$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft File: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft (raw, json) Hash identifier: Z1iHC6Y2k6iC1qhPdup4Je0FgtZuZpYRy2HVIZoUmow= Subject key identifier: E5:56:8D:A4:B3:B2:3E:0D:8A:1D:77:E9:26:E8:39:6A:B4:E2:D7:C1 Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Certificate serial: 485B74E43AF8D5C22C3BD3A95D480567D4375592 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft Manifest number: 0418 Signing time: Fri 13 Jun 2025 12:32:48 +0000 Manifest this update: Fri 13 Jun 2025 12:27:48 +0000 Manifest next update: Sat 14 Jun 2025 14:58:48 +0000 Files and hashes: 1: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (hash: sY/xAuh6Mg68YWt7c8TloEoU7TIBsTXsCx6tRGi7xp4=) 2: 3138382e3136342e3135352e302f32342d3234203d3e203631333137.roa (hash: W1I8woHaqJ6kU4xjFwKm1g6uV7UZ51m6Dv8R/7Dp0Oc=) 3: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl (hash: qJxrEx8xoXbd6UBjhnvboEQeVMCwMWdVmmv9NYkauaQ=) 4: 3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa (hash: pkJz5L9iLZRF+OIvLDh3t2xUInq31L6An4us+3j1eD0=) 5: 3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa (hash: PjHq1CK+fSk+5WuONiKJilG5oXTFh0dZnkKMEZVNP8E=) 6: 3138382e3136342e3135342e302f32342d3234203d3e20383334.roa (hash: 7YK9BjVSnfe505W37DxY1ZZyrFLgClau3xqcJepnDzM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 13:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5b:74:e4:3a:f8:d5:c2:2c:3b:d3:a9:5d:48:05:67:d4:37:55:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Validity Not Before: Jun 13 12:27:48 2025 GMT Not After : Jun 14 14:58:48 2025 GMT Subject: CN=E5568DA4B3B23E0D8A1D77E926E8396AB4E2D7C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e7:84:2a:ae:8b:ba:59:60:6f:29:2f:86:59: 1b:ea:a3:64:df:5d:03:1d:ad:e0:43:08:7b:ac:e0: 09:0d:4f:7a:9d:a8:db:d8:e2:fe:e3:eb:6a:51:97: 73:97:6e:69:06:4c:44:c2:c1:a6:30:af:83:08:06: ee:15:ef:f8:9d:21:8d:10:fc:98:80:9f:2e:31:9a: ec:7d:83:7e:d9:2b:6a:4f:7d:37:dc:d3:3c:88:6d: ab:56:03:0e:43:0f:e5:27:07:15:a3:41:3f:55:e0: d7:4c:81:ef:d5:67:09:6d:03:9c:4a:05:5a:01:a8: 26:15:d7:ad:0f:47:8f:e0:bd:ef:60:3f:f8:f2:af: 66:93:c9:d4:86:ef:f9:6d:e8:80:6c:13:14:29:ac: 5b:86:9c:03:b4:89:f2:30:67:f8:5b:1f:ea:62:93: dc:43:a2:33:2f:16:87:be:e9:3d:72:a1:66:a7:80: 7c:ce:10:f1:08:e7:3a:d2:e2:08:f5:78:7a:f0:28: 53:26:9b:4d:5c:61:a6:1f:ea:d2:de:b8:7f:fa:02: 9f:e7:3c:dc:c5:0e:c2:d8:49:54:f3:47:ba:81:a8: e7:1e:8c:57:3e:84:62:8d:8f:a8:09:5e:ad:e4:79: 62:c3:9e:b3:b2:be:4c:2c:18:01:cb:9e:4c:72:d5: 37:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:56:8D:A4:B3:B2:3E:0D:8A:1D:77:E9:26:E8:39:6A:B4:E2:D7:C1 X509v3 Authority Key Identifier: keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:52:8f:70:48:41:37:a3:6f:e7:d0:7a:04:08:88:bf:bc:dd: bb:e4:e7:e1:7e:76:4c:b8:75:52:19:e6:ad:b2:7a:22:4d:1d: be:e2:43:2a:67:13:83:ff:c2:45:d9:2c:41:18:3b:ac:98:b6: 79:99:78:fe:bf:67:9a:4d:1c:99:ff:19:94:28:91:20:63:cb: bb:c8:fd:5f:1b:2e:df:8a:34:78:84:b7:bb:77:5c:98:28:dc: e7:e9:1f:db:34:55:4a:20:16:81:9a:77:11:22:e1:1b:ed:57: cc:c5:1e:f2:af:63:c9:c3:f9:bb:27:c4:d0:79:91:62:6f:f2: 00:60:7a:c3:19:a9:29:7d:90:3d:a3:eb:50:18:dc:dd:60:9e: 4c:86:ec:32:70:e3:c5:dd:ca:c2:f5:e3:d8:c6:cc:20:0a:e7: 40:49:0b:15:7f:ba:cb:f4:e2:1d:8d:93:60:33:a5:0b:f1:0b: dd:d0:8b:d4:5a:ee:36:88:4f:9e:ef:1e:0b:36:7a:03:93:07: cd:5d:52:d0:f6:6c:2e:94:07:41:c2:06:62:4a:a3:9c:f8:02: 11:dc:c5:31:b6:0f:1a:87:90:02:5e:77:f4:9b:1e:e7:93:0c: 46:bf:f0:34:58:33:8c:87:54:7d:3f:18:de:de:1e:01:aa:f5: 80:b0:33:1a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSFt05Dr41cIsO9OpXUgFZ9Q3VZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz MGY3YzRjYTAeFw0yNTA2MTMxMjI3NDhaFw0yNTA2MTQxNDU4NDhaMDMxMTAvBgNV BAMTKEU1NTY4REE0QjNCMjNFMEQ4QTFENzdFOTI2RTgzOTZBQjRFMkQ3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS54Qqrou6WWBvKS+GWRvqo2Tf XQMdreBDCHus4AkNT3qdqNvY4v7j62pRl3OXbmkGTETCwaYwr4MIBu4V7/idIY0Q /JiAny4xmux9g37ZK2pPfTfc0zyIbatWAw5DD+UnBxWjQT9V4NdMge/VZwltA5xK BVoBqCYV160PR4/gve9gP/jyr2aTydSG7/lt6IBsExQprFuGnAO0ifIwZ/hbH+pi k9xDojMvFoe+6T1yoWangHzOEPEI5zrS4gj1eHrwKFMmm01cYaYf6tLeuH/6Ap/n PNzFDsLYSVTzR7qBqOcejFc+hGKNj6gJXq3keWLDnrOyvkwsGAHLnkxy1Te5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU5VaNpLOyPg2KHXfpJug5arTi18EwHwYDVR0j BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE M3hNby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzAzMDg5MC1m NmUwLTQxMGMtYmM5OS1hZjA5MjFkMWMzYTQvMC84QjlCQTlBRERFOTYzNTc3N0JG NTg2RkQ0OTNFMTRDRDMwRjdDNENBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGFKPcEhBN6Nv59B6BAiI v7zdu+Tn4X52TLh1UhnmrbJ6Ik0dvuJDKmcTg//CRdksQRg7rJi2eZl4/r9nmk0c mf8ZlCiRIGPLu8j9Xxsu34o0eIS3u3dcmCjc5+kf2zRVSiAWgZp3ESLhG+1XzMUe 8q9jycP5uyfE0HmRYm/yAGB6wxmpKX2QPaPrUBjc3WCeTIbsMnDjxd3KwvXj2MbM IArnQEkLFX+6y/TiHY2TYDOlC/EL3dCL1FruNohPnu8eCzZ6A5MHzV1S0PZsLpQH QcIGYkqjnPgCEdzFMbYPGoeQAl539Jse55MMRr/wNFgzjIdUfT8Y3t4eAar1gLAz Gg== -----END CERTIFICATE-----Generated at Fri Jun 13 19:20:08 2025 by rpki-client