$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: 5nRqoeLj5qMZL4JLvtgNRHx6eFkIwj4E1ZCRzIikKKk= Subject key identifier: EE:52:7D:30:58:EA:C3:E5:3B:B2:C5:49:4D:43:3A:73:B6:4B:5F:B1 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 4BCFA6C4007AACD6172B9238A6D461A91433DE86 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 0213 Signing time: Sat 26 Apr 2025 14:28:33 +0000 Manifest this update: Sat 26 Apr 2025 14:23:33 +0000 Manifest next update: Sun 27 Apr 2025 15:37:33 +0000 Files and hashes: 1: 326131343a373538303a393030303a3a2f34302d3438203d3e20323134363433.roa (hash: TpBOht4fHdBbgzn8V6oN1sv1lzMWI2nPHKIFH/SJnHk=) 2: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: cFxWp20cVK0UfiJxxcLtUOXevD3OgB7dMefIF5hBHOk=) 3: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: UUjmxJF82e6idXGyeDbWwHAKwiDqilNXOOEDdf0+2TI=) 4: 326131343a373538313a653030303a3a2f33362d3438203d3e20323134363433.roa (hash: x9Ws2a9hchs2I1MVNTnPpvnZFWRirIvQpeIuGTe39hw=) 5: 326131343a373538303a393230303a3a2f34302d3438203d3e20313430393135.roa (hash: n6lsjVYHHKKKPmzUm98edFKQEZTX7R3BteBSBE3ZmTg=) 6: 326131343a373538303a393130303a3a2f34302d3438203d3e20323031333836.roa (hash: HGfpWKFgSmhSbJJ0S3ZdUrJxu8/156bUgg5vlqYKRis=) 7: 326131343a373538303a393630303a3a2f34302d3438203d3e20313533333736.roa (hash: a3qLcUPi+RQppEqo978zrfnO/2oaV9TKnigMH0wuHZQ=) 8: 326131343a373538303a393330303a3a2f34302d3438203d3e20323136323939.roa (hash: 0JNkK9KnjI4w2zV41Uw2bLOQhv0TkTdwPhPOAejMVJo=) 9: 326131343a373538303a393430303a3a2f33392d3438203d3e20313430393135.roa (hash: mVqYPHXZFgCW00Y2ej0uNLFZlmcciaFr8mPxKhhXZIs=) 10: 326131343a373538303a393130303a3a2f34302d3438203d3e20323136323939.roa (hash: c4wfh1kOphA8Axvw6+dnj3lAut4b1kpMpQW/rZEnV+o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 15:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:cf:a6:c4:00:7a:ac:d6:17:2b:92:38:a6:d4:61:a9:14:33:de:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Apr 26 14:23:33 2025 GMT Not After : Apr 27 15:37:33 2025 GMT Subject: CN=EE527D3058EAC3E53BB2C5494D433A73B64B5FB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:28:04:05:bd:4d:cc:b2:a7:ff:1a:c5:b6:84: 4f:43:a4:59:2d:60:db:43:82:fa:66:8f:d6:26:61: 80:62:ae:e1:37:5e:3b:3e:cb:8c:e8:47:82:bb:2f: 01:84:e1:99:c8:3f:a2:2b:37:fa:fb:87:22:d4:d7: b7:ff:08:02:3e:a2:de:7c:bd:a6:9c:5b:fb:45:2d: 79:e9:1d:ea:a2:5f:e4:bf:86:3a:f0:2e:3e:9e:2b: 06:5d:39:a0:d4:6d:61:f5:9f:bb:01:ff:a5:7c:a8: 67:94:07:c2:cc:24:bc:a4:00:09:98:08:92:00:c4: 3a:54:07:c5:42:4c:f7:88:e9:e9:e5:1d:18:01:d4: 07:ca:87:ef:81:11:1b:19:83:25:7b:18:e0:69:c3: e1:91:e9:a8:6f:ec:2d:c1:fb:bb:d1:de:aa:8e:29: 1f:af:6e:3c:de:b4:49:9f:92:50:06:c1:df:3b:d2: 37:c0:f6:55:ae:be:89:2e:dd:e5:ec:d2:a9:a8:da: ff:5e:a1:78:21:e6:01:a5:e7:91:b7:35:f0:c5:ad: 28:dd:cc:cf:95:c5:64:81:22:ac:23:76:95:64:ac: b4:f6:95:83:cb:ac:a5:e4:ad:ba:cc:30:97:ec:31: 2f:0a:00:08:89:1f:6c:6a:8e:4b:34:26:d8:60:6b: 18:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:52:7D:30:58:EA:C3:E5:3B:B2:C5:49:4D:43:3A:73:B6:4B:5F:B1 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b2:b3:d2:32:5a:19:d4:2d:26:13:2e:78:3b:66:15:3d:a1: 68:e2:da:10:42:f6:0b:e2:37:c4:4f:11:ec:67:41:2a:11:ad: 42:9b:86:56:e2:9d:7c:21:a4:4d:a7:38:f2:6f:24:dc:1c:18: de:fe:9a:6c:c0:04:b6:37:54:f0:d6:fe:11:1b:23:6a:8b:e1: f2:a6:de:ba:a0:93:4f:0a:7c:d7:63:0d:e2:ba:9f:23:8d:89: 9f:71:e6:cf:48:68:d2:e2:b7:7e:b0:c3:8e:46:b1:39:2e:4a: 5a:4d:a8:37:44:a5:10:63:ea:d7:5a:8c:b9:2d:87:17:49:2d: 83:3f:97:d1:f9:23:4a:01:bb:3e:54:c6:c4:66:71:b8:6f:80: b8:91:04:a5:05:f5:e8:0c:65:4b:5d:1a:b7:d0:c0:2b:5c:6f: 1a:03:0f:34:fb:f5:d8:88:d0:c1:02:93:c2:ef:a2:42:a7:d3: 6c:61:3b:e0:79:cd:83:94:4c:52:16:06:43:be:cb:bc:5b:87: ae:bf:19:c0:c6:8a:a3:3d:cc:7f:39:ba:6d:eb:b1:5c:e4:2a: 63:76:ef:8d:e7:a7:a1:a9:8a:ea:d6:13:d9:73:5a:09:26:ea: 9b:40:ac:3d:e2:55:6f:84:81:fb:c2:98:cd:38:67:8f:ae:a3: 75:8a:65:49 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUS8+mxAB6rNYXK5I4ptRhqRQz3oYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNTA0MjYxNDIzMzNaFw0yNTA0MjcxNTM3MzNaMDMxMTAvBgNV BAMTKEVFNTI3RDMwNThFQUMzRTUzQkIyQzU0OTRENDMzQTczQjY0QjVGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfKAQFvU3Msqf/GsW2hE9DpFkt YNtDgvpmj9YmYYBiruE3Xjs+y4zoR4K7LwGE4ZnIP6IrN/r7hyLU17f/CAI+ot58 vaacW/tFLXnpHeqiX+S/hjrwLj6eKwZdOaDUbWH1n7sB/6V8qGeUB8LMJLykAAmY CJIAxDpUB8VCTPeI6enlHRgB1AfKh++BERsZgyV7GOBpw+GR6ahv7C3B+7vR3qqO KR+vbjzetEmfklAGwd870jfA9lWuvoku3eXs0qmo2v9eoXgh5gGl55G3NfDFrSjd zM+VxWSBIqwjdpVkrLT2lYPLrKXkrbrMMJfsMS8KAAiJH2xqjks0JthgaxhfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU7lJ9MFjqw+U7ssVJTUM6c7ZLX7EwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcsrPS MloZ1C0mEy54O2YVPaFo4toQQvYL4jfETxHsZ0EqEa1Cm4ZW4p18IaRNpzjybyTc HBje/ppswAS2N1Tw1v4RGyNqi+Hypt66oJNPCnzXYw3iup8jjYmfcebPSGjS4rd+ sMOORrE5LkpaTag3RKUQY+rXWoy5LYcXSS2DP5fR+SNKAbs+VMbEZnG4b4C4kQSl BfXoDGVLXRq30MArXG8aAw80+/XYiNDBApPC76JCp9NsYTvgec2DlExSFgZDvsu8 W4euvxnAxoqjPcx/Obpt67Fc5Cpjdu+N56ehqYrq1hPZc1oJJuqbQKw94lVvhIH7 wpjNOGePrqN1imVJ -----END CERTIFICATE-----Generated at Sun Apr 27 07:41:22 2025 by rpki-client