$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft File: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json) Hash identifier: xswoDtxWK5iLdvkwXBhKTXLRBjSm9jgGjN7vpaUJv+s= Subject key identifier: 7D:DE:17:1B:BA:AF:5D:37:FB:0F:A3:CC:CE:8B:D6:55:61:07:0A:A8 Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 723774E7BD418D0349DAEFE0248D082AB58041 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft Manifest number: C8 Signing time: Wed 16 Apr 2025 12:23:21 +0000 Manifest this update: Wed 16 Apr 2025 12:18:21 +0000 Manifest next update: Thu 17 Apr 2025 15:26:21 +0000 Files and hashes: 1: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: yHVodRBAsBlx/8p8lQvX33hmgwPZB9Uj6k/5yqbIyfs=) 2: 3130332e34392e3132382e302f32342d3234203d3e20313531313036.roa (hash: JqZwwTv3XcFCl1IzFcnoBrVKvFS5JMd+d9rIxVN+6kI=) 3: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: oelq9d0rJHTAxKV7iBBx11sE6oyrY6NyTiKoOmjcPBs=) 4: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: BqbUmbythNNYP4WqssroNY2sOPvoyuRgXIRAVuIytpA=) 5: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (hash: 4XlIN+3Y2uvivj3jKKbdxnHiR3dRqeJ7/xmTE8uipj8=) 6: 34332e3233302e38342e302f32342d3234203d3e203437373431.roa (hash: oyFuBCQBLvTGC1ImcrngWoUJ4Q8e7JxdFB2r2iiXaVA=) 7: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: hoZQSGqkvoyh+Fwe28UicpO6RAJD80P7rklT/Di/mQU=) 8: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: jNzQvK975k0nFSky/OYcsFfueNL1XvYeIp3mtR/7WPY=) 9: 3130332e34392e3132392e302f32342d3234203d3e20313531313036.roa (hash: Q+cdg9uP0RhRt9m8aCTanOBYRy+8tZGQj1Gbky6i6b4=) 10: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: y9uevaBeLo1M0NZi4w3HJOyvLkMWIaZEJFCi8snsYYY=) 11: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: iK+yx/VtDctRGDFOE/NGNWTyR4u7o2tFGRI6U0bUYZU=) 12: 3130332e34392e3133312e302f32342d3234203d3e20313531313036.roa (hash: /tFw1lzpQWvvpuYCQnIjFSZLwGcls1xoTiwGuGyPuCE=) 13: 3130332e34392e3133302e302f32342d3234203d3e20313531313036.roa (hash: QsVAhyWBBJB99iFgJf1GLSpnrLc3ar0zm6+DEGdyF9U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 17 Apr 2025 13:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:37:74:e7:bd:41:8d:03:49:da:ef:e0:24:8d:08:2a:b5:80:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Apr 16 12:18:21 2025 GMT Not After : Apr 17 15:26:21 2025 GMT Subject: CN=7DDE171BBAAF5D37FB0FA3CCCE8BD65561070AA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:55:07:dc:6c:86:1a:97:1a:06:f0:13:9f:e6: 90:c6:d3:bc:c4:7c:d2:3d:a0:0d:6e:92:d9:32:18: e1:30:89:23:07:93:ce:c5:0a:cc:76:ce:ff:50:52: ce:06:e4:c5:a4:3c:16:a4:cc:66:89:45:eb:04:81: ee:bc:2e:a5:e7:32:da:e2:69:77:0a:4e:c7:92:c1: 8e:77:aa:7e:8f:06:60:fc:e5:7b:2c:96:d5:c6:43: 20:d1:88:9b:e4:a7:12:a8:bf:94:ca:ea:77:8a:fd: 9c:6a:47:3a:83:e6:b4:21:8b:53:ad:be:35:d5:78: 8f:47:ff:04:3a:d7:8a:be:15:74:39:a9:da:5c:a3: a2:b7:5f:25:c4:73:6d:b6:5d:96:ae:b7:42:9c:39: b8:31:00:bd:85:bc:11:7d:dd:21:65:ab:6f:ae:ee: c9:f3:d4:64:77:4f:56:88:ee:87:2d:0a:c5:85:d4: 70:70:df:da:44:85:c2:ea:14:b5:a5:cd:c8:64:05: 10:5b:62:6f:27:75:74:37:7e:01:ef:f2:4f:68:c4: 10:f6:af:7b:8a:a7:4b:e9:a1:72:3b:08:cf:97:68: a8:05:bb:30:8a:06:17:86:31:06:38:11:69:ae:ea: fb:3b:86:d2:c0:90:6e:41:3a:2e:38:92:4b:94:d0: 63:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DE:17:1B:BA:AF:5D:37:FB:0F:A3:CC:CE:8B:D6:55:61:07:0A:A8 X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:1b:3c:9e:6f:28:47:c9:72:03:e3:72:10:49:16:0d:a3:0d: 7b:25:7a:30:18:76:1a:64:77:74:ca:21:bd:99:4e:13:39:2b: 20:9b:c5:da:54:46:e7:f1:dc:a2:3c:7c:c0:05:05:c5:41:a9: 1a:62:90:36:1a:0b:3d:04:b6:a2:1c:65:87:6f:f6:22:21:7c: ed:ca:ac:39:ee:ac:4e:a4:e6:f7:f6:ea:9e:74:d6:07:d4:f0: 13:41:8e:e0:31:d3:40:f9:5f:fd:8a:27:33:b1:d3:bc:d8:2f: 27:95:6a:2b:75:b8:aa:e8:d7:0c:5e:fb:47:4b:35:c2:91:ef: 17:64:34:27:72:c6:2c:f9:55:f0:11:a3:3a:61:a3:4a:a3:20: bc:e3:04:5e:a0:c3:bb:97:90:af:e8:1f:ce:eb:d7:31:f3:d3: 1a:74:ca:54:86:af:3f:a1:3b:6b:24:b4:68:8b:ab:58:63:13: 07:12:e2:ea:71:17:05:e6:20:83:13:3d:60:81:2a:e7:c5:63: 68:a0:b2:94:85:f4:41:09:77:67:c5:b5:99:f9:69:3f:c1:da: 61:fb:6e:6f:13:8b:7c:2b:ec:56:00:4c:9d:53:ad:09:94:69: 6b:06:47:86:d1:eb:b8:9a:30:9c:5c:1b:32:d4:2d:d6:d6:64: 04:fe:af:c7 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgITcjd0571BjQNJ2u/gJI0IKrWAQTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhjNzcwZjQzMzU4Yjk3YmEwYWE5YmRjNjJiYmQ1MTFlOTBh ZWFiMjlkMB4XDTI1MDQxNjEyMTgyMVoXDTI1MDQxNzE1MjYyMVowMzExMC8GA1UE AxMoN0RERTE3MUJCQUFGNUQzN0ZCMEZBM0NDQ0U4QkQ2NTU2MTA3MEFBODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJVB9xshhqXGgbwE5/mkMbTvMR8 0j2gDW6S2TIY4TCJIweTzsUKzHbO/1BSzgbkxaQ8FqTMZolF6wSB7rwupecy2uJp dwpOx5LBjneqfo8GYPzleyyW1cZDINGIm+SnEqi/lMrqd4r9nGpHOoPmtCGLU62+ NdV4j0f/BDrXir4VdDmp2lyjordfJcRzbbZdlq63Qpw5uDEAvYW8EX3dIWWrb67u yfPUZHdPVojuhy0KxYXUcHDf2kSFwuoUtaXNyGQFEFtibyd1dDd+Ae/yT2jEEPav e4qnS+mhcjsIz5doqAW7MIoGF4YxBjgRaa7q+zuG0sCQbkE6LjiSS5TQY/sCAwEA AaOCAkcwggJDMB0GA1UdDgQWBBR93hcbuq9dN/sPo8zOi9ZVYQcKqDAfBgNVHSME GDAWgBTHcPQzWLl7oKqb3GK71RHpCuqynTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2 MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5QkRDNjJCQkQ1MTFFOTBBRUFCMjlELmNy bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQveDNEME0xaTVlNkNxbTl4aXU5VVI2UXJx c3AwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2VhZmViZGI0LTZm MGItNDA0Yi05OGUyLWEyNmJlOTRhNjYyMC8wL0M3NzBGNDMzNThCOTdCQTBBQTlC REM2MkJCRDUxMUU5MEFFQUIyOUQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjGzyebyhHyXID43IQSRYN ow17JXowGHYaZHd0yiG9mU4TOSsgm8XaVEbn8dyiPHzABQXFQakaYpA2Ggs9BLai HGWHb/YiIXztyqw57qxOpOb39uqedNYH1PATQY7gMdNA+V/9iiczsdO82C8nlWor dbiq6NcMXvtHSzXCke8XZDQncsYs+VXwEaM6YaNKoyC84wReoMO7l5Cv6B/O69cx 89MadMpUhq8/oTtrJLRoi6tYYxMHEuLqcRcF5iCDEz1ggSrnxWNooLKUhfRBCXdn xbWZ+Wk/wdph+25vE4t8K+xWAEydU60JlGlrBkeG0eu4mjCcXBsy1C3W1mQE/q/H -----END CERTIFICATE-----Generated at Wed Apr 16 17:24:24 2025 by rpki-client