$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft File: B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json) Hash identifier: oUecVJhNE3SzUuXI+5ImiW0khvcCputvSpMv0YUsjwU= Subject key identifier: 57:C2:8C:26:02:CD:80:97:E5:DA:63:7A:86:F7:68:61:79:DA:CB:B0 Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e Certificate serial: 79D87F9E8DEEA526DE0B3E6ADD9320EE7023AB19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft Manifest number: 051B Signing time: Sat 26 Apr 2025 16:39:59 +0000 Manifest this update: Sat 26 Apr 2025 16:34:59 +0000 Manifest next update: Sun 27 Apr 2025 16:47:59 +0000 Files and hashes: 1: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: IdSy9DI41okmJzC8kiYhvPIkxbhT29hGtDcstol94Gs=) 2: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: euqkb79t1OVkqJLV4h0sY2Fb9LyHpO6FssRdPdeta2o=) 3: 3231332e3133392e37392e302f32342d3234203d3e2033333230.roa (hash: PtRMyKTdbfZGfPE5XdhdhFh3qhxKx8+kxVjMWXNcsWU=) 4: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: vs2b7sm3b3a6ih0FOLh30+kJAWgxfwtdRLZicKgW2iY=) 5: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: pjnqIb4dxS7ohemcNICs3/5MSebDeHfZm+o3ScY7Wbs=) 6: 3231332e3133392e37332e302f32342d3234203d3e20333936333536.roa (hash: p9bl2cITeGqyDsp+qYa6XKu0+IBsfcA9I2MK2L2iu7Q=) 7: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: CLzyfVEPAwKX3mhx3cFkDV2A+7c3eW1iEPnVFN3/un0=) 8: 3231332e3133392e36372e302f32342d3234203d3e20383334.roa (hash: D6SogqGmOJbzVtDCb1JuxW8Fgqo7v+Dc/bOrJE9HIsI=) 9: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: 9cktvEdh4jpik+wY0YHKxFgG9OCHki2tIjn/mKo9IKg=) 10: 3231332e3133392e36352e302f32342d3234203d3e203538303631.roa (hash: 4CxK/2nsy4IlLMM6spVwFLEFITyK9i3ABeG638HSk98=) 11: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: M5KJEFx6ngzgWcWaswPQRo9lko/DzsisbWDI/JPapI0=) 12: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: recgwGLHRmHMtvRRJVUhe6BWHyw6Djaciag4FXuYftw=) 13: 3231332e3133392e37372e302f32342d3234203d3e20383334.roa (hash: O5jVvFaTWVNtfUZ2xsHPpB6aWw/5pLDoGWzZv5bE6BQ=) 14: 3231332e3133392e36362e302f32342d3234203d3e203134363138.roa (hash: KfrtJjSrdaJP5uvqRj2CQapVnmUpyN82iN3vrd+6yjk=) 15: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: iHrVGYqO0jEnmhXvt0u+E3Fi7EyKrYFB7bEQzlX2suw=) 16: 3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa (hash: ++GZ339S0KrF867J3TV0tr4TdthWz9Doq5ZUIyvykVE=) 17: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: +A7YZkvAN81rPDpTJkId3sZMflwrFWtwJvc3yTwbIVs=) 18: 3231332e3133392e36362e302f32342d3234203d3e203136353039.roa (hash: 1hlK3K+inj21DftfAPCqNx9Ur756v/RvYDQKchDD0RY=) 19: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: m9VEyjC6AstkEvUHZu0nndWjDPejGmt2Un1d+bIvwNg=) 20: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: CZYh6lYb4N4Hi46B2oVp46GIE/gWlkXTwUlUU+TKpIw=) 21: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: FfLZiCS8Nd3284OE5qfthGu+7ch+27qC/k5QS2NyeLA=) 22: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: NjWmld7in/C2wyn6DXt7Xnv7mQPq1jiHpZcTZuGeBQ0=) 23: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: 3sBgBPhXGekAATE8XJ410DzQWJqVxKjP0XKZZazqwjc=) 24: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: aplL4eWGO1854T22hYUsUkBTP8Rpw5inKqfwVoAi4uA=) 25: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: zOTGboIZBsrY2C4wOPiGbp4YdGPWL/CIf9OR+DPh8lw=) 26: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: qcqTb3VE7m+UGKYwU3pX6Cz4rtaboRvLfOlujiKOavY=) 27: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: FBtJ+MNYwdWO4In9hmlePFb198UWpspP65HhFA9Ht28=) 28: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: 4HobDf2IR5LvPu11gvXGRRjA/4KYDCBMeX1L5falDQI=) 29: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: pcqczpZd3N8rkxbwgnioI5KV9SeSdrdvwmseTG1EX1s=) 30: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: OwJ4voSdXG+RAO4fTwNhbProhgfRb+3v74PSNwas1EY=) 31: 3231332e3133392e38302e302f32332d3234203d3e20383334.roa (hash: qiWvZJxXyA1T8nIVbLoZ99OExdcS5mc15RZxXCZOFJM=) 32: 3231332e3133392e37352e302f32342d3234203d3e20323731393837.roa (hash: k/dg+vn2LRgJwjRiBw+dTVhqGlwM5OEWHrHzMTRZgGU=) 33: 3231332e3133392e36392e302f32342d3234203d3e20313337353137.roa (hash: HH3jqYI0MpU2yLi9Hw8yJjtic3EBakXCP+g63lrfqjg=) 34: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: v0tNFH1u/s9uww1+x0zLopoqAlrYrdWeRhsSzqaLV6I=) 35: 3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa (hash: 0JPdHuSbHUk0VXaqk6MQ9H7eLXZuOQ1QZwBPgp3LcZ4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:d8:7f:9e:8d:ee:a5:26:de:0b:3e:6a:dd:93:20:ee:70:23:ab:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e Validity Not Before: Apr 26 16:34:59 2025 GMT Not After : Apr 27 16:47:59 2025 GMT Subject: CN=57C28C2602CD8097E5DA637A86F7686179DACBB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:46:2d:79:ef:ca:fe:c2:78:85:30:f7:65:25: 4e:96:5b:b0:19:e8:fb:2d:0d:9b:93:b7:7b:a4:9c: 84:40:c1:cc:f1:aa:9a:4d:b5:58:de:92:0c:a5:02: bf:a0:9a:e5:78:4a:16:bf:96:20:f6:f8:66:27:ef: e3:79:7d:42:4f:72:62:45:ee:3a:00:dd:bb:42:2f: 1f:e1:a1:81:b5:d7:65:73:6c:d0:3a:4f:d9:6d:64: 95:ba:47:cc:de:0a:b8:b0:0a:08:6d:b7:07:bd:de: 9d:86:3c:83:fe:8e:f5:59:ed:b9:be:c0:ab:f3:f1: c7:e7:31:3c:e9:57:d4:ea:ec:de:dd:7d:ff:05:64: 0a:19:fe:37:d1:e9:95:6a:ff:92:2e:f8:d8:51:0c: 66:24:dd:ca:8b:70:72:df:84:e3:66:c3:fc:4b:f0: 91:f2:75:9d:47:1b:27:c7:b5:27:09:9d:9a:14:7d: 01:83:15:81:b3:38:10:e4:5a:e4:85:66:b9:47:d1: bc:cb:c3:30:8c:3f:c5:d3:a8:cb:dd:81:e6:2e:16: 81:ea:8b:37:74:9f:5b:d1:03:81:0d:cd:0d:4b:e5: da:53:4f:b2:69:2e:00:4e:9c:b4:0d:9d:05:6e:c5: 3e:f0:f9:db:55:7c:e4:f2:f3:d6:88:57:e1:f5:c0: 63:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C2:8C:26:02:CD:80:97:E5:DA:63:7A:86:F7:68:61:79:DA:CB:B0 X509v3 Authority Key Identifier: keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:0d:3d:aa:4f:2f:1f:07:d4:5e:bb:b6:30:65:ec:a2:f0:93: 77:ed:fd:36:cb:bc:4f:cf:e1:b6:45:ca:05:11:06:bb:93:7f: 2d:fb:c9:f8:8e:21:60:a3:da:b2:cd:c8:71:c7:e8:f6:53:29: 62:bb:a1:03:4a:4a:bc:ff:37:f5:71:d4:2d:b8:5d:1a:7c:4f: f4:fd:a0:bc:07:76:ac:d7:52:26:b0:d1:fe:fd:28:56:7f:08: fb:dc:8b:0b:da:73:be:5b:b0:c5:78:57:a8:17:cb:6d:e3:0e: f9:32:30:e3:d9:7e:1c:61:2c:93:36:9a:f6:3d:12:d3:52:ea: b9:77:df:d2:dc:38:e8:94:52:d0:36:64:6f:55:f8:cb:ef:3b: 8f:75:89:bc:39:ee:d6:7b:d7:8a:90:72:dc:ca:2a:f5:3c:8b: 8e:05:8f:93:d9:25:28:73:e9:b3:0c:b1:54:1d:a8:86:9b:38: 05:79:d6:ff:0f:b9:f8:ab:89:8d:e8:02:db:58:7e:fc:64:02: 54:25:d2:e1:1e:50:a7:37:d6:90:00:43:aa:a6:e2:b1:47:24: f7:92:0f:ec:71:ad:62:96:04:a8:f7:77:f2:1c:fb:84:ad:60: d5:88:bc:53:83:94:68:88:25:9e:43:0e:b5:f3:cc:16:3f:3c: 59:0d:6f:71 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUedh/no3upSbeCz5q3ZMg7nAjqxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk NDhjN2QzZTAeFw0yNTA0MjYxNjM0NTlaFw0yNTA0MjcxNjQ3NTlaMDMxMTAvBgNV BAMTKDU3QzI4QzI2MDJDRDgwOTdFNURBNjM3QTg2Rjc2ODYxNzlEQUNCQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeRi1578r+wniFMPdlJU6WW7AZ 6PstDZuTt3uknIRAwczxqppNtVjekgylAr+gmuV4Sha/liD2+GYn7+N5fUJPcmJF 7joA3btCLx/hoYG112VzbNA6T9ltZJW6R8zeCriwCghttwe93p2GPIP+jvVZ7bm+ wKvz8cfnMTzpV9Tq7N7dff8FZAoZ/jfR6ZVq/5Iu+NhRDGYk3cqLcHLfhONmw/xL 8JHydZ1HGyfHtScJnZoUfQGDFYGzOBDkWuSFZrlH0bzLwzCMP8XTqMvdgeYuFoHq izd0n1vRA4ENzQ1L5dpTT7JpLgBOnLQNnQVuxT7w+dtVfOTy89aIV+H1wGMvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUV8KMJgLNgJfl2mN6hvdoYXnay7AwHwYDVR0j BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT TWZUNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hMDFjMTRmYi1i NjYwLTQ4OWQtOWU5Zi05NDAyZTllMmMyZTIvMC9CNjgzRjJFQjUwQzU5OTlBNzc0 NTZFODgyNjgzMTYwOUQ0OEM3RDNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPw09qk8vHwfUXru2MGXs ovCTd+39Nsu8T8/htkXKBREGu5N/LfvJ+I4hYKPass3Iccfo9lMpYruhA0pKvP83 9XHULbhdGnxP9P2gvAd2rNdSJrDR/v0oVn8I+9yLC9pzvluwxXhXqBfLbeMO+TIw 49l+HGEskzaa9j0S01LquXff0tw46JRS0DZkb1X4y+87j3WJvDnu1nvXipBy3Moq 9TyLjgWPk9klKHPpswyxVB2ohps4BXnW/w+5+KuJjegC21h+/GQCVCXS4R5QpzfW kABDqqbisUck95IP7HGtYpYEqPd38hz7hK1g1Yi8U4OUaIglnkMOtfPMFj88WQ1v cQ== -----END CERTIFICATE-----Generated at Sat Apr 26 19:02:31 2025 by rpki-client