$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: Wxx0IOpit6ag17PR+sxis0fn4CQ5Wnj8ACna/iqNSj4= Subject key identifier: 64:85:4F:2F:BF:2B:18:BA:6B:A7:EA:45:DB:A9:CD:C3:E3:3C:C2:95 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 3589E05F5D075F5EA000646F320E597899704D93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 02E4 Signing time: Fri 13 Jun 2025 23:42:50 +0000 Manifest this update: Fri 13 Jun 2025 23:37:50 +0000 Manifest next update: Sun 15 Jun 2025 02:59:50 +0000 Files and hashes: 1: 3135392e3235332e322e302f32342d3234203d3e20383334.roa (hash: Io0uqsNFWMRzWK0hBxO5SHV2H5/pOpKQHlMKDuh/MnA=) 2: 3135392e3235332e362e302f32342d3234203d3e20383334.roa (hash: 5NdQ//spLweNzxs8zHAGi1gJMib8lPFrPng4LsW41ME=) 3: 3138352e31332e3232362e302f32342d3234203d3e20323132323338.roa (hash: 2juSKbgGusV+FdSvpGdGhRB+b7yvZfXJLqRbkLs4Lo0=) 4: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: uV5gP669aq0NtuCXuZBm6wWsNYwP/024H/522nPjCx8=) 5: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: cKnNLC66X19KWTLeS9BLlyG6jkzxqkdJwZjUWCrZPHc=) 6: 3135392e3235332e312e302f32342d3234203d3e20383334.roa (hash: +Cgri0dz3lCclo0MuT04LNn4FtNZlpiIq1+Gu2V5CA8=) 7: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: r760g0siEz6WduBaM9+0UBoVni+DmtAoLKRL1O+Y728=) 8: 3138352e31332e3232372e302f32342d3234203d3e203533333536.roa (hash: fyjNZl2BnH5gWmJXj7IkwC9hLUY6iDMpaWQ6H8Zs07M=) 9: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: 9QDAlicDZU2dKA/slyHao02LhaPY7/2iCnESN6BbiqA=) 10: 3138352e31332e3232352e302f32342d3234203d3e203631333137.roa (hash: 8TzKoFnFzYaSWN5mBXGHVTu7YevWpqGi2XUkHCPKssM=) 11: 3231372e32382e3133382e302f32342d3234203d3e20323039393736.roa (hash: oyOFvRhi/TPEOopsZuEaDpEux2304igP8lMcDVdyDmE=) 12: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (hash: k6qvY6qYLtrsDEyi8J+SScxT9enfuaIRYNZH2IHqC8o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 02:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:89:e0:5f:5d:07:5f:5e:a0:00:64:6f:32:0e:59:78:99:70:4d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Jun 13 23:37:50 2025 GMT Not After : Jun 15 02:59:50 2025 GMT Subject: CN=64854F2FBF2B18BA6BA7EA45DBA9CDC3E33CC295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b1:f0:a1:0e:7f:42:fb:a1:dd:79:f8:c0:64: e1:24:18:a9:11:05:c4:1c:ef:9f:ac:c3:f3:1d:97: e0:b8:13:80:cf:88:a8:ca:79:59:47:53:3f:3e:60: c8:80:6a:1c:56:3f:fe:61:4b:e3:8f:57:0d:99:34: 23:de:9b:4a:0c:0b:e4:4c:d7:76:56:09:fd:8c:c3: 49:a1:e8:fa:46:f0:eb:d9:8b:81:59:50:a8:66:22: 39:88:ba:7c:b5:0a:54:39:9e:3b:c7:c7:c6:72:2b: 25:b7:b3:70:0b:e5:c3:bf:ac:60:85:ab:e1:28:1b: 51:5a:f4:b1:0e:c6:91:0d:80:03:0a:8a:0b:db:92: 7c:e7:dc:f7:42:f3:c9:36:e7:35:00:91:d4:6a:b6: 95:f6:1f:5c:89:3d:78:0a:bd:75:ac:e4:ba:31:a5: 15:d1:37:60:4d:4e:b7:a8:70:cb:08:d4:68:a6:ab: 32:97:5d:9c:1b:f3:c4:45:db:13:f2:c8:2d:d6:78: cf:05:98:1a:e8:f5:38:d1:5f:6a:bb:56:7f:51:b0: 29:4d:a4:bd:f1:7b:c7:c3:25:c0:a0:0b:c9:c4:c2: d1:e5:2c:2c:8e:5b:2a:b8:e6:be:9f:6c:46:78:7d: 2c:84:3e:3a:9d:3a:d5:74:a2:3a:f3:16:bf:f9:44: 83:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:85:4F:2F:BF:2B:18:BA:6B:A7:EA:45:DB:A9:CD:C3:E3:3C:C2:95 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:1b:e2:98:1e:07:b1:1d:1f:4b:42:fd:db:00:12:63:db:29: b2:7a:04:1b:1f:93:c6:8b:6f:d1:07:2b:6a:46:5c:0d:fa:f9: 59:cd:04:dd:76:2b:34:c6:22:86:cf:21:3f:b1:71:6b:48:28: 31:89:26:da:be:93:77:e1:70:cb:1d:c6:70:ba:55:61:a7:28: 89:63:36:e3:51:9a:d3:43:9d:89:9b:2d:45:17:cc:bc:cc:da: 86:2e:91:63:ac:5a:0c:2b:a7:7c:df:6f:76:90:ff:12:5b:53: 38:c9:5e:1f:dc:fb:34:24:35:01:d6:49:e4:6d:5c:05:44:ad: f6:08:32:1d:10:1e:03:35:83:56:82:81:e6:6a:f2:7e:ee:9c: 2c:13:3c:b1:a2:21:77:4c:a7:1f:6b:6d:59:83:6f:1f:9d:cc: 93:1a:f5:2a:07:ea:2a:9a:cc:6f:80:a5:49:49:6b:3a:28:7a: 59:a0:48:a5:df:63:16:06:34:9a:3f:a8:27:30:e3:32:f8:dc: cb:cb:f9:c4:49:76:ae:74:85:f1:12:a2:b3:8b:0d:d6:e6:bf: a7:9f:2b:81:02:65:a3:17:5d:7e:dc:b5:ee:4e:60:e2:f0:d8: e5:cd:1b:91:64:e8:d3:76:7f:b4:14:b3:f4:a4:dd:86:ea:48: 6c:c7:2b:22 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNYngX10HX16gAGRvMg5ZeJlwTZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNTA2MTMyMzM3NTBaFw0yNTA2MTUwMjU5NTBaMDMxMTAvBgNV BAMTKDY0ODU0RjJGQkYyQjE4QkE2QkE3RUE0NURCQTlDREMzRTMzQ0MyOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3sfChDn9C+6HdefjAZOEkGKkR BcQc75+sw/Mdl+C4E4DPiKjKeVlHUz8+YMiAahxWP/5hS+OPVw2ZNCPem0oMC+RM 13ZWCf2Mw0mh6PpG8OvZi4FZUKhmIjmIuny1ClQ5njvHx8ZyKyW3s3AL5cO/rGCF q+EoG1Fa9LEOxpENgAMKigvbknzn3PdC88k25zUAkdRqtpX2H1yJPXgKvXWs5Lox pRXRN2BNTreocMsI1GimqzKXXZwb88RF2xPyyC3WeM8FmBro9TjRX2q7Vn9RsClN pL3xe8fDJcCgC8nEwtHlLCyOWyq45r6fbEZ4fSyEPjqdOtV0ojrzFr/5RIMLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUZIVPL78rGLprp+pF26nNw+M8wpUwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBvimB4HsR0fS0L92wAS Y9spsnoEGx+Txotv0QcrakZcDfr5Wc0E3XYrNMYihs8hP7Fxa0goMYkm2r6Td+Fw yx3GcLpVYacoiWM241Ga00OdiZstRRfMvMzahi6RY6xaDCunfN9vdpD/EltTOMle H9z7NCQ1AdZJ5G1cBUSt9ggyHRAeAzWDVoKB5mryfu6cLBM8saIhd0ynH2ttWYNv H53Mkxr1KgfqKprMb4ClSUlrOih6WaBIpd9jFgY0mj+oJzDjMvjcy8v5xEl2rnSF 8RKis4sN1ua/p58rgQJloxddfty17k5g4vDY5c0bkWTo03Z/tBSz9KTdhupIbMcr Ig== -----END CERTIFICATE-----Generated at Sat Jun 14 17:10:40 2025 by rpki-client