$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: AvgU7JN0aYz849Tif+cMVigsUY93irWhIjBBwx9fBiE= Subject key identifier: FA:65:3C:77:B1:32:A9:2E:97:EC:B0:08:29:E2:2A:60:96:E9:E3:B4 Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 28CD84F56C053120F79A9D6958280FD02D843061 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 01A3 Signing time: Mon 16 Jun 2025 06:34:06 +0000 Manifest this update: Mon 16 Jun 2025 06:29:06 +0000 Manifest next update: Tue 17 Jun 2025 09:35:06 +0000 Files and hashes: 1: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: 0Augomo0JPTrdfBB/3ITj/ZgfSBftNdAdE/vOPCbcS0=) 2: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: wCa6zq5c8GsKeLnlVrOSqh6WfXWx9QQlC+3eJRaUop0=) 3: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: tezZfjQIJSEoaPdienMyz3PTigWBtWV225R5RVQQguw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 05:07:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:cd:84:f5:6c:05:31:20:f7:9a:9d:69:58:28:0f:d0:2d:84:30:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Jun 16 06:29:06 2025 GMT Not After : Jun 17 09:35:06 2025 GMT Subject: CN=FA653C77B132A92E97ECB00829E22A6096E9E3B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:10:55:95:ae:a9:6e:cb:48:75:d6:79:43:e3: a4:09:f4:61:72:20:9d:f9:d0:ee:0c:98:52:0a:c2: 10:8b:2a:e6:ea:4e:5b:c7:66:5f:38:50:4c:59:78: 36:43:7b:ec:2a:99:86:81:69:d6:b7:6b:84:ca:44: d1:f5:60:d6:cf:19:73:e8:64:56:27:09:95:4d:a5: 0c:f8:bf:05:6f:c8:e0:03:cf:a5:b8:f9:90:b8:9b: 11:8d:5b:f4:95:b1:bc:b0:79:9f:61:6c:5e:ba:17: 3a:b2:d0:3a:65:5a:c3:03:55:5a:e6:7d:4c:89:c9: 8c:46:d8:3f:c8:2d:fa:53:30:ec:eb:1c:23:39:ef: 46:2f:e2:db:09:28:ac:f9:cc:d2:3b:3c:24:87:09: 7d:49:3a:5b:58:54:ab:66:b9:28:ca:b4:c1:ea:09: 79:05:db:1c:d2:3e:8d:b8:aa:a0:05:84:71:de:4a: 50:2e:f7:a9:2a:b8:09:df:14:8b:51:d6:90:29:4c: 71:59:07:cd:be:03:64:18:a8:e2:a4:36:b4:2b:b2: 94:22:0d:b2:3b:29:d9:ca:ae:fa:82:52:17:85:3c: 6e:1d:54:9c:78:a2:17:3e:67:48:75:88:1f:44:4a: 38:1c:ac:c7:01:ea:df:6c:f9:d0:d9:bc:9c:ed:3b: fa:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:65:3C:77:B1:32:A9:2E:97:EC:B0:08:29:E2:2A:60:96:E9:E3:B4 X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a4:21:29:c7:20:f4:e6:eb:60:fc:7c:5e:5b:6b:dd:30:0a: d4:87:d0:f8:58:75:66:94:68:82:af:3b:30:22:56:ea:25:f7: 3c:a4:2f:4b:de:04:ed:9d:5b:48:97:0f:73:70:05:81:c3:4f: 5b:d6:de:83:a9:39:fb:29:c3:46:9b:79:54:af:68:57:f6:60: 49:e6:03:21:46:cd:47:2c:c9:5f:ff:1d:bb:a8:07:19:72:ef: 28:ca:08:07:51:68:98:e7:6c:e6:77:50:81:80:fe:fa:27:a0: 27:42:c7:42:06:e2:aa:94:b3:a2:a9:79:d3:cc:9a:4f:07:d9: eb:ee:54:79:f2:b6:31:90:6c:a5:a1:9d:5e:94:41:8f:9d:02: d3:9f:af:bc:fb:12:13:4d:4c:49:4d:b3:e4:d9:a8:f1:d0:b1: 37:a1:07:ec:10:d0:cd:c4:ca:e2:6a:e1:80:d6:d9:6f:b3:0c: ea:66:ef:5c:91:f6:b0:1c:ce:70:c3:38:31:d4:2e:a6:0f:b7: 63:07:53:70:b9:ff:18:ae:8c:6a:30:ba:52:13:df:cf:23:10: ea:91:7c:1c:e9:9e:13:90:b9:89:9c:a4:a8:c8:2d:75:78:6d: 47:23:54:44:49:be:4e:50:0e:ed:67:7c:66:eb:48:87:67:29: 00:2b:0c:b0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKM2E9WwFMSD3mp1pWCgP0C2EMGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNTA2MTYwNjI5MDZaFw0yNTA2MTcwOTM1MDZaMDMxMTAvBgNV BAMTKEZBNjUzQzc3QjEzMkE5MkU5N0VDQjAwODI5RTIyQTYwOTZFOUUzQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnEFWVrqluy0h11nlD46QJ9GFy IJ350O4MmFIKwhCLKubqTlvHZl84UExZeDZDe+wqmYaBada3a4TKRNH1YNbPGXPo ZFYnCZVNpQz4vwVvyOADz6W4+ZC4mxGNW/SVsbyweZ9hbF66Fzqy0DplWsMDVVrm fUyJyYxG2D/ILfpTMOzrHCM570Yv4tsJKKz5zNI7PCSHCX1JOltYVKtmuSjKtMHq CXkF2xzSPo24qqAFhHHeSlAu96kquAnfFItR1pApTHFZB82+A2QYqOKkNrQrspQi DbI7KdnKrvqCUheFPG4dVJx4ohc+Z0h1iB9ESjgcrMcB6t9s+dDZvJztO/ppAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU+mU8d7EyqS6X7LAIKeIqYJbp47QwHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/pCEp xyD05utg/HxeW2vdMArUh9D4WHVmlGiCrzswIlbqJfc8pC9L3gTtnVtIlw9zcAWB w09b1t6DqTn7KcNGm3lUr2hX9mBJ5gMhRs1HLMlf/x27qAcZcu8oyggHUWiY52zm d1CBgP76J6AnQsdCBuKqlLOiqXnTzJpPB9nr7lR58rYxkGyloZ1elEGPnQLTn6+8 +xITTUxJTbPk2ajx0LE3oQfsENDNxMriauGA1tlvswzqZu9ckfawHM5wwzgx1C6m D7djB1Nwuf8YroxqMLpSE9/PIxDqkXwc6Z4TkLmJnKSoyC11eG1HI1RESb5OUA7t Z3xm60iHZykAKwyw -----END CERTIFICATE-----Generated at Mon Jun 16 12:20:26 2025 by rpki-client