$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: hTH7RUcbkK/BuIUHrf51vuoGnxvmUOc8inJEIEkam2g= Subject key identifier: CA:48:21:E6:4C:A6:B6:FE:31:55:5A:B0:7D:85:36:F6:19:4D:85:E8 Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 1F020F44B268C7FBF749003E53416C37C45BE703 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 0196 Signing time: Fri 06 Jun 2025 17:11:33 +0000 Manifest this update: Fri 06 Jun 2025 17:06:33 +0000 Manifest next update: Sat 07 Jun 2025 19:03:33 +0000 Files and hashes: 1: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: tezZfjQIJSEoaPdienMyz3PTigWBtWV225R5RVQQguw=) 2: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: 8nX/03jGRg9oOVXdj5fUnOr80mDpDAm/+ojhrp4H62E=) 3: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: 0Augomo0JPTrdfBB/3ITj/ZgfSBftNdAdE/vOPCbcS0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 06:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:02:0f:44:b2:68:c7:fb:f7:49:00:3e:53:41:6c:37:c4:5b:e7:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Jun 6 17:06:33 2025 GMT Not After : Jun 7 19:03:33 2025 GMT Subject: CN=CA4821E64CA6B6FE31555AB07D8536F6194D85E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f6:5a:7d:ae:c2:b2:22:f4:96:8a:33:3b:5b: 9e:87:a4:cd:38:bc:59:74:22:59:b3:ba:8d:96:57: 65:5b:4c:62:26:0b:af:26:21:e4:23:38:28:ec:b2: ea:a9:29:fc:0a:2b:9f:6e:84:a2:b0:04:f1:8c:fc: 1f:c0:10:c9:86:32:62:ad:b5:d9:00:57:4b:93:d4: 82:dd:1c:f2:66:ac:76:62:c8:32:09:55:57:e0:49: ee:e0:21:9a:0f:6e:16:91:0e:ea:61:c0:d3:2b:37: c5:2b:bf:aa:4e:a3:d4:2d:21:fe:b1:44:44:40:b4: 9f:a2:e1:0d:49:81:e5:ca:6f:0a:11:ea:06:0c:13: 78:6d:01:b1:5a:85:37:e9:e2:48:a5:5c:5f:25:83: fb:1a:3f:df:0c:1d:90:a8:6a:56:fb:3a:39:b6:10: 0e:92:86:1d:dd:93:66:db:e7:37:15:14:b5:51:09: 1c:31:52:34:d2:cb:c9:54:ae:fd:c2:a5:ec:e3:b7: 23:ef:02:d0:53:ce:e3:de:f2:e9:9f:64:d4:72:a9: 50:16:69:f1:fc:5c:c8:04:75:29:ee:e0:28:14:44: f0:13:fb:d2:15:86:59:00:c7:e8:55:d7:b1:0b:a4: 7c:f3:44:20:5f:75:97:f3:7d:d2:cb:79:4f:04:6c: ab:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:48:21:E6:4C:A6:B6:FE:31:55:5A:B0:7D:85:36:F6:19:4D:85:E8 X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:be:2b:e3:48:0a:ec:7c:dc:07:0e:db:5c:bd:c6:65:b4:1a: 65:da:2e:d6:ae:1b:29:15:eb:24:f6:a2:48:ac:3c:68:1b:91: 45:36:83:fe:c7:5a:6f:d2:26:26:e4:dc:c6:c7:48:91:ad:9d: 4d:9b:db:46:16:3f:7b:34:50:7c:2d:d1:b0:09:ce:73:8a:48: d0:82:f4:e1:7b:3e:c9:06:be:65:bb:a0:fb:17:7b:dc:42:9f: 3c:f6:ae:84:73:d2:3c:c3:f6:57:48:37:43:11:4d:4a:8b:d8: 78:10:ec:20:3f:7a:64:90:79:35:a6:a4:04:a8:01:1f:bb:c1: 3e:59:51:47:f0:1c:02:73:35:16:aa:8d:d1:16:38:90:4f:62: d4:d9:e6:55:2f:bb:92:cc:3e:4c:b4:4b:15:3f:37:a4:45:2e: af:fc:4d:48:93:84:93:77:61:0c:d1:1c:10:40:cc:00:7f:6b: 87:49:2c:ef:f0:64:d0:9b:a0:56:16:87:0c:39:53:22:1a:4e: 5b:5c:9a:af:ca:94:63:a6:6a:bf:c2:98:a9:e5:50:89:d6:5a: 9e:b7:7e:66:da:80:b0:98:49:7e:62:b7:58:62:4e:88:b8:79: c7:47:87:00:1e:72:6b:5d:4e:6c:a0:52:4f:3b:16:c1:ed:eb: 0a:c5:44:44 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHwIPRLJox/v3SQA+U0FsN8Rb5wMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNTA2MDYxNzA2MzNaFw0yNTA2MDcxOTAzMzNaMDMxMTAvBgNV BAMTKENBNDgyMUU2NENBNkI2RkUzMTU1NUFCMDdEODUzNkY2MTk0RDg1RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE9lp9rsKyIvSWijM7W56HpM04 vFl0Ilmzuo2WV2VbTGImC68mIeQjOCjssuqpKfwKK59uhKKwBPGM/B/AEMmGMmKt tdkAV0uT1ILdHPJmrHZiyDIJVVfgSe7gIZoPbhaRDuphwNMrN8Urv6pOo9QtIf6x RERAtJ+i4Q1JgeXKbwoR6gYME3htAbFahTfp4kilXF8lg/saP98MHZCoalb7Ojm2 EA6Shh3dk2bb5zcVFLVRCRwxUjTSy8lUrv3CpezjtyPvAtBTzuPe8umfZNRyqVAW afH8XMgEdSnu4CgURPAT+9IVhlkAx+hV17ELpHzzRCBfdZfzfdLLeU8EbKvfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUykgh5kymtv4xVVqwfYU29hlNhegwHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBavivj SArsfNwHDttcvcZltBpl2i7WrhspFesk9qJIrDxoG5FFNoP+x1pv0iYm5NzGx0iR rZ1Nm9tGFj97NFB8LdGwCc5zikjQgvThez7JBr5lu6D7F3vcQp889q6Ec9I8w/ZX SDdDEU1Ki9h4EOwgP3pkkHk1pqQEqAEfu8E+WVFH8BwCczUWqo3RFjiQT2LU2eZV L7uSzD5MtEsVPzekRS6v/E1Ik4STd2EM0RwQQMwAf2uHSSzv8GTQm6BWFocMOVMi Gk5bXJqvypRjpmq/wpip5VCJ1lqet35m2oCwmEl+YrdYYk6IuHnHR4cAHnJrXU5s oFJPOxbB7esKxURE -----END CERTIFICATE-----Generated at Fri Jun 6 23:27:39 2025 by rpki-client