$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json) Hash identifier: OmNma1J75gCzVfAtNZlyq4QiKTdHw9tIjvWzXWqhZkU= Subject key identifier: C3:D1:0E:51:9E:A0:6B:45:D8:91:08:DD:2F:8A:6A:9D:F1:9C:49:6D Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 6D6E55F50744C96213ABF3DAE8AF4139C1CC9845 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft Manifest number: 01AD Signing time: Sat 26 Apr 2025 19:12:29 +0000 Manifest this update: Sat 26 Apr 2025 19:07:29 +0000 Manifest next update: Sun 27 Apr 2025 21:22:29 +0000 Files and hashes: 1: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: WILaErOtYEwaER07cW7IGwEP87dFlbxnPw+ZhGtPeTA=) 2: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: suIl/3chBmz4SE6S2JNws6yO1vlc1iZKVLvbUUyDaA0=) 3: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: KADA3zDKXvL/4R+46HmNoDL3xG2RVXCQ+Fx+Q057jPA=) 4: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: wu4NApOfezgLJjsC2U+bzWwjgdcgVOBFq6UL7NyfBkc=) 5: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: UnaMFJ4LqZmUQNqlqG5yZayY3BN6lWYzE1n4NGCmei8=) 6: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: 7RInWPFu4iEhvu89skGtnHts+H50iwWKTqvIM0R7KO8=) 7: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: AF+Ua5qWjlXSmRcISzVN1U/rrOe/cIos4w3BIP5f38s=) 8: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: LBwr2IIvIEK5xOuNpQkeW83enlWLrYAsIaYysvPQEas=) 9: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: mbo+9PjAf+is8MQEYQcjnTe6biSi8K+HHfmzFB/JEuY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 17:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6e:55:f5:07:44:c9:62:13:ab:f3:da:e8:af:41:39:c1:cc:98:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Apr 26 19:07:29 2025 GMT Not After : Apr 27 21:22:29 2025 GMT Subject: CN=C3D10E519EA06B45D89108DD2F8A6A9DF19C496D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:71:de:86:f6:35:0a:64:93:00:a1:db:19:a5: 61:65:cf:34:7d:b1:9f:5b:90:f3:77:d1:ef:29:d9: b2:0b:bc:7a:45:45:7d:dc:92:05:6b:61:06:ba:ff: 79:6a:99:f6:ba:1b:4d:e4:a2:c0:43:a8:00:a8:7b: 54:57:6b:22:b9:42:cb:6b:fd:3f:7f:ca:9c:d6:fb: 2b:09:2b:c9:28:e8:50:cc:f0:98:f4:c5:1a:a1:cf: 5b:ab:a2:3f:28:bf:d4:ef:13:5c:87:2e:e7:26:fe: 90:3f:68:85:9b:71:cb:5f:ed:5e:d3:3d:b8:b1:b7: 4a:ba:6a:0e:1f:4b:dd:c6:9f:0b:b5:ed:0f:c2:e5: f6:f0:80:6e:ef:82:53:42:fe:03:b2:0b:d7:b7:24: b2:03:9f:f7:28:5d:90:20:f5:84:c3:58:fe:c6:01: 00:40:18:e5:59:a6:0e:9b:ac:a2:5a:9b:5b:a9:bd: de:a6:62:54:b2:b3:ac:ef:2d:a9:a9:d1:aa:98:0d: e4:2a:20:ca:64:8b:2b:b3:cb:4e:18:4d:ea:f8:ad: 3b:cd:56:96:f8:61:97:40:0b:e7:0b:5e:b5:0e:60: 76:ec:80:09:34:1b:9b:c1:6a:f5:fc:c5:5f:ef:69: b0:22:47:2d:cd:30:56:e8:1b:37:e1:1e:4e:ca:7a: 97:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D1:0E:51:9E:A0:6B:45:D8:91:08:DD:2F:8A:6A:9D:F1:9C:49:6D X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:e8:6c:ca:00:60:7e:de:2a:ca:17:f6:f7:cb:27:e5:f9:5d: 81:42:e5:3c:2c:db:68:d1:00:66:51:59:ff:ad:60:5c:f8:90: 8a:20:52:d0:ff:0e:78:16:ef:13:49:95:e5:61:6c:44:03:04: cb:e4:bb:7b:ca:65:c6:06:c6:c9:04:2b:29:48:06:5f:a6:4d: 4e:e3:f7:65:8d:3c:3b:54:fb:03:36:6e:14:c2:21:63:7f:c0: b7:08:68:f6:0f:fc:5e:43:a1:56:fd:51:20:35:2f:07:24:ea: 39:80:f9:13:cd:f0:11:4a:b6:61:10:21:ae:ec:79:81:28:3f: 3b:fb:85:4d:81:3f:8b:f0:cf:c5:cd:65:ce:98:3b:50:3b:c3: 13:36:8f:49:d1:7b:2d:38:15:c9:e6:7e:f1:3d:c9:74:32:ee: 74:6d:32:66:90:54:72:3f:71:7b:ff:e4:87:72:52:2d:8c:07: 16:eb:b9:a7:22:6b:bc:5b:4d:5f:30:a2:26:7b:86:00:45:b9: 55:af:e9:9e:21:04:fb:b1:8e:a7:3e:4e:6f:dc:ea:ef:ce:97: d2:81:be:95:1f:99:d4:31:a4:d4:30:98:44:f9:28:af:a4:94: ef:87:6a:9e:b1:4d:40:1f:55:04:cf:d8:2d:73:c4:7f:67:c1: ef:82:c0:4a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbW5V9QdEyWITq/Pa6K9BOcHMmEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNTA0MjYxOTA3MjlaFw0yNTA0MjcyMTIyMjlaMDMxMTAvBgNV BAMTKEMzRDEwRTUxOUVBMDZCNDVEODkxMDhERDJGOEE2QTlERjE5QzQ5NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCcd6G9jUKZJMAodsZpWFlzzR9 sZ9bkPN30e8p2bILvHpFRX3ckgVrYQa6/3lqmfa6G03kosBDqACoe1RXayK5Qstr /T9/ypzW+ysJK8ko6FDM8Jj0xRqhz1uroj8ov9TvE1yHLucm/pA/aIWbcctf7V7T Pbixt0q6ag4fS93Gnwu17Q/C5fbwgG7vglNC/gOyC9e3JLIDn/coXZAg9YTDWP7G AQBAGOVZpg6brKJam1upvd6mYlSys6zvLamp0aqYDeQqIMpkiyuzy04YTer4rTvN Vpb4YZdAC+cLXrUOYHbsgAk0G5vBavX8xV/vabAiRy3NMFboGzfhHk7KepeHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUw9EOUZ6ga0XYkQjdL4pqnfGcSW0wHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBS6GzK AGB+3irKF/b3yyfl+V2BQuU8LNto0QBmUVn/rWBc+JCKIFLQ/w54Fu8TSZXlYWxE AwTL5Lt7ymXGBsbJBCspSAZfpk1O4/dljTw7VPsDNm4UwiFjf8C3CGj2D/xeQ6FW /VEgNS8HJOo5gPkTzfARSrZhECGu7HmBKD87+4VNgT+L8M/FzWXOmDtQO8MTNo9J 0XstOBXJ5n7xPcl0Mu50bTJmkFRyP3F7/+SHclItjAcW67mnImu8W01fMKIme4YA RblVr+meIQT7sY6nPk5v3OrvzpfSgb6VH5nUMaTUMJhE+SivpJTvh2qesU1AH1UE z9gtc8R/Z8HvgsBK -----END CERTIFICATE-----Generated at Sun Apr 27 07:41:45 2025 by rpki-client