$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft File: 2E2674263AECD572673F87614919CA492C79FAEA.mft (raw, json) Hash identifier: 8WmRopj/IGQyfyWRay13jfBSr3F/Dbf03JOwb3qAwBk= Subject key identifier: 2F:F4:C6:6D:BE:EC:AD:0E:4C:5E:7F:FB:7D:F2:D4:2A:3B:0F:B0:E7 Authority key identifier: 2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA Certificate issuer: /CN=2e2674263aecd572673f87614919ca492c79faea Certificate serial: 1B509635A1062EA0633DE790B5AD54D40382884C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft Manifest number: 77 Signing time: Sat 26 Apr 2025 09:49:59 +0000 Manifest this update: Sat 26 Apr 2025 09:44:59 +0000 Manifest next update: Sun 27 Apr 2025 13:26:59 +0000 Files and hashes: 1: 34352e36362e36302e302f32342d3234203d3e20323132323338.roa (hash: ssodqkYmRGRZcJb/W05Q2ExCVHy1b+Elgef7gRr5nMs=) 2: 2E2674263AECD572673F87614919CA492C79FAEA.crl (hash: jYEbVFVu1JOaQllwXmoZKdvDDvSDD7x/0QnI1SfbA6I=) 3: 34352e36362e36332e302f32342d3234203d3e20383334.roa (hash: sEgCiTdKWVCXu/d5z0ga/auyfNaYgNDwWsE3XxZT3rE=) 4: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (hash: tU7tyCca1tIOx1hnSKjuKCDiTN546CQQQvHB6q/i7qk=) 5: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (hash: imRIoujslgfIw1o5CZvn1r7w9Uct08AIqiMVjfiL8o4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 13:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:50:96:35:a1:06:2e:a0:63:3d:e7:90:b5:ad:54:d4:03:82:88:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2674263aecd572673f87614919ca492c79faea Validity Not Before: Apr 26 09:44:59 2025 GMT Not After : Apr 27 13:26:59 2025 GMT Subject: CN=2FF4C66DBEECAD0E4C5E7FFB7DF2D42A3B0FB0E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:eb:d6:12:8e:8a:7f:7d:ed:af:20:8a:26:7b: 95:b0:7d:c2:b4:cc:2c:52:97:d0:23:bd:49:d7:bb: 11:e5:e7:e5:44:5c:4e:44:92:ef:16:c5:e8:5a:d1: ac:21:27:bb:67:a0:ba:dc:9c:a7:d7:28:7d:f5:9e: 2a:a9:8a:32:8f:bd:b4:ac:e5:b9:38:04:c8:44:3d: 53:46:46:c2:bd:16:e7:af:ed:1f:31:26:d3:65:16: 77:8c:3f:00:dc:4a:7a:4c:0b:18:43:45:53:5d:ff: 15:70:8d:55:db:30:74:5e:27:3b:96:2e:27:93:8c: 05:44:ea:a9:ae:ad:3b:96:f1:83:18:f1:2a:ee:06: 72:dd:ad:3b:0f:05:e1:4a:48:f8:bd:62:66:bf:ab: c3:85:99:6a:cd:7e:d1:cd:bb:a1:c6:9f:45:d9:84: 64:e1:a0:5c:84:91:a0:f7:b6:61:31:8f:af:92:ae: e0:72:d3:a6:f1:30:60:57:8e:79:e2:86:b5:45:b7: 49:48:61:0b:db:9d:9b:8d:14:94:74:d2:de:a3:c4: a9:37:59:22:8c:69:47:ca:5f:80:3a:42:81:9c:c9: ec:5d:06:16:c7:ea:67:45:6f:d9:ba:ea:0f:bf:4b: 12:ec:e9:de:79:09:fa:89:4e:c0:a4:43:45:26:41: 29:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F4:C6:6D:BE:EC:AD:0E:4C:5E:7F:FB:7D:F2:D4:2A:3B:0F:B0:E7 X509v3 Authority Key Identifier: keyid:2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:ae:05:4e:b2:e1:e1:62:a6:a0:26:d3:37:60:58:30:13:65: 50:7a:15:a3:f8:9a:02:da:ad:65:28:b3:2c:0f:28:1a:1a:94: fd:c2:09:53:96:9a:81:18:c3:94:be:59:ae:53:d1:48:a3:ea: d3:17:8b:62:5e:9b:bd:9f:2f:a9:35:a8:64:48:24:64:59:b4: c0:ae:f0:ae:d7:0f:17:a5:8d:05:bb:40:6f:c7:d5:a9:19:bc: ad:eb:ab:65:66:48:fd:34:84:ea:42:7d:1f:70:0a:22:8a:f6: 95:21:98:45:24:6b:b9:13:34:f2:29:3c:55:2a:94:43:41:18: fc:cd:17:12:68:6e:47:60:bb:54:28:44:fd:0e:78:d6:0a:b2: a9:47:15:a6:87:db:86:89:18:a9:66:de:87:99:e6:5e:5b:c6: 6e:c3:f7:5d:45:5b:ea:d6:c3:29:6c:f1:a9:d4:b0:de:11:df: ad:d9:84:34:c9:0c:fd:11:e0:1d:c3:21:8c:27:7e:76:02:ff: b9:86:ef:7a:ca:d0:c7:45:6a:81:fd:a1:e9:b7:19:f0:28:22: 00:18:cb:62:37:66:6b:49:5a:1e:84:b9:83:91:4b:1a:3d:d8: d1:9f:67:d8:bb:78:0d:64:f9:4a:99:17:d0:46:fd:65:bd:c4: d8:a1:41:1c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUG1CWNaEGLqBjPeeQta1U1AOCiEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmUyNjc0MjYzYWVjZDU3MjY3M2Y4NzYxNDkxOWNhNDky Yzc5ZmFlYTAeFw0yNTA0MjYwOTQ0NTlaFw0yNTA0MjcxMzI2NTlaMDMxMTAvBgNV BAMTKDJGRjRDNjZEQkVFQ0FEMEU0QzVFN0ZGQjdERjJENDJBM0IwRkIwRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc69YSjop/fe2vIIome5WwfcK0 zCxSl9AjvUnXuxHl5+VEXE5Eku8Wxeha0awhJ7tnoLrcnKfXKH31niqpijKPvbSs 5bk4BMhEPVNGRsK9Fuev7R8xJtNlFneMPwDcSnpMCxhDRVNd/xVwjVXbMHReJzuW LieTjAVE6qmurTuW8YMY8SruBnLdrTsPBeFKSPi9Yma/q8OFmWrNftHNu6HGn0XZ hGThoFyEkaD3tmExj6+SruBy06bxMGBXjnnihrVFt0lIYQvbnZuNFJR00t6jxKk3 WSKMaUfKX4A6QoGcyexdBhbH6mdFb9m66g+/SxLs6d55CfqJTsCkQ0UmQSmrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUL/TGbb7srQ5MXn/7ffLUKjsPsOcwHwYDVR0j BBgwFoAULiZ0Jjrs1XJnP4dhSRnKSSx5+uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmQ3YzIzMWUtYTMzYy00NTU1LWI0MmUtZDAyMDkzODQ5 Mjk5LzAvMkUyNjc0MjYzQUVDRDU3MjY3M0Y4NzYxNDkxOUNBNDkyQzc5RkFFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0xpWjBKanJzMVhKblA0ZGhTUm5LU1N4 NS11by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZDdjMjMxZS1h MzNjLTQ1NTUtYjQyZS1kMDIwOTM4NDkyOTkvMC8yRTI2NzQyNjNBRUNENTcyNjcz Rjg3NjE0OTE5Q0E0OTJDNzlGQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyK4FTrLh4WKmoCbTN2BY MBNlUHoVo/iaAtqtZSizLA8oGhqU/cIJU5aagRjDlL5ZrlPRSKPq0xeLYl6bvZ8v qTWoZEgkZFm0wK7wrtcPF6WNBbtAb8fVqRm8reurZWZI/TSE6kJ9H3AKIor2lSGY RSRruRM08ik8VSqUQ0EY/M0XEmhuR2C7VChE/Q541gqyqUcVpofbhokYqWbeh5nm XlvGbsP3XUVb6tbDKWzxqdSw3hHfrdmENMkM/RHgHcMhjCd+dgL/uYbvesrQx0Vq gf2h6bcZ8CgiABjLYjdma0laHoS5g5FLGj3Y0Z9n2Lt4DWT5SpkX0Eb9Zb3E2KFB HA== -----END CERTIFICATE-----Generated at Sun Apr 27 07:20:48 2025 by rpki-client