$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: PfOVI2bJYesgAC2368JYOaSr4JgnHvw/yfZR/QYTlfg= Subject key identifier: 87:D1:DD:5B:98:60:19:A9:E2:7D:2A:A8:D6:7F:5E:96:78:C0:AC:39 Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 73F4649798ED178F9F5D9F1CC271D7EE140F0F85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: A2 Signing time: Fri 13 Jun 2025 05:47:46 +0000 Manifest this update: Fri 13 Jun 2025 05:42:46 +0000 Manifest next update: Sat 14 Jun 2025 09:22:46 +0000 Files and hashes: 1: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: i+j0/SqL92pXqr/Yt38MmbwZjTIQClt05q1Bhtl74qs=) 2: 3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa (hash: JOjM4S47fNK82HVGI3kzft2889UH/2/CmD3owvdrCqM=) 3: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: nkla74pmgzof6BdGTx/D9Sn3aXq/+fT/xyCtH2Ux1lE=) 4: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: LnJ/05IgVINSSDv4l3ajCKuAD4mr9PXKyWCylRmwux0=) 5: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (hash: zMoHCJaZZ5vI4uszw9fV0p+6ygU9pfTnJ4jfa1DsJEg=) 6: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 0e4l5EqcD9+SWWVL79QZba03Lu9mdjyR/TfDJr390dA=) 7: 3137382e3234382e37362e302f32342d3234203d3e203230343733.roa (hash: vu2iy0iZ67Pvg675grFRJrEvojZ1gcd0BfsDMPqVCIA=) 8: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 0IUSu+qptfP2e6dJnAny9tG4Cb2xcvVtmtBD0i4piak=) 9: 3137382e3234382e37362e302f32342d3234203d3e203136353039.roa (hash: VMPEDd4AiAWOyP12MEXNDl8a/3agebdZRrB7U/AB7yA=) 10: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: IDuy7mlGaLMOCgzEdx2/1ouXbZ90tr9UBkMDq0knNXg=) 11: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: BurGe+dClA7vjO0X+S54yd1ucMmL7X7KmUAJ9OO9SoQ=) 12: 3137382e3234382e37382e302f32342d3234203d3e203530343334.roa (hash: YkOazOq21Qlmm7bdCMGG0Hrr8r5LE8n78fAPs3qYxzs=) 13: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: 0fCZnPcUR/TU0KGeDhdE4rzY8AMOIFMDCEwGzQYi3Zw=) 14: 3137382e3234382e37362e302f32342d3234203d3e203134363138.roa (hash: gLI3Umjl7KNVwUD5xzL37MyINDkuT/mVnAgaZRKcvdM=) 15: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: IZUL7zEfrS59nO5eqaFvUNxkfEHC3BRjyZY2ApRcoSg=) 16: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: aYbyRGpjGAy7pzSZSZu9mIeZ8V/FjY5/eUQvPy2nJ/Y=) 17: 3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa (hash: 562I7wk8pDZNtdMzcEoC9Q7KQUjR9i2cYfXfdpaRXg8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 09:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:f4:64:97:98:ed:17:8f:9f:5d:9f:1c:c2:71:d7:ee:14:0f:0f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Jun 13 05:42:46 2025 GMT Not After : Jun 14 09:22:46 2025 GMT Subject: CN=87D1DD5B986019A9E27D2AA8D67F5E9678C0AC39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:45:06:36:12:80:be:46:64:5e:55:42:9c:b8: 04:18:fc:e9:be:c8:4d:f1:7b:98:ab:fa:de:d2:bf: 8d:b0:97:9b:38:ff:e2:62:8f:32:80:d7:fa:f3:91: 68:00:d0:94:e9:e5:4f:91:1f:32:11:7b:ab:e8:d1: 42:8e:ef:10:f2:d4:ce:ed:69:ed:6c:35:02:0e:d3: e1:df:77:9e:07:2a:a0:fd:2c:60:2b:68:0b:0d:31: dd:b6:72:d2:b4:ee:9d:3a:1d:a5:87:33:4b:39:44: bc:ee:af:99:bc:78:d9:a0:df:c3:ea:16:29:45:84: 58:ab:89:86:e0:8e:d0:4e:ad:fb:8c:25:e2:de:0e: e6:10:7e:4f:32:cd:4b:b8:e3:bc:1c:da:14:31:57: 35:ae:d5:fb:c3:93:49:36:d8:0c:50:73:26:4f:be: d9:e0:58:90:a8:ad:17:ad:c3:f8:84:37:60:6f:97: 1c:ce:7a:6d:01:a2:43:af:e5:77:96:18:59:35:e6: a7:aa:04:16:b6:ab:25:65:c2:66:41:da:c8:0c:24: f7:2b:e8:f7:f6:6f:dc:8b:f3:9f:da:f7:50:02:ae: 89:fe:11:81:c3:7f:96:01:b1:d1:ba:35:a2:49:c5: 0c:f0:74:62:5f:e8:fe:0e:b4:ac:72:09:98:a7:7e: 34:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D1:DD:5B:98:60:19:A9:E2:7D:2A:A8:D6:7F:5E:96:78:C0:AC:39 X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e2:44:a4:e4:6f:c1:2c:a6:80:fb:d8:5e:61:45:5d:f4:6b: 7d:e4:ad:1f:be:e9:cb:6b:0f:e1:fa:54:f3:bd:a4:29:10:8c: 47:0c:19:df:34:44:fe:01:53:d2:b4:8b:37:6f:d1:2b:9f:7f: 11:84:2d:bb:f7:62:38:b9:99:fc:87:ed:b9:40:f0:bb:8a:61: d3:c5:4f:45:d5:6e:91:49:2e:95:3d:f3:88:c3:27:d8:69:89: 67:ef:aa:68:8e:5a:9f:91:10:72:18:3d:e3:83:0b:97:55:79: 43:26:52:52:fb:ba:65:b5:bd:4a:c0:70:f0:2a:e4:0f:7c:5c: 3b:32:ad:07:6b:54:2f:3e:0e:f4:9a:22:75:37:d5:3e:f8:60: 4e:2c:d2:ee:0f:24:f7:5d:36:8f:98:4f:81:4c:76:67:c7:fb: 36:1f:8b:48:6b:d0:2c:c3:85:74:b5:1c:83:72:e4:cc:47:c2: 05:75:f8:67:59:fb:a0:33:f9:bd:52:7a:3a:ff:a1:57:7a:44: f7:4f:32:af:db:77:f4:61:0a:40:d3:da:cf:d7:08:8e:ea:ec: c8:5f:55:b2:6a:f4:f0:5f:5a:02:ed:f9:33:db:e3:40:5f:f5: 0a:53:8f:c7:18:dd:01:d7:43:92:51:a5:90:05:e5:97:90:7b: 3f:7c:d1:42 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUc/Rkl5jtF4+fXZ8cwnHX7hQPD4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNTA2MTMwNTQyNDZaFw0yNTA2MTQwOTIyNDZaMDMxMTAvBgNV BAMTKDg3RDFERDVCOTg2MDE5QTlFMjdEMkFBOEQ2N0Y1RTk2NzhDMEFDMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVRQY2EoC+RmReVUKcuAQY/Om+ yE3xe5ir+t7Sv42wl5s4/+JijzKA1/rzkWgA0JTp5U+RHzIRe6vo0UKO7xDy1M7t ae1sNQIO0+Hfd54HKqD9LGAraAsNMd22ctK07p06HaWHM0s5RLzur5m8eNmg38Pq FilFhFiriYbgjtBOrfuMJeLeDuYQfk8yzUu447wc2hQxVzWu1fvDk0k22AxQcyZP vtngWJCorRetw/iEN2BvlxzOem0BokOv5XeWGFk15qeqBBa2qyVlwmZB2sgMJPcr 6Pf2b9yL85/a91ACron+EYHDf5YBsdG6NaJJxQzwdGJf6P4OtKxyCZinfjSJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUh9HdW5hgGanifSqo1n9elnjArDkwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOJEpORvwSymgPvYXmFF XfRrfeStH77py2sP4fpU872kKRCMRwwZ3zRE/gFT0rSLN2/RK59/EYQtu/diOLmZ /IftuUDwu4ph08VPRdVukUkulT3ziMMn2GmJZ++qaI5an5EQchg944MLl1V5QyZS Uvu6ZbW9SsBw8CrkD3xcOzKtB2tULz4O9JoidTfVPvhgTizS7g8k9102j5hPgUx2 Z8f7Nh+LSGvQLMOFdLUcg3LkzEfCBXX4Z1n7oDP5vVJ6Ov+hV3pE908yr9t39GEK QNPaz9cIjursyF9Vsmr08F9aAu35M9vjQF/1ClOPxxjdAddDklGlkAXll5B7P3zR Qg== -----END CERTIFICATE-----Generated at Fri Jun 13 18:57:42 2025 by rpki-client