$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft File: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft (raw, json) Hash identifier: YjlH/KL/J3Ta+DR2aktR7modQi5EgSwB3QwrV4OxWHg= Subject key identifier: 55:ED:A1:A0:8E:0B:03:26:6D:C9:7E:F1:E2:69:9C:52:9C:89:1F:18 Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Certificate serial: 6357BBD0A026F777F5971C5ED5720D7B031468AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft Manifest number: 03D4 Signing time: Sat 26 Apr 2025 03:04:57 +0000 Manifest this update: Sat 26 Apr 2025 02:59:57 +0000 Manifest next update: Sun 27 Apr 2025 03:24:57 +0000 Files and hashes: 1: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl (hash: 461O2xCqBOvHwx0XLbuO5UJP6Zaeu5dugvet9eR+XFo=) 2: 3138382e3136342e3135352e302f32342d3234203d3e203631333137.roa (hash: Zqg95JNQ7Tjc8CMis4303+CnonKl6jZjeNtUp3/4jl4=) 3: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (hash: sY/xAuh6Mg68YWt7c8TloEoU7TIBsTXsCx6tRGi7xp4=) 4: 3138382e3136342e3135342e302f32342d3234203d3e203136323736.roa (hash: CSYWsES4pD37cXQNnf4UjazVxkggSvafg/VoS+NTVDg=) 5: 3138382e3136342e3135372e302f32342d3234203d3e203631333137.roa (hash: 1OXX2SrcK/gmhp0BoSKo0TlJRIbDJQHbnTI5VzAFuV4=) 6: 3138382e3136342e3135382e302f32332d3233203d3e20323039323432.roa (hash: a8q0y7nvMPxAQTNauYzxQwFEB0FcxQ6k8ECPLkihDTg=) 7: 3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa (hash: pkJz5L9iLZRF+OIvLDh3t2xUInq31L6An4us+3j1eD0=) 8: 3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa (hash: D04ae2SRdtKJx7avocdxkHAFAepjsts9k/904EQDNhs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 03:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:57:bb:d0:a0:26:f7:77:f5:97:1c:5e:d5:72:0d:7b:03:14:68:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Validity Not Before: Apr 26 02:59:57 2025 GMT Not After : Apr 27 03:24:57 2025 GMT Subject: CN=55EDA1A08E0B03266DC97EF1E2699C529C891F18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e6:d5:aa:2c:48:e2:35:ff:2d:a3:ef:9e:49: bb:a3:19:59:2b:89:39:4a:8c:a5:b4:f5:56:1b:5c: a1:bb:0a:76:09:a8:cd:e7:23:2c:8c:13:34:1c:11: 4a:1b:87:d0:fd:1d:f7:3b:65:4a:55:a8:7e:bf:c7: 98:fe:58:27:fc:94:d1:51:22:3f:a8:c3:27:f0:06: b0:06:04:9d:90:ee:61:e4:a4:f4:12:ad:fe:f7:01: 3e:57:3c:ba:78:a1:a7:d5:bd:69:fb:d4:f1:1d:2d: ff:8c:b5:28:48:84:76:76:e5:b0:16:0e:7f:91:f1: 4d:f5:60:25:d3:80:3a:63:2b:f0:d8:47:86:bb:11: 14:76:22:2a:e4:5f:78:60:be:55:d0:25:7d:c7:7a: c5:e2:04:80:c6:11:70:b0:86:4f:b4:7b:55:2a:68: d3:31:a3:76:8e:38:9d:4a:fd:17:55:15:b3:38:3d: a5:29:31:01:9b:50:6a:5a:2b:92:69:5d:d5:d6:8b: a1:2c:0c:67:a5:79:5a:22:2d:ca:13:e0:b1:dc:e9: 99:04:8d:77:df:5d:f2:20:d4:a7:5b:fc:64:4c:15: c4:49:72:04:05:6a:14:ce:57:a9:46:e6:85:e2:7e: a7:71:82:60:41:cd:7e:09:3c:a0:d6:87:6d:71:5c: 31:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:ED:A1:A0:8E:0B:03:26:6D:C9:7E:F1:E2:69:9C:52:9C:89:1F:18 X509v3 Authority Key Identifier: keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:e1:2a:76:48:50:0a:02:a8:2b:91:6c:c9:92:32:06:21:42: 5d:22:1f:31:1d:12:fd:35:3d:11:6f:c8:1a:80:a5:64:cc:51: 96:6c:26:2b:e4:c4:63:11:e4:9b:1f:17:01:44:ac:32:c3:93: 94:0b:a4:e7:d6:98:e2:df:36:c3:a4:a5:97:e2:35:7a:bd:dc: 27:80:65:3d:11:02:8d:58:e5:c1:2a:6c:fe:9c:7b:02:e0:d7: aa:b4:d4:a5:aa:5f:3e:ef:41:18:e7:e6:db:de:6f:5d:a4:13: 00:72:c1:6c:df:ab:c0:0e:53:3d:52:9e:f5:82:00:f8:8a:a2: 51:fb:dc:ca:ff:c1:1b:3e:f2:f4:f5:1a:48:6a:fd:52:09:46: 41:5c:2c:44:02:aa:60:58:10:e5:60:a4:ef:2b:90:90:aa:65: 09:ca:7f:ac:38:66:79:2a:71:d9:f3:08:79:14:bd:cf:89:ef: d2:5f:4e:0d:5b:16:2a:66:53:f9:ed:42:af:56:df:2e:20:3b: d9:3f:29:28:65:36:35:c6:76:96:6c:d2:d4:c0:dd:88:e1:d2: 98:3b:c1:6f:fb:24:7b:40:1d:fa:19:c1:f6:31:40:0a:bd:38: 46:bb:dd:05:a3:7b:19:e9:3f:75:ec:05:b2:35:43:b3:00:f6: d0:20:75:6c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUY1e70KAm93f1lxxe1XINewMUaKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz MGY3YzRjYTAeFw0yNTA0MjYwMjU5NTdaFw0yNTA0MjcwMzI0NTdaMDMxMTAvBgNV BAMTKDU1RURBMUEwOEUwQjAzMjY2REM5N0VGMUUyNjk5QzUyOUM4OTFGMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj5tWqLEjiNf8to++eSbujGVkr iTlKjKW09VYbXKG7CnYJqM3nIyyMEzQcEUobh9D9Hfc7ZUpVqH6/x5j+WCf8lNFR Ij+owyfwBrAGBJ2Q7mHkpPQSrf73AT5XPLp4oafVvWn71PEdLf+MtShIhHZ25bAW Dn+R8U31YCXTgDpjK/DYR4a7ERR2IirkX3hgvlXQJX3HesXiBIDGEXCwhk+0e1Uq aNMxo3aOOJ1K/RdVFbM4PaUpMQGbUGpaK5JpXdXWi6EsDGeleVoiLcoT4LHc6ZkE jXffXfIg1Kdb/GRMFcRJcgQFahTOV6lG5oXifqdxgmBBzX4JPKDWh21xXDEXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUVe2hoI4LAyZtyX7x4mmcUpyJHxgwHwYDVR0j BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE M3hNby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzAzMDg5MC1m NmUwLTQxMGMtYmM5OS1hZjA5MjFkMWMzYTQvMC84QjlCQTlBRERFOTYzNTc3N0JG NTg2RkQ0OTNFMTRDRDMwRjdDNENBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaOEqdkhQCgKoK5FsyZIy BiFCXSIfMR0S/TU9EW/IGoClZMxRlmwmK+TEYxHkmx8XAUSsMsOTlAuk59aY4t82 w6Sll+I1er3cJ4BlPRECjVjlwSps/px7AuDXqrTUpapfPu9BGOfm295vXaQTAHLB bN+rwA5TPVKe9YIA+IqiUfvcyv/BGz7y9PUaSGr9UglGQVwsRAKqYFgQ5WCk7yuQ kKplCcp/rDhmeSpx2fMIeRS9z4nv0l9ODVsWKmZT+e1Cr1bfLiA72T8pKGU2NcZ2 lmzS1MDdiOHSmDvBb/ske0Ad+hnB9jFACr04RrvdBaN7Gek/dewFsjVDswD20CB1 bA== -----END CERTIFICATE-----Generated at Sat Apr 26 17:46:42 2025 by rpki-client