$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json) Hash identifier: PVpPyfLWzKxVbrRlGaRlhz5P8kKaislTCKHk9Yv/bes= Subject key identifier: BB:5E:80:18:5C:B2:F5:A2:5C:BD:22:FE:3A:A8:28:D1:82:BA:8D:DD Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 27E4E3D6EEE3C3C31F5FE883F76DDACD28C96BDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft Manifest number: D6 Signing time: Sun 27 Apr 2025 01:54:59 +0000 Manifest this update: Sun 27 Apr 2025 01:49:59 +0000 Manifest next update: Mon 28 Apr 2025 02:53:59 +0000 Files and hashes: 1: 3130332e34392e3132392e302f32342d3234203d3e20313531313036.roa (hash: Q+cdg9uP0RhRt9m8aCTanOBYRy+8tZGQj1Gbky6i6b4=) 2: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: BqbUmbythNNYP4WqssroNY2sOPvoyuRgXIRAVuIytpA=) 3: 3130332e34392e3133302e302f32342d3234203d3e20313531313036.roa (hash: QsVAhyWBBJB99iFgJf1GLSpnrLc3ar0zm6+DEGdyF9U=) 4: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: 6GXOzT8GFjIdCbxLKGrIfEkG8f+6nEzW8LAEFTjBGkA=) 5: 3130332e34392e3133312e302f32342d3234203d3e20313531313036.roa (hash: /tFw1lzpQWvvpuYCQnIjFSZLwGcls1xoTiwGuGyPuCE=) 6: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (hash: 4XlIN+3Y2uvivj3jKKbdxnHiR3dRqeJ7/xmTE8uipj8=) 7: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: yHVodRBAsBlx/8p8lQvX33hmgwPZB9Uj6k/5yqbIyfs=) 8: 3130332e34392e3132382e302f32342d3234203d3e20313531313036.roa (hash: JqZwwTv3XcFCl1IzFcnoBrVKvFS5JMd+d9rIxVN+6kI=) 9: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: jNzQvK975k0nFSky/OYcsFfueNL1XvYeIp3mtR/7WPY=) 10: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: iK+yx/VtDctRGDFOE/NGNWTyR4u7o2tFGRI6U0bUYZU=) 11: 34332e3233302e38342e302f32342d3234203d3e203437373431.roa (hash: oyFuBCQBLvTGC1ImcrngWoUJ4Q8e7JxdFB2r2iiXaVA=) 12: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: y9uevaBeLo1M0NZi4w3HJOyvLkMWIaZEJFCi8snsYYY=) 13: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: hoZQSGqkvoyh+Fwe28UicpO6RAJD80P7rklT/Di/mQU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 02:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e4:e3:d6:ee:e3:c3:c3:1f:5f:e8:83:f7:6d:da:cd:28:c9:6b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Apr 27 01:49:59 2025 GMT Not After : Apr 28 02:53:59 2025 GMT Subject: CN=BB5E80185CB2F5A25CBD22FE3AA828D182BA8DDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fd:d6:df:fb:48:ad:c3:a9:54:e3:11:d8:d4: 6f:8b:dc:b8:16:d1:6f:be:f8:1b:1d:b1:98:07:68: 8c:a5:d8:4c:eb:21:ec:35:73:49:ec:fd:e2:ce:f2: 64:4f:5c:d7:d9:08:e5:57:0c:31:1f:d7:0a:6a:eb: 41:5f:65:88:91:b8:f3:8b:6e:ab:07:b1:a0:eb:d8: 13:e2:52:3d:fd:d4:a5:6b:6d:d5:84:45:96:38:0f: 7b:43:5a:b6:98:ce:e1:9d:59:b9:8e:1d:17:60:0b: 02:83:e9:e7:ed:35:5b:a0:a2:df:73:65:30:8c:d5: a7:39:ca:a0:81:96:f4:34:88:b8:db:19:b1:0d:d5: ec:c5:ab:ca:49:6d:5a:b7:b1:79:2d:20:af:de:cf: ab:77:f4:c2:ac:52:ef:ca:5b:8f:07:3b:b1:31:d7: 36:dd:2b:e2:e9:4d:97:75:f5:e0:f6:43:40:9f:1f: f4:af:4b:42:35:f4:3d:7a:c5:80:0c:49:ae:d2:1d: 62:1b:ab:1f:bb:93:3e:d5:fe:68:50:8f:c3:69:e3: 95:1f:f2:5b:bd:f3:a0:c3:63:fa:4e:85:93:d5:59: 82:76:99:b7:75:53:23:30:48:bc:55:12:76:1f:2d: 03:7c:27:85:35:f7:aa:27:74:05:26:77:f1:21:59: de:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5E:80:18:5C:B2:F5:A2:5C:BD:22:FE:3A:A8:28:D1:82:BA:8D:DD X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d3:65:76:ff:a7:bf:79:04:0c:2e:31:fe:bf:1d:2d:11:6f: 8a:f1:7f:99:08:22:86:26:3f:4d:43:c6:5b:40:0e:4c:b4:4c: 54:ee:ee:c2:2f:85:7c:90:49:8d:58:ed:b3:8c:f2:19:f8:ef: bd:f0:d1:ea:8f:b1:b4:b1:ab:09:db:04:97:85:7f:15:d5:b6: c1:76:c9:aa:99:fa:c0:a5:20:5d:27:0b:59:3f:50:c8:99:bb: 18:f1:7f:07:0b:ec:d3:a7:7e:d7:b4:e0:d4:f8:bb:77:3b:94: 2e:56:ec:c8:9f:42:61:d0:52:31:58:80:79:3e:74:51:3b:ec: 86:6c:39:46:41:af:43:78:21:21:61:a2:f7:2a:86:70:3b:78: b2:e8:40:da:47:a1:c2:88:ac:f0:a5:9d:25:e2:10:8c:2e:ef: e6:57:6c:9e:95:c1:3a:57:20:bd:43:4c:e6:11:54:da:58:89: 5a:28:60:4c:70:10:22:59:1d:26:61:22:63:50:6c:f6:4a:11: 8f:a2:53:47:84:da:33:f4:fe:f8:d5:67:29:b4:74:37:94:a8: 9a:d6:1a:74:1c:ef:d5:0b:df:0e:b6:60:9d:6e:8a:29:68:0c: 9a:ca:bc:e8:cc:bb:b9:f2:f3:9b:3d:50:aa:2a:7c:f7:c7:85: c8:1a:7e:82 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJ+Tj1u7jw8MfX+iD923azSjJa90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNTA0MjcwMTQ5NTlaFw0yNTA0MjgwMjUzNTlaMDMxMTAvBgNV BAMTKEJCNUU4MDE4NUNCMkY1QTI1Q0JEMjJGRTNBQTgyOEQxODJCQThEREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb/dbf+0itw6lU4xHY1G+L3LgW 0W+++BsdsZgHaIyl2EzrIew1c0ns/eLO8mRPXNfZCOVXDDEf1wpq60FfZYiRuPOL bqsHsaDr2BPiUj391KVrbdWERZY4D3tDWraYzuGdWbmOHRdgCwKD6eftNVugot9z ZTCM1ac5yqCBlvQ0iLjbGbEN1ezFq8pJbVq3sXktIK/ez6t39MKsUu/KW48HO7Ex 1zbdK+LpTZd19eD2Q0CfH/SvS0I19D16xYAMSa7SHWIbqx+7kz7V/mhQj8Np45Uf 8lu986DDY/pOhZPVWYJ2mbd1UyMwSLxVEnYfLQN8J4U196ondAUmd/EhWd7rAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUu16AGFyy9aJcvSL+Oqgo0YK6jd0wHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02 ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5 QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9Nldv+nv3kEDC4x/r8d LRFvivF/mQgihiY/TUPGW0AOTLRMVO7uwi+FfJBJjVjts4zyGfjvvfDR6o+xtLGr CdsEl4V/FdW2wXbJqpn6wKUgXScLWT9QyJm7GPF/Bwvs06d+17Tg1Pi7dzuULlbs yJ9CYdBSMViAeT50UTvshmw5RkGvQ3ghIWGi9yqGcDt4suhA2kehwois8KWdJeIQ jC7v5ldsnpXBOlcgvUNM5hFU2liJWihgTHAQIlkdJmEiY1Bs9koRj6JTR4TaM/T+ +NVnKbR0N5SomtYadBzv1QvfDrZgnW6KKWgMmsq86My7ufLzmz1Qqip898eFyBp+ gg== -----END CERTIFICATE-----Generated at Sun Apr 27 12:12:22 2025 by rpki-client