$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft File: B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json) Hash identifier: w27H9TuDn1cL8SKEYJzJdDTZLsNXB91FeWGLSP01sf0= Subject key identifier: AA:29:01:83:88:20:BA:F1:D7:E7:9E:43:2E:76:F5:0D:00:E3:BD:AB Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac Certificate serial: 04895A89E81376464E57327FCC38A9F6D7EBE3B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft Manifest number: 020A Signing time: Fri 06 Jun 2025 07:37:29 +0000 Manifest this update: Fri 06 Jun 2025 07:32:29 +0000 Manifest next update: Sat 07 Jun 2025 11:16:29 +0000 Files and hashes: 1: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: FBdBmLEGxXhvarnPJcmElFlCgeLSIQ6GXw75K+usirs=) 2: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: zbKaWYwmjPPC167P5YL6I94JcPZEWN0HKnmqpfcR9u4=) 3: 326130623a366338303a3a2f33322d3332203d3e20323135383338.roa (hash: kEt2cGR+/Q700kchrRZoRuY0FKyYF1rSAaCa413pKew=) 4: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: GLnxhXa/h4ufjdiAg95qSw1j0PmQvkhY/z1rbpDeZg8=) 5: 326130623a366338313a3a2f33322d3332203d3e20323135383338.roa (hash: 5mcUsW8Gu/iSzerp0Wwk+smZAmRaAGiznqu01bMcUDg=) 6: 3138352e3138362e32372e302f32342d3234203d3e203631333137.roa (hash: jD3TEx8Q8JwdsmzwyDZ9zaukL1sMlGUp0uzFac23xJs=) 7: 3138352e3138362e32342e302f32342d3234203d3e20323135383338.roa (hash: nTMWfEhxo36lxHJvP1+YWdrKCSryelFli2OhT4xBMNI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 11:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:89:5a:89:e8:13:76:46:4e:57:32:7f:cc:38:a9:f6:d7:eb:e3:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac Validity Not Before: Jun 6 07:32:29 2025 GMT Not After : Jun 7 11:16:29 2025 GMT Subject: CN=AA2901838820BAF1D7E79E432E76F50D00E3BDAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:45:33:80:20:09:d8:29:4f:4a:bf:4b:23:8f: 40:7a:75:b2:ce:d4:6f:3a:cf:32:63:89:ea:13:b3: e4:5a:ff:92:e8:b4:ab:82:40:cc:48:c4:bd:b0:47: 35:80:7c:f0:10:f7:cf:ea:fe:6b:f8:0a:98:7f:5a: 28:f2:3c:e5:80:aa:4d:f0:bc:24:3c:d9:c6:c7:bd: b8:6b:9e:60:ce:e4:08:b1:69:db:1e:14:a2:2a:1e: 00:f8:16:df:b6:06:73:e9:b9:6a:3c:a9:71:30:d9: 9f:7d:13:95:92:7a:64:73:f4:dc:b5:21:f4:88:ad: 1f:63:47:69:ce:ec:e8:41:10:62:46:cd:32:11:9a: fd:13:70:27:97:31:03:5f:94:ac:72:4f:a1:1e:8e: d2:ac:e2:f4:41:3f:68:9f:b2:48:2f:57:2f:7c:f9: 58:0f:e3:fe:a3:9f:28:f5:d0:42:f9:d7:99:a5:d7: 97:b4:24:d1:49:5e:db:0d:81:6d:19:81:84:57:05: a1:ce:ba:d1:f2:5d:f7:b2:63:59:31:4f:92:9d:29: fd:0d:08:f0:67:49:6b:92:83:0b:cd:b1:22:cd:3e: 82:92:c3:82:9d:b4:ea:e7:13:7d:85:30:9d:7c:f9: 26:cf:d3:08:b2:51:42:aa:c5:17:6f:53:58:1b:0a: e7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:29:01:83:88:20:BA:F1:D7:E7:9E:43:2E:76:F5:0D:00:E3:BD:AB X509v3 Authority Key Identifier: keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:98:89:b8:6c:46:38:32:8c:13:5a:1b:44:c5:60:9a:06:ca: 97:b1:16:42:b2:41:20:0f:47:e1:29:9b:08:0d:63:ba:dc:cb: 3b:7f:58:ce:6b:4a:fe:10:07:26:38:df:a2:4a:d6:4c:53:1e: 53:e6:4c:4d:8a:3b:5c:5a:a9:bc:bc:36:9c:ad:cd:1f:21:a8: c8:aa:17:28:4d:0b:1e:07:06:e1:f1:5d:51:cd:1c:0f:49:73: 3b:93:5b:79:46:c8:e0:d8:a0:93:2e:b5:db:3b:70:dc:39:34: e0:4d:b2:f7:9a:5c:fb:fa:60:f9:c7:89:e8:3d:26:e9:80:f4: 5a:2f:d4:eb:e0:b1:7d:08:0c:cb:6c:e6:67:80:28:01:2f:f6: 33:e5:60:55:d5:dc:1f:38:2e:c1:04:9c:7a:a4:ca:1f:74:b8: bb:46:32:28:e8:8e:2e:8e:68:a0:9b:15:eb:44:93:7c:22:51: 5a:3a:f0:fc:e4:cd:0f:23:4b:b6:19:aa:2d:a9:60:4b:67:08: d1:42:b2:47:5d:a9:c6:f2:80:d2:98:fb:70:e6:51:f0:b4:a8: e1:d2:e0:3a:25:65:5c:84:23:23:bd:12:a2:41:43:71:d3:9e: 58:d5:03:86:7d:e6:8a:7d:a4:db:bd:07:ab:f1:8d:ea:ae:59: d7:79:b2:52 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBIlaiegTdkZOVzJ/zDip9tfr47MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjNkMDI4MGY1MDA2OTVhNDMyMDQyNTFjOTgzMDQ1NGNh OGEyZTdhYzAeFw0yNTA2MDYwNzMyMjlaFw0yNTA2MDcxMTE2MjlaMDMxMTAvBgNV BAMTKEFBMjkwMTgzODgyMEJBRjFEN0U3OUU0MzJFNzZGNTBEMDBFM0JEQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsRTOAIAnYKU9Kv0sjj0B6dbLO 1G86zzJjieoTs+Ra/5LotKuCQMxIxL2wRzWAfPAQ98/q/mv4Cph/WijyPOWAqk3w vCQ82cbHvbhrnmDO5AixadseFKIqHgD4Ft+2BnPpuWo8qXEw2Z99E5WSemRz9Ny1 IfSIrR9jR2nO7OhBEGJGzTIRmv0TcCeXMQNflKxyT6EejtKs4vRBP2ifskgvVy98 +VgP4/6jnyj10EL515ml15e0JNFJXtsNgW0ZgYRXBaHOutHyXfeyY1kxT5KdKf0N CPBnSWuSgwvNsSLNPoKSw4KdtOrnE32FMJ18+SbP0wiyUUKqxRdvU1gbCudJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUqikBg4gguvHX555DLnb1DQDjvaswHwYDVR0j BBgwFoAUs9AoD1AGlaQyBCUcmDBFTKii56wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdhZTI1ZjMtNzA2Yi00N2VkLWJiNzQtNDY2ODRhZTBl ZjJiLzAvQjNEMDI4MEY1MDA2OTVBNDMyMDQyNTFDOTgzMDQ1NENBOEEyRTdBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M5QW9EMUFHbGFReUJDVWNtREJGVEtp aTU2dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2FlMjVmMy03 MDZiLTQ3ZWQtYmI3NC00NjY4NGFlMGVmMmIvMC9CM0QwMjgwRjUwMDY5NUE0MzIw NDI1MUM5ODMwNDU0Q0E4QTJFN0FDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJiJuGxGODKME1obRMVg mgbKl7EWQrJBIA9H4SmbCA1jutzLO39YzmtK/hAHJjjfokrWTFMeU+ZMTYo7XFqp vLw2nK3NHyGoyKoXKE0LHgcG4fFdUc0cD0lzO5NbeUbI4Nigky612ztw3Dk04E2y 95pc+/pg+ceJ6D0m6YD0Wi/U6+CxfQgMy2zmZ4AoAS/2M+VgVdXcHzguwQSceqTK H3S4u0YyKOiOLo5ooJsV60STfCJRWjrw/OTNDyNLthmqLalgS2cI0UKyR12pxvKA 0pj7cOZR8LSo4dLgOiVlXIQjI70SokFDcdOeWNUDhn3min2k270Hq/GN6q5Z13my Ug== -----END CERTIFICATE-----Generated at Sat Jun 7 00:48:57 2025 by rpki-client