$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft File: 3134EE987E08D8B5583FEEF621A03150C4F35434.mft (raw, json) Hash identifier: ZsLiFFoTMkTUlQVdDQtv+oFbUVHaE894bVwCAERPjcc= Subject key identifier: EC:FF:16:03:74:DF:DE:2D:CE:96:62:E2:B2:E0:BE:22:D1:D0:56:F4 Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434 Certificate serial: 7286488DB269B5173F5438A29F8C3A29292A3414 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft Manifest number: 0227 Signing time: Sat 05 Apr 2025 04:15:53 +0000 Manifest this update: Sat 05 Apr 2025 04:10:53 +0000 Manifest next update: Sun 06 Apr 2025 07:52:53 +0000 Files and hashes: 1: 326131343a316563373a663130303a3a2f34302d3438203d3e20323134313838.roa (hash: gXY2AMFw8/+rSlIvUcyO+0lq7UArJ6lUsKRFR48Pbdc=) 2: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer (hash: +kjjdHM+kH8b2S6MrqETRYvozXvj3Pj+Ppi6xPpES88=) 3: 326131343a316563373a666130303a3a2f34302d3438203d3e20323134333635.roa (hash: mfRAEfAM/Ik+prWgDH92jLkjVIcmPRfzo1kMxVmUq4c=) 4: 3134EE987E08D8B5583FEEF621A03150C4F35434.crl (hash: TonGTSejfQ4nEzlQoabj5ZSCasGLFjVXCh95L4UoflA=) 5: 326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa (hash: tXMEYMrTa38uR0L+SQ9LimzmDrpxo8zhMIaTp0PKkR0=) 6: 326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa (hash: svJE9s6z+thIvIbk0ivLw3r/3W8HiAYka1FWVnsnFgw=) 7: 326131343a316563373a666666633a3a2f34382d3438203d3e20323136333339.roa (hash: Xpu7YHsE9Uu/Z34+AM32q6wFmIndeEkcOzm4kV29gZU=) 8: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer (hash: BF/TWOjb2Ii4r0osOdYS/rUG+zOQPpS2tAXbzEo5Wzo=) 9: 326131343a316563373a666230303a3a2f34302d3438203d3e20323134373435.roa (hash: nezQHcq4MVb+lW9u+9DC3TKuGQsy0c5l+5+DxrvsPzo=) 10: 326131343a316563373a663030303a3a2f33362d3336203d3e20323135333138.roa (hash: 4yp0ESWG8QtoSxC7ED2Iir0aFCTQYQTdLZObzElHUZc=) 11: 326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa (hash: cQGzH58GG/5AlClFkvMjXXZFAsalmfdZS0xTjTmJx5Q=) 12: 326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa (hash: Kuq/T5/58120SUpTorsr1ML70JXySqoRjipE0Min4z0=) 13: 326131343a316563373a666666663a3a2f34382d3438203d3e20323030313739.roa (hash: jxX5jejatt6POI8r69/OIdC4tpqjlqDh7/l5cMHt1Lc=) 14: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer (hash: TzD6pGlBEMmZI/OlLFvK4Q5nKNXovDA7wOkDjfwohQo=) 15: 326131343a316563373a313030303a3a2f34302d3438203d3e20323134343831.roa (hash: CppBrqeBXEhxAuEI9ntzVVwbRJmv6j6O1BcpTNGKwGk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 07:52:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:86:48:8d:b2:69:b5:17:3f:54:38:a2:9f:8c:3a:29:29:2a:34:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434 Validity Not Before: Apr 5 04:10:53 2025 GMT Not After : Apr 6 07:52:53 2025 GMT Subject: CN=ECFF160374DFDE2DCE9662E2B2E0BE22D1D056F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:38:ec:40:a3:6a:7f:ae:8b:6c:6d:b1:20:ed: 45:91:3a:d8:f7:99:e9:3f:33:93:a6:e1:3f:bd:38: 9a:de:a3:bf:42:83:54:50:8c:51:1f:0c:77:fc:d1: e6:a3:a3:f6:ac:8c:2c:2c:36:c3:4c:a1:d0:6a:d8: 68:8f:79:66:86:c9:84:8c:da:39:ee:98:71:89:c9: 5d:ac:f6:68:9e:25:03:69:5f:cb:2b:da:61:49:b4: cc:90:da:40:34:27:d9:a2:d7:32:df:6e:9a:d8:fb: 49:c7:2e:b0:fa:06:48:63:7e:4c:53:93:b9:a0:fa: 95:63:7a:d3:ee:a9:70:c0:56:66:c9:56:1c:22:57: 4c:5a:45:81:d8:2a:af:91:a2:0b:c1:dd:ce:1b:cd: 3d:f7:7d:6a:33:8d:b8:c7:b7:5c:d8:69:a4:b7:5d: 3f:fd:f1:18:6f:57:51:52:2a:36:f0:7a:97:d3:93: 76:fb:a7:21:47:c8:e1:32:04:bd:81:ba:aa:3b:45: af:ac:1c:db:4d:6c:66:a4:f7:ce:72:e7:37:2a:1b: ff:df:7e:ab:86:fd:a1:15:16:a5:51:04:0e:1a:6c: 10:39:9e:9c:63:ac:30:ad:36:f1:26:91:f0:18:2a: cd:08:79:b3:5e:54:46:ee:b0:ea:15:9f:da:93:c5: 1b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FF:16:03:74:DF:DE:2D:CE:96:62:E2:B2:E0:BE:22:D1:D0:56:F4 X509v3 Authority Key Identifier: keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:08:f7:5b:ed:e4:4d:a2:de:89:85:92:85:9f:36:58:49:74: d2:ed:d3:17:7a:e2:49:31:2a:8b:72:25:d3:41:ad:20:a6:48: e0:72:5b:37:42:56:41:ab:60:91:44:1a:ee:da:e4:ef:89:46: 34:d3:65:e9:cd:90:88:c9:31:62:d0:1d:73:ad:6e:f9:2b:a6: 38:1a:e5:ef:96:a4:ab:12:f3:72:b6:fd:e9:75:6d:bd:77:10: 6b:1f:c7:58:49:d0:4e:9d:c4:1d:0b:ae:92:00:9b:d6:86:1e: 6d:b5:07:95:cc:50:6e:49:e5:c4:26:77:25:e7:9e:30:97:38: ee:ca:6b:0b:6c:96:79:aa:3b:ea:cf:83:97:45:c5:e4:9b:d7: 0c:97:b6:49:33:ba:e6:3d:3b:35:42:03:a9:12:6e:50:8a:16: 90:05:97:15:ab:9b:81:e1:14:96:98:b4:f8:a8:5a:80:9f:33: 5e:55:77:88:24:61:45:d2:a8:5a:e7:0e:8d:c3:5f:53:42:54: 9e:c1:1c:7d:6b:f9:d4:0e:36:3a:27:fa:3a:c2:7e:65:f0:b2: 8c:80:14:cd:ea:cc:7e:95:f7:0e:ce:b3:5b:a8:1f:41:20:75: 21:2a:68:79:27:0d:fa:87:76:35:ba:a1:26:7d:8d:06:80:1f: 2c:80:0c:44 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcoZIjbJptRc/VDiin4w6KSkqNBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj NGYzNTQzNDAeFw0yNTA0MDUwNDEwNTNaFw0yNTA0MDYwNzUyNTNaMDMxMTAvBgNV BAMTKEVDRkYxNjAzNzRERkRFMkRDRTk2NjJFMkIyRTBCRTIyRDFEMDU2RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZOOxAo2p/rotsbbEg7UWROtj3 mek/M5Om4T+9OJreo79Cg1RQjFEfDHf80eajo/asjCwsNsNModBq2GiPeWaGyYSM 2jnumHGJyV2s9mieJQNpX8sr2mFJtMyQ2kA0J9mi1zLfbprY+0nHLrD6BkhjfkxT k7mg+pVjetPuqXDAVmbJVhwiV0xaRYHYKq+RogvB3c4bzT33fWozjbjHt1zYaaS3 XT/98RhvV1FSKjbwepfTk3b7pyFHyOEyBL2Buqo7Ra+sHNtNbGak985y5zcqG//f fquG/aEVFqVRBA4abBA5npxjrDCtNvEmkfAYKs0IebNeVEbusOoVn9qTxRu5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7P8WA3Tf3i3OlmLisuC+ItHQVvQwHwYDVR0j BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4 NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U elZEUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05 OGE0LTRjN2UtYTBlMS04MDU3YTRmMDg2YzkvMC8zMTM0RUU5ODdFMDhEOEI1NTgz RkVFRjYyMUEwMzE1MEM0RjM1NDM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgj3W+3kTaLeiYWShZ82 WEl00u3TF3riSTEqi3Il00GtIKZI4HJbN0JWQatgkUQa7trk74lGNNNl6c2QiMkx YtAdc61u+SumOBrl75akqxLzcrb96XVtvXcQax/HWEnQTp3EHQuukgCb1oYebbUH lcxQbknlxCZ3JeeeMJc47sprC2yWeao76s+Dl0XF5JvXDJe2STO65j07NUIDqRJu UIoWkAWXFaubgeEUlpi0+KhagJ8zXlV3iCRhRdKoWucOjcNfU0JUnsEcfWv51A42 Oif6OsJ+ZfCyjIAUzerMfpX3Ds6zW6gfQSB1ISpoeScN+od2NbqhJn2NBoAfLIAM RA== -----END CERTIFICATE-----Generated at Sun Apr 6 00:04:31 2025 by rpki-client