$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft File: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft (raw, json) Hash identifier: T8CbDPBIIvq5fUiFCcpFRaF8/ttrdeyhuesuxCRZxZg= Subject key identifier: BA:83:3F:64:A0:44:38:21:B1:85:7D:09:80:52:ED:F4:95:55:BC:72 Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3 Certificate issuer: /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3 Certificate serial: 10F1A22844369B233E334E49D5172FA4FE8942BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft Manifest number: B8 Signing time: Sat 28 Jun 2025 17:49:34 +0000 Manifest this update: Sat 28 Jun 2025 17:44:34 +0000 Manifest next update: Sun 29 Jun 2025 21:01:34 +0000 Files and hashes: 1: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (hash: 54w2F3M9c9ZMYqej/uVTYoc9lVaBw0QpLSZEW7mlB7o=) 2: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl (hash: c6CSUfi1pY2DjD3nFctmsBnrKmrTGJIScDofcChF8FY=) 3: AS215296.asa (hash: ZUhznpJKsAa9LaDOPMe8wN6G79cK71SOYf6WHfqiJOY=) 4: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (hash: 9+L5QD9C8ye40Ikj2zBEBBChEOO2tsV/W1In9gyAruM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f1:a2:28:44:36:9b:23:3e:33:4e:49:d5:17:2f:a4:fe:89:42:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3 Validity Not Before: Jun 28 17:44:34 2025 GMT Not After : Jun 29 21:01:34 2025 GMT Subject: CN=BA833F64A0443821B1857D098052EDF49555BC72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4e:6a:bb:cd:0e:77:07:24:a4:86:b8:52:f8: 01:69:a3:1f:5e:b0:bf:4d:bf:71:e2:b5:9a:4e:08: 5f:a8:60:9a:d3:42:f6:22:42:00:04:f2:c3:de:45: 1e:0a:d2:34:c1:12:f0:ca:f6:87:a8:bd:43:5b:95: 07:b9:4e:26:87:9e:57:b4:a2:44:ee:06:12:2e:d2: 7b:d3:e4:43:9e:43:ae:5b:16:9b:15:ed:6e:38:a9: ae:2d:ba:c8:af:3a:cc:0c:68:9d:b3:44:8f:bc:ef: 7b:81:ae:78:f1:83:39:e5:99:45:3e:6b:8c:37:66: 28:65:9e:49:46:1e:ca:72:9a:36:7d:da:87:7e:81: cc:2c:24:59:62:68:cc:11:a9:7a:a3:51:61:93:82: ac:bf:f0:76:76:fc:10:09:2e:56:a8:84:81:4a:39: ac:af:b1:d9:f1:39:8f:63:ee:bd:3c:ab:65:b2:84: 22:cc:df:8d:f7:43:c3:fc:7f:49:ff:70:b3:01:d9: d9:9b:a2:e5:bf:44:de:f8:c2:be:ee:3d:6f:3d:db: 89:34:45:a4:1f:c8:4b:38:9b:68:cc:af:44:ac:ff: 5d:03:21:14:0e:62:f2:41:24:c9:8e:57:5f:a3:66: a5:5b:98:b5:fc:86:94:07:f3:58:7a:01:35:fc:ea: 82:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:83:3F:64:A0:44:38:21:B1:85:7D:09:80:52:ED:F4:95:55:BC:72 X509v3 Authority Key Identifier: keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:3c:37:5b:14:82:dc:24:eb:71:9b:7a:85:99:9f:20:6d:45: 34:d4:12:dc:d5:6c:f1:55:8b:6d:25:02:9f:6c:af:e2:50:17: 39:a4:18:4b:7d:a3:3f:e3:7e:2c:8a:be:ca:2f:d5:65:6e:5c: 13:52:21:a7:b7:3f:b8:27:a0:be:5b:ee:4f:43:5c:f1:11:1d: 84:67:1e:d1:47:20:fe:20:6f:e1:ba:98:e1:a3:a2:8f:8d:e7: e9:85:07:6b:15:8e:68:ad:7d:e3:a2:fd:ad:6e:33:d3:ed:05: 92:ad:9a:dc:d1:e0:dd:de:00:5d:94:a8:4f:20:f6:1a:51:a4: ca:b5:c4:62:78:7f:82:dd:f2:4b:48:d6:52:ab:bb:6e:2f:c1: 99:99:78:40:06:ac:f1:80:52:a6:7b:ff:8c:9a:86:a8:6f:50: 46:b7:d6:cd:11:4b:9a:77:b9:d6:38:f3:c4:11:26:1e:8e:46: 05:ad:71:5d:18:2f:5c:f6:67:a6:e4:16:f3:5e:59:73:b9:11: f7:7b:1d:86:e2:34:ea:4e:cd:3e:ae:95:d7:df:62:88:90:d1: 38:f6:7e:de:5a:a5:20:94:cf:0f:8e:b4:68:40:f4:86:fc:28: c5:24:80:ed:7d:11:16:14:b1:03:3f:79:c2:b4:21:74:a3:ae: 3d:a2:bf:7b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEPGiKEQ2myM+M05J1RcvpP6JQr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4ZDdkYzk3NzliMjc4MTVlYmI1YzNmNWZjZjA3Y2M1 ODM3MDhiMzAeFw0yNTA2MjgxNzQ0MzRaFw0yNTA2MjkyMTAxMzRaMDMxMTAvBgNV BAMTKEJBODMzRjY0QTA0NDM4MjFCMTg1N0QwOTgwNTJFREY0OTU1NUJDNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdTmq7zQ53BySkhrhS+AFpox9e sL9Nv3HitZpOCF+oYJrTQvYiQgAE8sPeRR4K0jTBEvDK9oeovUNblQe5TiaHnle0 okTuBhIu0nvT5EOeQ65bFpsV7W44qa4tusivOswMaJ2zRI+873uBrnjxgznlmUU+ a4w3ZihlnklGHspymjZ92od+gcwsJFliaMwRqXqjUWGTgqy/8HZ2/BAJLlaohIFK OayvsdnxOY9j7r08q2WyhCLM3433Q8P8f0n/cLMB2dmbouW/RN74wr7uPW8924k0 RaQfyEs4m2jMr0Ss/10DIRQOYvJBJMmOV1+jZqVbmLX8hpQH81h6ATX86oJRAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUuoM/ZKBEOCGxhX0JgFLt9JVVvHIwHwYDVR0j BBgwFoAUV419yXebJ4Feu1w/X88HzFg3CLMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWNhMjUzNTAtOWUzZi00NmUxLWFlMmItMWM2MWI2ZWE1 YWUyLzAvNTc4RDdEQzk3NzlCMjc4MTVFQkI1QzNGNUZDRjA3Q0M1ODM3MDhCMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Y0MTl5WGViSjRGZXUxd19YODhIekZn M0NMTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lY2EyNTM1MC05 ZTNmLTQ2ZTEtYWUyYi0xYzYxYjZlYTVhZTIvMC81NzhEN0RDOTc3OUIyNzgxNUVC QjVDM0Y1RkNGMDdDQzU4MzcwOEIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODw3WxSC3CTrcZt6hZmf IG1FNNQS3NVs8VWLbSUCn2yv4lAXOaQYS32jP+N+LIq+yi/VZW5cE1Ihp7c/uCeg vlvuT0Nc8REdhGce0Ucg/iBv4bqY4aOij43n6YUHaxWOaK1946L9rW4z0+0Fkq2a 3NHg3d4AXZSoTyD2GlGkyrXEYnh/gt3yS0jWUqu7bi/BmZl4QAas8YBSpnv/jJqG qG9QRrfWzRFLmne51jjzxBEmHo5GBa1xXRgvXPZnpuQW815Zc7kR93sdhuI06k7N Pq6V199iiJDROPZ+3lqlIJTPD460aED0hvwoxSSA7X0RFhSxAz95wrQhdKOuPaK/ ew== -----END CERTIFICATE-----Generated at Sat Jun 28 20:44:42 2025 by rpki-client