$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: QSS1DDtBGOdk8EsagXWZdXZnhoX+hN6muM7ldhMC380= Subject key identifier: EC:2D:E1:AA:46:11:9F:2C:CC:4E:96:AB:1F:1D:21:43:2E:58:CB:DE Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 591BA7E1294C9A6F65998A89BB4C915326C26A51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 03AB Signing time: Fri 13 Jun 2025 22:37:50 +0000 Manifest this update: Fri 13 Jun 2025 22:32:50 +0000 Manifest next update: Sun 15 Jun 2025 02:22:50 +0000 Files and hashes: 1: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: 2/naNLsZWsKbctisH+91/rgvttkXh//515D4Dxt3bfg=) 2: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: Pi0tWopx0vFrOtc8dP5c90mZ1gVHB2zarGbAJf2F4Go=) 3: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: OZBNVOvtp3V7O1L8kF6JcTp/niAHFDMwWI3RV/AoyZY=) 4: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: YyMBgTPVms4MPnbkUVc7TpGwl6ukB7kzc/uAePl3SRA=) 5: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: 67hzJ7+qEviKc+JKiq3KV4OqZ4fSU1BU+NXzASboCBg=) 6: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: PU42k0wAchjpLij07Ins7mvpDktS3c483KnPxGuaf7I=) 7: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: g8GfxZyUsq5sAHB2Ct+7Z9GS7IIVHVNG2gaO8plmjSA=) 8: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: NZcAKMAEu2FS5Zqz0hBFL7Zpu38dDC8QIhg4PJE0Lh4=) 9: 39332e3131352e3234382e302f32332d3234203d3e203631333137.roa (hash: 0/T6IoKQBi00uh7Y09G6cYWB2BOwaTjGjtIb2V0Qu7A=) 10: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: nmhaoLhqUBAnDccEuteaqmwjmYCIqjMWJmqWnwMVbc8=) 11: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: yDRyc1h8O+mXAEgAFoITsNpFI2VU0vygznR0PJDNh0M=) 12: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: ghJtjkOdvSP9f6K1/P4oVqqUSWvmBGivU3PmXNlfCRM=) 13: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: pYw0P56zFi4wRkkwvPxK0X9Amc7AuJTA4uP+hbzqcfs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:1b:a7:e1:29:4c:9a:6f:65:99:8a:89:bb:4c:91:53:26:c2:6a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Jun 13 22:32:50 2025 GMT Not After : Jun 15 02:22:50 2025 GMT Subject: CN=EC2DE1AA46119F2CCC4E96AB1F1D21432E58CBDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:53:61:4a:70:8b:13:43:42:67:08:6b:69:32: f8:3a:73:93:ef:d0:85:35:71:50:ab:b4:ab:72:85: 46:73:95:70:83:35:dc:75:4b:f0:05:0b:72:3b:f1: 09:f5:30:24:96:6f:da:3f:3c:2e:af:4b:1e:06:f3: 4c:1b:38:23:35:03:40:7b:c2:b0:39:d5:8a:4b:1d: 9d:db:03:9f:30:71:ac:0a:8c:d8:b5:da:30:e6:68: d5:05:eb:1c:78:22:2b:8c:d8:e0:05:20:ac:1e:a5: 16:7e:fa:40:2e:40:ae:73:8d:36:cf:7e:b9:e8:3c: c4:b8:76:ef:43:c1:a2:2e:6a:f0:5e:26:72:cb:75: 3f:ec:8d:6e:cd:ca:43:e4:b3:52:59:61:1b:fb:95: 63:8c:5a:88:51:57:c6:c9:07:59:a0:5e:68:d4:53: bc:27:cf:8f:f8:6f:8f:4c:c2:fe:a8:46:06:2f:9b: 68:45:b3:a5:81:7b:89:75:22:34:01:f1:08:47:b8: e1:0a:47:96:2f:c7:d3:21:f9:3a:83:69:d6:d8:55: 47:82:26:e6:9e:7f:06:3b:c4:67:a7:4a:f4:5d:cd: 82:39:2f:e1:3c:47:ef:08:fd:56:9f:42:5c:be:02: 61:f4:d5:0b:01:a1:90:3b:f4:06:76:36:60:77:dd: 51:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2D:E1:AA:46:11:9F:2C:CC:4E:96:AB:1F:1D:21:43:2E:58:CB:DE X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b6:7b:b4:e9:dc:7b:d8:dd:18:bd:de:8b:13:f4:f1:ba:f2: b4:c2:df:79:63:b2:6c:89:43:3b:76:85:77:0f:e0:ce:50:90: c9:1e:8c:dc:df:a5:ac:31:16:23:2d:a5:22:22:63:05:07:99: 80:66:b5:25:aa:1f:c6:6e:c4:31:0f:19:26:fb:d5:38:67:52: 4d:dd:ff:af:fc:ab:c6:e2:da:20:09:6f:60:68:0b:fe:82:7a: f0:7c:c0:78:d0:09:2d:71:5c:d7:ca:bd:df:30:76:cc:b1:e8: 5c:1c:4d:c8:57:a7:c0:a1:8e:a1:f4:a2:32:cc:f9:fc:75:52: 9f:88:2b:4f:37:2e:8d:0a:35:98:81:7b:04:6c:9f:d2:b8:64: 9c:8b:6e:c9:c3:4c:dd:92:88:ba:e7:3b:26:c2:c6:f4:5a:3a: 40:36:28:d4:5f:02:d7:05:0a:c1:64:39:d0:3a:03:7c:f2:87: bb:25:c1:87:60:4f:6c:16:1a:45:48:2e:9c:a7:b7:f8:b6:ad: 27:5a:62:59:3b:7f:0a:09:82:5d:b1:b9:96:db:a0:3d:bc:d7: 78:01:b3:a2:e8:96:00:91:35:2f:b6:bf:53:96:74:f0:d5:cb: a8:c9:cc:72:8e:fc:b0:74:7d:af:e3:3f:7e:a0:69:22:97:6e: f3:10:b4:72 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWRun4SlMmm9lmYqJu0yRUybCalEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNTA2MTMyMjMyNTBaFw0yNTA2MTUwMjIyNTBaMDMxMTAvBgNV BAMTKEVDMkRFMUFBNDYxMTlGMkNDQzRFOTZBQjFGMUQyMTQzMkU1OENCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbU2FKcIsTQ0JnCGtpMvg6c5Pv 0IU1cVCrtKtyhUZzlXCDNdx1S/AFC3I78Qn1MCSWb9o/PC6vSx4G80wbOCM1A0B7 wrA51YpLHZ3bA58wcawKjNi12jDmaNUF6xx4IiuM2OAFIKwepRZ++kAuQK5zjTbP frnoPMS4du9DwaIuavBeJnLLdT/sjW7NykPks1JZYRv7lWOMWohRV8bJB1mgXmjU U7wnz4/4b49Mwv6oRgYvm2hFs6WBe4l1IjQB8QhHuOEKR5Yvx9Mh+TqDadbYVUeC JuaefwY7xGenSvRdzYI5L+E8R+8I/VafQly+AmH01QsBoZA79AZ2NmB33VFXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7C3hqkYRnyzMTparHx0hQy5Yy94wHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrZ7tOnce9jdGL3eixP0 8brytMLfeWOybIlDO3aFdw/gzlCQyR6M3N+lrDEWIy2lIiJjBQeZgGa1Jaofxm7E MQ8ZJvvVOGdSTd3/r/yrxuLaIAlvYGgL/oJ68HzAeNAJLXFc18q93zB2zLHoXBxN yFenwKGOofSiMsz5/HVSn4grTzcujQo1mIF7BGyf0rhknItuycNM3ZKIuuc7JsLG 9Fo6QDYo1F8C1wUKwWQ50DoDfPKHuyXBh2BPbBYaRUgunKe3+LatJ1piWTt/CgmC XbG5ltugPbzXeAGzouiWAJE1L7a/U5Z08NXLqMnMco78sHR9r+M/fqBpIpdu8xC0 cg== -----END CERTIFICATE-----Generated at Sat Jun 14 12:05:18 2025 by rpki-client