$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: I6uESgSTIp4NTZEP/I8BWZ+hD6QBsVNhwWN1aZZaX/8= Subject key identifier: 8B:E6:0F:58:5A:40:52:C9:3E:C9:5B:71:A7:2B:56:F3:25:B9:BC:3C Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 16B68B1BC44CCAF58F48DDF0C5ABF23CB1883B4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 0126 Signing time: Sun 15 Jun 2025 03:57:56 +0000 Manifest this update: Sun 15 Jun 2025 03:52:56 +0000 Manifest next update: Mon 16 Jun 2025 06:39:56 +0000 Files and hashes: 1: 3134312e3139332e3232382e302f32342d3234203d3e203130313033.roa (hash: wXEZYM8r4N3Bh60WvsuoRKA5OSB618zkHXVaZhvbDno=) 2: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: DDeP4uYwqP8b0ON0e+nML7HE4UFDik7BChJ/x0EHl9Q=) 3: 3134312e3139332e3232382e302f32342d3234203d3e20313937353337.roa (hash: GmuqQ5cRPqO0r6kNpS31Skpj+V6x9N2OgVf2PPKwFIs=) 4: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: 0b6sszxsKulqMcqV3D3Yqcg5IxC3pSU5gc82mTsDYlA=) 5: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: dff27qlcZNHBd6KSEUq4tITQ0+NrN4EFIlwa+1wvogI=) 6: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: aWzsWkNz9PJPPmM8i0/IefYTbT3Y07R53lZGD0EHqrg=) 7: 3134312e3139332e3232382e302f32342d3234203d3e2039333034.roa (hash: s5WbNe5Whw4ZMD9Ltnk2u5lg9JZnAEnQMp+26m9SqMs=) 8: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: TDSLNd9plHJwOulPeBHo1vNBDKxJTlWmh9i0dzSd4do=) 9: 38362e35342e3137322e302f32342d3234203d3e2032383536.roa (hash: kIjLwSREHkERxqQgCNkVDjeNAzY3bReXXhmulizNBno=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 06:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b6:8b:1b:c4:4c:ca:f5:8f:48:dd:f0:c5:ab:f2:3c:b1:88:3b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Jun 15 03:52:56 2025 GMT Not After : Jun 16 06:39:56 2025 GMT Subject: CN=8BE60F585A4052C93EC95B71A72B56F325B9BC3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:08:1c:2c:10:f9:66:6b:85:5c:8c:47:ce:de: 12:f8:78:51:25:47:18:d9:64:19:9d:3f:83:af:e0: 28:4f:f4:b3:f9:06:a5:45:6c:bd:44:00:b1:67:74: 11:b7:65:4c:db:d4:6f:1b:8c:54:88:3c:a6:2e:96: 1f:26:ed:76:d9:d4:11:6e:4f:21:f4:df:ff:aa:18: f9:c3:72:04:80:32:e3:9b:8d:ab:a0:fe:a1:93:c4: b7:97:55:db:fa:cd:b9:b2:f2:09:aa:3d:cb:1e:87: 90:93:ac:3e:6c:2e:0e:e1:7c:5e:cb:b2:a0:49:8c: b5:8c:ce:c2:4d:5e:ff:11:38:a5:00:3e:a4:d4:ce: b2:ff:7b:4a:93:ab:44:04:33:86:01:66:b4:81:d8: b0:00:6b:0a:fb:8c:f6:5e:62:b1:a6:45:7c:2d:c0: 05:36:54:c2:41:df:b4:eb:6f:d5:60:1d:7c:e6:a6: 79:51:02:b4:fb:f9:e0:ac:a7:de:61:56:9b:b7:f1: f6:d8:9f:59:97:2e:19:e8:14:af:f5:43:72:44:b9: c5:aa:a0:f6:6d:91:5b:b8:15:a8:5b:fa:e0:51:c8: 79:28:38:f0:f5:ad:1f:26:c7:3d:7a:64:d1:ba:7d: 52:ab:1e:cd:89:ab:31:53:24:16:a8:ba:d5:7a:01: a7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E6:0F:58:5A:40:52:C9:3E:C9:5B:71:A7:2B:56:F3:25:B9:BC:3C X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:20:77:11:17:59:f7:14:5b:b2:10:02:b8:45:b1:f6:83:0c: 83:87:38:58:4e:41:6f:b0:b0:6e:e1:44:9c:53:57:a5:e9:2d: 29:eb:11:d6:0a:da:f2:e3:15:9a:93:ee:be:c3:21:60:f8:4e: 61:d6:3c:72:db:5d:96:62:7d:ee:38:3a:2e:6e:f1:6c:a0:0d: e8:cd:c5:f1:64:00:42:f5:4c:2c:3a:a6:2d:97:d7:ca:a0:e5: 69:d7:db:bb:7b:76:31:07:cd:6b:ea:5d:e5:d0:b2:be:62:48: a8:4c:5e:0a:44:c4:e1:64:af:9a:b3:f0:1d:38:a2:67:9f:8d: 0e:2a:d3:b0:eb:3b:f3:ad:a3:19:bb:b4:6b:bf:d3:52:e7:a8: 84:09:e9:f9:6d:fc:a7:98:3a:06:04:81:49:80:78:a2:f7:ac: dd:34:85:f7:af:ab:03:4d:be:df:46:96:3a:5b:ee:2c:21:13: a7:26:b4:df:f5:fb:8b:48:bc:de:0a:3c:78:c7:15:63:52:cc: 48:3d:95:ee:c0:26:45:d8:ec:a4:a4:b7:15:f3:94:83:5e:e8: 12:eb:f8:53:b4:a7:23:02:d1:3c:99:fd:3d:05:f3:7a:55:6e: e6:62:ed:63:6f:28:49:ae:e8:2c:e6:8b:76:d2:48:97:f6:44: 4a:c4:eb:1d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFraLG8RMyvWPSN3wxavyPLGIO04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNTA2MTUwMzUyNTZaFw0yNTA2MTYwNjM5NTZaMDMxMTAvBgNV BAMTKDhCRTYwRjU4NUE0MDUyQzkzRUM5NUI3MUE3MkI1NkYzMjVCOUJDM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrCBwsEPlma4VcjEfO3hL4eFEl RxjZZBmdP4Ov4ChP9LP5BqVFbL1EALFndBG3ZUzb1G8bjFSIPKYulh8m7XbZ1BFu TyH03/+qGPnDcgSAMuObjaug/qGTxLeXVdv6zbmy8gmqPcseh5CTrD5sLg7hfF7L sqBJjLWMzsJNXv8ROKUAPqTUzrL/e0qTq0QEM4YBZrSB2LAAawr7jPZeYrGmRXwt wAU2VMJB37Trb9VgHXzmpnlRArT7+eCsp95hVpu38fbYn1mXLhnoFK/1Q3JEucWq oPZtkVu4Fahb+uBRyHkoOPD1rR8mxz16ZNG6fVKrHs2JqzFTJBaoutV6AaeHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUi+YPWFpAUsk+yVtxpytW8yW5vDwwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyB3ERdZ9xRbshACuEWx 9oMMg4c4WE5Bb7CwbuFEnFNXpektKesR1gra8uMVmpPuvsMhYPhOYdY8cttdlmJ9 7jg6Lm7xbKAN6M3F8WQAQvVMLDqmLZfXyqDladfbu3t2MQfNa+pd5dCyvmJIqExe CkTE4WSvmrPwHTiiZ5+NDirTsOs7862jGbu0a7/TUueohAnp+W38p5g6BgSBSYB4 oves3TSF96+rA02+30aWOlvuLCETpya03/X7i0i83go8eMcVY1LMSD2V7sAmRdjs pKS3FfOUg17oEuv4U7SnIwLRPJn9PQXzelVu5mLtY28oSa7oLOaLdtJIl/ZESsTr HQ== -----END CERTIFICATE-----Generated at Sun Jun 15 18:41:18 2025 by rpki-client