$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: gG7X1CtnZcsr02bgVstySQRygHuFrYxl3IzvyG0+niE= Subject key identifier: 02:AA:BB:7A:2C:9E:06:75:65:AB:6D:E3:F3:74:DD:68:B1:55:D0:D4 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 770E791FBDD41F62A20B7F0F1EED6478530BC9DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: E9 Signing time: Wed 30 Apr 2025 20:55:02 +0000 Manifest this update: Wed 30 Apr 2025 20:50:02 +0000 Manifest next update: Fri 02 May 2025 00:30:02 +0000 Files and hashes: 1: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: TDSLNd9plHJwOulPeBHo1vNBDKxJTlWmh9i0dzSd4do=) 2: 3134312e3139332e3232382e302f32342d3234203d3e203130313033.roa (hash: wXEZYM8r4N3Bh60WvsuoRKA5OSB618zkHXVaZhvbDno=) 3: 3134312e3139332e3232382e302f32342d3234203d3e20313937353337.roa (hash: GmuqQ5cRPqO0r6kNpS31Skpj+V6x9N2OgVf2PPKwFIs=) 4: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: aWzsWkNz9PJPPmM8i0/IefYTbT3Y07R53lZGD0EHqrg=) 5: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: DDeP4uYwqP8b0ON0e+nML7HE4UFDik7BChJ/x0EHl9Q=) 6: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: 0b6sszxsKulqMcqV3D3Yqcg5IxC3pSU5gc82mTsDYlA=) 7: 3134312e3139332e3232382e302f32342d3234203d3e2039333034.roa (hash: s5WbNe5Whw4ZMD9Ltnk2u5lg9JZnAEnQMp+26m9SqMs=) 8: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: 9rXb1NPPFOI3AgbxPzqdIR/jue9JvU8qlTTWanHldww=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 May 2025 00:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:0e:79:1f:bd:d4:1f:62:a2:0b:7f:0f:1e:ed:64:78:53:0b:c9:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Apr 30 20:50:02 2025 GMT Not After : May 2 00:30:02 2025 GMT Subject: CN=02AABB7A2C9E067565AB6DE3F374DD68B155D0D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:51:62:27:d1:53:9e:47:f2:bb:b9:c8:bd:25: 73:b2:8e:d9:92:ed:e0:92:1c:07:3e:2f:82:8e:e4: ca:e8:53:4d:4a:8d:2c:23:63:8d:73:8e:4b:85:2e: 6d:6c:8d:c3:b0:26:55:b3:26:1e:30:87:a4:a3:d2: cf:a6:ba:b0:bb:79:f0:0c:97:00:81:03:56:98:f4: ca:29:19:3f:3e:90:9b:d3:29:46:82:5a:c8:92:0b: 6c:a3:28:90:1a:ed:ec:2c:ba:24:b3:04:65:6a:8f: a4:52:68:a4:b9:94:eb:88:29:ef:eb:0e:bc:92:a7: a3:51:ac:d5:e6:7f:38:36:27:ed:a4:c3:c1:cc:74: 07:8c:9a:8d:c6:1b:5d:23:44:f8:8f:be:bd:63:e0: 4d:e9:53:b8:1d:61:43:83:61:7c:71:c1:6d:68:90: ce:db:ad:61:81:b2:9b:05:7a:6b:e9:13:b3:d8:4e: b2:ea:e5:0a:dd:b3:8a:fe:2a:06:33:67:f8:e8:6d: 47:a1:a8:33:d1:d0:c9:60:34:f2:46:bb:7b:90:7a: 72:ee:0e:71:67:ff:d1:53:ac:3f:d4:96:0f:3e:f8: cb:7b:be:ca:49:0f:7f:0d:e4:ba:e6:6b:00:7c:36: 6f:be:ed:2a:f1:c5:22:1c:a7:84:b6:51:45:fe:2f: f6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AA:BB:7A:2C:9E:06:75:65:AB:6D:E3:F3:74:DD:68:B1:55:D0:D4 X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:2b:0e:c5:4f:2b:74:84:35:b1:22:d0:c7:79:75:f6:c7:7e: bd:c1:cf:1b:06:0b:b1:4d:41:35:18:20:97:a9:ef:dc:1e:8c: 1a:0c:17:d2:06:b8:43:0f:60:05:40:6c:52:4a:20:3b:5e:ae: 6c:44:d6:10:dd:1a:a2:15:65:91:e3:4b:32:3b:bf:02:4d:76: 13:6d:39:da:cc:12:b0:e9:61:a9:9f:e9:43:31:e5:35:f5:2a: 9a:89:b3:8e:84:80:d1:f4:73:1c:f8:76:bd:07:c6:ae:7e:85: b6:fe:13:bf:58:85:f4:a0:41:33:5f:ec:1e:0f:21:c6:eb:f0: be:4e:a0:13:ce:df:37:a4:c7:11:f2:ba:46:4a:04:57:37:87: ff:72:f0:b9:d6:fe:5c:ac:98:c6:22:10:1c:cc:b7:76:d0:20: 67:5e:07:b7:fa:c2:65:fe:cd:1b:3f:4d:2d:70:61:09:52:22: fd:d2:bf:28:91:df:6a:2e:d2:9e:50:53:cf:c2:c8:80:91:c3: 55:f6:1c:de:a7:66:11:6e:d9:c6:31:6e:3f:fd:a6:10:0c:fe: 8d:06:94:62:41:db:a7:76:09:c8:45:a1:fc:74:86:9f:a3:ad: 04:91:21:43:2d:f9:3e:74:41:5e:aa:dc:ba:ad:67:38:69:16: b5:8e:59:9a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdw55H73UH2KiC38PHu1keFMLydswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNTA0MzAyMDUwMDJaFw0yNTA1MDIwMDMwMDJaMDMxMTAvBgNV BAMTKDAyQUFCQjdBMkM5RTA2NzU2NUFCNkRFM0YzNzRERDY4QjE1NUQwRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxUWIn0VOeR/K7uci9JXOyjtmS 7eCSHAc+L4KO5MroU01KjSwjY41zjkuFLm1sjcOwJlWzJh4wh6Sj0s+murC7efAM lwCBA1aY9MopGT8+kJvTKUaCWsiSC2yjKJAa7ewsuiSzBGVqj6RSaKS5lOuIKe/r DrySp6NRrNXmfzg2J+2kw8HMdAeMmo3GG10jRPiPvr1j4E3pU7gdYUODYXxxwW1o kM7brWGBspsFemvpE7PYTrLq5Qrds4r+KgYzZ/jobUehqDPR0MlgNPJGu3uQenLu DnFn/9FTrD/Ulg8++Mt7vspJD38N5LrmawB8Nm++7SrxxSIcp4S2UUX+L/bhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUAqq7eiyeBnVlq23j83TdaLFV0NQwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoisOxU8rdIQ1sSLQx3l1 9sd+vcHPGwYLsU1BNRggl6nv3B6MGgwX0ga4Qw9gBUBsUkogO16ubETWEN0aohVl keNLMju/Ak12E2052swSsOlhqZ/pQzHlNfUqmomzjoSA0fRzHPh2vQfGrn6Ftv4T v1iF9KBBM1/sHg8hxuvwvk6gE87fN6THEfK6RkoEVzeH/3Lwudb+XKyYxiIQHMy3 dtAgZ14Ht/rCZf7NGz9NLXBhCVIi/dK/KJHfai7SnlBTz8LIgJHDVfYc3qdmEW7Z xjFuP/2mEAz+jQaUYkHbp3YJyEWh/HSGn6OtBJEhQy35PnRBXqrcuq1nOGkWtY5Z mg== -----END CERTIFICATE-----Generated at Thu May 1 09:29:41 2025 by rpki-client