$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft File: ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft (raw, json) Hash identifier: LBHEKez+R/MnHuXppBwbJvWaBzg2XenoNZkrX40yhYo= Subject key identifier: 32:30:7A:0A:01:80:71:87:FD:EE:3D:9F:C7:F9:95:B8:DB:A8:BD:B8 Authority key identifier: ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29 Certificate issuer: /CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429 Certificate serial: 5360EA2E83596E890D8F8DECDEBBEFD1C7145541 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft Manifest number: B4 Signing time: Mon 16 Jun 2025 14:16:21 +0000 Manifest this update: Mon 16 Jun 2025 14:11:21 +0000 Manifest next update: Tue 17 Jun 2025 16:10:21 +0000 Files and hashes: 1: 326130613a363034343a363430393a3a2f34382d3438203d3e20323134323233.roa (hash: eCEK+yM9jVZwcza/zKNUCq6Q/P7RdirvvA3W3giolog=) 2: ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl (hash: FOwfHCaJWr2iHtsRycjL76+kZoeDQaNy5UB32UFZ4/w=) 3: 326130353a646663333a666130303a3a2f34302d3438203d3e20323134323233.roa (hash: oKPTnGA8ROGdyprRDMYxIzuPZ9mnuxpmS6fG6+oAo+g=) 4: 326130613a363034343a363430383a3a2f34382d3438203d3e20323134323233.roa (hash: qtaVVllap8QfA9Nfp3H+glqc4pf+903yRwgdMDsmuxs=) 5: 326130613a363034343a363431303a3a2f34382d3438203d3e20323134323233.roa (hash: 9lwecFjUgWAR1jqPOIwIBIuw9i2A3sNTOuf6ZF50tpM=) 6: 326130613a363034343a616131303a3a2f34382d3438203d3e20323134323233.roa (hash: KQuKUZL8gd5sT2aK4fAeEoGOF4zcj5xw/DVnFe2Ltsw=) 7: 326130613a363034343a363430313a3a2f34382d3438203d3e20323134323233.roa (hash: 9NYGqo2Ls6hbV6+1P7vXYDKtF8hmmGEM+wvhFByd8+4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 14:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:60:ea:2e:83:59:6e:89:0d:8f:8d:ec:de:bb:ef:d1:c7:14:55:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429 Validity Not Before: Jun 16 14:11:21 2025 GMT Not After : Jun 17 16:10:21 2025 GMT Subject: CN=32307A0A01807187FDEE3D9FC7F995B8DBA8BDB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:43:ee:24:9d:c7:c5:a4:9e:97:1d:2d:4b:00: 4b:fe:67:58:52:c6:04:97:aa:fb:72:ba:22:21:c8: 6f:5b:9b:40:a7:0a:36:7f:e3:0a:4c:8c:72:d7:d4: 7f:f4:0f:05:b5:e5:68:9a:38:b8:d5:ea:16:db:ea: 42:41:20:93:22:80:01:1a:bd:45:99:64:93:aa:85: 19:58:48:dc:95:1f:16:97:62:eb:4f:fd:75:56:67: b1:fe:ab:ca:1d:ab:cf:00:1f:99:6f:79:51:3c:6e: d6:33:ff:76:3b:7d:fd:0c:d4:bb:99:64:ff:46:eb: 2c:e1:ec:51:b4:9a:7f:00:03:87:6c:e5:98:f2:37: 3d:c1:b6:76:9d:e8:96:f5:42:bd:68:0e:61:6a:e0: aa:fa:ff:9d:3c:78:6b:63:1f:c0:49:37:4b:e8:d1: 35:e4:b6:87:dc:f9:88:e8:b4:82:a2:ba:64:11:25: e0:29:39:dd:67:c5:ec:7f:57:18:36:bd:e4:5e:50: 35:63:6b:a1:f1:ee:af:26:7c:f6:f9:38:79:73:22: 89:dc:f0:b0:89:21:d5:16:aa:03:50:70:cb:9d:9a: 69:66:4e:22:da:08:c3:cb:6e:e8:d8:86:37:a5:1b: 22:5a:f2:d8:f4:13:89:3f:77:55:86:6b:b5:44:1f: ec:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:30:7A:0A:01:80:71:87:FD:EE:3D:9F:C7:F9:95:B8:DB:A8:BD:B8 X509v3 Authority Key Identifier: keyid:ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:65:26:a7:5d:ee:23:10:b7:2c:a9:a0:75:ef:1c:c6:01:ff: cc:87:7b:44:02:0d:15:cc:65:70:58:10:77:79:12:5f:39:fd: 14:0d:3b:95:70:c4:18:9c:56:23:fc:05:e8:cc:4c:6a:9d:9a: 76:75:5f:b8:32:f6:c2:22:10:f6:9c:e3:e1:b9:fe:03:71:fe: 5f:72:96:e2:d3:a8:1f:51:c4:1d:b4:1e:1b:78:3f:00:bb:e9: 49:7e:1c:ca:fe:44:76:b7:cb:76:a2:59:ba:b1:6f:cd:84:b1: 02:59:97:c7:79:c0:98:78:dc:20:4e:af:9e:71:9d:c4:01:8e: 15:73:7a:03:7c:91:6e:68:c5:49:09:66:85:07:c2:79:cb:75: f5:1e:b6:7c:08:08:96:57:4a:fe:9b:6f:98:8d:b7:50:99:f1: ff:46:c4:b5:3a:73:ac:23:84:c9:2c:62:3a:e2:f0:1f:dd:41: 79:ef:35:c7:6d:c4:78:1a:95:0b:50:70:df:a7:f5:a1:85:4b: bf:1b:1f:33:cb:4f:d3:22:aa:f2:70:a7:8c:5f:b0:95:7d:4d: 01:1e:9f:40:a6:04:f8:11:3f:ad:12:d6:d3:26:f1:92:aa:10: d2:0c:76:55:ef:15:35:87:fb:2d:ae:1b:88:ed:a7:65:ab:96: 05:ee:98:a8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUU2DqLoNZbokNj43s3rvv0ccUVUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQwQjhBRTAzRDYyNTBENTlFRjhFN0JFNTU2RDk0RUI0 OTQxNTQyOTAeFw0yNTA2MTYxNDExMjFaFw0yNTA2MTcxNjEwMjFaMDMxMTAvBgNV BAMTKDMyMzA3QTBBMDE4MDcxODdGREVFM0Q5RkM3Rjk5NUI4REJBOEJEQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrQ+4kncfFpJ6XHS1LAEv+Z1hS xgSXqvtyuiIhyG9bm0CnCjZ/4wpMjHLX1H/0DwW15WiaOLjV6hbb6kJBIJMigAEa vUWZZJOqhRlYSNyVHxaXYutP/XVWZ7H+q8odq88AH5lveVE8btYz/3Y7ff0M1LuZ ZP9G6yzh7FG0mn8AA4ds5ZjyNz3Btnad6Jb1Qr1oDmFq4Kr6/508eGtjH8BJN0vo 0TXktofc+YjotIKiumQRJeApOd1nxex/Vxg2veReUDVja6Hx7q8mfPb5OHlzIonc 8LCJIdUWqgNQcMudmmlmTiLaCMPLbujYhjelGyJa8tj0E4k/d1WGa7VEH+wXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUMjB6CgGAcYf97j2fx/mVuNuovbgwHwYDVR0j BBgwFoAU7QuK4D1iUNWe+Oe+VW2U60lBVCkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmYwZDRiNGUtOWY3NC00ZGY0LWJmNWUtMDkyOTA5NmRi ZTA0LzMvRUQwQjhBRTAzRDYyNTBENTlFRjhFN0JFNTU2RDk0RUI0OTQxNTQyOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9FRDBCOEFFMDNENjI1MEQ1OUVGOEU3QkU1 NTZEOTRFQjQ5NDE1NDI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJmMGQ0YjRlLTlmNzQtNGRmNC1iZjVlLTA5MjkwOTZkYmUwNC8zL0VEMEI4QUUw M0Q2MjUwRDU5RUY4RTdCRTU1NkQ5NEVCNDk0MTU0MjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAXZSan Xe4jELcsqaB17xzGAf/Mh3tEAg0VzGVwWBB3eRJfOf0UDTuVcMQYnFYj/AXozExq nZp2dV+4MvbCIhD2nOPhuf4Dcf5fcpbi06gfUcQdtB4beD8Au+lJfhzK/kR2t8t2 olm6sW/NhLECWZfHecCYeNwgTq+ecZ3EAY4Vc3oDfJFuaMVJCWaFB8J5y3X1HrZ8 CAiWV0r+m2+YjbdQmfH/RsS1OnOsI4TJLGI64vAf3UF57zXHbcR4GpULUHDfp/Wh hUu/Gx8zy0/TIqrycKeMX7CVfU0BHp9ApgT4ET+tEtbTJvGSqhDSDHZV7xU1h/st rhuI7adlq5YF7pio -----END CERTIFICATE-----Generated at Mon Jun 16 20:59:00 2025 by rpki-client