$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: oeohwGLzNNVJ9R47dt4+j5acQeX5JrlFWikbHOTnT3E= Subject key identifier: EE:24:63:6A:EE:14:BB:66:8C:88:D2:BB:C3:64:A5:40:96:E6:84:E8 Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 2A2F4E7A4F91DEEE9F53782AC4AFE81394955221 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 03AE Signing time: Sat 26 Apr 2025 00:09:57 +0000 Manifest this update: Sat 26 Apr 2025 00:04:57 +0000 Manifest next update: Sun 27 Apr 2025 00:24:57 +0000 Files and hashes: 1: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: cwrS6A/oM7uVoRnag/rHPBb4Qk8hZAq3bZyA0gVPCzk=) 2: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: F2/HEDTQcIjyfu76DS9w/XYn8joroQAHbvep6NL5Wcw=) 3: 3138352e322e3136322e302f32332d3234203d3e20323135323639.roa (hash: C51KB3vmzIVuzhz63IWTP1lTGLSpJxZj4/CH5M0kfBA=) 4: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: oQj2no095+LyjZGzWOfw+sSJOW/7fRxpgUOPswu5nqM=) 5: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: qxlkfW/nLMV9I5WoI6HQ89q00naILT20Rguml63Zf0A=) 6: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: DuCHe81tO8TVOKBTNFQCS5fRuYDjbGZfxshPpJZXNzc=) 7: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: hY/iIpaGanxmxatebFYi3ijTkZjHjUc/Iwjsijc0S+E=) 8: 3138352e322e3136322e302f32332d3234203d3e203531383437.roa (hash: Jwdi//fPxewEqnA7O6IEmtLIG4RVeyoi6OUkCB8cEJ4=) 9: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: LBMUHWugPGnJtw9mI4PuIshgxiedjcAOS8XKlWg3eYE=) 10: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: qGNft1uCzkGwuPJH7iDQ4xUhWrhNnduWexIhT+DgvI8=) 11: 36322e3131322e3134342e302f32302d3230203d3e20313734.roa (hash: J2/lofmMncXQORl24ezDIUdcUuekO85jv8NmK3P2fLk=) 12: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: ujOzcUFn73GlYynt8yef9LZrmhEywDFvXOhmuSoBoLw=) 13: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: dPumV3w+l5K00Z5figZidyPpD2Xj/WObq95u77jhIK4=) 14: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: OKc3uZvr3kmY38TGv/j5cCd/d8TD6IBU2hGWJY9u+K0=) 15: 3138352e322e3136322e302f32332d3234203d3e203233343730.roa (hash: BaNMtijhViF+Bla+nFfkE6LPu/fLazY0/tBmFu9zjrc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 00:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:2f:4e:7a:4f:91:de:ee:9f:53:78:2a:c4:af:e8:13:94:95:52:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Apr 26 00:04:57 2025 GMT Not After : Apr 27 00:24:57 2025 GMT Subject: CN=EE24636AEE14BB668C88D2BBC364A54096E684E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ac:95:a3:a7:74:dd:38:6b:b3:71:1d:14:24: 46:68:97:35:ed:33:3e:e3:bf:62:f6:c4:23:1f:b9: af:55:37:3f:83:e5:25:d0:ba:9b:10:a4:9d:e2:89: 77:ea:5e:93:31:96:e3:74:fa:2c:61:80:4f:16:57: 7d:98:c1:a2:65:d6:2d:ab:3e:24:c7:ae:3b:e2:b2: 5f:4c:f8:f1:ef:65:24:9f:07:a8:cb:06:61:da:71: 6f:47:65:43:9b:1e:c5:94:9f:ac:5d:68:f6:ac:b0: af:0c:ae:5d:4d:45:78:19:db:57:f0:9c:99:51:2c: 7e:7a:22:8e:6a:6e:30:30:99:1f:90:54:14:4c:8e: 6c:02:b8:48:5b:76:31:c4:4e:26:88:3e:df:2c:37: d2:c3:34:ba:b9:c0:fb:18:58:57:8a:87:6c:88:52: 5f:1f:89:09:b1:c8:d7:42:9b:48:de:c7:ad:53:f7: 27:eb:55:fa:47:b0:77:c8:e4:9b:29:3f:d6:95:ed: cd:03:5c:80:fd:de:e7:3e:4a:5d:1e:b0:98:23:b9: ea:45:fe:12:72:f9:b0:b6:25:e8:8c:4c:ee:fc:1e: 10:e2:20:99:fa:b0:b4:40:09:c0:1d:31:ef:05:20: cd:44:c7:31:e9:a4:23:89:64:49:62:0b:71:6b:d0: f2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:24:63:6A:EE:14:BB:66:8C:88:D2:BB:C3:64:A5:40:96:E6:84:E8 X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:48:41:80:ca:3e:11:15:cd:71:f8:68:72:8f:0a:a1:e3:fb: 58:c7:e1:4b:f2:64:f1:aa:64:20:3a:9b:b3:e3:02:04:a2:ef: 39:09:64:d9:30:4d:2c:67:9c:47:5d:0b:2a:8c:9b:b9:7f:33: f3:77:90:69:39:66:30:8c:6d:f3:2c:e4:e1:30:04:43:20:c6: 36:4c:41:b2:f0:12:c6:ca:35:83:23:a9:fe:43:e9:02:3a:8f: 50:ca:00:8d:fc:28:4d:22:2b:dc:eb:e6:19:a4:a0:86:5d:85: db:1f:c7:a0:69:61:ff:d5:79:bf:2c:c8:3e:42:a1:a5:cd:46: b3:3a:32:2a:cc:56:fa:fe:4d:83:9c:6a:db:67:d1:ad:b7:04: 54:d9:6c:48:a1:b9:07:6e:4a:61:4f:03:e4:76:b3:98:9e:9e: 33:bd:c0:f6:0f:a1:89:2b:be:4c:b2:32:36:f3:42:4a:d1:a4: 35:cb:93:88:0e:3d:a5:52:de:b6:92:57:63:49:3c:49:f1:74: 13:e8:bf:f7:ad:34:4c:4d:b0:a4:de:95:1e:93:79:2b:e9:f6: 8e:20:ee:b5:de:c6:fd:91:11:b1:1d:fb:6b:df:e3:0a:18:c6: 86:26:ef:17:ce:90:6b:15:fd:95:cb:6c:5c:72:01:e1:30:65: 06:ea:72:3d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKi9Oek+R3u6fU3gqxK/oE5SVUiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNTA0MjYwMDA0NTdaFw0yNTA0MjcwMDI0NTdaMDMxMTAvBgNV BAMTKEVFMjQ2MzZBRUUxNEJCNjY4Qzg4RDJCQkMzNjRBNTQwOTZFNjg0RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCerJWjp3TdOGuzcR0UJEZolzXt Mz7jv2L2xCMfua9VNz+D5SXQupsQpJ3iiXfqXpMxluN0+ixhgE8WV32YwaJl1i2r PiTHrjvisl9M+PHvZSSfB6jLBmHacW9HZUObHsWUn6xdaPassK8Mrl1NRXgZ21fw nJlRLH56Io5qbjAwmR+QVBRMjmwCuEhbdjHETiaIPt8sN9LDNLq5wPsYWFeKh2yI Ul8fiQmxyNdCm0jex61T9yfrVfpHsHfI5JspP9aV7c0DXID93uc+Sl0esJgjuepF /hJy+bC2JeiMTO78HhDiIJn6sLRACcAdMe8FIM1ExzHppCOJZEliC3Fr0PLpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7iRjau4Uu2aMiNK7w2SlQJbmhOgwHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0hBgMo+ERXNcfhoco8K oeP7WMfhS/Jk8apkIDqbs+MCBKLvOQlk2TBNLGecR10LKoybuX8z83eQaTlmMIxt 8yzk4TAEQyDGNkxBsvASxso1gyOp/kPpAjqPUMoAjfwoTSIr3OvmGaSghl2F2x/H oGlh/9V5vyzIPkKhpc1GszoyKsxW+v5Ng5xq22fRrbcEVNlsSKG5B25KYU8D5Haz mJ6eM73A9g+hiSu+TLIyNvNCStGkNcuTiA49pVLetpJXY0k8SfF0E+i/9600TE2w pN6VHpN5K+n2jiDutd7G/ZERsR37a9/jChjGhibvF86QaxX9lctsXHIB4TBlBupy PQ== -----END CERTIFICATE-----Generated at Sat Apr 26 17:36:09 2025 by rpki-client