$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft File: C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json) Hash identifier: fEQncxKkODhhqNUTukE9DMqDbNU6TiVN1n0yal4M86M= Subject key identifier: FB:05:BA:EE:8A:17:0A:6A:94:8C:85:FE:83:1F:0E:CD:44:9F:EF:5C Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Certificate serial: 135E3F0C922F788E7FBEC7A4585F4297D74CEDD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft Manifest number: 0455 Signing time: Sat 26 Apr 2025 12:29:59 +0000 Manifest this update: Sat 26 Apr 2025 12:24:59 +0000 Manifest next update: Sun 27 Apr 2025 16:04:59 +0000 Files and hashes: 1: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: C9UN/z7rRSIBHXCw3Mn5S1vnSskjCCo5azhWVB5o2V8=) 2: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: Pj3RR3td0yNm1QOeg5LragFKYjC/rqVSM8KV2N8Hv4A=) 3: 3139332e3234362e3130322e302f32342d3234203d3e203630373831.roa (hash: DsxMlBpnaDBCTZCwZ+4l21L/Mim9agw8EK48LHeXcxw=) 4: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: L9Eh3dUBQZeTlatlLEIWIynDu2TWzbfy/XCcEHxplJw=) 5: 3139332e3234362e342e302f32342d3234203d3e203231383539.roa (hash: iisXo7tt/EOoR40Zq4dWFrL4aQJ5N/mysm6fOdjl4Ag=) 6: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (hash: hv8+1ab3SlqVr0lUzuXGkIAi200jEC6ydrdZg2cy0KU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 16:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:5e:3f:0c:92:2f:78:8e:7f:be:c7:a4:58:5f:42:97:d7:4c:ed:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Validity Not Before: Apr 26 12:24:59 2025 GMT Not After : Apr 27 16:04:59 2025 GMT Subject: CN=FB05BAEE8A170A6A948C85FE831F0ECD449FEF5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d5:41:79:95:9a:a4:c8:9b:2f:69:1a:11:e8: e1:b0:46:24:7d:e1:27:ec:f3:87:9e:59:b5:66:e3: 7e:ca:81:84:54:80:c6:d6:83:2e:29:0b:02:5c:eb: 18:da:8c:82:c4:ad:92:03:e6:90:76:15:01:f8:59: 1d:6e:2f:1e:66:36:97:4f:0b:86:66:ee:5c:dd:22: ae:d0:2f:e5:37:ae:51:62:cd:b7:19:97:14:2c:c9: fa:54:c3:0f:c2:db:aa:9a:0b:e8:26:6d:e7:ba:eb: b5:b6:64:45:a9:f8:15:7a:86:8f:c1:64:40:1c:09: 73:ce:5a:11:1f:e8:95:f5:4b:9f:5a:66:cd:4f:53: b3:84:ae:16:29:e3:32:3c:45:56:c0:2f:6a:e6:e6: b8:5b:89:fb:92:df:39:53:b6:9e:83:15:9f:be:91: 06:05:91:90:4f:2a:aa:d9:c3:24:52:6f:1f:7b:fe: 08:64:69:5d:72:bd:df:00:ba:e7:cf:69:f3:2f:c5: 9d:eb:1f:12:b5:d8:77:ed:7b:52:46:00:e2:14:7c: 76:72:ae:fc:7e:9c:ee:71:3e:74:83:4f:24:ba:e1: 65:5c:5f:05:0e:9e:5e:16:eb:75:c2:62:f8:5b:a0: 71:87:7c:c4:c9:93:ad:b8:80:74:cf:af:8e:a6:f2: f4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:05:BA:EE:8A:17:0A:6A:94:8C:85:FE:83:1F:0E:CD:44:9F:EF:5C X509v3 Authority Key Identifier: keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:c3:00:98:e9:45:57:78:cd:3c:f8:8c:cd:f8:e9:3c:fb:0b: b7:91:4d:7c:5c:d1:09:55:39:df:af:0c:1c:94:28:0a:60:6f: f0:96:4d:45:bf:cb:8f:ee:ed:68:15:5e:1d:31:5a:4b:bb:85: 03:2f:06:39:8f:5b:56:b4:3e:01:3b:9f:ff:12:21:f4:8c:d5: a0:7d:43:3f:25:02:9d:7d:a1:20:1f:2e:7c:3b:f8:ee:07:3c: 73:84:20:b6:18:b6:ca:11:ee:eb:ac:3d:10:b7:94:1a:11:77: 4c:b8:c5:2a:67:c9:5e:4b:dc:d9:ba:9f:08:31:3b:94:a2:a8: 95:e1:ae:62:16:c9:51:99:9b:e0:3f:3b:c7:da:16:43:0f:9b: c6:59:42:82:e6:a6:5c:e5:d3:d4:3f:39:56:84:12:b2:3a:cb: 20:9b:0a:a1:4d:f2:d2:04:d3:3a:c2:e2:22:d6:f6:88:01:43: b9:83:48:d2:24:eb:0f:a2:03:d1:3f:84:b1:c4:0d:21:13:1a: 11:df:23:57:5c:21:e1:7f:c2:92:6e:eb:48:e1:36:ef:b1:77: 0f:53:b8:b2:2c:71:e8:0e:7e:c3:e8:e6:dd:26:f4:49:f9:31: 21:63:3d:ee:c8:b1:ad:15:d4:06:00:13:82:7d:0d:5f:48:f6: 1c:a4:12:ee -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUE14/DJIveI5/vsekWF9Cl9dM7dAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi NDk0YTdiZjAeFw0yNTA0MjYxMjI0NTlaFw0yNTA0MjcxNjA0NTlaMDMxMTAvBgNV BAMTKEZCMDVCQUVFOEExNzBBNkE5NDhDODVGRTgzMUYwRUNENDQ5RkVGNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk1UF5lZqkyJsvaRoR6OGwRiR9 4Sfs84eeWbVm437KgYRUgMbWgy4pCwJc6xjajILErZID5pB2FQH4WR1uLx5mNpdP C4Zm7lzdIq7QL+U3rlFizbcZlxQsyfpUww/C26qaC+gmbee667W2ZEWp+BV6ho/B ZEAcCXPOWhEf6JX1S59aZs1PU7OErhYp4zI8RVbAL2rm5rhbifuS3zlTtp6DFZ++ kQYFkZBPKqrZwyRSbx97/ghkaV1yvd8AuufPafMvxZ3rHxK12Hfte1JGAOIUfHZy rvx+nO5xPnSDTyS64WVcXwUOnl4W63XCYvhboHGHfMTJk624gHTPr46m8vQHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+wW67ooXCmqUjIX+gx8OzUSf71wwHwYDVR0j BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0 ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT VXA3OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOTBhOTM1YS1h NzRkLTRiOTgtOTQzMC1iYzdhZTVjMjRmMjgvMC9DNzlEMDJDNjE4ODYxQUQ0NUJB Rjc4Q0UzOTAyM0NCQ0I0OTRBN0JGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMMAmOlFV3jNPPiMzfjp PPsLt5FNfFzRCVU5368MHJQoCmBv8JZNRb/Lj+7taBVeHTFaS7uFAy8GOY9bVrQ+ ATuf/xIh9IzVoH1DPyUCnX2hIB8ufDv47gc8c4Qgthi2yhHu66w9ELeUGhF3TLjF KmfJXkvc2bqfCDE7lKKoleGuYhbJUZmb4D87x9oWQw+bxllCguamXOXT1D85VoQS sjrLIJsKoU3y0gTTOsLiItb2iAFDuYNI0iTrD6ID0T+EscQNIRMaEd8jV1wh4X/C km7rSOE277F3D1O4sixx6A5+w+jm3Sb0SfkxIWM97sixrRXUBgATgn0NX0j2HKQS 7g== -----END CERTIFICATE-----Generated at Sun Apr 27 07:39:50 2025 by rpki-client