$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: KJiJntkPFxtHy3W4GVodNVaohVXRo7AidOvMoWoKJ70= Subject key identifier: AE:D0:0A:19:FD:04:EA:87:4C:D3:49:8C:74:88:8A:12:66:9E:69:F1 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 275E747413CF618B00ECC85B847811589C6B38DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 031B Signing time: Fri 13 Jun 2025 18:11:25 +0000 Manifest this update: Fri 13 Jun 2025 18:06:25 +0000 Manifest next update: Sat 14 Jun 2025 20:05:25 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: BTfImX353JFUgcIZ2jDRlZdLmp+KqSbtrCi6ArFxd6k=) 2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: sro4F5F4GA4I0qef+MAzyvfCLKO2mcmUTK15ioK0Bxo=) 3: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: xrYxMPWlm0NFN/UuQmB97S5T+AeBbukKizXkLUfGrf8=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: tM6AOBSdq8t/+b2jwQliXrToX+/NgR89RNEhgmdHZII=) 5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: ytuECs7j4zGJqJdJa4rGkrEPCrlfuZ9RaEY2T4xYUeA=) 6: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: OgJ5IHBdzo8hNNE/hueSPIOCulRspm4s5gp10NbE/v8=) 7: 3130392e3130372e35362e302f32312d3231203d3e20323134313433.roa (hash: 2AGDyckY2TAh6iYdYsLBU7KobWGBCZfgtMtkjHcm/eI=) 8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 9: 3130392e3130372e34382e302f32312d3231203d3e20333935373933.roa (hash: XCETZiEqNXWyU+2FC6cC/THHiE6ZjWuxqHTHhRNPDWY=) 10: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: Dcvv1Ul0JGTxvGw2Ps2/e001gxa3ZWx5ttvSXeBWQh0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 20:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:5e:74:74:13:cf:61:8b:00:ec:c8:5b:84:78:11:58:9c:6b:38:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 13 18:06:25 2025 GMT Not After : Jun 14 20:05:25 2025 GMT Subject: CN=AED00A19FD04EA874CD3498C74888A12669E69F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c4:e8:33:15:0c:64:f9:28:a5:d1:52:6a:84: 6a:86:13:88:51:1f:c7:16:4d:e2:46:bb:33:89:de: 19:1b:06:39:71:e0:ce:90:b4:f9:93:dd:b9:e4:0b: 26:16:f7:39:c2:8c:ce:fe:1c:83:2d:a2:99:ed:4b: 7b:6f:af:3a:c7:5c:71:c8:2a:25:16:57:68:fa:00: 26:03:3a:bf:16:80:22:89:d5:6d:4f:88:a1:ce:ce: 5d:4c:c6:07:fb:47:8a:b8:40:96:02:b2:51:7d:7d: 1e:09:3b:9b:7e:a5:b1:32:c7:f4:c4:21:e4:51:7f: fb:74:fa:4c:a5:42:a5:5b:7f:b0:f6:0a:12:ec:c5: a7:f6:2c:70:6c:22:34:66:51:46:e8:b7:bd:8f:f8: 10:50:a2:51:63:81:f9:a3:ca:1b:2c:a6:2c:9c:51: ca:c2:72:6b:32:19:f1:d0:17:11:8c:50:38:2a:59: 51:b3:a3:30:8c:d4:86:21:43:10:65:dc:90:0f:ba: d1:58:f0:b2:56:2d:a5:0e:9f:01:8a:51:13:9c:6f: fa:28:4e:7d:f0:69:ee:d2:fa:fd:8d:c3:60:50:f7: a3:dd:70:88:32:7a:a6:f0:bb:69:cd:a7:ee:45:e1: 57:b2:5f:6e:52:60:8a:01:0e:55:db:b1:fc:a8:46: b6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D0:0A:19:FD:04:EA:87:4C:D3:49:8C:74:88:8A:12:66:9E:69:F1 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:b8:f9:07:fe:b5:4c:70:79:fa:ce:1b:8a:ab:36:4b:07:36: f7:d9:a5:39:a4:ea:5e:3d:9c:da:4e:75:95:5f:18:c1:86:a5: ca:4e:a6:60:78:78:37:9a:1a:92:f9:43:6b:61:2c:4b:7a:dd: 83:32:b4:d9:31:62:3e:a7:5a:c3:64:01:1c:95:ac:84:2f:6c: 45:ce:36:43:7d:c7:fb:d2:50:05:39:dc:28:c6:92:5e:fc:ee: 12:76:fe:e0:ea:80:34:49:8a:cb:ac:0d:73:77:44:b1:fd:04: b7:f5:4a:2f:30:9e:e8:f7:f3:a6:8e:5e:96:80:8f:71:c9:89: a7:6c:9b:26:c3:2a:3b:ab:8e:00:9d:eb:f3:4b:c8:98:90:96: 45:2a:4f:05:43:09:62:79:04:3a:63:a5:6c:8f:3b:73:87:fd: 89:7e:39:3e:88:81:02:55:ee:29:34:48:5a:3e:4f:62:f3:da: fa:45:9a:53:fe:e7:0f:80:a2:fb:11:bf:e9:d0:32:6b:a3:df: 91:2a:27:09:51:e8:42:83:6b:59:29:79:d0:f1:7d:4f:73:4e: 05:8e:2e:49:52:5b:3d:0d:a6:de:ba:94:9b:37:50:41:f7:84: ef:82:9e:77:88:7d:1c:1a:1a:54:62:fb:72:29:3a:77:11:99: e8:97:b4:11 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJ150dBPPYYsA7MhbhHgRWJxrON0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTA2MTMxODA2MjVaFw0yNTA2MTQyMDA1MjVaMDMxMTAvBgNV BAMTKEFFRDAwQTE5RkQwNEVBODc0Q0QzNDk4Qzc0ODg4QTEyNjY5RTY5RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbxOgzFQxk+Sil0VJqhGqGE4hR H8cWTeJGuzOJ3hkbBjlx4M6QtPmT3bnkCyYW9znCjM7+HIMtopntS3tvrzrHXHHI KiUWV2j6ACYDOr8WgCKJ1W1PiKHOzl1Mxgf7R4q4QJYCslF9fR4JO5t+pbEyx/TE IeRRf/t0+kylQqVbf7D2ChLsxaf2LHBsIjRmUUbot72P+BBQolFjgfmjyhsspiyc UcrCcmsyGfHQFxGMUDgqWVGzozCM1IYhQxBl3JAPutFY8LJWLaUOnwGKUROcb/oo Tn3wae7S+v2Nw2BQ96PdcIgyeqbwu2nNp+5F4VeyX25SYIoBDlXbsfyoRrbVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUrtAKGf0E6odM00mMdIiKEmaeafEwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7j5B/61THB5+s4biqs2 Swc299mlOaTqXj2c2k51lV8YwYalyk6mYHh4N5oakvlDa2EsS3rdgzK02TFiPqda w2QBHJWshC9sRc42Q33H+9JQBTncKMaSXvzuEnb+4OqANEmKy6wNc3dEsf0Et/VK LzCe6Pfzpo5eloCPccmJp2ybJsMqO6uOAJ3r80vImJCWRSpPBUMJYnkEOmOlbI87 c4f9iX45PoiBAlXuKTRIWj5PYvPa+kWaU/7nD4Ci+xG/6dAya6PfkSonCVHoQoNr WSl50PF9T3NOBY4uSVJbPQ2m3rqUmzdQQfeE74Ked4h9HBoaVGL7cik6dxGZ6Je0 EQ== -----END CERTIFICATE-----Generated at Sat Jun 14 09:09:54 2025 by rpki-client