$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: QoZkeXl/PjWs8Ql0HjFA3FONTYC2nnGZG6nbFgipCm4= Subject key identifier: 21:A8:93:1D:79:59:BB:8E:57:D5:8F:76:2C:D9:C8:FE:78:BF:8A:FB Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 2A523F512A148AB8846D3798E2EE2744EE934CE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 029B Signing time: Sat 26 Apr 2025 14:14:59 +0000 Manifest this update: Sat 26 Apr 2025 14:09:59 +0000 Manifest next update: Sun 27 Apr 2025 14:55:59 +0000 Files and hashes: 1: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: P/Qtm7iZLW4JRnkYu3gJXM0op0ZVYM+zhZraA32/eBQ=) 2: 3135392e3235332e362e302f32342d3234203d3e20383334.roa (hash: 5NdQ//spLweNzxs8zHAGi1gJMib8lPFrPng4LsW41ME=) 3: 3138352e31332e3232352e302f32342d3234203d3e203631333137.roa (hash: 8TzKoFnFzYaSWN5mBXGHVTu7YevWpqGi2XUkHCPKssM=) 4: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: cKnNLC66X19KWTLeS9BLlyG6jkzxqkdJwZjUWCrZPHc=) 5: 3135392e3235332e312e302f32342d3234203d3e20383334.roa (hash: +Cgri0dz3lCclo0MuT04LNn4FtNZlpiIq1+Gu2V5CA8=) 6: 3231372e32382e3133382e302f32342d3234203d3e20323039393736.roa (hash: oyOFvRhi/TPEOopsZuEaDpEux2304igP8lMcDVdyDmE=) 7: 3138352e31332e3232362e302f32342d3234203d3e20323132323338.roa (hash: 2juSKbgGusV+FdSvpGdGhRB+b7yvZfXJLqRbkLs4Lo0=) 8: 3135392e3235332e332e302f32342d3234203d3e20383334.roa (hash: bS7OWpukKM13Mrj8vwNN9Xt2FLz0eH8xziJA6OfcVmQ=) 9: 3135392e3235332e352e302f32342d3234203d3e20383334.roa (hash: qXWeXxMIlYcVAu0mUcCl9uApcKOZzbQ6Lhjrv7db4Es=) 10: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (hash: k6qvY6qYLtrsDEyi8J+SScxT9enfuaIRYNZH2IHqC8o=) 11: 3135392e3235332e322e302f32342d3234203d3e20383334.roa (hash: Io0uqsNFWMRzWK0hBxO5SHV2H5/pOpKQHlMKDuh/MnA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:52:3f:51:2a:14:8a:b8:84:6d:37:98:e2:ee:27:44:ee:93:4c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Apr 26 14:09:59 2025 GMT Not After : Apr 27 14:55:59 2025 GMT Subject: CN=21A8931D7959BB8E57D58F762CD9C8FE78BF8AFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cc:fa:48:dc:10:7e:59:fd:6e:05:cc:20:a7: 37:99:7b:fa:55:a5:ab:49:c6:1b:39:75:4f:f9:49: ec:10:a7:ac:0e:c2:16:86:ca:db:62:40:63:be:37: b9:32:4e:f3:f3:c6:46:f0:db:8c:a7:14:4e:10:85: 53:80:46:4e:74:e0:67:ad:2f:9c:df:4e:f0:07:c4: 31:00:90:81:78:14:b5:9e:c2:dd:aa:5a:83:ff:ae: d0:93:84:db:cc:34:22:9d:d2:51:e3:5c:6b:49:73: 8f:a9:c2:1c:64:ef:03:b0:7c:cf:26:36:87:e3:e7: b9:56:1b:93:2e:98:3a:3d:28:74:e4:86:0d:84:f7: 78:cd:11:5c:c2:2e:ef:10:6d:b0:87:30:ff:63:00: 54:0c:c0:ec:52:7c:25:31:b9:02:0a:dc:a4:37:ee: 5a:b6:2c:90:48:6f:27:43:0b:e8:cb:f7:cf:14:dc: 7c:09:a4:f4:39:d6:49:db:38:b8:83:8a:0b:32:df: df:cf:12:a5:c1:32:d0:f3:39:94:32:90:b6:bc:88: 41:ba:e2:5a:83:49:2b:67:9e:5e:b6:63:96:97:41: 84:a5:03:71:25:ea:99:7f:b5:c5:bd:9a:a9:33:27: a2:9a:de:61:ad:3a:74:11:5a:64:9c:48:60:e8:56: 8b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A8:93:1D:79:59:BB:8E:57:D5:8F:76:2C:D9:C8:FE:78:BF:8A:FB X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:80:aa:eb:54:0a:46:76:ae:05:b8:48:79:28:0c:c7:cd:fd: 74:ce:94:7f:3d:e8:7c:cb:48:7d:95:db:b3:0c:7e:97:34:65: 15:7b:41:78:04:03:aa:a6:c4:00:58:a7:41:97:63:95:b8:b3: 4f:ea:72:4d:13:d4:58:7f:05:5a:e0:42:70:76:2f:31:ec:b8: 33:a5:df:15:45:b2:9c:86:21:2a:55:76:5e:e8:13:1d:75:c1: 2c:9f:ab:b3:2e:83:7c:79:05:9f:ed:22:a0:ce:2e:49:db:26: b3:01:e3:d3:23:3a:e7:96:ad:f2:cb:2d:9f:f7:6b:2e:5b:a8: 8a:f4:a9:85:e4:61:ec:d8:51:eb:01:c5:39:0d:9a:89:eb:3c: 39:3a:5c:c7:9b:0d:53:8e:ed:f0:54:d9:bf:19:75:a9:1d:5d: 25:49:7d:79:62:d3:76:53:29:dd:9d:aa:39:c2:1d:0f:9a:ef: 75:9e:57:0b:55:2c:d9:28:0f:37:06:db:8a:b9:30:de:ec:6f: 00:ac:89:d5:e5:d7:3a:38:1b:4d:e9:2a:34:a7:b5:76:79:13: 87:e0:e0:c0:26:49:cb:1f:a6:f0:01:3c:0e:82:a6:5c:7b:b7: f8:b4:a0:de:dc:1b:3a:22:e6:1f:aa:c0:dd:40:ed:fd:2b:26: 97:08:19:11 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKlI/USoUiriEbTeY4u4nRO6TTOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNTA0MjYxNDA5NTlaFw0yNTA0MjcxNDU1NTlaMDMxMTAvBgNV BAMTKDIxQTg5MzFENzk1OUJCOEU1N0Q1OEY3NjJDRDlDOEZFNzhCRjhBRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4zPpI3BB+Wf1uBcwgpzeZe/pV patJxhs5dU/5SewQp6wOwhaGyttiQGO+N7kyTvPzxkbw24ynFE4QhVOARk504Get L5zfTvAHxDEAkIF4FLWewt2qWoP/rtCThNvMNCKd0lHjXGtJc4+pwhxk7wOwfM8m Nofj57lWG5MumDo9KHTkhg2E93jNEVzCLu8QbbCHMP9jAFQMwOxSfCUxuQIK3KQ3 7lq2LJBIbydDC+jL988U3HwJpPQ51knbOLiDigsy39/PEqXBMtDzOZQykLa8iEG6 4lqDSStnnl62Y5aXQYSlA3El6pl/tcW9mqkzJ6Ka3mGtOnQRWmScSGDoVos7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUIaiTHXlZu45X1Y92LNnI/ni/ivswHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYCq61QKRnauBbhIeSgM x839dM6Ufz3ofMtIfZXbswx+lzRlFXtBeAQDqqbEAFinQZdjlbizT+pyTRPUWH8F WuBCcHYvMey4M6XfFUWynIYhKlV2XugTHXXBLJ+rsy6DfHkFn+0ioM4uSdsmswHj 0yM655at8sstn/drLluoivSpheRh7NhR6wHFOQ2aies8OTpcx5sNU47t8FTZvxl1 qR1dJUl9eWLTdlMp3Z2qOcIdD5rvdZ5XC1Us2SgPNwbbirkw3uxvAKyJ1eXXOjgb TekqNKe1dnkTh+DgwCZJyx+m8AE8DoKmXHu3+LSg3twbOiLmH6rA3UDt/SsmlwgZ EQ== -----END CERTIFICATE-----Generated at Sat Apr 26 20:49:51 2025 by rpki-client