$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json) Hash identifier: 9JW2EYY8kt+CxNvEgF6ghYwzrdIl+SKheqIdLBriJvM= Subject key identifier: C6:7C:87:86:46:28:8A:A6:4D:79:9C:61:2B:BD:7D:E6:D1:8C:72:C0 Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 76E17AAA9DAC2D76531CC36D9F2F1A5F851C0904 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft Manifest number: 0148 Signing time: Sat 26 Apr 2025 07:05:58 +0000 Manifest this update: Sat 26 Apr 2025 07:00:58 +0000 Manifest next update: Sun 27 Apr 2025 08:06:58 +0000 Files and hashes: 1: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: o5Ji9Nl0S0iVZZtmrV/Dia6lTq3wC3uyRf91AZlTL/E=) 2: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: iavCedfpEd5k0rIG/kL5F/xxOAMPmZq43N15rLvPbic=) 3: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: U56VGJcjuLrEYPpG7oABc/1/udX8BKChn+eBmuJZDts=) 4: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: 5lNL9wmLDlet0KrRB5Z2lMcDOBbA6gqsqoS0zWeKarw=) 5: AS41720.asa (hash: +RbH8buX1T5kTWMGsS+k2hctRH6+R8V1cu3+Qe3+/Rs=) 6: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: M+4xAwh00UkvordaF40N2h1Kt+Wl8CJyJ23Y81kGLDE=) 7: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: WtqgmDwc3f4nCSOQ8ixLkNx8sXt7FaBWfi7I6des1c8=) 8: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: Qv46t81qHTc4uf1Bxldy1f/G+l9sAnh7axBU+G8+9tQ=) 9: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: bYPPd9HcHavTcfcGpM+ulmmDEDFMIVr0C3fR7prPNz4=) 10: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: sx/iVfyDskrQoK42os+6TyQoUVUvVUXlGN9RH2id0Fo=) 11: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: Wm3IDAOfkV81JSuZK/Na7XnsHjZUJzGcxe64BY1WIhs=) 12: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: kmFg1Ubyi8msuCXkZq9wTUwo9VmgSHMiCqLO0oSubS4=) 13: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: YrKMLBs8xCiL955bvB/8G11UYsLmajFWAxqi9VeJEB4=) 14: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: pyzsZjErsKF/r6TDE4GaASJZY8jmD+uruFgv90V9cVg=) 15: 326130643a623238373a656363303a3a2f34322d3432203d3e20323135363634.roa (hash: GLrga7I6TmqAcqHZCyQLyo7wEkxzFEUlvkIYE9Jlscs=) 16: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: 9fvE/EKZJ0AUA6jRvgotTKUfh3uMQWCtvLablu7TiLY=) 17: 326130643a623238373a656330303a3a2f34302d3430203d3e20323135363634.roa (hash: ZkXNpKW61UGEN6+3Eq/nkumIj3yuGpDt69ocmobqC/8=) 18: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: YeBU5ew7EbaM3M5c2zGWzk0Q7RzGkO4TGKp/4byQ64k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 08:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e1:7a:aa:9d:ac:2d:76:53:1c:c3:6d:9f:2f:1a:5f:85:1c:09:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: Apr 26 07:00:58 2025 GMT Not After : Apr 27 08:06:58 2025 GMT Subject: CN=C67C878646288AA64D799C612BBD7DE6D18C72C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:43:68:56:be:68:4d:49:cb:d4:a7:dc:96:8c: 4f:f8:46:bc:28:95:02:9f:b5:b5:ec:f3:7c:c1:34: ff:37:83:5c:6d:79:c6:ba:d9:a2:c2:9b:81:7b:f3: f1:12:5a:8b:9a:bc:a4:19:56:c2:65:01:62:74:94: 44:4b:02:f3:10:11:02:6b:91:8b:0e:8b:74:70:8c: 86:39:ee:0b:e0:80:04:27:d2:69:e9:b9:e9:55:0c: b6:47:8d:22:77:f3:ab:ab:3d:cb:32:54:c6:68:d6: 31:e8:1b:2e:74:d1:2c:1b:ef:eb:74:87:af:b0:80: 4c:f4:ed:13:a1:d0:6b:18:a8:90:0b:ad:ee:86:77: 88:20:68:53:3a:b0:64:ea:f2:34:82:e5:04:21:79: 61:6e:93:96:87:48:75:61:7e:43:ca:b0:29:0a:97: 06:25:62:d6:95:4c:fb:90:3e:8e:f8:d1:98:20:56: 45:d1:91:db:63:0e:20:0a:8f:2f:26:df:f4:86:5b: 3c:26:f6:af:b9:03:c2:e2:73:cb:61:e0:a6:e0:be: f6:36:db:48:27:57:77:22:f2:5a:f3:29:6d:af:a0: 90:e9:af:1a:80:9a:bf:f5:8e:55:79:37:89:ab:1b: 78:76:83:c8:a3:8e:6e:72:1a:29:25:1b:d6:b1:ec: 63:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7C:87:86:46:28:8A:A6:4D:79:9C:61:2B:BD:7D:E6:D1:8C:72:C0 X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ed:ce:fa:b5:cc:c4:f2:b3:76:44:ed:69:c6:e8:98:ec:42: fd:6c:52:05:40:d8:e0:9b:fe:0a:48:b6:00:46:b1:31:5a:ee: 43:e2:bd:66:9d:85:f7:38:86:6b:6d:3e:73:28:bc:c6:f5:99: a6:49:cd:41:b7:58:d6:3c:ee:5f:b0:8b:13:39:f6:39:b2:4b: 35:8f:39:8f:35:c6:9e:fc:39:35:94:8c:44:29:23:21:58:93: b4:85:dd:83:a7:77:17:d4:d6:f2:46:9a:75:23:fd:4c:76:bc: 79:32:e9:48:e7:a8:63:f6:5c:4b:47:1e:b8:e8:a6:dd:9e:3a: e0:fc:ac:a7:e2:b0:7e:87:70:eb:69:66:c3:27:b9:21:92:bc: d4:97:44:45:b6:a9:57:c8:82:d4:03:e7:84:39:fa:52:d2:8d: 51:83:f6:29:58:07:f0:f1:c5:4d:a7:a8:46:8f:73:d9:66:62: 51:c8:f9:99:8b:9c:2b:13:bf:f5:37:91:58:dc:00:a9:21:67: 2a:89:5f:e3:44:27:b3:98:e8:d9:95:4c:aa:37:b6:ac:84:1a: 50:ab:ec:e3:a1:f2:8a:43:e4:90:d0:f0:4f:a3:4f:b2:ba:88: 8f:7e:f5:e1:02:b0:f2:7e:e9:01:5e:45:6f:a6:b8:59:db:ab: 41:e6:fa:b2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUduF6qp2sLXZTHMNtny8aX4UcCQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNTA0MjYwNzAwNThaFw0yNTA0MjcwODA2NThaMDMxMTAvBgNV BAMTKEM2N0M4Nzg2NDYyODhBQTY0RDc5OUM2MTJCQkQ3REU2RDE4QzcyQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZQ2hWvmhNScvUp9yWjE/4Rrwo lQKftbXs83zBNP83g1xteca62aLCm4F78/ESWouavKQZVsJlAWJ0lERLAvMQEQJr kYsOi3RwjIY57gvggAQn0mnpuelVDLZHjSJ386urPcsyVMZo1jHoGy500Swb7+t0 h6+wgEz07ROh0GsYqJALre6Gd4ggaFM6sGTq8jSC5QQheWFuk5aHSHVhfkPKsCkK lwYlYtaVTPuQPo740ZggVkXRkdtjDiAKjy8m3/SGWzwm9q+5A8Lic8th4KbgvvY2 20gnV3ci8lrzKW2voJDprxqAmr/1jlV5N4mrG3h2g8ijjm5yGiklG9ax7GO7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUxnyHhkYoiqZNeZxhK7195tGMcsAwHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02 MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+3O+rXMxPKzdkTtacbo mOxC/WxSBUDY4Jv+Cki2AEaxMVruQ+K9Zp2F9ziGa20+cyi8xvWZpknNQbdY1jzu X7CLEzn2ObJLNY85jzXGnvw5NZSMRCkjIViTtIXdg6d3F9TW8kaadSP9THa8eTLp SOeoY/ZcS0ceuOim3Z464Pysp+Kwfodw62lmwye5IZK81JdERbapV8iC1APnhDn6 UtKNUYP2KVgH8PHFTaeoRo9z2WZiUcj5mYucKxO/9TeRWNwAqSFnKolf40Qns5jo 2ZVMqje2rIQaUKvs46HyikPkkNDwT6NPsrqIj3714QKw8n7pAV5Fb6a4WdurQeb6 sg== -----END CERTIFICATE-----Generated at Sat Apr 26 20:49:54 2025 by rpki-client