$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft File: 1498141819112B8446C2D4A3111F53038F05DBE9.mft (raw, json) Hash identifier: Lv2/OHwOg0D4xT10hDBRlNtE45dv+MjiZR1nfKnGdJI= Subject key identifier: BE:B1:F0:3D:4E:84:64:9C:F2:26:71:6C:93:DB:87:5A:67:27:AE:41 Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9 Certificate serial: 3E20BF3C87F5AEC7C10ED692B1779601ACEC1421 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft Manifest number: 17 Signing time: Sun 15 Jun 2025 04:32:56 +0000 Manifest this update: Sun 15 Jun 2025 04:27:56 +0000 Manifest next update: Mon 16 Jun 2025 07:16:56 +0000 Files and hashes: 1: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (hash: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=) 2: 3138352e39312e3131352e302f32342d3234203d3e20313337353137.roa (hash: X1+DKmCz9fjQ0YFjOBy8DCDKUifeMBU5Rwd+VfLqCPU=) 3: 3138352e39312e3131322e302f32342d3234203d3e203136323736.roa (hash: 816LcoMP7IzyrdlbDQQeycStorYxYzCTT1WckHhtHIY=) 4: 3138352e39312e3131332e302f32342d3234203d3e20383334.roa (hash: wUHDND9ukOVNaQ+NWAsi1lWfuN4h8Pf5bBrTJ0wUGT4=) 5: 1498141819112B8446C2D4A3111F53038F05DBE9.crl (hash: jJ4+BqrE7l9nXI0TT4fbXtwU3aqgkuT+R8GDDAaxEtE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 22:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:20:bf:3c:87:f5:ae:c7:c1:0e:d6:92:b1:77:96:01:ac:ec:14:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9 Validity Not Before: Jun 15 04:27:56 2025 GMT Not After : Jun 16 07:16:56 2025 GMT Subject: CN=BEB1F03D4E84649CF226716C93DB875A6727AE41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:aa:4d:00:56:bc:fb:54:16:ad:2a:9d:b8:87: c1:4e:18:37:93:8a:2b:42:b7:b8:ce:a4:e6:4e:e1: 33:8c:8d:e3:a2:3d:cf:3b:04:1c:48:53:02:1c:de: ff:8b:1a:48:2a:92:e1:4c:a8:48:50:5d:3a:74:8d: c9:49:6f:91:f3:3c:76:7d:07:50:2c:af:07:d8:ce: 93:c1:66:00:0c:c6:a2:bb:19:68:aa:da:ed:71:e5: 92:d6:bc:e5:5a:ec:00:c4:5a:c0:cf:62:03:94:22: 1a:f8:82:18:83:d8:0b:15:8a:35:b6:ca:98:fb:cb: 52:22:6e:87:b0:49:34:71:a3:66:14:49:28:a9:b8: f7:53:00:0c:57:90:e5:3c:69:04:dc:b0:af:30:cf: f9:31:2f:ea:66:c8:2e:37:54:11:b2:66:dc:66:a2: 37:8a:81:c2:1f:84:73:f5:6b:5e:d5:11:93:ea:a6: 6c:f8:61:b6:5d:0b:37:0d:93:9f:8f:f9:ea:2b:3a: a9:65:2b:fc:65:a0:51:c6:1a:af:db:a9:81:76:b5: 80:f8:0f:c1:94:47:a3:1d:54:a1:7f:7b:e4:4e:83: 70:a6:38:15:9c:b3:e1:1f:94:ee:c1:a1:c0:5d:c7: 76:04:58:3d:56:3b:1c:b7:3c:e6:cd:0b:6c:b8:36: 52:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B1:F0:3D:4E:84:64:9C:F2:26:71:6C:93:DB:87:5A:67:27:AE:41 X509v3 Authority Key Identifier: keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:43:a5:86:42:c2:cd:30:19:08:ca:6b:9f:8e:32:31:9d:07: 3e:cc:3f:8b:8e:4f:33:3d:0c:50:4c:51:2b:05:a3:62:94:41: f1:4c:01:fa:4f:e9:7a:35:16:2e:a2:d3:fa:a5:38:bd:43:58: 3f:09:93:14:f2:b2:1e:7f:15:2f:64:c7:49:a8:66:fa:38:6a: 60:a9:d9:86:7b:21:5d:71:1f:9c:4b:4c:b9:06:e0:3f:77:ca: b0:22:7f:84:59:68:e3:af:d3:76:10:fb:1a:33:7e:d5:b3:60: 36:00:ed:ab:b9:8d:14:e9:95:84:b8:69:2c:ee:50:a4:b7:87: 9b:20:59:9c:28:87:6e:77:de:e3:7e:2a:bc:02:0c:8c:8e:59: fe:f2:13:ce:88:e8:fc:4d:93:91:47:36:ff:1d:fe:39:df:20: 9f:d0:1c:84:25:05:43:0a:5b:4a:53:4d:42:47:2e:0e:4d:90: 4f:e6:36:56:8b:19:0f:54:5f:fd:85:b4:93:3d:b9:2d:04:bf: 3a:10:a3:1d:46:cc:11:16:14:63:a1:9b:d6:c7:55:4f:93:cc: a1:63:26:21:35:c9:57:76:c9:f0:99:83:f6:4a:1b:44:aa:f4: 12:4c:be:c7:38:7b:a2:a3:d0:fc:2a:7d:db:8a:c5:79:9a:66: 14:79:fb:9c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPiC/PIf1rsfBDtaSsXeWAazsFCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5ODE0MTgxOTExMmI4NDQ2YzJkNGEzMTExZjUzMDM4 ZjA1ZGJlOTAeFw0yNTA2MTUwNDI3NTZaFw0yNTA2MTYwNzE2NTZaMDMxMTAvBgNV BAMTKEJFQjFGMDNENEU4NDY0OUNGMjI2NzE2QzkzREI4NzVBNjcyN0FFNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpqk0AVrz7VBatKp24h8FOGDeT iitCt7jOpOZO4TOMjeOiPc87BBxIUwIc3v+LGkgqkuFMqEhQXTp0jclJb5HzPHZ9 B1AsrwfYzpPBZgAMxqK7GWiq2u1x5ZLWvOVa7ADEWsDPYgOUIhr4ghiD2AsVijW2 ypj7y1IiboewSTRxo2YUSSipuPdTAAxXkOU8aQTcsK8wz/kxL+pmyC43VBGyZtxm ojeKgcIfhHP1a17VEZPqpmz4YbZdCzcNk5+P+eorOqllK/xloFHGGq/bqYF2tYD4 D8GUR6MdVKF/e+ROg3CmOBWcs+EflO7BocBdx3YEWD1WOxy3PObNC2y4NlLlAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvrHwPU6EZJzyJnFsk9uHWmcnrkEwHwYDVR0j BBgwFoAUFJgUGBkRK4RGwtSjER9TA48F2+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjkwNjZmNWQtZWNjMS00OTI3LTk1YzEtZTFhOGRmOGY5 ODk3LzAvMTQ5ODE0MTgxOTExMkI4NDQ2QzJENEEzMTExRjUzMDM4RjA1REJFOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ZKZ1VHQmtSSzRSR3d0U2pFUjlUQTQ4 RjItay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOTA2NmY1ZC1l Y2MxLTQ5MjctOTVjMS1lMWE4ZGY4Zjk4OTcvMC8xNDk4MTQxODE5MTEyQjg0NDZD MkQ0QTMxMTFGNTMwMzhGMDVEQkU5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUOlhkLCzTAZCMprn44y MZ0HPsw/i45PMz0MUExRKwWjYpRB8UwB+k/pejUWLqLT+qU4vUNYPwmTFPKyHn8V L2THSahm+jhqYKnZhnshXXEfnEtMuQbgP3fKsCJ/hFlo46/TdhD7GjN+1bNgNgDt q7mNFOmVhLhpLO5QpLeHmyBZnCiHbnfe434qvAIMjI5Z/vITzojo/E2TkUc2/x3+ Od8gn9AchCUFQwpbSlNNQkcuDk2QT+Y2VosZD1Rf/YW0kz25LQS/OhCjHUbMERYU Y6Gb1sdVT5PMoWMmITXJV3bJ8JmD9kobRKr0Eky+xzh7oqPQ/Cp924rFeZpmFHn7 nA== -----END CERTIFICATE-----Generated at Sun Jun 15 09:03:20 2025 by rpki-client