$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft File: D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft (raw, json) Hash identifier: 77SCiDbCdTLPT3su6QzC9FJQavKOtbSOtewVPWY0jug= Subject key identifier: F1:79:35:99:40:1E:FB:42:90:25:F3:66:1D:69:97:25:69:FD:2D:9B Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44 Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444 Certificate serial: 1F5C51A672383CEC5C1B925B53B1187C862F4983 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft Manifest number: 0400 Signing time: Sun 27 Apr 2025 09:54:59 +0000 Manifest this update: Sun 27 Apr 2025 09:49:59 +0000 Manifest next update: Mon 28 Apr 2025 11:53:59 +0000 Files and hashes: 1: 37382e32342e3132332e302f32342d3234203d3e2037303138.roa (hash: /Sw/kTcH9aO7bMcRnVprTh49TII5UJ49lP8PepQkn1Y=) 2: 39332e39322e31392e302f32342d3234203d3e203631333137.roa (hash: bCly8plczaq5qd0H9MlQ1Z8xZKSunOI/jFWKgR1UqBg=) 3: 37382e32342e3132352e302f32342d3234203d3e203534333339.roa (hash: 7W/JQiIhBxvV9lPwlVaE2K95jNPOksJaHe90LVwGv1I=) 4: 34352e38362e39352e302f32342d3234203d3e2031323939.roa (hash: yQKHHpn8wCUHU+dOg286104MyMwPlf9k9qfBkCNGEsg=) 5: 37382e32342e3132342e302f32342d3234203d3e203534333339.roa (hash: KBQWp2YW6b35tXBZxmWFRr/DTme9e2nhX14tjQgVgwA=) 6: 39332e39322e32302e302f32342d3234203d3e2035353131.roa (hash: Anw+Ot0jzMET4Sk6hQNdmMLNf7QzBxX2vhTMbwb0Hp4=) 7: 37382e32342e3132342e302f32332d3234203d3e20383334.roa (hash: aR9bXXTYwrcEpOUA5zP1Au4UdLHmUATKygkKxMy2Hyo=) 8: 37382e32342e3132312e302f32342d3234203d3e203631333137.roa (hash: PNy4BBOReJ4B4LRwKHBjnzscIyK0n1F3JT7zrSI8uHw=) 9: 34352e38362e39332e302f32342d3234203d3e203631333137.roa (hash: 1x2zpcTAYyd8XetSB0JjPvLUa4clQe7hwjPf8ExgQOI=) 10: 39332e39322e32312e302f32342d3234203d3e203631333137.roa (hash: fW+zXQmtdqPL01ivRHM0ry5dwDotUJmdzQHE3ZemyUE=) 11: 34352e38362e39342e302f32342d3234203d3e2039303039.roa (hash: gq03q2PZTenb5MfLZJOhv7nheUzD9xSGdvhncjMBFfc=) 12: 37382e32342e3132362e302f32332d3234203d3e203131343236.roa (hash: QHhKDdx7KbEi2pWBI66gL/yJWrRkXWlW9Ll3iu5yUnk=) 13: 39332e39322e31382e302f32342d3234203d3e203534333339.roa (hash: WMxtcl2Ju6TLrgTtLUBAyAfGF8Gn9pZV9umXAbbzoJo=) 14: 37382e32342e3132322e302f32342d3234203d3e2037303138.roa (hash: RiGLyTpjx/lhYnZMR/g3INSwpo5JHGzbqqOnRRhQZa8=) 15: D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl (hash: O62jBmvRGItEBxwXlirdlfjZ7yzCykiWPZ/Fgy1aorY=) 16: 34352e38362e39322e302f32342d3234203d3e20323039313831.roa (hash: axad6y4WO54wAX0JBbPnOOK6hI/gTIiMU9ubKRwS/L8=) 17: 39332e39322e32322e302f32332d3234203d3e203534333339.roa (hash: MlVhq9YMUDch69apYFS1riPDRY/vCEBSVcnZ0AXUbzA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 11:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:5c:51:a6:72:38:3c:ec:5c:1b:92:5b:53:b1:18:7c:86:2f:49:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444 Validity Not Before: Apr 27 09:49:59 2025 GMT Not After : Apr 28 11:53:59 2025 GMT Subject: CN=F1793599401EFB429025F3661D69972569FD2D9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b7:a6:4d:92:cf:eb:a1:a7:f2:3a:82:b5:16: ce:47:bb:9d:dd:11:56:27:a0:36:bf:22:c8:c2:57: 46:93:99:4b:89:58:de:2f:f0:00:e9:a7:db:b5:64: b6:2d:2b:78:14:d3:3d:14:14:d0:24:7a:c5:c5:56: 91:fe:c1:c9:1d:74:0d:a8:be:12:3f:8c:4c:03:26: ab:87:d6:79:6d:a6:12:e6:b7:f9:8f:fe:28:51:a2: db:c8:0a:6a:70:5d:e2:9a:37:49:3c:12:f5:fa:67: 63:e1:92:a5:28:59:78:d9:23:bf:19:ec:83:62:82: 75:7f:7b:c2:bf:80:65:c6:5e:af:7d:c7:bb:0e:ad: 4b:d5:82:27:ab:22:04:90:45:5e:00:97:12:8d:11: aa:cc:d2:a8:b6:a4:4b:77:62:41:59:c7:d3:47:b9: 71:e9:9b:b6:b3:f9:9b:d3:b1:23:a8:3b:24:67:db: 64:d7:c7:24:48:79:7a:e9:4b:6e:af:39:80:42:70: 63:0a:f5:39:72:76:0d:2c:c6:b3:da:a1:5d:40:16: df:42:9b:aa:d2:63:f8:9e:84:ad:0c:12:b6:c4:fd: c3:c7:af:68:ea:11:d2:72:8a:8e:31:3a:f2:ae:6a: 02:86:48:78:ed:ea:73:8f:1f:10:3d:be:40:24:d9: 6d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:79:35:99:40:1E:FB:42:90:25:F3:66:1D:69:97:25:69:FD:2D:9B X509v3 Authority Key Identifier: keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:5f:08:86:2e:63:bf:94:9f:13:ec:66:88:29:ff:5d:a2:d0: 74:07:b9:58:84:4d:59:8d:c0:ee:3b:e5:00:35:f3:c0:eb:78: 14:ca:4c:55:0b:b3:cc:fc:2a:22:1d:e1:6a:d1:51:04:e4:f0: a4:a1:76:01:5e:fb:2f:29:a8:c9:bd:f0:c1:9e:da:f1:18:10: cb:dd:f6:a8:e1:6e:60:a1:37:e7:4e:b4:8d:b1:2f:bc:9d:9e: 7b:ab:63:4a:3d:6b:70:dd:e9:0d:e8:56:55:be:fd:8c:c7:d8: 3b:f2:9b:f7:09:24:30:4e:43:34:75:0e:fb:d6:76:eb:6a:3f: fa:fb:09:f5:03:e0:14:0c:c4:5a:9c:ac:85:24:9f:a5:da:b6: 62:a6:a1:03:6c:e7:ff:ab:3e:98:4a:4f:40:fb:31:30:fc:7a: 0c:85:4b:98:6f:20:72:0e:a8:d5:df:39:6c:12:41:21:93:52: 6f:b8:ae:86:a2:f1:1f:6d:04:65:a4:7e:fe:65:88:dc:58:25: 85:df:1c:42:bc:9e:b3:52:8e:d3:b3:d9:78:93:cf:13:49:48: 76:10:20:00:e4:e1:6f:f7:db:78:b9:4f:96:ea:1d:9d:2e:fb: d0:6c:84:59:77:91:e9:1c:18:5d:a4:5b:dc:e1:b1:e0:38:7d: f1:2b:c2:3e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUH1xRpnI4POxcG5JbU7EYfIYvSYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDAxYmEwMTNiYzFlNmQ4NmYwZDZkNThlYWZhNTRlMjdm YWRhMzQ0NDAeFw0yNTA0MjcwOTQ5NTlaFw0yNTA0MjgxMTUzNTlaMDMxMTAvBgNV BAMTKEYxNzkzNTk5NDAxRUZCNDI5MDI1RjM2NjFENjk5NzI1NjlGRDJEOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCt6ZNks/roafyOoK1Fs5Hu53d EVYnoDa/IsjCV0aTmUuJWN4v8ADpp9u1ZLYtK3gU0z0UFNAkesXFVpH+wckddA2o vhI/jEwDJquH1nltphLmt/mP/ihRotvICmpwXeKaN0k8EvX6Z2PhkqUoWXjZI78Z 7INignV/e8K/gGXGXq99x7sOrUvVgierIgSQRV4AlxKNEarM0qi2pEt3YkFZx9NH uXHpm7az+ZvTsSOoOyRn22TXxyRIeXrpS26vOYBCcGMK9Tlydg0sxrPaoV1AFt9C m6rSY/iehK0MErbE/cPHr2jqEdJyio4xOvKuagKGSHjt6nOPHxA9vkAk2W03AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU8Xk1mUAe+0KQJfNmHWmXJWn9LZswHwYDVR0j BBgwFoAU0BugE7webYbw1tWOr6VOJ/raNEQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYtNjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5 NDMxLzEvRDAxQkEwMTNCQzFFNkQ4NkYwRDZENThFQUZBNTRFMjdGQURBMzQ0NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBCdWdFN3dlYllidzF0V09yNlZPSl9y YU5FUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNTIyYTUyZi02 NTM0LTQxNjUtYTZhNy1lZjlmNzRlZjk0MzEvMS9EMDFCQTAxM0JDMUU2RDg2RjBE NkQ1OEVBRkE1NEUyN0ZBREEzNDQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIl8Ihi5jv5SfE+xmiCn/ XaLQdAe5WIRNWY3A7jvlADXzwOt4FMpMVQuzzPwqIh3hatFRBOTwpKF2AV77Lymo yb3wwZ7a8RgQy932qOFuYKE35060jbEvvJ2ee6tjSj1rcN3pDehWVb79jMfYO/Kb 9wkkME5DNHUO+9Z262o/+vsJ9QPgFAzEWpyshSSfpdq2YqahA2zn/6s+mEpPQPsx MPx6DIVLmG8gcg6o1d85bBJBIZNSb7iuhqLxH20EZaR+/mWI3Fglhd8cQryes1KO 07PZeJPPE0lIdhAgAOThb/fbeLlPluodnS770GyEWXeR6RwYXaRb3OGx4Dh98SvC Pg== -----END CERTIFICATE-----Generated at Sun Apr 27 20:18:00 2025 by rpki-client