$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft File: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft (raw, json) Hash identifier: SSn5qXQ6ea3j3LfWiARPhhzk7ebTLyCO0UkwKNe6auM= Subject key identifier: 61:90:24:CB:15:16:68:9D:56:3A:56:BF:23:1B:A1:D2:5B:FB:88:D1 Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Certificate serial: 6ADBCC7EE579C56D9765CFFE9356B28193CDD39A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft Manifest number: 62 Signing time: Sat 26 Apr 2025 05:29:57 +0000 Manifest this update: Sat 26 Apr 2025 05:24:57 +0000 Manifest next update: Sun 27 Apr 2025 07:28:57 +0000 Files and hashes: 1: 3137382e3234382e37342e302f32342d3234203d3e20323039313831.roa (hash: JOjM4S47fNK82HVGI3kzft2889UH/2/CmD3owvdrCqM=) 2: 3139352e34322e3131322e302f32342d3234203d3e203438343335.roa (hash: 0fCZnPcUR/TU0KGeDhdE4rzY8AMOIFMDCEwGzQYi3Zw=) 3: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (hash: IZUL7zEfrS59nO5eqaFvUNxkfEHC3BRjyZY2ApRcoSg=) 4: 3137382e3234382e37362e302f32342d3234203d3e203136353039.roa (hash: VMPEDd4AiAWOyP12MEXNDl8a/3agebdZRrB7U/AB7yA=) 5: BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl (hash: IPCxp6hZlEyIkpuwOO/0473biueLrSSKzsLO5Ijdcsw=) 6: 3137382e3234382e37392e302f32342d3234203d3e20313335333932.roa (hash: nkla74pmgzof6BdGTx/D9Sn3aXq/+fT/xyCtH2Ux1lE=) 7: 3137382e3234382e37362e302f32342d3234203d3e203230343733.roa (hash: vu2iy0iZ67Pvg675grFRJrEvojZ1gcd0BfsDMPqVCIA=) 8: 3137382e3234382e37362e302f32342d3234203d3e203134363138.roa (hash: gLI3Umjl7KNVwUD5xzL37MyINDkuT/mVnAgaZRKcvdM=) 9: 3139332e3136392e37382e302f32332d3233203d3e203438343335.roa (hash: IDuy7mlGaLMOCgzEdx2/1ouXbZ90tr9UBkMDq0knNXg=) 10: 3139332e3136392e37382e302f32332d3234203d3e203438343335.roa (hash: 0e4l5EqcD9+SWWVL79QZba03Lu9mdjyR/TfDJr390dA=) 11: 3139352e34322e3131332e302f32342d3234203d3e203438343335.roa (hash: aYbyRGpjGAy7pzSZSZu9mIeZ8V/FjY5/eUQvPy2nJ/Y=) 12: 3137382e3234382e37322e302f32342d3234203d3e20313531383732.roa (hash: 562I7wk8pDZNtdMzcEoC9Q7KQUjR9i2cYfXfdpaRXg8=) 13: 3137382e3234382e37352e302f32342d3234203d3e20313939303538.roa (hash: 0IUSu+qptfP2e6dJnAny9tG4Cb2xcvVtmtBD0i4piak=) 14: 3137382e3234382e37382e302f32342d3234203d3e203530343334.roa (hash: YkOazOq21Qlmm7bdCMGG0Hrr8r5LE8n78fAPs3qYxzs=) 15: 3139332e3136392e37382e302f32332d3234203d3e203530343334.roa (hash: i+j0/SqL92pXqr/Yt38MmbwZjTIQClt05q1Bhtl74qs=) 16: 3139352e34322e3131322e302f32332d3233203d3e203438343335.roa (hash: LnJ/05IgVINSSDv4l3ajCKuAD4mr9PXKyWCylRmwux0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 07:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:db:cc:7e:e5:79:c5:6d:97:65:cf:fe:93:56:b2:81:93:cd:d3:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d Validity Not Before: Apr 26 05:24:57 2025 GMT Not After : Apr 27 07:28:57 2025 GMT Subject: CN=619024CB1516689D563A56BF231BA1D25BFB88D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6d:95:cf:3e:93:33:9b:85:c9:7e:c8:c4:87: fb:2e:94:49:a8:0e:ee:79:eb:4d:3d:8d:d1:3a:cc: cf:a7:60:e7:2d:73:c9:1b:1b:7b:af:10:de:08:ba: 76:02:83:0e:60:7c:7c:5c:93:8e:c2:91:6d:41:30: 2b:1f:cc:2d:e1:b0:e5:2a:f8:47:35:e4:d9:03:a9: 51:e7:69:0c:d6:2f:a2:20:7c:18:5d:7d:ff:99:79: 0d:a9:fe:14:29:3d:01:15:cb:a1:5f:1c:ca:fc:2a: a1:cb:40:56:c1:c5:53:c5:62:39:96:98:d1:a4:46: f8:01:9e:95:f9:57:2f:39:cd:f1:6e:e9:68:8c:1a: 56:0d:9c:7e:df:1e:2e:68:64:bc:c0:fc:d9:67:ef: 76:6d:0a:83:23:2a:4d:17:42:33:c0:91:53:de:e7: 3e:0d:a6:7b:a2:91:18:8c:be:fc:97:f6:a1:dd:05: e1:9d:83:88:6e:6b:2b:83:b9:60:6e:53:4f:86:6b: e4:83:a9:6c:d5:c7:f1:91:92:94:91:ba:e0:54:93: 18:e9:5f:1d:b6:ea:6d:a5:98:4b:e9:dd:88:ba:f3: 7e:85:c0:37:9b:71:ab:06:6c:a0:80:1b:c4:f4:c4: 41:fd:5a:a8:3c:66:ee:e9:72:00:2d:39:79:07:96: eb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:90:24:CB:15:16:68:9D:56:3A:56:BF:23:1B:A1:D2:5B:FB:88:D1 X509v3 Authority Key Identifier: keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:7a:14:5f:3d:de:46:72:39:76:e5:67:3f:8a:1d:82:63:95: 90:69:19:b0:ae:55:3b:d0:62:03:e4:ae:77:47:f8:a7:8f:81: 24:42:ca:11:aa:e5:ef:c5:1a:51:9e:e3:9d:95:db:43:59:23: d5:8c:db:b7:fc:21:d0:8f:17:7f:ae:16:1e:09:ab:d1:00:b2: f2:4f:ec:47:b2:4b:2b:08:91:38:7a:ac:23:19:42:b6:66:9f: 2e:fd:64:1d:56:12:3b:15:c0:83:19:e5:10:de:01:26:9c:6f: ff:fa:cc:a2:d5:18:3a:f4:95:89:b9:6c:31:73:5e:12:a5:8f: 5e:d1:7e:8a:02:64:fe:fc:44:3f:d8:cf:43:e0:6c:17:99:e4: b4:79:f2:88:3b:c9:0d:c3:e4:3f:0e:e0:5f:3d:9a:40:21:97: b7:41:54:73:27:95:a7:84:8d:4f:b8:75:3a:96:e7:cc:e9:7d: b7:c0:bf:33:28:f1:0b:1a:00:bf:76:74:21:25:1c:42:ba:5b: bd:7c:02:79:a9:b1:3c:dc:5a:ea:fd:42:77:42:67:f7:fe:4a: 78:ea:df:0b:1f:25:46:28:27:f5:12:aa:70:20:62:00:83:f6: 3d:26:76:96:a3:cb:95:1a:da:38:45:12:3f:c3:ab:3c:e2:51: 03:02:24:14 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUatvMfuV5xW2XZc/+k1aygZPN05owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz ZWFlYzQ3ZDAeFw0yNTA0MjYwNTI0NTdaFw0yNTA0MjcwNzI4NTdaMDMxMTAvBgNV BAMTKDYxOTAyNENCMTUxNjY4OUQ1NjNBNTZCRjIzMUJBMUQyNUJGQjg4RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbZXPPpMzm4XJfsjEh/sulEmo Du556009jdE6zM+nYOctc8kbG3uvEN4IunYCgw5gfHxck47CkW1BMCsfzC3hsOUq +Ec15NkDqVHnaQzWL6IgfBhdff+ZeQ2p/hQpPQEVy6FfHMr8KqHLQFbBxVPFYjmW mNGkRvgBnpX5Vy85zfFu6WiMGlYNnH7fHi5oZLzA/Nln73ZtCoMjKk0XQjPAkVPe 5z4NpnuikRiMvvyX9qHdBeGdg4huayuDuWBuU0+Ga+SDqWzVx/GRkpSRuuBUkxjp Xx226m2lmEvp3Yi6836FwDebcasGbKCAG8T0xEH9Wqg8Zu7pcgAtOXkHlus/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUYZAkyxUWaJ1WOla/Ixuh0lv7iNEwHwYDVR0j BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2 dXhIMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzE0MzM4Ny1m MDEzLTQ5MjItODM4ZS1lMTg4NjRiZTFlNGEvMC9CRTBCQjc4ODY5Q0RCMkFEMEM5 NzFBNkE4NThBMzAyMTNFQUVDNDdELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInoUXz3eRnI5duVnP4od gmOVkGkZsK5VO9BiA+Sud0f4p4+BJELKEarl78UaUZ7jnZXbQ1kj1Yzbt/wh0I8X f64WHgmr0QCy8k/sR7JLKwiROHqsIxlCtmafLv1kHVYSOxXAgxnlEN4BJpxv//rM otUYOvSViblsMXNeEqWPXtF+igJk/vxEP9jPQ+BsF5nktHnyiDvJDcPkPw7gXz2a QCGXt0FUcyeVp4SNT7h1OpbnzOl9t8C/MyjxCxoAv3Z0ISUcQrpbvXwCeamxPNxa 6v1Cd0Jn9/5KeOrfCx8lRign9RKqcCBiAIP2PSZ2lqPLlRraOEUSP8OrPOJRAwIk FA== -----END CERTIFICATE-----Generated at Sat Apr 26 19:02:57 2025 by rpki-client