$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft File: 3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft (raw, json) Hash identifier: L4b6TbZhlWHCaSDfpgbmBhigdzgoYDQk0tBONSgDGQ4= Subject key identifier: 56:11:35:6A:56:9C:CD:40:A4:20:44:F9:29:06:83:54:AF:31:DC:E3 Authority key identifier: 3A:3B:E1:4D:08:68:E3:9E:43:E2:7B:58:56:76:DF:5B:82:A1:22:E3 Certificate issuer: /CN=3A3BE14D0868E39E43E27B585676DF5B82A122E3 Certificate serial: 2CAD897C66D85BC2388AF7027AF3EE0D28206558 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft Manifest number: B3 Signing time: Sat 19 Apr 2025 04:35:23 +0000 Manifest this update: Sat 19 Apr 2025 04:30:23 +0000 Manifest next update: Sun 20 Apr 2025 08:09:23 +0000 Files and hashes: 1: 326131343a373538343a346630303a3a2f34302d3430203d3e20323132353136.roa (hash: 2LuyqKKWcdoqL1q9FKGl+zX6qwvAs9rBA48b+Sgpn8w=) 2: 326131343a373538343a346662653a3a2f34382d3438203d3e2036353137.roa (hash: xptTc8UfiLJf//oV4oJOzWfdwqREpi/ly50X2yQ1eVw=) 3: 3A3BE14D0868E39E43E27B585676DF5B82A122E3.crl (hash: 2jDAISGeV9CWe4cQOYI7FfUgZ19P3bySdxwBotj00b8=) 4: 326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa (hash: 5+vQb6lOPVb905YmSSgsG+hU/u4KZQA5Mhi2G2NVX+8=) 5: 326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa (hash: nIC6lswk91hjl6KPMQ+RZfHgO+0KGr/fDFoPo3gap1k=) 6: 326131343a373538343a343130303a3a2f34302d3438203d3e20323136333039.roa (hash: o0e/YZFYgXWaWgJ9eaHmXBCXoGTSBaeTvlCQTDkm3+c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.crl rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Apr 2025 22:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ad:89:7c:66:d8:5b:c2:38:8a:f7:02:7a:f3:ee:0d:28:20:65:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3BE14D0868E39E43E27B585676DF5B82A122E3 Validity Not Before: Apr 19 04:30:23 2025 GMT Not After : Apr 20 08:09:23 2025 GMT Subject: CN=5611356A569CCD40A42044F929068354AF31DCE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c8:ac:45:77:cd:59:76:d7:82:dc:35:14:a8: 59:b8:68:85:8e:9d:a4:3e:7e:8d:ea:fb:63:10:59: 1b:e1:e3:75:ce:b5:6f:c4:20:c6:18:03:c7:5b:2d: c8:9c:0a:11:66:4a:4c:a4:dc:de:a5:16:f9:da:e7: 81:9e:0d:3b:df:5c:93:f2:9c:2d:b0:ef:9f:38:6e: 47:76:78:f2:01:da:ac:7c:5e:66:23:6f:d2:89:63: c9:dd:cc:61:77:bb:bd:42:ba:0d:ba:6c:59:34:77: 1d:54:0e:6a:51:2b:81:87:b2:1d:4e:1d:c3:0f:96: bc:48:c7:91:c0:b4:00:a6:03:91:b4:39:ba:ee:75: 9e:8e:df:f0:d0:ee:34:4d:e5:6f:22:a0:bc:68:1e: 05:05:30:11:f3:5a:b5:7d:bd:5e:e5:e3:78:94:68: 6d:77:09:23:c5:31:f8:fc:f9:ac:12:d2:74:ab:32: c8:af:9f:b0:7a:11:40:eb:a5:e7:e7:bc:bc:88:d4: 96:db:f9:82:06:9a:fe:5a:6e:26:1f:6b:a8:30:2f: 8a:9b:2b:84:ec:98:d8:38:3c:44:fe:3f:32:91:20: cc:2f:c2:49:4e:01:80:51:ce:9f:a0:ad:c7:ee:b5: 3c:11:f5:a5:03:97:78:ad:95:28:79:df:0d:d5:21: 68:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:11:35:6A:56:9C:CD:40:A4:20:44:F9:29:06:83:54:AF:31:DC:E3 X509v3 Authority Key Identifier: keyid:3A:3B:E1:4D:08:68:E3:9E:43:E2:7B:58:56:76:DF:5B:82:A1:22:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:a7:0a:4c:b9:72:fd:f6:a2:9b:c6:9d:26:29:00:74:d3:0f: 6a:06:b8:6c:dd:73:38:72:be:31:ec:bc:68:58:ce:1f:67:12: 64:cd:ed:87:19:fe:86:83:32:e5:5e:cf:a2:23:17:43:fc:59: 45:db:dd:ff:f7:89:da:62:8a:30:05:af:e4:65:00:f4:f3:34: 56:09:b0:fc:c5:5c:60:50:37:08:d5:9f:31:64:d5:45:9a:34: b0:40:16:5b:14:e3:5c:b3:4e:20:55:26:a0:51:87:6f:4c:2c: b5:09:90:3d:99:06:55:95:a4:9e:f8:ed:47:1c:c1:c0:1e:8e: b0:e3:a0:1b:e1:99:4a:3a:bb:fe:e9:4d:d2:0f:51:54:e3:1a: a3:c5:b8:96:0c:f3:10:cf:88:35:94:79:d8:10:f2:a1:be:e0: b8:c9:6a:d8:39:57:bf:48:d2:d1:57:fe:aa:16:7d:69:a0:13: 35:dd:40:ef:5a:b3:2c:24:77:a2:3f:21:06:42:98:be:24:81: 19:ca:47:4e:87:7f:37:ef:8e:c0:5b:07:13:03:22:ba:8a:18: e6:97:bf:ba:2d:64:04:51:85:7c:7d:64:26:1b:af:8e:3c:e5: 49:94:60:f3:b6:9d:5f:44:00:41:56:7e:5f:b1:68:53:9d:79: cf:5e:ea:a3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULK2JfGbYW8I4ivcCevPuDSggZVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EzQkUxNEQwODY4RTM5RTQzRTI3QjU4NTY3NkRGNUI4 MkExMjJFMzAeFw0yNTA0MTkwNDMwMjNaFw0yNTA0MjAwODA5MjNaMDMxMTAvBgNV BAMTKDU2MTEzNTZBNTY5Q0NENDBBNDIwNDRGOTI5MDY4MzU0QUYzMURDRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxyKxFd81ZdteC3DUUqFm4aIWO naQ+fo3q+2MQWRvh43XOtW/EIMYYA8dbLcicChFmSkyk3N6lFvna54GeDTvfXJPy nC2w7584bkd2ePIB2qx8XmYjb9KJY8ndzGF3u71Cug26bFk0dx1UDmpRK4GHsh1O HcMPlrxIx5HAtACmA5G0ObrudZ6O3/DQ7jRN5W8ioLxoHgUFMBHzWrV9vV7l43iU aG13CSPFMfj8+awS0nSrMsivn7B6EUDrpefnvLyI1Jbb+YIGmv5abiYfa6gwL4qb K4TsmNg4PET+PzKRIMwvwklOAYBRzp+grcfutTwR9aUDl3itlSh53w3VIWgVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUVhE1alaczUCkIET5KQaDVK8x3OMwHwYDVR0j BBgwFoAUOjvhTQho455D4ntYVnbfW4KhIuMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTljODNlNWMtNGI1NS00YTFhLTgwMDMtMWI3ZWNjNTFk NDdhLzEvM0EzQkUxNEQwODY4RTM5RTQzRTI3QjU4NTY3NkRGNUI4MkExMjJFMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zQTNCRTE0RDA4NjhFMzlFNDNFMjdCNTg1 Njc2REY1QjgyQTEyMkUzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU5YzgzZTVjLTRiNTUtNGExYS04MDAzLTFiN2VjYzUxZDQ3YS8xLzNBM0JFMTRE MDg2OEUzOUU0M0UyN0I1ODU2NzZERjVCODJBMTIyRTMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDMpwpM uXL99qKbxp0mKQB00w9qBrhs3XM4cr4x7LxoWM4fZxJkze2HGf6GgzLlXs+iIxdD /FlF293/94naYoowBa/kZQD08zRWCbD8xVxgUDcI1Z8xZNVFmjSwQBZbFONcs04g VSagUYdvTCy1CZA9mQZVlaSe+O1HHMHAHo6w46Ab4ZlKOrv+6U3SD1FU4xqjxbiW DPMQz4g1lHnYEPKhvuC4yWrYOVe/SNLRV/6qFn1poBM13UDvWrMsJHeiPyEGQpi+ JIEZykdOh383747AWwcTAyK6ihjml7+6LWQEUYV8fWQmG6+OPOVJlGDztp1fRABB Vn5fsWhTnXnPXuqj -----END CERTIFICATE-----Generated at Sat Apr 19 12:21:37 2025 by rpki-client