$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: ojEm2ozj4RR9XbRZI7qe41uOgvxP6nHkbyVdUXluFaI= Subject key identifier: D2:BA:19:AF:4D:22:34:F4:BF:2E:80:A0:2B:EC:C1:D5:9A:96:D0:AF Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 0526C7FE2DFF8C8409BE9ADA6F87F76529C0A1B3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 0163 Signing time: Tue 29 Apr 2025 16:27:26 +0000 Manifest this update: Tue 29 Apr 2025 16:22:26 +0000 Manifest next update: Wed 30 Apr 2025 19:48:26 +0000 Files and hashes: 1: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: mi9b5/357R5hsZGYwJlE267oYi3cgDmYXyRYLht1jNY=) 2: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: tezZfjQIJSEoaPdienMyz3PTigWBtWV225R5RVQQguw=) 3: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: 0Augomo0JPTrdfBB/3ITj/ZgfSBftNdAdE/vOPCbcS0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 10:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:26:c7:fe:2d:ff:8c:84:09:be:9a:da:6f:87:f7:65:29:c0:a1:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Apr 29 16:22:26 2025 GMT Not After : Apr 30 19:48:26 2025 GMT Subject: CN=D2BA19AF4D2234F4BF2E80A02BECC1D59A96D0AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:75:97:4a:04:ee:23:8a:27:8c:bd:cd:e7: 58:64:26:69:27:99:09:82:18:cb:46:db:52:cb:4f: 23:be:d0:6b:57:ca:fe:39:df:79:90:8e:2f:db:3b: f7:2d:e5:0f:2e:e6:2a:ba:03:26:fb:e3:24:47:4e: bc:77:cb:91:f8:26:c9:ad:17:fe:54:7f:03:3b:3b: ce:04:8e:b1:a0:9f:1f:64:21:e8:9f:9e:de:a6:7a: e8:95:c7:83:63:32:06:4d:97:bf:3f:fa:b1:48:50: 0a:0e:2f:f5:1c:e3:b6:53:7b:2c:f1:22:17:1d:52: 08:a1:f3:32:28:be:38:fd:a1:91:cf:61:72:6f:5e: 64:48:eb:17:10:4f:d6:bb:e6:fb:82:86:e3:55:13: de:d4:dc:0e:26:7e:4e:8c:22:34:ec:04:7b:5e:c9: 89:ca:7b:75:cc:8f:d2:b4:1e:9c:7a:fc:7c:3d:aa: 78:bb:f7:3b:37:81:d3:12:f5:cd:1b:08:a0:20:b6: 1c:01:f8:d3:d5:25:7b:17:fd:0f:4e:97:91:d2:1d: 52:c2:36:53:ca:d9:ac:35:79:ec:7f:6b:3f:58:af: 37:c2:22:0d:87:f6:e9:3b:9c:5f:ac:ef:a5:17:b0: 0a:08:ff:c2:5e:41:36:e7:7e:08:3e:d8:2e:4f:fc: 36:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BA:19:AF:4D:22:34:F4:BF:2E:80:A0:2B:EC:C1:D5:9A:96:D0:AF X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:28:44:95:43:95:ff:28:0b:60:b8:65:c5:01:85:b4:d2:69: 5a:de:df:7e:c7:04:f2:29:51:64:6b:35:ae:ea:06:2c:c0:0f: 04:a0:1d:fc:8c:20:d8:01:69:fc:27:6c:97:ac:d1:9e:b0:88: 32:2d:96:55:99:35:80:67:38:6c:99:49:fa:a8:d3:c9:36:29: b7:f6:00:f4:2b:c9:1f:21:ad:2e:0a:5b:ea:8c:c0:63:fb:0a: c2:fa:ee:83:bb:31:ad:31:89:6d:95:04:e0:9c:c6:f8:ad:f8: b6:cc:eb:17:e7:33:d1:6c:43:fb:ba:b5:92:c9:3c:33:05:6c: b2:51:ca:5c:ed:be:eb:3a:69:7c:7f:a1:52:e8:fe:c1:b6:cd: 2b:8c:1d:28:ff:ac:72:75:9c:5f:51:48:07:4e:8f:b7:9d:14: ac:87:e1:98:c1:12:a7:ea:19:1b:17:73:b0:2c:28:33:dc:0e: 2e:3a:e4:fa:ee:6f:24:ae:ba:8b:f5:d9:c5:3f:dd:bb:b3:3a: 12:c9:21:5c:7a:9f:50:4b:d1:fc:4f:96:9c:de:dd:50:46:66: 1c:3f:54:64:e6:03:3e:a9:13:b6:a3:79:29:c6:a5:fb:74:ef: cb:f1:b7:98:25:a4:19:c5:5f:48:14:7f:d2:78:43:0b:51:4a: 9f:a7:0c:dc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBSbH/i3/jIQJvprab4f3ZSnAobMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNTA0MjkxNjIyMjZaFw0yNTA0MzAxOTQ4MjZaMDMxMTAvBgNV BAMTKEQyQkExOUFGNEQyMjM0RjRCRjJFODBBMDJCRUNDMUQ1OUE5NkQwQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCytnWXSgTuI4onjL3N51hkJmkn mQmCGMtG21LLTyO+0GtXyv4533mQji/bO/ct5Q8u5iq6Ayb74yRHTrx3y5H4Jsmt F/5UfwM7O84EjrGgnx9kIeifnt6meuiVx4NjMgZNl78/+rFIUAoOL/Uc47ZTeyzx IhcdUgih8zIovjj9oZHPYXJvXmRI6xcQT9a75vuChuNVE97U3A4mfk6MIjTsBHte yYnKe3XMj9K0Hpx6/Hw9qni79zs3gdMS9c0bCKAgthwB+NPVJXsX/Q9Ol5HSHVLC NlPK2aw1eex/az9YrzfCIg2H9uk7nF+s76UXsAoI/8JeQTbnfgg+2C5P/DbzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU0roZr00iNPS/LoCgK+zB1ZqW0K8wHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA0KESV Q5X/KAtguGXFAYW00mla3t9+xwTyKVFkazWu6gYswA8EoB38jCDYAWn8J2yXrNGe sIgyLZZVmTWAZzhsmUn6qNPJNim39gD0K8kfIa0uClvqjMBj+wrC+u6DuzGtMYlt lQTgnMb4rfi2zOsX5zPRbEP7urWSyTwzBWyyUcpc7b7rOml8f6FS6P7Bts0rjB0o /6xydZxfUUgHTo+3nRSsh+GYwRKn6hkbF3OwLCgz3A4uOuT67m8krrqL9dnFP927 szoSySFcep9QS9H8T5ac3t1QRmYcP1Rk5gM+qRO2o3kpxqX7dO/L8beYJaQZxV9I FH/SeEMLUUqfpwzc -----END CERTIFICATE-----Generated at Wed Apr 30 03:34:56 2025 by rpki-client