$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft File: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft (raw, json) Hash identifier: w3oe9fZX3fckeUCHnK4saWg8EKLiU+9WCgbfFEK4maE= Subject key identifier: 4B:D3:77:E0:50:93:69:AA:59:ED:3A:42:7F:83:CA:ED:FB:E0:04:F3 Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Certificate serial: 40D166B12A97D9F33FCB928A08C778DC80CB6609 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft Manifest number: 040F Signing time: Fri 06 Jun 2025 18:32:32 +0000 Manifest this update: Fri 06 Jun 2025 18:27:32 +0000 Manifest next update: Sat 07 Jun 2025 18:59:32 +0000 Files and hashes: 1: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (hash: sY/xAuh6Mg68YWt7c8TloEoU7TIBsTXsCx6tRGi7xp4=) 2: 3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa (hash: pkJz5L9iLZRF+OIvLDh3t2xUInq31L6An4us+3j1eD0=) 3: 3138382e3136342e3135352e302f32342d3234203d3e203631333137.roa (hash: W1I8woHaqJ6kU4xjFwKm1g6uV7UZ51m6Dv8R/7Dp0Oc=) 4: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl (hash: IdxdwHWXJi0Ai7TgP4N4WKopbmQCbep2qTs6z72FLfk=) 5: 3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa (hash: PjHq1CK+fSk+5WuONiKJilG5oXTFh0dZnkKMEZVNP8E=) 6: 3138382e3136342e3135342e302f32342d3234203d3e20383334.roa (hash: 7YK9BjVSnfe505W37DxY1ZZyrFLgClau3xqcJepnDzM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d1:66:b1:2a:97:d9:f3:3f:cb:92:8a:08:c7:78:dc:80:cb:66:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca Validity Not Before: Jun 6 18:27:32 2025 GMT Not After : Jun 7 18:59:32 2025 GMT Subject: CN=4BD377E0509369AA59ED3A427F83CAEDFBE004F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7c:57:77:b6:ba:b1:7f:e9:08:69:30:61:24: 5e:81:de:28:77:55:04:54:73:5b:e1:a4:17:44:a1: e8:8c:26:07:a1:85:98:c2:cc:75:36:a4:16:99:7a: 4d:49:88:46:57:70:a1:11:30:11:ed:b0:94:1c:e4: 89:21:75:0f:41:44:01:e7:99:35:11:00:bf:1d:4d: 2f:b4:87:69:d3:8c:cc:78:ed:c5:21:27:64:f0:dc: b5:c4:ef:4e:79:53:c4:e2:53:81:d2:4f:92:ff:85: 6b:5c:09:d6:5c:b3:2b:31:c7:32:6a:5a:39:e8:a3: 72:77:35:6b:6d:cd:0d:c3:52:de:c2:c1:c0:68:89: 6d:6a:67:ac:35:d9:bb:91:8b:8d:15:58:90:e6:c6: bc:50:97:5f:c3:26:36:f0:b5:ef:3e:03:50:22:29: ac:41:ca:b3:36:e1:5c:30:4b:f8:e0:55:c7:28:0f: 0c:8b:60:92:6e:4c:50:5b:10:57:45:6c:3c:a5:85: bb:51:b7:0d:ef:1a:52:b2:9a:a2:77:e1:b5:3a:45: 48:e9:83:fb:24:c1:45:6c:f9:52:f1:fd:ea:1d:1c: 70:fb:39:4d:f8:4a:36:d8:72:38:e9:11:bb:b6:a1: e5:1b:80:2e:85:cb:ec:5d:67:80:db:b6:14:69:8c: a7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D3:77:E0:50:93:69:AA:59:ED:3A:42:7F:83:CA:ED:FB:E0:04:F3 X509v3 Authority Key Identifier: keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:68:a4:6d:4d:42:7d:3e:c4:1d:b5:50:bc:00:cb:71:04:6d: d3:b9:a1:ea:20:68:8d:3d:d4:3a:ca:30:aa:61:61:42:68:2b: 35:fb:eb:d0:4e:b1:1e:c3:c0:d0:f7:e5:4a:7c:3d:7a:1e:08: b3:dd:16:46:2f:24:48:5c:06:0f:00:50:6c:df:4d:22:58:8c: 08:2d:12:ce:d3:05:1a:37:af:65:70:7a:f2:8a:c9:87:a0:2c: 1f:4e:5e:0f:2c:c9:42:9e:57:43:66:8b:be:85:73:a5:82:08: a7:af:c8:3a:19:bd:ad:c2:cf:88:fe:8d:f6:72:81:e3:a8:8b: 44:c0:57:47:34:02:0b:1f:07:aa:3a:af:66:68:06:f3:29:da: 1f:ee:54:8f:87:84:fa:ca:51:a7:a7:16:ca:96:f3:55:a3:aa: 4b:54:35:c6:ae:16:f2:ce:94:43:2f:42:7d:99:95:c6:af:5b: 0d:23:b4:04:06:4e:c7:88:24:9e:12:a4:f9:55:e2:2c:77:a7: 05:5f:8b:c2:e7:97:37:b0:9b:60:c6:5a:5d:4e:ff:d9:3e:49: 3d:d3:f7:6a:8d:d3:30:08:9a:fb:3f:1e:42:8e:62:ed:64:b7: ea:10:96:b5:f9:70:ea:15:17:b9:9e:a9:63:4f:b6:89:a4:e5: f1:6f:0d:91 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQNFmsSqX2fM/y5KKCMd43IDLZgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz MGY3YzRjYTAeFw0yNTA2MDYxODI3MzJaFw0yNTA2MDcxODU5MzJaMDMxMTAvBgNV BAMTKDRCRDM3N0UwNTA5MzY5QUE1OUVEM0E0MjdGODNDQUVERkJFMDA0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZfFd3trqxf+kIaTBhJF6B3ih3 VQRUc1vhpBdEoeiMJgehhZjCzHU2pBaZek1JiEZXcKERMBHtsJQc5IkhdQ9BRAHn mTURAL8dTS+0h2nTjMx47cUhJ2Tw3LXE7055U8TiU4HST5L/hWtcCdZcsysxxzJq Wjnoo3J3NWttzQ3DUt7CwcBoiW1qZ6w12buRi40VWJDmxrxQl1/DJjbwte8+A1Ai KaxByrM24VwwS/jgVccoDwyLYJJuTFBbEFdFbDylhbtRtw3vGlKymqJ34bU6RUjp g/skwUVs+VLx/eodHHD7OU34SjbYcjjpEbu2oeUbgC6Fy+xdZ4DbthRpjKc5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUS9N34FCTaapZ7TpCf4PK7fvgBPMwHwYDVR0j BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE M3hNby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzAzMDg5MC1m NmUwLTQxMGMtYmM5OS1hZjA5MjFkMWMzYTQvMC84QjlCQTlBRERFOTYzNTc3N0JG NTg2RkQ0OTNFMTRDRDMwRjdDNENBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWikbU1CfT7EHbVQvADL cQRt07mh6iBojT3UOsowqmFhQmgrNfvr0E6xHsPA0PflSnw9eh4Is90WRi8kSFwG DwBQbN9NIliMCC0SztMFGjevZXB68orJh6AsH05eDyzJQp5XQ2aLvoVzpYIIp6/I Ohm9rcLPiP6N9nKB46iLRMBXRzQCCx8HqjqvZmgG8ynaH+5Uj4eE+spRp6cWypbz VaOqS1Q1xq4W8s6UQy9CfZmVxq9bDSO0BAZOx4gknhKk+VXiLHenBV+LwueXN7Cb YMZaXU7/2T5JPdP3ao3TMAia+z8eQo5i7WS36hCWtflw6hUXuZ6pY0+2iaTl8W8N kQ== -----END CERTIFICATE-----Generated at Fri Jun 6 23:50:47 2025 by rpki-client