZ0JwHSc4l6RsGNlgQQsOi3q6coqFN4ncB0W R1lsDCdD9coScEAuhLcmWkdF+hYg/NWkvjoeZpxUsdGxX0Qu7OgXwMRrOj4ggVDP 3p5THyvTK7Z+TnfJt6G/Xs91UelukQkPf9Sp8f4Vy8mkoXJMHA3eyf09dgMgRhA/ FOefqrNHTpuoEmlI+cSwHGECG3XXNc0na8um9ymeWK/DMooZp27kwCKJC2bz3QxH rA== -----END CERTIFICATE-----Generated at Tue May 6 19:54:41 2025 by rpki-client