$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft File: B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json) Hash identifier: TB4LVip1G5YNUEI41lWQYiWxuRoZxueNq6L95Sja3y4= Subject key identifier: 8F:C8:E8:C6:AA:F4:EC:55:1E:E0:52:90:54:14:8B:3E:F3:BC:53:A3 Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e Certificate serial: 1FC53CB390D0269DF2BD6AFCFBCAD219B7CC4CFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft Manifest number: 04FB Signing time: Fri 04 Apr 2025 06:55:36 +0000 Manifest this update: Fri 04 Apr 2025 06:50:36 +0000 Manifest next update: Sat 05 Apr 2025 10:15:36 +0000 Files and hashes: 1: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: +A7YZkvAN81rPDpTJkId3sZMflwrFWtwJvc3yTwbIVs=) 2: 3231332e3133392e36362e302f32342d3234203d3e203136353039.roa (hash: 1hlK3K+inj21DftfAPCqNx9Ur756v/RvYDQKchDD0RY=) 3: 3231332e3133392e37352e302f32342d3234203d3e20323731393837.roa (hash: k/dg+vn2LRgJwjRiBw+dTVhqGlwM5OEWHrHzMTRZgGU=) 4: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: Byq8JepWqrcVEWnX2vthyW2wZas5MvW5yy9NQn72V5M=) 5: 3231332e3133392e36352e302f32342d3234203d3e203538303631.roa (hash: 4CxK/2nsy4IlLMM6spVwFLEFITyK9i3ABeG638HSk98=) 6: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: pcqczpZd3N8rkxbwgnioI5KV9SeSdrdvwmseTG1EX1s=) 7: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: cv7c938TG1TrAJ4WxpMEnrJuipZuwdL8o32jtRflF/0=) 8: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: J06WMDxk0vMK8pfigTls8zgcVFUgtvOJyAs44qQdbiE=) 9: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: aplL4eWGO1854T22hYUsUkBTP8Rpw5inKqfwVoAi4uA=) 10: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: vs2b7sm3b3a6ih0FOLh30+kJAWgxfwtdRLZicKgW2iY=) 11: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: xgaIqdtwavjhzG1jXVp6EFDMpjflmhfZfviz1IzDLuw=) 12: 3231332e3133392e36372e302f32342d3234203d3e20383334.roa (hash: D6SogqGmOJbzVtDCb1JuxW8Fgqo7v+Dc/bOrJE9HIsI=) 13: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: BpwFTe7Yxv8spCXtI6SlrcvqkmRSrqF7TJL8D0ERvYc=) 14: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: Bl1aRRfvhlQw8eeGsoLHX9t51iL6e6Y2fGT+6y05OLk=) 15: 3231332e3133392e38302e302f32332d3234203d3e20383334.roa (hash: qiWvZJxXyA1T8nIVbLoZ99OExdcS5mc15RZxXCZOFJM=) 16: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: Ag6bDXTIkeP3S1yYyObakXBVS3meRtUEDwW2GPMInYg=) 17: 3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa (hash: ++GZ339S0KrF867J3TV0tr4TdthWz9Doq5ZUIyvykVE=) 18: 3231332e3133392e36392e302f32342d3234203d3e20313337353137.roa (hash: HH3jqYI0MpU2yLi9Hw8yJjtic3EBakXCP+g63lrfqjg=) 19: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: NjWmld7in/C2wyn6DXt7Xnv7mQPq1jiHpZcTZuGeBQ0=) 20: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: 6Jy9wWlUlUHCaXgvzl/QdTAZFj96twj6nqzC95T3heA=) 21: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: 76sMew3kWK2GxX6Cz/lWzvBcIOsFsxtBKTT+2QueUeI=) 22: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: osiInenMTL8nKf7tFVx8rBMOYt6Vnk1ZBd7DbmGt4LE=) 23: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: of9+QBHzVFeRCikR2/nTKS/SdWnbBqij0UrrT6Ws2zo=) 24: 3231332e3133392e37332e302f32342d3234203d3e20333936333536.roa (hash: p9bl2cITeGqyDsp+qYa6XKu0+IBsfcA9I2MK2L2iu7Q=) 25: 3231332e3133392e37372e302f32342d3234203d3e20383334.roa (hash: O5jVvFaTWVNtfUZ2xsHPpB6aWw/5pLDoGWzZv5bE6BQ=) 26: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: 3sBgBPhXGekAATE8XJ410DzQWJqVxKjP0XKZZazqwjc=) 27: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: yJ63ns+uy5OkuxXphsk4soJDW/P4jNZxDgA1HqxR2Vc=) 28: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: lKJSkJqFjy6TPDk7oRGHPjAYx2K53051mCG+JZr9O4Y=) 29: 3231332e3133392e37392e302f32342d3234203d3e2033333230.roa (hash: PtRMyKTdbfZGfPE5XdhdhFh3qhxKx8+kxVjMWXNcsWU=) 30: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: M5KJEFx6ngzgWcWaswPQRo9lko/DzsisbWDI/JPapI0=) 31: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: FVZySD2qYJGzeA33TZ6k9nKfV57UUqtM3Y9RFiezkdM=) 32: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: CDL0jvyMQodplKp33qHE8utNJuEvgr8dJgi4XDSuhbM=) 33: 3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa (hash: 0JPdHuSbHUk0VXaqk6MQ9H7eLXZuOQ1QZwBPgp3LcZ4=) 34: 3231332e3133392e36362e302f32342d3234203d3e203134363138.roa (hash: KfrtJjSrdaJP5uvqRj2CQapVnmUpyN82iN3vrd+6yjk=) 35: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: qcqTb3VE7m+UGKYwU3pX6Cz4rtaboRvLfOlujiKOavY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 10:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c5:3c:b3:90:d0:26:9d:f2:bd:6a:fc:fb:ca:d2:19:b7:cc:4c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e Validity Not Before: Apr 4 06:50:36 2025 GMT Not After : Apr 5 10:15:36 2025 GMT Subject: CN=8FC8E8C6AAF4EC551EE0529054148B3EF3BC53A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3c:fc:d7:e9:0e:d2:10:26:ce:e4:10:0f:ce: 7b:f4:57:00:bd:44:bf:ed:b7:e2:d9:05:71:ca:aa: 5b:c0:07:eb:ee:0f:c5:a2:e8:25:f1:c9:d7:7f:21: f3:65:20:7c:36:fa:59:86:c1:b0:4f:b8:06:ea:98: a7:8b:6d:63:22:a9:e1:f7:3e:26:e1:92:5f:39:23: 41:b4:44:f4:bd:4a:0e:68:8f:be:6d:bf:6c:d2:5b: 5c:bd:7f:bf:30:89:e1:6a:b1:08:b5:64:5f:1d:e3: af:60:1a:58:e2:95:0a:2a:4f:33:58:e9:10:4c:ff: 16:59:12:c8:3c:c6:38:4b:59:05:07:fe:88:7e:af: c9:90:9c:c2:88:bd:a4:bc:30:fe:ce:9f:b0:d9:a5: 46:a6:5e:1a:fb:77:fa:fe:2d:68:ad:1a:61:75:48: 47:fa:a3:0c:39:dc:27:38:d3:3c:d8:e3:c7:55:b0: e9:cf:a0:98:87:50:9c:80:f6:d8:16:95:3e:95:dd: 55:d3:e1:0a:fd:e2:86:22:e4:1e:14:f3:65:7c:14: c4:df:dc:6a:f2:3e:e9:74:e4:4e:c9:f6:08:9d:bd: f0:75:58:35:10:8f:98:7f:30:e7:03:87:14:63:be: c1:90:fb:8d:9d:e9:30:79:a9:e4:db:0f:8c:ef:6b: 60:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C8:E8:C6:AA:F4:EC:55:1E:E0:52:90:54:14:8B:3E:F3:BC:53:A3 X509v3 Authority Key Identifier: keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b9:38:12:db:cd:ba:fc:41:a5:5b:20:cf:0f:29:27:f4:70: 3d:d7:7d:d9:a4:73:64:df:31:5e:31:11:04:5e:8e:04:79:ac: 6d:5f:65:5e:a3:aa:1a:08:37:15:c2:3b:30:23:21:f8:44:68: 09:77:9d:8f:3e:fe:62:67:92:73:38:bd:1e:c4:fb:b2:94:bb: 53:f4:1a:b0:53:fb:52:64:82:1d:eb:e2:aa:43:62:e8:3f:f0: d4:77:fe:0c:ac:17:78:f2:af:31:aa:e8:1f:c3:c1:53:9f:ff: 12:78:1a:93:a3:70:b6:51:70:3d:ac:48:bc:a9:5f:26:47:16: 15:0d:ca:65:a7:33:ee:b4:c5:a0:2a:bf:bf:e1:91:6d:9e:93: 2a:84:ef:78:7c:da:15:78:e3:14:9b:71:71:b2:7b:ba:d6:fb: e6:84:07:17:77:5a:50:15:9a:c4:c9:17:25:4d:eb:40:c7:4a: 7f:cf:24:6f:97:2a:c8:32:a3:41:4b:5e:54:ea:f1:92:4f:c4: 89:53:f7:bd:84:15:42:5e:c6:ad:f8:a5:6c:a5:04:a2:66:5f: 6e:db:cf:be:72:57:15:ee:7b:3a:46:a2:11:6b:f7:06:5a:22: 8f:dc:e0:9f:7b:a7:d3:1f:f6:63:62:fe:fa:8c:f6:c2:d9:6b: 7a:c9:7f:c9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUH8U8s5DQJp3yvWr8+8rSGbfMTPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk NDhjN2QzZTAeFw0yNTA0MDQwNjUwMzZaFw0yNTA0MDUxMDE1MzZaMDMxMTAvBgNV BAMTKDhGQzhFOEM2QUFGNEVDNTUxRUUwNTI5MDU0MTQ4QjNFRjNCQzUzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWPPzX6Q7SECbO5BAPznv0VwC9 RL/tt+LZBXHKqlvAB+vuD8Wi6CXxydd/IfNlIHw2+lmGwbBPuAbqmKeLbWMiqeH3 Pibhkl85I0G0RPS9Sg5oj75tv2zSW1y9f78wieFqsQi1ZF8d469gGljilQoqTzNY 6RBM/xZZEsg8xjhLWQUH/oh+r8mQnMKIvaS8MP7On7DZpUamXhr7d/r+LWitGmF1 SEf6oww53Cc40zzY48dVsOnPoJiHUJyA9tgWlT6V3VXT4Qr94oYi5B4U82V8FMTf 3GryPul05E7J9gidvfB1WDUQj5h/MOcDhxRjvsGQ+42d6TB5qeTbD4zva2AFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUj8joxqr07FUe4FKQVBSLPvO8U6MwHwYDVR0j BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT TWZUNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hMDFjMTRmYi1i NjYwLTQ4OWQtOWU5Zi05NDAyZTllMmMyZTIvMC9CNjgzRjJFQjUwQzU5OTlBNzc0 NTZFODgyNjgzMTYwOUQ0OEM3RDNFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbk4EtvNuvxBpVsgzw8p J/RwPdd92aRzZN8xXjERBF6OBHmsbV9lXqOqGgg3FcI7MCMh+ERoCXedjz7+YmeS czi9HsT7spS7U/QasFP7UmSCHeviqkNi6D/w1Hf+DKwXePKvMaroH8PBU5//Enga k6NwtlFwPaxIvKlfJkcWFQ3KZacz7rTFoCq/v+GRbZ6TKoTveHzaFXjjFJtxcbJ7 utb75oQHF3daUBWaxMkXJU3rQMdKf88kb5cqyDKjQUteVOrxkk/EiVP3vYQVQl7G rfilbKUEomZfbtvPvnJXFe57OkaiEWv3Bloij9zgn3un0x/2Y2L++oz2wtlresl/ yQ== -----END CERTIFICATE-----Generated at Fri Apr 4 23:25:37 2025 by rpki-client