$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft File: B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json) Hash identifier: qMBWJm9xSbb8X9EZk2d6PahEUzy1g91rYC8sVYWOork= Subject key identifier: FC:C2:45:C4:60:09:71:17:FE:0E:F6:2B:CB:38:4F:20:B6:52:AD:EC Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac Certificate serial: 47A4CFD48F7FF79A52EA85D759CAD6247A5FA8B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft Manifest number: 01D4 Signing time: Sat 26 Apr 2025 11:34:59 +0000 Manifest this update: Sat 26 Apr 2025 11:29:59 +0000 Manifest next update: Sun 27 Apr 2025 14:17:59 +0000 Files and hashes: 1: 326130623a366338313a3a2f33322d3332203d3e20323135383338.roa (hash: 5mcUsW8Gu/iSzerp0Wwk+smZAmRaAGiznqu01bMcUDg=) 2: 3138352e3138362e32372e302f32342d3234203d3e203631333137.roa (hash: jD3TEx8Q8JwdsmzwyDZ9zaukL1sMlGUp0uzFac23xJs=) 3: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: zbKaWYwmjPPC167P5YL6I94JcPZEWN0HKnmqpfcR9u4=) 4: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: nisdZKTaLr37xfHOlshd0fI8lRchtm2inbcIZYLuezo=) 5: 3138352e3138362e32342e302f32342d3234203d3e20323135383338.roa (hash: nTMWfEhxo36lxHJvP1+YWdrKCSryelFli2OhT4xBMNI=) 6: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: FBdBmLEGxXhvarnPJcmElFlCgeLSIQ6GXw75K+usirs=) 7: 326130623a366338303a3a2f33322d3332203d3e20323135383338.roa (hash: kEt2cGR+/Q700kchrRZoRuY0FKyYF1rSAaCa413pKew=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 14:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:a4:cf:d4:8f:7f:f7:9a:52:ea:85:d7:59:ca:d6:24:7a:5f:a8:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac Validity Not Before: Apr 26 11:29:59 2025 GMT Not After : Apr 27 14:17:59 2025 GMT Subject: CN=FCC245C460097117FE0EF62BCB384F20B652ADEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1c:d3:6c:0c:e7:8d:57:a4:09:ea:cc:6c:1c: 81:e4:2a:72:f2:8c:a4:b8:fc:2b:2e:2f:c9:69:08: 2d:db:5c:28:f2:08:e8:b0:12:72:d5:bc:c6:8c:79: 03:2d:a5:73:46:09:46:7b:b9:a0:10:0a:5c:3e:93: 00:21:b2:7c:ff:12:5c:bd:3d:3e:a2:4b:40:c1:f7: 9d:49:b4:18:fd:a3:fb:a0:7a:cf:fe:59:a0:d3:b2: 38:5a:9c:40:97:a6:90:61:5f:4b:64:6c:01:d8:01: 13:cd:df:65:cb:ac:00:cd:b9:0d:95:6f:37:b0:c4: 58:73:df:6c:16:a1:06:33:e0:58:b3:73:c9:86:04: 40:eb:0f:c8:d5:bf:ff:11:0e:4a:50:bb:af:37:b5: 54:91:75:81:a6:22:ea:37:b4:e3:a2:cb:cf:7a:99: 54:7f:52:cf:f9:d4:f3:0a:07:36:b7:dd:24:cd:09: a7:a3:a1:59:78:c1:7a:46:34:bb:dc:1b:77:ac:d0: f2:74:57:2d:62:13:67:aa:0d:a1:b0:70:30:71:74: 6f:df:58:b0:95:7e:48:84:75:2e:c2:7f:ab:b6:cd: 2c:25:e3:23:38:ad:62:ec:44:c9:06:b7:0f:a4:07: 43:28:da:43:60:85:53:ce:9c:8f:c8:e5:ed:01:c5: b1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C2:45:C4:60:09:71:17:FE:0E:F6:2B:CB:38:4F:20:B6:52:AD:EC X509v3 Authority Key Identifier: keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:23:6b:d2:5c:f9:9e:56:52:7a:fe:74:ed:63:15:f0:5c:94: 69:56:ae:5a:70:4c:98:d2:ca:97:fb:b9:ea:38:40:3b:2a:6f: 49:a8:9c:03:46:a3:f3:81:6f:0f:d4:50:5d:6c:c7:30:7f:75: 88:e2:da:41:c7:df:64:bd:51:1a:d0:88:fb:bb:4e:37:88:63: e6:d9:57:c1:0e:8f:e2:d3:5e:7b:1e:f5:73:26:0c:4c:e2:ee: cf:bf:d6:93:54:a5:ff:40:e9:8a:f3:4b:87:5e:ab:c9:fd:4a: bf:27:d5:b4:5a:15:7a:33:80:ec:72:29:28:a5:79:5e:9e:4a: a7:b8:10:7e:9e:53:ad:d3:9e:a0:cd:ae:0e:fe:fa:79:24:52: 16:1b:e3:7c:e5:71:c8:7d:ef:1d:10:4b:55:dc:4b:5b:e2:a6: 04:d0:65:aa:98:b5:7f:d3:8c:93:10:3b:63:db:01:d1:15:ba: d3:ad:14:9f:10:eb:62:93:ab:c4:49:10:eb:fe:7b:0d:b1:e4: 61:e1:50:3c:3e:99:2b:95:22:45:fc:7b:6d:97:f8:a0:bd:67: 9c:a4:a4:0d:00:26:bd:bc:61:05:1c:24:fc:98:e9:e3:42:54: f4:58:b9:d8:5d:d4:bd:86:86:29:ec:60:50:e6:4c:32:f6:7f: 8f:d5:77:bb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUR6TP1I9/95pS6oXXWcrWJHpfqLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjNkMDI4MGY1MDA2OTVhNDMyMDQyNTFjOTgzMDQ1NGNh OGEyZTdhYzAeFw0yNTA0MjYxMTI5NTlaFw0yNTA0MjcxNDE3NTlaMDMxMTAvBgNV BAMTKEZDQzI0NUM0NjAwOTcxMTdGRTBFRjYyQkNCMzg0RjIwQjY1MkFERUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0HNNsDOeNV6QJ6sxsHIHkKnLy jKS4/CsuL8lpCC3bXCjyCOiwEnLVvMaMeQMtpXNGCUZ7uaAQClw+kwAhsnz/Ely9 PT6iS0DB951JtBj9o/uges/+WaDTsjhanECXppBhX0tkbAHYARPN32XLrADNuQ2V bzewxFhz32wWoQYz4Fizc8mGBEDrD8jVv/8RDkpQu683tVSRdYGmIuo3tOOiy896 mVR/Us/51PMKBza33STNCaejoVl4wXpGNLvcG3es0PJ0Vy1iE2eqDaGwcDBxdG/f WLCVfkiEdS7Cf6u2zSwl4yM4rWLsRMkGtw+kB0Mo2kNghVPOnI/I5e0BxbE5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/MJFxGAJcRf+DvYryzhPILZSrewwHwYDVR0j BBgwFoAUs9AoD1AGlaQyBCUcmDBFTKii56wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdhZTI1ZjMtNzA2Yi00N2VkLWJiNzQtNDY2ODRhZTBl ZjJiLzAvQjNEMDI4MEY1MDA2OTVBNDMyMDQyNTFDOTgzMDQ1NENBOEEyRTdBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M5QW9EMUFHbGFReUJDVWNtREJGVEtp aTU2dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2FlMjVmMy03 MDZiLTQ3ZWQtYmI3NC00NjY4NGFlMGVmMmIvMC9CM0QwMjgwRjUwMDY5NUE0MzIw NDI1MUM5ODMwNDU0Q0E4QTJFN0FDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASNr0lz5nlZSev507WMV 8FyUaVauWnBMmNLKl/u56jhAOypvSaicA0aj84FvD9RQXWzHMH91iOLaQcffZL1R GtCI+7tON4hj5tlXwQ6P4tNeex71cyYMTOLuz7/Wk1Sl/0DpivNLh16ryf1KvyfV tFoVejOA7HIpKKV5Xp5Kp7gQfp5TrdOeoM2uDv76eSRSFhvjfOVxyH3vHRBLVdxL W+KmBNBlqpi1f9OMkxA7Y9sB0RW6060UnxDrYpOrxEkQ6/57DbHkYeFQPD6ZK5Ui Rfx7bZf4oL1nnKSkDQAmvbxhBRwk/Jjp40JU9Fi52F3UvYaGKexgUOZMMvZ/j9V3 uw== -----END CERTIFICATE-----Generated at Sat Apr 26 23:07:42 2025 by rpki-client