$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: fhDnmfcw0rnT11G+5m34I+YPq3KksmzTiU0ja+ViN2M= Subject key identifier: 89:08:7A:97:2E:76:36:40:4E:ED:0E:A8:F6:89:98:2F:3E:C6:CD:65 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 2365AC81C421CCAA4BB739CD4B9D9CCAA08D2DFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0306 Signing time: Mon 02 Jun 2025 04:30:58 +0000 Manifest this update: Mon 02 Jun 2025 04:25:58 +0000 Manifest next update: Tue 03 Jun 2025 06:27:58 +0000 Files and hashes: 1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: xrYxMPWlm0NFN/UuQmB97S5T+AeBbukKizXkLUfGrf8=) 2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: ytuECs7j4zGJqJdJa4rGkrEPCrlfuZ9RaEY2T4xYUeA=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: OgJ5IHBdzo8hNNE/hueSPIOCulRspm4s5gp10NbE/v8=) 4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 3szHiK9lWIaJ/dzmVZjFwtVEnpqjPyPkJzynOh91IxQ=) 5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: tM6AOBSdq8t/+b2jwQliXrToX+/NgR89RNEhgmdHZII=) 6: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=) 7: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: Dcvv1Ul0JGTxvGw2Ps2/e001gxa3ZWx5ttvSXeBWQh0=) 8: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: BTfImX353JFUgcIZ2jDRlZdLmp+KqSbtrCi6ArFxd6k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 06:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:65:ac:81:c4:21:cc:aa:4b:b7:39:cd:4b:9d:9c:ca:a0:8d:2d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Jun 2 04:25:58 2025 GMT Not After : Jun 3 06:27:58 2025 GMT Subject: CN=89087A972E7636404EED0EA8F689982F3EC6CD65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:52:a8:5f:6b:24:2c:49:4d:ee:f6:29:fc:34: 6a:8d:1e:d9:14:de:f4:12:b4:38:c3:9d:c0:d4:88: e6:ae:52:e2:40:07:e8:fa:2c:fc:a3:69:e9:e0:7b: 57:59:e9:f7:2b:ba:01:7c:f7:12:a2:e0:6a:61:b9: 28:32:ac:d9:ad:c5:a3:a1:4b:e3:26:69:22:89:4d: 2a:46:bc:bb:06:66:5c:05:03:33:ee:2a:36:45:e0: b7:b0:12:78:1f:e7:1f:b2:c6:e2:91:73:6c:49:7b: bf:c1:2f:cf:07:0a:01:8f:c3:06:f9:4b:c4:eb:ac: ec:40:1c:d7:89:14:e0:12:eb:b8:e7:6d:02:df:98: 01:1a:08:2c:8d:3a:93:84:3a:56:21:e0:82:9d:36: 1d:2f:ae:e7:e3:3d:89:48:26:ae:a5:8d:f6:bf:ec: a4:ab:2b:b5:63:fd:ec:62:d1:5c:bd:49:b5:85:17: 57:79:75:02:1d:30:7a:f0:96:92:20:49:8b:39:af: 4f:3f:eb:6e:19:2c:28:5e:e7:f2:4f:27:20:bd:16: 6b:8e:45:11:65:65:a5:8c:92:bf:e7:a9:79:2d:de: 07:77:18:73:5b:ae:4d:7d:ac:70:1b:83:86:39:12: 84:05:fc:38:c9:96:6b:a9:63:9f:e9:35:91:5b:b6: 53:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:08:7A:97:2E:76:36:40:4E:ED:0E:A8:F6:89:98:2F:3E:C6:CD:65 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:1e:36:7e:77:bb:ff:74:29:37:ac:6a:2b:d6:f5:04:2f:f5: de:a6:eb:d0:d8:0b:af:f4:7f:58:cf:0d:c6:4f:16:81:40:63: 8a:0d:37:b7:52:a6:8b:12:83:6b:a9:00:50:bb:2d:a5:5c:67: 93:b9:a4:02:68:e5:bf:5a:93:ba:af:03:f3:88:07:37:82:2b: 22:66:d4:15:be:27:9b:36:77:5e:b8:23:92:72:21:7a:d9:42: fb:dd:3f:26:fc:6a:d6:48:8e:78:80:7d:b9:3a:6e:5f:18:fe: 05:39:0a:61:5c:b6:87:a7:59:38:69:42:3d:4f:32:fb:e1:7f: 8c:fd:67:d7:59:8b:36:0f:80:f8:50:7e:d9:d5:25:3d:e9:f0: 16:62:c8:8a:71:b3:dc:21:ad:64:03:26:64:b4:64:34:d6:26: 6f:f1:4c:dd:73:d3:54:af:4d:05:b6:1e:aa:f4:d3:42:b6:eb: 87:02:15:37:e4:12:fa:c4:ff:92:da:38:99:78:94:a6:68:88: 48:60:e3:f2:ce:ce:40:89:a2:a6:d6:53:f2:a1:77:58:eb:fb: 36:f2:a2:a5:f9:b7:27:e0:e0:e6:af:c2:4e:1b:12:90:17:05: cc:44:40:8a:9c:6d:af:e4:57:ef:e5:40:43:89:cb:b5:91:18: 0f:6a:84:80 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUI2WsgcQhzKpLtznNS52cyqCNLfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNTA2MDIwNDI1NThaFw0yNTA2MDMwNjI3NThaMDMxMTAvBgNV BAMTKDg5MDg3QTk3MkU3NjM2NDA0RUVEMEVBOEY2ODk5ODJGM0VDNkNENjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyUqhfayQsSU3u9in8NGqNHtkU 3vQStDjDncDUiOauUuJAB+j6LPyjaenge1dZ6fcrugF89xKi4GphuSgyrNmtxaOh S+MmaSKJTSpGvLsGZlwFAzPuKjZF4LewEngf5x+yxuKRc2xJe7/BL88HCgGPwwb5 S8TrrOxAHNeJFOAS67jnbQLfmAEaCCyNOpOEOlYh4IKdNh0vrufjPYlIJq6ljfa/ 7KSrK7Vj/exi0Vy9SbWFF1d5dQIdMHrwlpIgSYs5r08/624ZLChe5/JPJyC9FmuO RRFlZaWMkr/nqXkt3gd3GHNbrk19rHAbg4Y5EoQF/DjJlmupY5/pNZFbtlMPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUiQh6ly52NkBO7Q6o9omYLz7GzWUwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARB42fne7/3QpN6xqK9b1 BC/13qbr0NgLr/R/WM8Nxk8WgUBjig03t1KmixKDa6kAULstpVxnk7mkAmjlv1qT uq8D84gHN4IrImbUFb4nmzZ3XrgjknIhetlC+90/Jvxq1kiOeIB9uTpuXxj+BTkK YVy2h6dZOGlCPU8y++F/jP1n11mLNg+A+FB+2dUlPenwFmLIinGz3CGtZAMmZLRk NNYmb/FM3XPTVK9NBbYeqvTTQrbrhwIVN+QS+sT/kto4mXiUpmiISGDj8s7OQImi ptZT8qF3WOv7NvKipfm3J+Dg5q/CThsSkBcFzERAipxtr+RX7+VAQ4nLtZEYD2qE gA== -----END CERTIFICATE-----Generated at Mon Jun 2 16:29:06 2025 by rpki-client