$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft File: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft (raw, json) Hash identifier: O6NgUvVGMTzI1vNpsq2i90UjLzIyvZJZ9UhPDsrxShE= Subject key identifier: 47:76:77:10:84:20:38:46:67:0C:53:13:8B:0D:94:50:E7:E4:3C:04 Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 0BE4B52BC8CFB95AEE82725D8384A42F304C23A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft Manifest number: 0102 Signing time: Sat 14 Jun 2025 05:32:51 +0000 Manifest this update: Sat 14 Jun 2025 05:27:51 +0000 Manifest next update: Sun 15 Jun 2025 09:29:51 +0000 Files and hashes: 1: 38352e3131372e3233302e302f32342d3234203d3e2035303635.roa (hash: 8/mMTd8OI6hx+rEazKaA5i9flVTt9So8wwSfFF6xpVo=) 2: 3138352e3231332e3235312e302f32342d3234203d3e203632323430.roa (hash: r8RD1SHQl6OybEgdZXTaDzaRDBKJoFWuS6Yc77FVHmo=) 3: 3138352e3231332e3234392e302f32342d3234203d3e20343030393039.roa (hash: 4O3foUV7f18NUYJQaeBYgK+aW1lr+7o+ea8CcQjVzCw=) 4: 3139342e33342e3235332e302f32342d3234203d3e2035303635.roa (hash: tD+eYvXQsGkCcpnz6s7EBRYpOf8Iu4vdb3Qy27wUI6g=) 5: 3139342e33342e3235342e302f32342d3234203d3e20313532363732.roa (hash: hBCTJH2VP/g2W82hp9JFwDkEQwn2f5ZxdgSFMedjM7Q=) 6: 3139342e33342e3235352e302f32342d3234203d3e20383334.roa (hash: sWRad4mWldO9xLik8rL1xnTcoxRiYLKker+8Ja89ZOQ=) 7: 0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl (hash: k8Q1lO9UdIilzU1Ak4+4j+NaqskdDdtJxbDRw6xv3ng=) 8: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (hash: ohyXGo6Fwg3029u2hdROae+jQf4VI2skgvLUXH3jI8w=) 9: 3138352e3231332e3235302e302f32342d3234203d3e20323132323338.roa (hash: ygSJr7gJnzCgddZdASy6lFYbTZobnImgktqUZvda03k=) 10: 38352e3131372e3232382e302f32342d3234203d3e20323135303236.roa (hash: WUrbTcKV2+qO0uflme+Vda37GmhrcRAgBhkN6Ok9SGQ=) 11: 38352e3131372e3232392e302f32342d3234203d3e20323132323338.roa (hash: qWG9h0hKE/+rc67V6b0QtNqJKNBV/dmrN+3owun/5GY=) 12: 3138352e3231332e3234382e302f32342d3234203d3e203239383032.roa (hash: TocpFgr3lw4Jm1vyRTcynQHMSP/aSZA84xcK/bfrENk=) 13: 3139342e33342e3235322e302f32342d3234203d3e20383334.roa (hash: 18437WA8CLeUhHiuOq2Q/0Y+PmLFFu5rmegdjMTh56M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e4:b5:2b:c8:cf:b9:5a:ee:82:72:5d:83:84:a4:2f:30:4c:23:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Jun 14 05:27:51 2025 GMT Not After : Jun 15 09:29:51 2025 GMT Subject: CN=4776771084203846670C53138B0D9450E7E43C04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c7:91:90:b1:81:9c:30:33:d7:ae:40:2f:b6: 97:a1:4c:20:fa:9c:36:4c:21:60:3f:1e:fe:c2:77: 5c:99:7b:4c:35:37:d3:b8:c5:4d:2c:70:a4:1f:cd: c5:95:0e:0a:6c:d0:c9:4f:61:14:59:ce:14:0c:13: 70:cb:ae:bc:78:b1:3a:2f:ea:bf:20:16:80:65:d2: c8:3d:98:ba:7d:e6:4b:22:4c:9e:b0:28:78:f3:cc: ef:e6:85:e8:95:84:72:ee:d6:b9:2f:63:57:ce:aa: 44:02:4d:96:e9:9c:c6:ff:8e:07:34:a5:30:b8:e9: 4b:bf:af:ce:c0:b9:3b:a2:3e:b5:e3:d0:04:25:02: 61:43:ae:cc:0a:11:14:61:63:84:a9:d3:66:f7:2a: c5:d1:71:d2:d3:0b:24:28:75:6a:d2:65:59:62:c7: c7:70:93:7f:ea:bf:0e:b2:eb:ba:bd:fa:58:82:00: 9c:01:df:26:a1:23:39:b1:b0:07:c8:38:77:c5:4d: 28:84:c3:aa:7e:9c:03:03:c5:b0:00:f9:2a:98:f3: dc:08:00:4c:48:16:2f:1c:69:40:50:cd:91:5c:49: d2:ae:bd:e7:5f:ff:ba:ce:a6:21:dd:88:3b:91:63: 1d:3d:95:8f:f8:e3:4c:60:a4:9b:f5:38:6d:5e:4b: 1c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:76:77:10:84:20:38:46:67:0C:53:13:8B:0D:94:50:E7:E4:3C:04 X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:cc:11:cf:4f:ba:88:f3:80:8d:60:a5:ed:fb:6e:01:a0:f4: 8a:e5:a0:61:a5:e9:51:97:e7:49:b7:3f:e2:df:34:5c:7f:fd: 7f:a2:40:4d:0c:56:14:38:15:3a:0d:fd:76:5b:c1:ee:16:cd: 78:ae:87:68:1b:4c:e1:55:01:28:04:9f:cb:c3:58:8d:b3:14: 30:70:9c:c5:f3:50:06:a2:99:74:4f:f1:cd:b4:86:fa:ce:34: e4:58:e0:d2:86:7c:90:f4:31:f5:81:cd:c0:f9:59:65:45:ff: fc:a1:b1:b3:cd:61:74:37:4b:58:fa:09:a6:22:51:0d:e8:fc: 6d:4e:cd:b6:55:10:94:a8:fc:a7:1f:7b:c4:c3:24:f9:fe:f9: 57:75:8b:3c:1d:4d:87:40:ee:a0:e6:ca:e1:06:1f:64:16:69: dd:16:56:98:04:ff:98:3b:4b:48:44:d7:d0:9d:dc:a3:52:98: d6:06:e6:59:a9:16:61:06:5a:b0:16:ca:0e:c9:be:2c:16:be: 99:e5:4c:53:d6:2a:3a:16:87:5a:36:a0:a8:f4:83:9f:f1:b3: 70:70:2c:67:1e:4b:ce:7b:61:a2:8b:a4:2e:39:2f:fd:33:cd: 9b:0d:f7:20:7e:5a:19:b9:9e:4d:57:dc:a6:e5:b7:e7:c9:98: f2:79:3d:7a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUC+S1K8jPuVrugnJdg4SkLzBMI6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNTA2MTQwNTI3NTFaFw0yNTA2MTUwOTI5NTFaMDMxMTAvBgNV BAMTKDQ3NzY3NzEwODQyMDM4NDY2NzBDNTMxMzhCMEQ5NDUwRTdFNDNDMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtx5GQsYGcMDPXrkAvtpehTCD6 nDZMIWA/Hv7Cd1yZe0w1N9O4xU0scKQfzcWVDgps0MlPYRRZzhQME3DLrrx4sTov 6r8gFoBl0sg9mLp95ksiTJ6wKHjzzO/mheiVhHLu1rkvY1fOqkQCTZbpnMb/jgc0 pTC46Uu/r87AuTuiPrXj0AQlAmFDrswKERRhY4Sp02b3KsXRcdLTCyQodWrSZVli x8dwk3/qvw6y67q9+liCAJwB3yahIzmxsAfIOHfFTSiEw6p+nAMDxbAA+SqY89wI AExIFi8caUBQzZFcSdKuvedf/7rOpiHdiDuRYx09lY/440xgpJv1OG1eSxypAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUR3Z3EIQgOEZnDFMTiw2UUOfkPAQwHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTEzZGRhNi03 YWRlLTQ0NWQtOGM2ZS00NDhhNzhlNDhjYTEvMS8wRDdGRkFFMzAwREVGMDg3NkJG ODQ4OTBGQjZFQTE3QkU4NDFBNEQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScwRz0+6iPOAjWCl7ftu AaD0iuWgYaXpUZfnSbc/4t80XH/9f6JATQxWFDgVOg39dlvB7hbNeK6HaBtM4VUB KASfy8NYjbMUMHCcxfNQBqKZdE/xzbSG+s405Fjg0oZ8kPQx9YHNwPlZZUX//KGx s81hdDdLWPoJpiJRDej8bU7NtlUQlKj8px97xMMk+f75V3WLPB1Nh0DuoObK4QYf ZBZp3RZWmAT/mDtLSETX0J3co1KY1gbmWakWYQZasBbKDsm+LBa+meVMU9YqOhaH WjagqPSDn/GzcHAsZx5LznthooukLjkv/TPNmw33IH5aGbmeTVfcpuW358mY8nk9 eg== -----END CERTIFICATE-----Generated at Sat Jun 14 11:35:42 2025 by rpki-client