$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json) Hash identifier: 9LGtVjPyudfHsjT9RtRXoNUwP57CrxHjG3UDCtAuWqg= Subject key identifier: 87:0C:AE:12:91:06:63:24:F9:3F:B5:E1:26:A2:36:3A:1D:24:28:32 Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Certificate serial: 7A37C6432965627718D20793A4CD58AC3B920064 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft Manifest number: 78 Signing time: Wed 30 Apr 2025 06:30:32 +0000 Manifest this update: Wed 30 Apr 2025 06:25:32 +0000 Manifest next update: Thu 01 May 2025 06:38:32 +0000 Files and hashes: 1: AS215248.asa (hash: VgLZMo+3DfnFTnUlyoePR2teP/1Iq679bOkTMGpNr20=) 2: 3130332e3134392e3136382e302f32332d3233203d3e20333936303634.roa (hash: t2rRJaiO5JXUe9ojQiZxBCHHkPzOsQY90eTPJjSOm/g=) 3: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: kUiBrX3+9cuSC9lMhoz9V2p165UrI0C31waBU1/3ZFc=) 4: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: aQBGW4UwEpZw1viUGTiicR7R7bF3eHxKluau3FSxHVQ=) 5: 3130342e3136372e31392e302f32342d3234203d3e20333936303634.roa (hash: 6fhYYyEnaWNq97PI/L9874+nfD60vOGcyWKDeMmVfsI=) 6: 3130342e3136372e31392e302f32342d3234203d3e20323135323438.roa (hash: GMEP9iKl4Ev2lmXnOs/u75idB5oA52kN/Oszr3FXVVw=) 7: 3130332e3134392e3136382e302f32332d3233203d3e20323135323438.roa (hash: jx6u+d/Skw1ntHsrqxbR9j0i0Ebwk6nG48Ef8PCLKJM=) 8: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: U+VBWYTIJVB/GSq99wNrxI2FB/qHkwE0MtvmwI7s7Ug=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 May 2025 06:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:37:c6:43:29:65:62:77:18:d2:07:93:a4:cd:58:ac:3b:92:00:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68 Validity Not Before: Apr 30 06:25:32 2025 GMT Not After : May 1 06:38:32 2025 GMT Subject: CN=870CAE1291066324F93FB5E126A2363A1D242832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6e:66:37:d5:14:81:8b:e0:1f:b7:2b:07:10: ac:0a:ab:6d:74:83:cc:0c:8e:a5:19:52:da:d9:a8: 4c:c5:4a:f7:25:16:d8:8f:27:7b:42:d8:09:fb:c7: 8a:2f:d9:8a:0e:91:bf:3f:24:a8:42:a9:b6:a1:04: ff:d9:df:24:13:64:b8:e2:2d:80:c2:51:a5:df:bf: 70:30:6a:97:9e:34:24:ac:86:23:c4:40:fe:81:0b: ab:0f:bc:00:88:ce:2e:6d:63:dd:98:75:b0:f5:d5: 18:1b:18:b1:fd:b5:2c:b0:1f:67:20:46:23:a1:6c: 52:56:cf:b1:3f:89:cb:f6:a3:e9:bd:9d:e2:0e:5d: 80:1a:34:02:b1:5e:6a:77:09:da:4b:79:c7:48:d1: 7a:4e:6d:c5:de:04:61:c8:e5:79:af:82:89:38:31: 24:ba:0e:70:1a:66:9e:07:eb:ab:96:3a:25:3d:2b: 30:17:f7:a1:93:b2:fd:0a:57:5a:33:6a:f6:f9:1d: 5f:4a:80:6d:d5:07:85:84:f5:fa:4b:67:1e:de:e5: ea:c8:59:d4:c0:8e:92:03:70:03:9e:7c:32:2c:06: 34:57:f3:f3:58:1e:26:28:47:93:04:70:f9:e7:c5: b6:56:eb:a9:40:e5:26:ea:a4:7b:73:2c:55:07:35: 33:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0C:AE:12:91:06:63:24:F9:3F:B5:E1:26:A2:36:3A:1D:24:28:32 X509v3 Authority Key Identifier: keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:3b:d5:44:fe:80:0e:2e:19:ae:f7:1d:d4:0a:42:84:76:27: af:03:5c:a1:9d:80:4f:2e:ad:c5:ca:ac:4e:72:c4:71:5d:74: 3d:c9:dc:6f:30:78:2c:2b:8e:e8:b9:be:ed:8c:67:46:63:7f: 5f:f2:48:9f:25:fb:94:60:c9:89:20:ff:b5:fc:18:50:b4:ab: cb:f1:c9:b9:81:2c:df:bc:8b:4c:8c:92:38:be:ca:de:fe:5f: 31:04:66:38:47:4b:0d:65:6e:c2:94:a6:cf:3d:35:51:65:72: 90:c1:a2:58:3b:60:f1:03:f5:93:03:ea:3e:62:a6:16:1f:dd: 43:03:fb:5c:fe:89:31:8e:61:dd:9e:88:88:75:67:0b:42:d1: 3a:37:21:1f:19:b1:0e:43:9f:b7:5a:38:5a:6b:fd:c3:83:6f: c9:44:d8:b1:ea:8b:52:da:ed:96:ba:1e:a0:ef:df:ab:77:19: 41:1f:a0:63:30:28:7a:c2:e2:82:54:00:fd:bc:98:ca:77:19: 33:8d:ec:91:80:ce:ae:67:2b:7c:75:93:9d:ff:13:4f:a1:3e: cb:6d:01:77:63:d3:50:06:7b:53:ad:e4:2f:5f:80:60:06:f9: fd:30:58:be:8d:b4:9c:e2:db:2e:83:40:3e:d8:bf:9d:a2:59: 6a:69:c7:e5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUejfGQyllYncY0geTpM1YrDuSAGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWNkYzA0YmIyM2VhYTRjZWNjNzkxZGZlMDRiYjAyOGI3 ZTc5N2I2ODAeFw0yNTA0MzAwNjI1MzJaFw0yNTA1MDEwNjM4MzJaMDMxMTAvBgNV BAMTKDg3MENBRTEyOTEwNjYzMjRGOTNGQjVFMTI2QTIzNjNBMUQyNDI4MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsbmY31RSBi+AftysHEKwKq210 g8wMjqUZUtrZqEzFSvclFtiPJ3tC2An7x4ov2YoOkb8/JKhCqbahBP/Z3yQTZLji LYDCUaXfv3AwapeeNCSshiPEQP6BC6sPvACIzi5tY92YdbD11RgbGLH9tSywH2cg RiOhbFJWz7E/icv2o+m9neIOXYAaNAKxXmp3CdpLecdI0XpObcXeBGHI5Xmvgok4 MSS6DnAaZp4H66uWOiU9KzAX96GTsv0KV1ozavb5HV9KgG3VB4WE9fpLZx7e5erI WdTAjpIDcAOefDIsBjRX8/NYHiYoR5MEcPnnxbZW66lA5SbqpHtzLFUHNTPnAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUhwyuEpEGYyT5P7XhJqI2Oh0kKDIwHwYDVR0j BBgwFoAUXNwEuyPqpM7MeR3+BLsCi355e2gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2QxOWRiMjAtNDY1My00OGQ0LThmYzQtNTgwZDEzNjli N2M0LzAvNUNEQzA0QkIyM0VBQTRDRUNDNzkxREZFMDRCQjAyOEI3RTc5N0I2OC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hOd0V1eVBxcE03TWVSMy1CTHNDaTM1 NWUyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZDE5ZGIyMC00 NjUzLTQ4ZDQtOGZjNC01ODBkMTM2OWI3YzQvMC81Q0RDMDRCQjIzRUFBNENFQ0M3 OTFERkUwNEJCMDI4QjdFNzk3QjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjvVRP6ADi4Zrvcd1ApC hHYnrwNcoZ2ATy6txcqsTnLEcV10PcncbzB4LCuO6Lm+7YxnRmN/X/JInyX7lGDJ iSD/tfwYULSry/HJuYEs37yLTIySOL7K3v5fMQRmOEdLDWVuwpSmzz01UWVykMGi WDtg8QP1kwPqPmKmFh/dQwP7XP6JMY5h3Z6IiHVnC0LROjchHxmxDkOft1o4Wmv9 w4NvyUTYseqLUtrtlroeoO/fq3cZQR+gYzAoesLiglQA/byYyncZM43skYDOrmcr fHWTnf8TT6E+y20Bd2PTUAZ7U63kL1+AYAb5/TBYvo20nOLbLoNAPti/naJZamnH 5Q== -----END CERTIFICATE-----Generated at Wed Apr 30 20:02:05 2025 by rpki-client