$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: thaYQuNm1WxZI7c7PBSI4UH7fonNqdXq14Cz+PdI+xk= Subject key identifier: 06:F2:2D:86:AE:4F:E1:C6:1B:B1:8E:24:45:0B:56:3E:BA:AA:BB:7C Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 1CC91CBAFAA23B3932A7480E4CD6A58A8F5BE492 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 036B Signing time: Sat 26 Apr 2025 08:24:58 +0000 Manifest this update: Sat 26 Apr 2025 08:19:58 +0000 Manifest next update: Sun 27 Apr 2025 11:48:58 +0000 Files and hashes: 1: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: nmhaoLhqUBAnDccEuteaqmwjmYCIqjMWJmqWnwMVbc8=) 2: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: 67hzJ7+qEviKc+JKiq3KV4OqZ4fSU1BU+NXzASboCBg=) 3: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: 2/naNLsZWsKbctisH+91/rgvttkXh//515D4Dxt3bfg=) 4: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: OZBNVOvtp3V7O1L8kF6JcTp/niAHFDMwWI3RV/AoyZY=) 5: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: x18CpJxqEk2M/YqBJ68w0Xt/V9R28ils3z3oKMJtszY=) 6: 39332e3131352e3234382e302f32332d3234203d3e203631333137.roa (hash: 0/T6IoKQBi00uh7Y09G6cYWB2BOwaTjGjtIb2V0Qu7A=) 7: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: ghJtjkOdvSP9f6K1/P4oVqqUSWvmBGivU3PmXNlfCRM=) 8: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: YyMBgTPVms4MPnbkUVc7TpGwl6ukB7kzc/uAePl3SRA=) 9: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: g8GfxZyUsq5sAHB2Ct+7Z9GS7IIVHVNG2gaO8plmjSA=) 10: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: pYw0P56zFi4wRkkwvPxK0X9Amc7AuJTA4uP+hbzqcfs=) 11: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: yDRyc1h8O+mXAEgAFoITsNpFI2VU0vygznR0PJDNh0M=) 12: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: NZcAKMAEu2FS5Zqz0hBFL7Zpu38dDC8QIhg4PJE0Lh4=) 13: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: PU42k0wAchjpLij07Ins7mvpDktS3c483KnPxGuaf7I=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c9:1c:ba:fa:a2:3b:39:32:a7:48:0e:4c:d6:a5:8a:8f:5b:e4:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Apr 26 08:19:58 2025 GMT Not After : Apr 27 11:48:58 2025 GMT Subject: CN=06F22D86AE4FE1C61BB18E24450B563EBAAABB7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a7:3f:47:fa:17:1e:3b:1d:c6:ac:65:f9:14: 8b:c3:22:03:6f:15:1a:8f:e4:d8:52:e7:05:23:fb: 3b:2e:97:2f:22:c7:5f:e2:83:f0:c1:86:63:2e:54: f5:0a:e0:45:e4:4a:52:bc:ef:6c:76:bd:b6:3e:05: 9e:77:7c:ad:9a:1e:73:4d:f0:b3:8b:3a:07:57:6c: c9:76:46:ea:46:61:1b:0c:42:68:d1:c4:0a:d3:f8: a0:4f:07:d2:bb:c2:32:77:e0:51:4d:a2:43:d5:eb: a2:57:a5:c2:1c:4b:95:f3:30:b4:5a:2c:d0:eb:65: 48:ac:9f:c8:08:61:c5:32:05:2c:1c:ba:7e:36:16: d5:e7:8f:d0:c9:42:55:db:19:f4:37:57:9d:d0:6e: e7:2a:31:cd:02:28:7f:05:83:50:85:b5:da:9e:04: d7:f3:03:0e:df:00:bb:91:1c:d7:80:f2:41:a8:e0: 22:20:42:12:d9:ed:a6:0e:1c:4a:17:61:95:68:ba: 2b:a4:b4:fe:cd:7a:51:da:df:af:26:c4:2e:7e:69: cd:69:b7:b0:03:be:6c:73:4b:80:ac:86:95:f5:c6: 70:30:7c:b9:6a:0f:75:25:03:ba:d5:79:a4:dd:68: 93:b4:bc:2c:a4:76:2e:2b:a7:59:17:e6:8a:95:ef: 33:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F2:2D:86:AE:4F:E1:C6:1B:B1:8E:24:45:0B:56:3E:BA:AA:BB:7C X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:34:1b:32:a3:32:e6:ab:69:de:59:68:c2:81:63:d1:08:f8: f6:ce:4b:8b:35:eb:09:3b:2c:85:0e:ba:d4:a7:01:cd:f6:33: 16:23:24:3d:44:18:9b:1c:83:54:57:69:db:72:8a:a1:f3:1c: f3:be:bf:2f:6e:cd:44:7c:84:e0:b0:32:1d:7f:14:f9:a0:c4: 87:2b:1e:26:35:5c:34:ac:f9:b1:03:32:9d:4c:e7:ac:a3:de: 70:bc:bf:47:14:84:17:c7:ac:47:88:71:50:b8:8f:40:bd:e8: c9:d2:55:3f:ca:c5:b3:53:02:e4:d2:e5:b2:e8:0e:ef:8f:6e: 76:82:c6:c6:97:cd:83:ea:24:6b:14:4e:94:d1:dc:dc:bd:71: 15:cd:4c:8d:42:52:17:9d:6b:fb:b1:62:ae:5e:78:a7:c2:7f: 0f:ca:d7:ed:dc:2f:5b:d7:28:de:32:89:8d:27:37:32:cb:15: f2:8f:4e:d4:ae:79:13:dd:bd:78:2f:f2:da:97:0b:02:02:49: 8e:88:a1:d2:a9:e1:f2:0b:09:c9:ab:a1:f3:bf:12:71:4a:31: f7:53:8a:63:e9:18:64:a3:27:7d:d8:b3:59:77:0b:a1:0f:a1: f1:dd:ee:3c:75:b2:3c:21:65:e9:41:e3:91:37:c8:0f:4b:0c: 7d:25:86:b4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHMkcuvqiOzkyp0gOTNalio9b5JIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNTA0MjYwODE5NThaFw0yNTA0MjcxMTQ4NThaMDMxMTAvBgNV BAMTKDA2RjIyRDg2QUU0RkUxQzYxQkIxOEUyNDQ1MEI1NjNFQkFBQUJCN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPpz9H+hceOx3GrGX5FIvDIgNv FRqP5NhS5wUj+zsuly8ix1/ig/DBhmMuVPUK4EXkSlK872x2vbY+BZ53fK2aHnNN 8LOLOgdXbMl2RupGYRsMQmjRxArT+KBPB9K7wjJ34FFNokPV66JXpcIcS5XzMLRa LNDrZUisn8gIYcUyBSwcun42FtXnj9DJQlXbGfQ3V53QbucqMc0CKH8Fg1CFtdqe BNfzAw7fALuRHNeA8kGo4CIgQhLZ7aYOHEoXYZVouiuktP7NelHa368mxC5+ac1p t7ADvmxzS4CshpX1xnAwfLlqD3UlA7rVeaTdaJO0vCykdi4rp1kX5oqV7zMzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBvIthq5P4cYbsY4kRQtWPrqqu3wwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzQbMqMy5qtp3llowoFj 0Qj49s5LizXrCTsshQ661KcBzfYzFiMkPUQYmxyDVFdp23KKofMc876/L27NRHyE 4LAyHX8U+aDEhyseJjVcNKz5sQMynUznrKPecLy/RxSEF8esR4hxULiPQL3oydJV P8rFs1MC5NLlsugO749udoLGxpfNg+okaxROlNHc3L1xFc1MjUJSF51r+7Firl54 p8J/D8rX7dwvW9co3jKJjSc3MssV8o9O1K55E929eC/y2pcLAgJJjoih0qnh8gsJ yauh878ScUox91OKY+kYZKMnfdizWXcLoQ+h8d3uPHWyPCFl6UHjkTfID0sMfSWG tA== -----END CERTIFICATE-----Generated at Sat Apr 26 19:12:16 2025 by rpki-client