$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: aH+pmSwBxIo2m9Jvg0+5NJWNQxzV0Fc59ae8ZfShEBo= Subject key identifier: 19:3A:53:B5:CF:75:0E:EC:F1:22:D9:4F:09:C7:5D:DE:6E:EC:D2:DF Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 46D1E8D620CAB3BBCB76BD318A224B95D8A27974 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 0215 Signing time: Tue 29 Apr 2025 08:49:07 +0000 Manifest this update: Tue 29 Apr 2025 08:44:07 +0000 Manifest next update: Wed 30 Apr 2025 10:02:07 +0000 Files and hashes: 1: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=) 2: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo=) 3: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=) 4: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg=) 5: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: 17qN8Bd0gWBZvDkn96RHqKMURz1HVyJmOiwn1OSD2G0=) 6: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) 7: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: PeIsCkDSoavJPo2g0zxTJ1XkAim2DieAEnHktN86nIs=) 8: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Z++XNVAKl2i3elIZ9myp5G2o2TKjv3Anv7s5uuElaws=) 9: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=) 10: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: 7RQ0gXCWkNwXJyLVMAjMT4ifOZKJ140AG/jnIia+kz4=) 11: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: hLmxywOTn2v4iv//wqgMLMQxfJouQHupbxrvDFSX9Zg=) 12: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: rNCeGZBQOWBUphahR4hTajQjcKy+jRMteiOJW7/HoVs=) 13: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=) 14: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk=) 15: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: s8PXZ6xun7QdEzluX2KYTIUVTeLEFzlJ1flicK9iKH8=) 16: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: GcV9N8X9s2uHdEzyPc2IWdnUBlbIkV9Ott353G6xxsA=) 17: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: polxJUQuuGvo82QFQvRtgLcGzpMrITqZaH9JMW5PByU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 10:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d1:e8:d6:20:ca:b3:bb:cb:76:bd:31:8a:22:4b:95:d8:a2:79:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Apr 29 08:44:07 2025 GMT Not After : Apr 30 10:02:07 2025 GMT Subject: CN=193A53B5CF750EECF122D94F09C75DDE6EECD2DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c8:4f:e5:bf:38:3c:bf:2c:4e:5f:03:ad:73: 9d:d0:57:94:69:72:be:cb:28:7a:6d:f6:4b:96:88: 9c:68:49:9c:d7:af:af:7d:dc:63:11:69:83:1c:eb: 76:3e:a9:eb:5d:aa:05:8f:8b:da:a4:1c:81:6e:3c: f4:f5:95:0c:92:42:d6:b2:65:46:63:70:05:78:01: 43:06:51:46:09:75:ea:cd:1f:49:25:28:5a:e6:9e: 0a:5b:fd:fc:a1:55:db:8a:aa:7f:88:5b:f6:39:80: a7:c9:f7:dc:43:64:c8:5c:61:0b:76:09:b4:bc:89: 4d:13:dd:9e:9d:83:2d:9a:2e:ba:ea:1b:68:42:d1: eb:93:6c:5f:48:4b:d3:82:a6:3b:8b:99:41:1f:98: 01:f9:d0:20:7c:8a:41:3d:ed:b1:83:1f:05:af:4d: 74:20:36:f0:bc:ad:d5:7c:17:37:44:18:e9:2a:56: 9a:1a:5e:d1:e6:32:ea:16:2f:f3:0a:df:73:af:be: a9:76:90:a8:9d:57:29:b9:3e:5c:d6:8e:22:50:ab: 63:1c:16:64:cc:87:ae:40:f1:2f:fe:6d:35:89:8d: 83:f3:b8:ff:80:86:a2:54:3e:a5:f8:0c:2e:ae:75: 20:f0:d6:2e:d1:da:75:ea:29:a3:ae:13:11:da:79: 92:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3A:53:B5:CF:75:0E:EC:F1:22:D9:4F:09:C7:5D:DE:6E:EC:D2:DF X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:bf:0d:ae:90:48:af:85:ed:7f:16:08:f3:6d:be:6a:a4:df: 91:8f:4b:86:4e:a9:9c:9f:54:01:78:13:c3:74:9c:16:d8:48: 50:67:88:ea:7a:96:4b:f9:26:8c:ab:40:06:ae:05:f9:62:fc: a7:cc:cb:07:dd:2c:83:66:ac:7b:c0:3f:d1:34:34:bf:c5:eb: bf:a4:d8:00:98:cb:01:42:cd:ad:21:95:c9:40:15:d2:e9:c5: b6:1c:1b:d3:78:c4:2e:6b:f4:9f:9e:51:b8:a9:83:d7:e2:9d: 0d:15:0d:eb:79:37:74:a4:d7:0e:a3:f4:2b:95:28:26:cf:6b: ce:ab:a9:70:cd:fe:55:97:0f:a0:31:b3:e5:e2:46:22:12:75: e4:d6:9c:a7:00:e2:ca:b6:5d:7f:b5:e7:b7:2f:8d:d8:e0:18: 68:ce:85:81:fb:21:d7:34:0e:8c:84:71:0a:bd:fe:27:f8:c8: b8:1b:cf:64:5f:d6:99:9c:83:fa:42:e1:1c:20:4c:32:98:15: 05:30:4e:b2:ef:c3:e4:aa:6b:b5:51:3e:e0:c2:88:0a:01:c0: e7:71:fe:9d:0e:a5:2c:f6:a1:e8:55:f2:7f:25:ec:ef:d1:6f: 60:7e:c5:0d:76:1c:7b:a4:56:79:65:8d:47:4c:a1:cc:0c:45: 06:c7:ca:a6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURtHo1iDKs7vLdr0xiiJLldiieXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNTA0MjkwODQ0MDdaFw0yNTA0MzAxMDAyMDdaMDMxMTAvBgNV BAMTKDE5M0E1M0I1Q0Y3NTBFRUNGMTIyRDk0RjA5Qzc1RERFNkVFQ0QyREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdyE/lvzg8vyxOXwOtc53QV5Rp cr7LKHpt9kuWiJxoSZzXr6993GMRaYMc63Y+qetdqgWPi9qkHIFuPPT1lQySQtay ZUZjcAV4AUMGUUYJderNH0klKFrmngpb/fyhVduKqn+IW/Y5gKfJ99xDZMhcYQt2 CbS8iU0T3Z6dgy2aLrrqG2hC0euTbF9IS9OCpjuLmUEfmAH50CB8ikE97bGDHwWv TXQgNvC8rdV8FzdEGOkqVpoaXtHmMuoWL/MK33Ovvql2kKidVym5PlzWjiJQq2Mc FmTMh65A8S/+bTWJjYPzuP+AhqJUPqX4DC6udSDw1i7R2nXqKaOuExHaeZIbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUGTpTtc91DuzxItlPCcdd3m7s0t8wHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCavw2u kEivhe1/Fgjzbb5qpN+Rj0uGTqmcn1QBeBPDdJwW2EhQZ4jqepZL+SaMq0AGrgX5 YvynzMsH3SyDZqx7wD/RNDS/xeu/pNgAmMsBQs2tIZXJQBXS6cW2HBvTeMQua/Sf nlG4qYPX4p0NFQ3reTd0pNcOo/QrlSgmz2vOq6lwzf5Vlw+gMbPl4kYiEnXk1pyn AOLKtl1/tee3L43Y4BhozoWB+yHXNA6MhHEKvf4n+Mi4G89kX9aZnIP6QuEcIEwy mBUFME6y78Pkqmu1UT7gwogKAcDncf6dDqUs9qHoVfJ/Jezv0W9gfsUNdhx7pFZ5 ZY1HTKHMDEUGx8qm -----END CERTIFICATE-----Generated at Tue Apr 29 18:38:44 2025 by rpki-client