$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft File: B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json) Hash identifier: 3saF+fsHurF6nj11ItoiiHXUISaOt/G5MvM76+3pCd4= Subject key identifier: 17:D5:BF:0D:60:F1:29:73:D1:42:C4:92:0E:A9:37:7E:79:0D:68:CD Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac Certificate serial: 281BC1E1588983ED4B7A6366469D259A41E164E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft Manifest number: 0214 Signing time: Sat 14 Jun 2025 02:12:50 +0000 Manifest this update: Sat 14 Jun 2025 02:07:50 +0000 Manifest next update: Sun 15 Jun 2025 04:41:50 +0000 Files and hashes: 1: 326130623a366338303a3a2f33322d3332203d3e20323135383338.roa (hash: kEt2cGR+/Q700kchrRZoRuY0FKyYF1rSAaCa413pKew=) 2: 3138352e3138362e32372e302f32342d3234203d3e203631333137.roa (hash: jD3TEx8Q8JwdsmzwyDZ9zaukL1sMlGUp0uzFac23xJs=) 3: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: bdLFeXz9WbazmNL9/jp/nOd6cfXDQSxtSKR+Zzr9hac=) 4: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: zbKaWYwmjPPC167P5YL6I94JcPZEWN0HKnmqpfcR9u4=) 5: 326130623a366338313a3a2f33322d3332203d3e20323135383338.roa (hash: 5mcUsW8Gu/iSzerp0Wwk+smZAmRaAGiznqu01bMcUDg=) 6: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: FBdBmLEGxXhvarnPJcmElFlCgeLSIQ6GXw75K+usirs=) 7: 3138352e3138362e32342e302f32342d3234203d3e20323135383338.roa (hash: nTMWfEhxo36lxHJvP1+YWdrKCSryelFli2OhT4xBMNI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1b:c1:e1:58:89:83:ed:4b:7a:63:66:46:9d:25:9a:41:e1:64:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac Validity Not Before: Jun 14 02:07:50 2025 GMT Not After : Jun 15 04:41:50 2025 GMT Subject: CN=17D5BF0D60F12973D142C4920EA9377E790D68CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fc:4c:eb:53:f2:7a:81:f9:70:32:68:38:c1: ef:55:98:fd:38:ff:56:c8:9d:17:31:f9:83:06:c6: 42:72:2c:bf:67:79:1b:f8:80:10:fb:fc:24:f6:96: 65:08:e4:59:7d:5a:cc:ea:fd:da:45:a9:dc:4d:18: 46:95:3a:74:00:34:e2:32:44:4d:d4:87:c0:0f:4c: 62:1e:8a:11:09:ce:c9:06:fc:cd:e8:81:c9:51:85: bb:43:41:0f:5e:ab:81:1f:b7:4b:8b:3f:4b:9f:8d: a9:c5:63:71:b3:b4:56:d3:23:31:27:97:5c:30:33: b3:1c:f2:c2:88:c4:15:e3:60:ab:e6:93:ef:f0:99: a2:c0:bb:b1:01:c8:d5:7f:de:95:b6:ab:1e:6c:03: 07:12:4f:33:0c:aa:e5:52:12:a4:4f:5d:20:61:48: ac:81:10:50:aa:3d:03:8d:d5:8e:a8:71:f6:28:4b: fd:3d:c0:19:58:6e:81:5d:31:16:fb:16:39:3c:19: 9b:ac:ee:b0:e1:72:af:f0:e1:f2:ad:fc:3a:06:2f: e5:29:00:9d:96:89:2e:af:3a:e9:17:3b:68:e8:6c: 2c:24:f0:4b:53:c5:49:9c:51:78:1b:90:2c:5c:3a: 8c:30:ae:78:6c:ec:b7:b5:c5:b4:8b:d6:81:53:6f: 8f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D5:BF:0D:60:F1:29:73:D1:42:C4:92:0E:A9:37:7E:79:0D:68:CD X509v3 Authority Key Identifier: keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ed:9c:f4:ac:f5:44:7c:83:fe:09:d6:b3:e1:05:79:24:70: 05:9f:0f:ec:98:ae:f5:9a:54:c1:8a:bf:b4:44:34:7d:1a:cf: 7e:fd:88:6f:6a:9b:10:50:66:cc:df:0c:2a:c4:79:77:45:7c: fc:e6:e2:f3:36:55:0c:36:43:7b:6a:56:9f:a0:f1:df:4c:fa: 00:ec:72:77:4a:43:e6:bd:4e:2e:b6:0e:1e:02:4f:b2:30:2b: ae:e9:65:55:6e:c9:1d:4b:98:6f:e6:6e:b7:3e:ea:a8:f2:d7: 84:29:25:79:b2:d8:62:4f:77:13:6b:3a:d7:ec:03:36:fe:67: d8:ea:0d:6f:2b:16:17:d8:05:40:44:b9:6d:69:57:30:bc:96: 8c:1e:73:b0:01:a5:12:4c:91:e4:b7:43:52:74:14:97:bd:f1: c4:8c:3d:1f:26:58:71:69:3a:a0:a7:a7:ce:ee:5c:78:ac:a7: d6:53:03:84:fd:b9:8f:9d:2a:71:4b:22:9c:ab:a7:53:55:ef: ab:c8:6a:32:a3:08:b0:be:59:d7:b9:83:80:e6:41:25:3d:2f: 55:d4:2c:7c:4f:5c:39:58:55:28:ac:8a:c0:9c:ee:90:89:ea: 52:3c:6b:8c:c0:96:bf:80:50:b7:30:25:48:b3:6d:5d:57:80: c8:e2:8a:01 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKBvB4ViJg+1LemNmRp0lmkHhZOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjNkMDI4MGY1MDA2OTVhNDMyMDQyNTFjOTgzMDQ1NGNh OGEyZTdhYzAeFw0yNTA2MTQwMjA3NTBaFw0yNTA2MTUwNDQxNTBaMDMxMTAvBgNV BAMTKDE3RDVCRjBENjBGMTI5NzNEMTQyQzQ5MjBFQTkzNzdFNzkwRDY4Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/EzrU/J6gflwMmg4we9VmP04 /1bInRcx+YMGxkJyLL9neRv4gBD7/CT2lmUI5Fl9Wszq/dpFqdxNGEaVOnQANOIy RE3Uh8APTGIeihEJzskG/M3ogclRhbtDQQ9eq4Eft0uLP0ufjanFY3GztFbTIzEn l1wwM7Mc8sKIxBXjYKvmk+/wmaLAu7EByNV/3pW2qx5sAwcSTzMMquVSEqRPXSBh SKyBEFCqPQON1Y6ocfYoS/09wBlYboFdMRb7Fjk8GZus7rDhcq/w4fKt/DoGL+Up AJ2WiS6vOukXO2jobCwk8EtTxUmcUXgbkCxcOowwrnhs7Le1xbSL1oFTb48dAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUF9W/DWDxKXPRQsSSDqk3fnkNaM0wHwYDVR0j BBgwFoAUs9AoD1AGlaQyBCUcmDBFTKii56wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdhZTI1ZjMtNzA2Yi00N2VkLWJiNzQtNDY2ODRhZTBl ZjJiLzAvQjNEMDI4MEY1MDA2OTVBNDMyMDQyNTFDOTgzMDQ1NENBOEEyRTdBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M5QW9EMUFHbGFReUJDVWNtREJGVEtp aTU2dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2FlMjVmMy03 MDZiLTQ3ZWQtYmI3NC00NjY4NGFlMGVmMmIvMC9CM0QwMjgwRjUwMDY5NUE0MzIw NDI1MUM5ODMwNDU0Q0E4QTJFN0FDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAce2c9Kz1RHyD/gnWs+EF eSRwBZ8P7Jiu9ZpUwYq/tEQ0fRrPfv2Ib2qbEFBmzN8MKsR5d0V8/Obi8zZVDDZD e2pWn6Dx30z6AOxyd0pD5r1OLrYOHgJPsjArrullVW7JHUuYb+Zutz7qqPLXhCkl ebLYYk93E2s61+wDNv5n2OoNbysWF9gFQES5bWlXMLyWjB5zsAGlEkyR5LdDUnQU l73xxIw9HyZYcWk6oKenzu5ceKyn1lMDhP25j50qcUsinKunU1Xvq8hqMqMIsL5Z 17mDgOZBJT0vVdQsfE9cOVhVKKyKwJzukInqUjxrjMCWv4BQtzAlSLNtXVeAyOKK AQ== -----END CERTIFICATE-----Generated at Sat Jun 14 10:33:37 2025 by rpki-client