$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft File: 5E5179BB1757068D7028510FEEB1177AA7CC8818.mft (raw, json) Hash identifier: LVSfBy8bu1VD9/PrTz2rpXQr2R9HRoQjUfGm6bQ5X8w= Subject key identifier: CE:27:DB:2B:51:19:2C:9D:78:39:CC:C2:F4:EE:73:0E:BD:8B:E9:0A Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18 Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818 Certificate serial: 1779595947D73FF9D8E4AC052E0DE690E3E1434C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft Manifest number: 0471 Signing time: Sat 26 Apr 2025 12:19:59 +0000 Manifest this update: Sat 26 Apr 2025 12:14:59 +0000 Manifest next update: Sun 27 Apr 2025 14:00:59 +0000 Files and hashes: 1: 38332e3135302e3231362e302f32322d3234203d3e203631333137.roa (hash: 57aAYCaE5TgSVJlVlCOXKPFo7D7BRt8yiBp9fnzIrpI=) 2: 3139322e3130392e31312e302f32342d3234203d3e203136323736.roa (hash: qRWEBAMqR9/oXRv8A+nfXFduPkpHZgx8k4TEVcf/LOk=) 3: 3139322e3130392e31302e302f32342d3234203d3e203239383032.roa (hash: zPOJooX1SbIfEdoUfLmfFj+bOWKjqS7oznOqpFqjTp4=) 4: 5E5179BB1757068D7028510FEEB1177AA7CC8818.crl (hash: QzfVPWrEM8yJ/q7Co0u0OHCSqD2bBBagky2vyjgMtnQ=) 5: 38332e3135302e3231372e302f32342d3234203d3e20323132353034.roa (hash: EYMH7CjdMy9JP9JNDcl6zZaDx4KYYmlLE/oQCuakPqQ=) 6: 38332e3135302e3231362e302f32342d3234203d3e203630353538.roa (hash: JKcEyzkTVqyttDFURXSxmaVQ+BAZuAcc4gW4DE+3N8E=) 7: 38332e3135302e3231392e302f32342d3234203d3e203533333430.roa (hash: woOa8XrslJUNd/zhwfkw+8SfH4VdemvQujuqkpyzwss=) 8: 38332e3135302e3231382e302f32342d3234203d3e20313939343135.roa (hash: 36SJwMwQnc5Z6CaXgIV9Q5f7SC9VmcHf8jjJMOMqEFE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:79:59:59:47:d7:3f:f9:d8:e4:ac:05:2e:0d:e6:90:e3:e1:43:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818 Validity Not Before: Apr 26 12:14:59 2025 GMT Not After : Apr 27 14:00:59 2025 GMT Subject: CN=CE27DB2B51192C9D7839CCC2F4EE730EBD8BE90A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:66:3f:21:12:85:dd:9d:86:09:96:8b:50:03: ed:43:73:b0:48:1e:21:0f:30:ff:3c:f3:72:f2:2e: 9d:70:e5:97:b3:0b:95:94:4c:15:db:e0:de:b9:8c: b5:92:fa:94:c4:cc:50:ac:57:c7:2d:e3:d9:c3:d2: b9:3b:3d:f8:a7:17:00:3f:ec:95:f3:c0:a9:3b:08: 09:cc:23:5a:7f:18:42:07:f0:65:3d:32:5e:bb:60: 18:57:fe:21:52:16:a2:25:91:e7:d5:40:3c:d3:5b: ab:2d:df:8a:6a:ee:e7:d9:2f:c6:0c:65:1a:63:fd: 56:a8:04:5d:02:ed:af:ca:15:0c:ae:ff:46:1f:47: bb:b2:30:45:56:de:0a:e9:1a:da:00:65:52:9d:f3: 86:ff:dd:f5:2f:dc:2f:7d:20:65:50:6f:21:50:28: c6:9e:fd:fa:3e:aa:be:12:e6:a5:f8:98:85:49:39: 16:8f:48:7f:2c:15:d1:b1:f7:f9:56:a5:df:ed:8d: 4a:dc:3f:3f:9a:1d:8f:44:5f:bc:ff:b6:be:df:26: 44:71:8b:3c:da:ff:e2:83:00:bb:90:a6:cd:fe:43: 99:b0:6a:9e:73:fd:02:7e:ed:b1:04:8b:cb:60:35: 7a:e8:de:a0:2d:6d:c8:0d:d1:4b:c2:a9:b4:14:90: 6d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:27:DB:2B:51:19:2C:9D:78:39:CC:C2:F4:EE:73:0E:BD:8B:E9:0A X509v3 Authority Key Identifier: keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:4a:cf:0c:83:7d:a2:4a:41:b4:cd:d1:80:4d:b0:14:59:ff: 13:cd:08:b7:a8:0f:68:83:01:a9:71:56:c5:85:4b:ba:8e:ee: 50:7b:0b:a0:db:ff:16:f4:2b:5b:d0:17:6b:5b:cd:9e:79:7f: 34:c0:b6:c2:9b:f1:22:36:f2:4a:a6:de:0e:16:98:da:a7:68: 17:6b:d5:9d:63:7b:85:6e:75:49:af:37:f8:82:71:07:46:7b: e7:88:0f:55:45:05:39:9c:f8:ac:44:b2:3b:c1:b9:b9:75:30: c4:8c:ca:60:dd:26:07:82:3e:97:4a:ca:ec:30:a4:fe:7b:91: c2:f3:56:df:62:f9:93:48:71:b2:3b:49:6a:42:ef:02:5d:1b: b3:ea:05:28:ed:ec:dd:16:79:82:9e:20:6e:11:19:5a:25:fc: e9:a6:df:e8:89:a6:5c:bb:3b:39:4a:01:e9:5c:11:da:1c:c9: ac:4f:03:3f:04:a7:5d:c5:64:59:96:dc:51:04:85:fd:76:ed: a8:dc:a7:a1:b2:d7:f4:00:22:d3:88:05:bb:1a:2a:51:3e:16: 58:d4:5b:bb:32:c8:7a:d4:21:e7:68:3c:fd:21:e3:93:aa:7f: 5d:0b:e2:0d:24:64:41:5e:3c:88:02:90:40:2f:f7:9a:a0:d4: b0:6c:5f:dd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUF3lZWUfXP/nY5KwFLg3mkOPhQ0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWU1MTc5YmIxNzU3MDY4ZDcwMjg1MTBmZWViMTE3N2Fh N2NjODgxODAeFw0yNTA0MjYxMjE0NTlaFw0yNTA0MjcxNDAwNTlaMDMxMTAvBgNV BAMTKENFMjdEQjJCNTExOTJDOUQ3ODM5Q0NDMkY0RUU3MzBFQkQ4QkU5MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZj8hEoXdnYYJlotQA+1Dc7BI HiEPMP8883LyLp1w5ZezC5WUTBXb4N65jLWS+pTEzFCsV8ct49nD0rk7PfinFwA/ 7JXzwKk7CAnMI1p/GEIH8GU9Ml67YBhX/iFSFqIlkefVQDzTW6st34pq7ufZL8YM ZRpj/VaoBF0C7a/KFQyu/0YfR7uyMEVW3grpGtoAZVKd84b/3fUv3C99IGVQbyFQ KMae/fo+qr4S5qX4mIVJORaPSH8sFdGx9/lWpd/tjUrcPz+aHY9EX7z/tr7fJkRx izza/+KDALuQps3+Q5mwap5z/QJ+7bEEi8tgNXro3qAtbcgN0UvCqbQUkG33AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzifbK1EZLJ14OczC9O5zDr2L6QowHwYDVR0j BBgwFoAUXlF5uxdXBo1wKFEP7rEXeqfMiBgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODNlNDc1N2YtZDM3Zi00ZmQ2LWE2OWItZDc0YmRkNmI4 N2RjLzAvNUU1MTc5QkIxNzU3MDY4RDcwMjg1MTBGRUVCMTE3N0FBN0NDODgxOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hsRjV1eGRYQm8xd0tGRVA3ckVYZXFm TWlCZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84M2U0NzU3Zi1k MzdmLTRmZDYtYTY5Yi1kNzRiZGQ2Yjg3ZGMvMC81RTUxNzlCQjE3NTcwNjhENzAy ODUxMEZFRUIxMTc3QUE3Q0M4ODE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuErPDIN9okpBtM3RgE2w FFn/E80It6gPaIMBqXFWxYVLuo7uUHsLoNv/FvQrW9AXa1vNnnl/NMC2wpvxIjby SqbeDhaY2qdoF2vVnWN7hW51Sa83+IJxB0Z754gPVUUFOZz4rESyO8G5uXUwxIzK YN0mB4I+l0rK7DCk/nuRwvNW32L5k0hxsjtJakLvAl0bs+oFKO3s3RZ5gp4gbhEZ WiX86abf6ImmXLs7OUoB6VwR2hzJrE8DPwSnXcVkWZbcUQSF/XbtqNynobLX9AAi 04gFuxoqUT4WWNRbuzLIetQh52g8/SHjk6p/XQviDSRkQV48iAKQQC/3mqDUsGxf 3Q== -----END CERTIFICATE-----Generated at Sun Apr 27 06:00:37 2025 by rpki-client