$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: zJxdbEaWy3gh8ejs+V7TCPeSOogqabJr2TukuxqWNy0= Subject key identifier: 5B:86:ED:34:3F:33:BE:7E:8C:27:19:34:02:0A:3D:25:D6:BF:55:4C Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 15DEF013893E87C5F30DE3B956182DFFD550F823 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 04C0 Signing time: Sat 26 Apr 2025 02:59:57 +0000 Manifest this update: Sat 26 Apr 2025 02:54:57 +0000 Manifest next update: Sun 27 Apr 2025 05:04:57 +0000 Files and hashes: 1: 3138352e3232392e3230302e302f32342d3234203d3e203139343337.roa (hash: EP6RD+ZuD8/aeGRdu5DeM51xsrxE2M7oAfAneTY5Btg=) 2: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: GFt7MPBQXAoRbBAZf/a6ypM3reYPwEU6C1kyEqDInRE=) 3: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: aTFuiZRKSKlOcP1bFw/QEJGr9kwsAqFvqfR62oNQfMc=) 4: 3138352e3232392e3230332e302f32342d3234203d3e20323036373335.roa (hash: FZGdNF2bcBn3tP8pVRjxMkfCiiAE12vqIDQ0utFcBVs=) 5: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: rDqnSyP6DWpTcUAnDQJuJJnHOuawoazXpIFrHWVy4YI=) 6: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: fyEm36B55a1pd4HLESzxtTjALoxzu4leetK2j/pzqHY=) 7: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: RdOuxQjMUqkQryMcrXonWYYeJva5RY8rohAdG2ITJdw=) 8: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: OQY6w4Q7ZQH092Yj40TGy9LpmPXnSdGe58D7QhrLuAk=) 9: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: /OGL5Xocpa/mA4GEutGuQoiWc4p3DBj9VM0kpmdQZxo=) 10: 33362e3235352e39342e302f32332d3233203d3e203632323430.roa (hash: cEllpKs9D7QXOnlcaRDylPTaKGxvLoUwJx/hEnrKHPU=) 11: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: NTiGjgrJWtlD9Roa9FRQtbjOAAcPR35U4Ayfj8SpKuI=) 12: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: OBAzX7jZUk7Za1E5MEVxtdjyAyWEmCtcqgWHValavGM=) 13: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: 7MRl2ndToXr+/Nwpi0fWFQSP/EKXsP73R/4IMWd5dgM=) 14: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: 2mJFb3j98iS3WwOyYDzT/44zu56P1Mt1+w22nAIK9Eo=) 15: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: +zgqg7oCfaFMqowtNn81ipaj3irDs5wSCtc6B41Oes8=) 16: 3138352e3231332e3234302e302f32342d3234203d3e20323039323432.roa (hash: r/yhCg+H/V+gvgUqqXgm6SF+8gfop7ZrFjkciDc1VEs=) 17: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: L+rO+MXrQK3tGBKkhTiQd3Pp/oT0n0nJ8NfAxPcZ/Ik=) 18: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: O475B5YNr+mk4vbByMFVmoqbRTenx4kmx66C3HIfdsg=) 19: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: KhYwWjM/5tZMAc1Ys2Qi/Z3IxKzkYaHG79mNsaA679A=) 20: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: mH/CiZmwU0yIfVsdjhTMAG/KAtonINfckXbmsVpawiw=) 21: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: W9NdT6aoX4s9PghUA97T0GAxnEF0Q0u3VMj+QX70R5Y=) 22: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: ezbmX/yRe+yRvkLs/8FFZoupwCiBI67aZ+0JqkrMl4Q=) 23: 3138352e3231332e3234302e302f32342d3234203d3e203239353338.roa (hash: gcrezpbkvcqBnSLpZetM8bEEnNHAAsTxciJcMFM8hRM=) 24: 3138352e3231332e3234302e302f32342d3234203d3e2033323233.roa (hash: MZau10zedWMcfacP+tAKMz6NiJl4IfcotdHySIsuAvo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 05:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:de:f0:13:89:3e:87:c5:f3:0d:e3:b9:56:18:2d:ff:d5:50:f8:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Apr 26 02:54:57 2025 GMT Not After : Apr 27 05:04:57 2025 GMT Subject: CN=5B86ED343F33BE7E8C271934020A3D25D6BF554C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e5:8a:77:68:e4:6d:bd:0b:fb:79:53:9e:1b: dd:f0:3f:b2:d4:f1:07:af:97:1d:1b:11:f8:d6:4f: 4d:4a:f3:d6:07:89:bf:6d:09:16:8e:13:4c:87:54: 75:df:f0:b5:51:37:61:c9:9b:7f:d4:3e:78:53:83: c7:64:cd:94:36:82:8c:53:71:42:b6:ba:96:2e:83: 05:f6:c2:5f:f3:bc:3b:2d:29:31:d4:06:ec:24:bd: de:a6:be:2c:24:a6:4a:2c:1a:4a:19:70:4a:61:04: 1f:0e:61:c2:5f:50:91:ae:e3:7f:b2:96:95:5a:eb: df:9f:7f:57:74:20:81:ad:3f:d7:59:ff:7f:43:42: 78:a2:df:ae:5a:22:48:84:1a:b0:32:a8:9a:8a:74: 8e:32:3f:93:5a:fe:7f:37:f8:5a:f1:c9:ca:54:ea: 03:95:f1:1c:55:58:58:8f:be:ab:3b:7c:85:8f:c1: 85:d1:dd:ec:7e:54:e0:57:29:37:d3:10:23:61:10: f0:6b:ab:8b:b6:ce:45:2e:be:1c:93:50:87:bd:1a: fd:c8:d7:61:f2:ba:e7:0d:61:3a:3c:a8:42:55:66: f6:a1:22:57:52:2f:f3:e6:3c:9e:5b:b2:e6:88:23: 93:2c:db:55:1d:c5:ca:7f:bc:d9:00:7f:99:6b:89: 69:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:86:ED:34:3F:33:BE:7E:8C:27:19:34:02:0A:3D:25:D6:BF:55:4C X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2d:68:11:05:80:a4:71:9a:36:bb:7e:41:f9:e3:a0:11:10: df:ef:e6:b1:38:1e:49:1a:9e:b4:37:3e:d1:26:48:8b:72:b4: a4:60:23:e0:90:52:8a:79:2d:a6:1c:c4:e4:a5:4f:03:65:d1: d1:6f:f2:a6:7d:be:42:75:73:71:94:66:10:8f:23:60:88:37: 7d:9c:f6:d5:99:2a:be:9b:18:e9:41:cc:6e:d8:ad:6d:84:79: de:5d:e5:df:4b:d5:e8:09:cd:fc:a4:a7:4b:1c:d4:74:93:7c: 51:14:5f:e2:d6:c8:49:94:02:cc:ac:d3:30:48:dc:49:b6:00: d8:96:d0:1e:32:0c:27:28:45:69:29:28:8a:bd:ee:67:8a:5a: 0b:42:f6:f4:1e:66:91:41:6d:f1:c9:6e:85:42:ec:dd:84:de: e1:f6:7c:e8:df:50:bc:28:39:47:72:62:64:17:ee:9b:df:02: 3e:bd:9e:53:e4:ce:a6:f4:53:8b:df:3a:75:8e:1d:ce:17:4c: d6:e2:62:cb:cb:5a:15:8d:6b:63:c9:f7:f2:a8:8c:a6:3c:c6: 20:4e:8b:3a:99:a4:12:70:12:23:4c:34:5e:4f:10:f9:42:e3: c1:f7:a3:21:aa:56:bc:b0:2e:75:79:b3:66:bc:6e:29:0b:e5: e2:59:c6:a1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFd7wE4k+h8XzDeO5Vhgt/9VQ+CMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNTA0MjYwMjU0NTdaFw0yNTA0MjcwNTA0NTdaMDMxMTAvBgNV BAMTKDVCODZFRDM0M0YzM0JFN0U4QzI3MTkzNDAyMEEzRDI1RDZCRjU1NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC35Yp3aORtvQv7eVOeG93wP7LU 8Qevlx0bEfjWT01K89YHib9tCRaOE0yHVHXf8LVRN2HJm3/UPnhTg8dkzZQ2goxT cUK2upYugwX2wl/zvDstKTHUBuwkvd6mviwkpkosGkoZcEphBB8OYcJfUJGu43+y lpVa69+ff1d0IIGtP9dZ/39DQnii365aIkiEGrAyqJqKdI4yP5Na/n83+FrxycpU 6gOV8RxVWFiPvqs7fIWPwYXR3ex+VOBXKTfTECNhEPBrq4u2zkUuvhyTUIe9Gv3I 12HyuucNYTo8qEJVZvahIldSL/PmPJ5bsuaII5Ms21Udxcp/vNkAf5lriWnvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUW4btND8zvn6MJxk0Ago9Jda/VUwwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbi1oEQWApHGaNrt+Qfnj oBEQ3+/msTgeSRqetDc+0SZIi3K0pGAj4JBSinktphzE5KVPA2XR0W/ypn2+QnVz cZRmEI8jYIg3fZz21ZkqvpsY6UHMbtitbYR53l3l30vV6AnN/KSnSxzUdJN8URRf 4tbISZQCzKzTMEjcSbYA2JbQHjIMJyhFaSkoir3uZ4paC0L29B5mkUFt8cluhULs 3YTe4fZ86N9QvCg5R3JiZBfum98CPr2eU+TOpvRTi986dY4dzhdM1uJiy8taFY1r Y8n38qiMpjzGIE6LOpmkEnASI0w0Xk8Q+ULjwfejIapWvLAudXmzZrxuKQvl4lnG oQ== -----END CERTIFICATE-----Generated at Sat Apr 26 19:03:52 2025 by rpki-client