$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft File: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json) Hash identifier: 8Nm34K2gqx05FG5BFZMeGWns1tGNUpHV1gTz+HaQp7w= Subject key identifier: 0A:0C:51:98:AB:D5:A5:D0:D4:B1:A5:E8:E8:B5:02:D7:20:CC:FF:79 Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Certificate serial: 0207D54724FA50AE4F8AECC860D9E1629B40B8B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft Manifest number: 040C Signing time: Sat 14 Jun 2025 00:37:50 +0000 Manifest this update: Sat 14 Jun 2025 00:32:50 +0000 Manifest next update: Sun 15 Jun 2025 03:28:50 +0000 Files and hashes: 1: 34362e3138332e33312e302f32342d3234203d3e20383334.roa (hash: xUsUi3YtopFm9VP8hMqKJ5OknqKCy1oSAbxFuFcm2oA=) 2: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: pxnqedD3kuwz1m+9x0q4e9R46P3xXGAP6tM7JZr4zqQ=) 3: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: J4OiG3w48JjWhnudFsWcYG+Vuaya8ZF75t+2rOp/xqI=) 4: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: U6sIE1tc5XNg8Vw7jnbxLLCNANnB9wH3voxb1FhuZwc=) 5: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: 4jq0qwMJqWtfRUuzz3vPyKHtua4FM5/8Y3cvVGfTKBM=) 6: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: ii72WRjo+pDoTtYybgLKaFsOG8JUV0CPdunTnf7/tAg=) 7: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: lxi2m0tJ4IwcIv1Qu/mxuwgzf8BGdtHdxfKNM9mKZEQ=) 8: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: MBTQi0HOcbTwY/4fQl+vTOHLOQ2FmR/EhBIZ6Dj3u14=) 9: 34362e3138332e32392e302f32342d3234203d3e20313734.roa (hash: iFoLwhPM2dsVM0j9MR72yEvFI7xyXfHeaQDbIOf/NSg=) 10: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: EQc8ZSWRYu3w3yABE1KT+uLZnchUtUDhUBMKc9gsz8U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 03:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:07:d5:47:24:fa:50:ae:4f:8a:ec:c8:60:d9:e1:62:9b:40:b8:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Validity Not Before: Jun 14 00:32:50 2025 GMT Not After : Jun 15 03:28:50 2025 GMT Subject: CN=0A0C5198ABD5A5D0D4B1A5E8E8B502D720CCFF79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:89:07:da:bd:26:97:f9:82:d6:4a:5a:e6:b8: 71:6a:b9:c0:75:cc:18:60:1d:f2:2a:63:ee:2b:cc: a6:10:52:a2:b2:e6:cd:a2:21:d9:75:ef:ca:00:fb: 17:5d:07:56:ae:46:a5:05:8b:d8:0e:5f:df:7e:62: 53:5d:9f:0e:02:06:2d:81:e4:cc:25:d0:e1:52:ae: de:aa:e8:38:34:d1:98:8e:21:15:b3:a3:f2:cc:3b: b8:69:df:75:31:80:61:ca:24:1b:d0:4b:b7:43:c4: 41:36:a1:98:74:3c:89:80:80:2b:35:c2:c4:93:fe: ec:ff:03:43:33:41:53:8c:87:6d:2e:7d:70:65:ea: 61:f7:35:dc:33:ba:57:0c:65:5f:6e:07:2a:3c:1f: 4e:93:62:85:cb:52:12:50:81:1c:b2:26:51:de:62: 53:d7:07:aa:50:74:58:c2:c4:f5:a4:05:ae:df:e3: 22:8c:00:1b:bc:0a:87:8f:c4:e7:b3:99:70:a2:c3: fc:a6:17:d2:00:93:fc:b6:55:13:16:77:d3:39:ff: 95:e5:2a:1f:71:cb:ce:54:5f:00:5b:0b:94:04:d8: ae:16:a4:26:67:5c:e3:28:29:d5:02:2c:ec:43:fa: 9e:8b:e3:0d:29:96:fe:ce:e4:09:e7:8f:07:7c:83: 64:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0C:51:98:AB:D5:A5:D0:D4:B1:A5:E8:E8:B5:02:D7:20:CC:FF:79 X509v3 Authority Key Identifier: keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ae:17:6b:93:02:98:ad:b7:ea:4d:dd:59:3a:82:dd:1a:9d: 2b:8b:f4:b2:f9:3d:a8:c1:5c:f3:23:e9:45:bb:76:69:ae:2e: 3c:a3:36:da:b6:9c:3b:d0:5b:aa:11:15:52:c2:67:77:4f:8e: ea:6e:31:23:55:2b:7b:6b:4e:77:9f:0a:75:d3:66:de:70:33: 26:73:d8:ad:b0:b7:bf:41:42:73:8f:5c:21:6b:7f:27:f1:89: 11:68:7b:16:76:f6:09:4b:95:ff:77:ff:7b:03:cb:be:0b:0d: 34:4c:90:f6:ce:4e:ce:26:e2:06:44:6e:c2:2c:38:8c:5e:b2: 5c:a2:6c:71:14:14:93:dc:94:4a:06:bc:df:2a:c9:61:55:5b: 26:78:6e:e1:7c:b6:dd:e5:3d:3b:e4:71:2c:3c:7f:41:04:79: 25:de:78:e3:71:45:fb:a7:99:ab:50:fc:76:2d:3e:0d:3f:3e: c0:ae:43:af:3f:ed:cb:94:1e:14:a3:5b:cf:3b:6d:0e:21:7e: 56:06:4e:ea:89:c2:27:d9:f6:83:16:62:31:87:ef:2a:a5:79: 82:2e:29:93:aa:0c:b3:30:90:20:4d:c8:a6:62:63:a1:68:32: 6f:ec:87:17:6c:3d:f7:66:ff:99:11:ec:af:13:8a:a5:3e:c5: 81:65:b0:26 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAgfVRyT6UK5PiuzIYNnhYptAuLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj YzY3N2IwMDAeFw0yNTA2MTQwMDMyNTBaFw0yNTA2MTUwMzI4NTBaMDMxMTAvBgNV BAMTKDBBMEM1MTk4QUJENUE1RDBENEIxQTVFOEU4QjUwMkQ3MjBDQ0ZGNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCriQfavSaX+YLWSlrmuHFqucB1 zBhgHfIqY+4rzKYQUqKy5s2iIdl178oA+xddB1auRqUFi9gOX99+YlNdnw4CBi2B 5Mwl0OFSrt6q6Dg00ZiOIRWzo/LMO7hp33UxgGHKJBvQS7dDxEE2oZh0PImAgCs1 wsST/uz/A0MzQVOMh20ufXBl6mH3NdwzulcMZV9uByo8H06TYoXLUhJQgRyyJlHe YlPXB6pQdFjCxPWkBa7f4yKMABu8CoePxOezmXCiw/ymF9IAk/y2VRMWd9M5/5Xl Kh9xy85UXwBbC5QE2K4WpCZnXOMoKdUCLOxD+p6L4w0plv7O5Annjwd8g2R5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUCgxRmKvVpdDUsaXo6LUC1yDM/3kwHwYDVR0j BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0 Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4 bmV3QS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xNmFjYjlhMC02 ZDFlLTRhZTQtOTE3Ny1kOTM4ZTk4MDQzOTUvMC8yNEU1Mzc4OEJENEVGQTIzQjFB ODIwN0I3RTc0QThFMUNDNjc3QjAwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmq4Xa5MCmK236k3dWTqC 3RqdK4v0svk9qMFc8yPpRbt2aa4uPKM22racO9BbqhEVUsJnd0+O6m4xI1Ure2tO d58KddNm3nAzJnPYrbC3v0FCc49cIWt/J/GJEWh7Fnb2CUuV/3f/ewPLvgsNNEyQ 9s5OzibiBkRuwiw4jF6yXKJscRQUk9yUSga83yrJYVVbJnhu4Xy23eU9O+RxLDx/ QQR5Jd5443FF+6eZq1D8di0+DT8+wK5Drz/ty5QeFKNbzzttDiF+VgZO6onCJ9n2 gxZiMYfvKqV5gi4pk6oMszCQIE3IpmJjoWgyb+yHF2w992b/mRHsrxOKpT7FgWWw Jg== -----END CERTIFICATE-----Generated at Sat Jun 14 17:28:32 2025 by rpki-client