$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft File: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft (raw, json) Hash identifier: sK4tNhwSyYuudm5ABgt3EeglM7Mlk6PBc2kquFLWzeE= Subject key identifier: 8F:80:0B:BD:65:FB:4D:83:DD:32:E9:10:69:04:D0:D0:06:5B:A5:83 Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Certificate serial: 483806065803FAB4FF8B54492000E06AFFCFA379 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft Manifest number: 36 Signing time: Mon 28 Apr 2025 02:39:59 +0000 Manifest this update: Mon 28 Apr 2025 02:34:59 +0000 Manifest next update: Tue 29 Apr 2025 03:32:59 +0000 Files and hashes: 1: 326130663a336363353a3a2f33322d3332203d3e20323037393336.roa (hash: yq+hWHhfyocRCOJbnYGyzdHlkfHxXD4gPxuVgEPCc0g=) 2: 3139342e3132342e3233362e302f32342d3234203d3e203630373335.roa (hash: lmVh0tkdqz2ZaktlfIJzzJLuyL6wItEcUEPI+PVNqdo=) 3: 326130663a336363333a323030303a3a2f33362d3336203d3e203630373335.roa (hash: hZUNrJfyUHgUntGAqdSVlBaE4wglKTi9y0zmmly1bMY=) 4: 326130663a336363363a3a2f33322d3332203d3e203630373335.roa (hash: Bvg0bczZRvr0hNeXj13n0Q8N1O34FXLeiihKmXvd96c=) 5: 326130663a336363333a313030303a3a2f33362d3336203d3e203630373335.roa (hash: ad3eCylfdMfYW/Id31ooquQQLvZwumdWGj+lszfaEsA=) 6: 326130663a336363333a3a2f33362d3336203d3e203630373335.roa (hash: qgpa17rXBGEZyX0zTURKp2TS7HA9WA0LAdj3r9yq+jg=) 7: 326130663a336363313a3a2f33322d3332203d3e20323037393336.roa (hash: 4eRihxuyWrFmyrmWNHP+q80BiQuGj/+XTMKJH0kDcVI=) 8: 326130663a336363323a3a2f33322d3332203d3e20323037393336.roa (hash: bLMKUTu2LDh7TH4JEFo2TwGKCx3JiqqNy6hRd14etMM=) 9: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (hash: Wt7cVymDfWBwMzR8hqsJLmmyo1G55vHli1MG8ova8P4=) 10: CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl (hash: YzcJQGZJyAK1Dvx+w6KcQVHHngyIdzGHdQ5O7gCkOxw=) 11: 326130663a336363373a3a2f33322d3332203d3e203539383133.roa (hash: 0XA7loK9zcLZ4LH8gJRLIhKhFochpbrC40dXD0XEE/8=) 12: 326130663a336363303a3a2f33322d3332203d3e20323037393336.roa (hash: E+WPtm+HS9AVsakqcLrBjACoAm/NbChhrd4PG4s+X5o=) 13: 3139342e3132342e3233342e302f32342d3234203d3e203534333339.roa (hash: wdUsagydvVBIUao6PJHWRop4oPMEKXc9pJyNsG4SW9o=) 14: 3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (hash: MbX2Jo3+qNy9yJ51qumhhpSA5fjjpKXnL9+Ixdd7q/M=) 15: 3139342e3132342e3233342e302f32342d3234203d3e20393936.roa (hash: ZoxbCHQMtNZPfbUxrxLpOcXkuKUfw+Blft69mSm2oZk=) 16: 326130663a336363343a3a2f33322d3332203d3e20323037393336.roa (hash: sUFXVk5mJuzGXi+txvF0jHfWX/7COhdmW+wdhnGLLbA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 03:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:38:06:06:58:03:fa:b4:ff:8b:54:49:20:00:e0:6a:ff:cf:a3:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac Validity Not Before: Apr 28 02:34:59 2025 GMT Not After : Apr 29 03:32:59 2025 GMT Subject: CN=8F800BBD65FB4D83DD32E9106904D0D0065BA583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:90:22:17:bc:61:da:5a:5f:55:16:9b:41:3f: 11:49:cd:ce:4d:49:62:18:51:e6:51:6f:98:b6:b7: 19:ea:55:c0:33:b3:f4:57:12:e8:76:ac:1d:a8:47: 5c:4c:55:ec:5c:2e:f6:3d:18:b7:46:2b:a9:c8:33: f5:59:40:ba:bd:80:fb:b1:ba:09:d4:54:2c:37:19: 8b:17:c7:33:ae:a2:76:61:f9:76:7a:c1:a1:e0:be: 54:e5:a8:10:d7:f2:0b:0e:90:05:ca:9b:41:f6:18: 03:83:d6:2a:e6:0e:ea:ad:42:5d:87:9c:31:e4:5a: 7b:46:4a:49:b1:f2:28:82:9f:cd:5b:83:d1:29:85: 86:16:25:ca:34:61:36:dc:33:a6:20:cd:84:a9:75: 4c:42:5e:42:de:96:8f:d7:a1:18:aa:39:47:06:11: 3f:3f:3c:d7:c9:91:21:15:93:9a:6e:8d:5c:44:c4: 7f:bf:af:81:f9:69:de:7f:01:51:48:a4:96:ef:54: d2:8f:da:55:de:1a:ff:55:5c:9b:ee:d1:83:cb:d7: d4:3d:c7:81:da:5a:f2:14:10:fb:22:e7:a4:f0:b1: d3:01:0f:c4:12:e0:48:44:0a:39:ff:4e:66:d6:82: 0a:ee:1f:81:d2:90:d8:3c:c5:85:90:e0:9e:71:72: 29:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:80:0B:BD:65:FB:4D:83:DD:32:E9:10:69:04:D0:D0:06:5B:A5:83 X509v3 Authority Key Identifier: keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:5c:6f:ed:49:f0:f7:ae:2f:dd:a9:27:e7:24:0c:cb:df:3d: 94:f8:ed:bb:77:4c:07:bb:39:5e:5f:c1:cc:e3:1e:58:52:6f: 64:5e:11:9b:ff:94:ae:ba:53:a1:d1:3f:0c:98:85:5b:89:af: fd:a6:59:e9:75:ba:b9:41:26:da:db:ad:13:96:51:dd:91:93: c0:14:44:eb:17:41:cd:c4:33:77:ba:42:8e:8c:f0:07:9e:7c: 04:57:cc:41:8a:19:af:68:84:f8:14:36:77:2e:95:a9:39:65: e2:cc:16:a5:4d:47:12:92:e4:f0:5f:43:51:22:0b:38:1a:80: aa:b0:1a:d9:61:f5:2b:ea:43:2b:73:91:be:34:c6:09:3c:4d: 17:46:eb:b1:a9:aa:56:26:d7:4b:99:d4:a5:14:61:a0:41:1a: 21:b6:e8:cd:09:35:8f:f6:f6:f8:cf:59:e5:bb:0e:a4:a1:cd: 1d:c0:0d:1a:8d:2f:2a:6a:22:73:79:a8:ac:50:ed:27:80:9a: 69:1e:6f:db:53:bb:c8:5a:b1:fd:d9:35:c7:b6:a8:34:7a:83: 3b:e2:97:ab:f9:6c:e4:ea:df:f2:0b:0b:ef:5a:44:55:45:be: 17:07:c3:96:96:3b:20:1e:c8:05:02:a4:2e:30:85:52:e6:6a: fd:1b:09:aa -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSDgGBlgD+rT/i1RJIADgav/Po3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2IyOWE3NzY2OWRmNWE3YTVjYjUwNmQ4MzllZThhYTQz MzdjY2FhYzAeFw0yNTA0MjgwMjM0NTlaFw0yNTA0MjkwMzMyNTlaMDMxMTAvBgNV BAMTKDhGODAwQkJENjVGQjREODNERDMyRTkxMDY5MDREMEQwMDY1QkE1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxkCIXvGHaWl9VFptBPxFJzc5N SWIYUeZRb5i2txnqVcAzs/RXEuh2rB2oR1xMVexcLvY9GLdGK6nIM/VZQLq9gPux ugnUVCw3GYsXxzOuonZh+XZ6waHgvlTlqBDX8gsOkAXKm0H2GAOD1irmDuqtQl2H nDHkWntGSkmx8iiCn81bg9EphYYWJco0YTbcM6YgzYSpdUxCXkLelo/XoRiqOUcG ET8/PNfJkSEVk5pujVxExH+/r4H5ad5/AVFIpJbvVNKP2lXeGv9VXJvu0YPL19Q9 x4HaWvIUEPsi56TwsdMBD8QS4EhECjn/TmbWggruH4HSkNg8xYWQ4J5xciklAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUj4ALvWX7TYPdMukQaQTQ0AZbpYMwHwYDVR0j BBgwFoAUyymndmnfWnpctQbYOe6KpDN8yqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmIyNWQwNjgtN2Y5Yy00YjBlLWE2OTUtMTc3OWI3ZDhm MDZlLzAvQ0IyOUE3NzY2OURGNUE3QTVDQjUwNkQ4MzlFRThBQTQzMzdDQ0FBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3l5bW5kbW5mV25wY3RRYllPZTZLcERO OHlxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iYjI1ZDA2OC03 ZjljLTRiMGUtYTY5NS0xNzc5YjdkOGYwNmUvMC9DQjI5QTc3NjY5REY1QTdBNUNC NTA2RDgzOUVFOEFBNDMzN0NDQUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFxv7Unw964v3akn5yQM y989lPjtu3dMB7s5Xl/BzOMeWFJvZF4Rm/+UrrpTodE/DJiFW4mv/aZZ6XW6uUEm 2tutE5ZR3ZGTwBRE6xdBzcQzd7pCjozwB558BFfMQYoZr2iE+BQ2dy6VqTll4swW pU1HEpLk8F9DUSILOBqAqrAa2WH1K+pDK3ORvjTGCTxNF0brsamqVibXS5nUpRRh oEEaIbbozQk1j/b2+M9Z5bsOpKHNHcANGo0vKmoic3morFDtJ4CaaR5v21O7yFqx /dk1x7aoNHqDO+KXq/ls5Orf8gsL71pEVUW+FwfDlpY7IB7IBQKkLjCFUuZq/RsJ qg== -----END CERTIFICATE-----Generated at Mon Apr 28 10:36:02 2025 by rpki-client