$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: 00sQcQE7Ws1W6za8+m8GgVkG1/CcAOYWGGkKGLBdWn8= Subject key identifier: E8:F4:59:EF:6D:7B:06:A3:8E:CA:42:E1:8D:F7:84:B9:3C:5F:C7:A5 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 69D727349BFDD76FBC5BD6655A8B0D7A25B25ADE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 011B Signing time: Fri 06 Jun 2025 14:07:30 +0000 Manifest this update: Fri 06 Jun 2025 14:02:30 +0000 Manifest next update: Sat 07 Jun 2025 16:27:30 +0000 Files and hashes: 1: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: DDeP4uYwqP8b0ON0e+nML7HE4UFDik7BChJ/x0EHl9Q=) 2: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: 7Sc0kHwIvu+CS3chfy5CIkjY7zBEwtBvQfh6wEY5Bc4=) 3: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: 0b6sszxsKulqMcqV3D3Yqcg5IxC3pSU5gc82mTsDYlA=) 4: 3134312e3139332e3232382e302f32342d3234203d3e203130313033.roa (hash: wXEZYM8r4N3Bh60WvsuoRKA5OSB618zkHXVaZhvbDno=) 5: 38362e35342e3137322e302f32342d3234203d3e2032383536.roa (hash: kIjLwSREHkERxqQgCNkVDjeNAzY3bReXXhmulizNBno=) 6: 3134312e3139332e3232382e302f32342d3234203d3e20313937353337.roa (hash: GmuqQ5cRPqO0r6kNpS31Skpj+V6x9N2OgVf2PPKwFIs=) 7: 3137302e36322e3139302e302f32342d3234203d3e203438393235.roa (hash: TDSLNd9plHJwOulPeBHo1vNBDKxJTlWmh9i0dzSd4do=) 8: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: aWzsWkNz9PJPPmM8i0/IefYTbT3Y07R53lZGD0EHqrg=) 9: 3134312e3139332e3232382e302f32342d3234203d3e2039333034.roa (hash: s5WbNe5Whw4ZMD9Ltnk2u5lg9JZnAEnQMp+26m9SqMs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d7:27:34:9b:fd:d7:6f:bc:5b:d6:65:5a:8b:0d:7a:25:b2:5a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Jun 6 14:02:30 2025 GMT Not After : Jun 7 16:27:30 2025 GMT Subject: CN=E8F459EF6D7B06A38ECA42E18DF784B93C5FC7A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:87:0f:25:7e:3d:c4:18:5a:c1:90:74:2f:2d: 6f:a0:17:ae:d0:03:a5:70:9d:12:83:11:f2:cc:14: 49:35:7f:aa:df:40:03:3d:32:ed:90:fa:23:93:ff: cf:e2:d3:b1:ce:61:e8:42:11:3f:25:36:55:47:bf: f3:ea:fd:3f:05:49:9b:d8:a7:36:ba:fe:08:b4:13: b4:e2:2e:1f:92:af:4b:31:76:2b:28:f1:03:49:cb: c8:f4:a3:c2:52:b9:fc:40:23:f1:a6:ea:47:f4:fa: 4d:50:25:1f:e6:22:8e:d2:da:e5:6e:56:45:64:4e: 41:b7:fb:ca:70:3c:8a:a4:f3:60:8a:a2:5f:22:c2: 45:bf:a3:95:15:8c:e2:44:11:25:57:3c:94:3e:22: 7a:a7:13:73:00:e6:c9:f5:a3:e5:40:e3:b6:fe:57: cc:9b:be:86:2b:2c:48:ac:05:aa:a8:bf:cd:43:dc: 23:0d:25:6c:a1:b4:e3:ab:d3:d8:8c:30:3e:13:20: a2:48:ec:48:2c:b7:dd:b6:95:59:99:23:48:a4:2c: d7:c7:13:33:84:a4:f8:8b:ab:47:3c:b3:57:e4:e7: 8d:c9:42:83:03:9d:28:5e:94:ab:82:6d:08:67:27: c8:35:a1:21:2d:ea:27:9e:6e:c8:0e:78:1b:c1:57: 1c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F4:59:EF:6D:7B:06:A3:8E:CA:42:E1:8D:F7:84:B9:3C:5F:C7:A5 X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:be:f0:14:52:cc:5c:7d:40:0b:98:32:5d:08:e7:7a:95:54: ec:f7:69:36:60:b5:4f:18:e1:80:9a:cc:ae:43:a7:a3:99:00: c1:51:c2:b6:c5:ef:5e:16:04:85:44:72:86:49:48:b8:ff:ee: b2:1f:dd:80:ae:dd:32:9c:67:d2:4b:b6:e4:9f:28:76:f3:e3: 82:d1:4e:fe:e0:fd:3b:df:70:1f:01:84:5e:74:00:9e:77:30: af:20:05:94:9b:8c:9a:2d:f3:3e:69:26:3b:e8:b5:d5:8f:d9: 11:b3:c6:03:50:5e:41:aa:b3:b2:c9:13:b1:c4:66:98:d5:b7: 51:5d:41:7c:53:f5:9d:51:63:20:70:4e:3e:6f:69:18:f7:f0: 4a:c1:4b:ae:06:90:35:10:d0:a2:10:ce:4c:92:59:7b:70:f5: 35:e5:5e:32:7f:d1:89:e0:21:a5:50:bf:ba:f7:97:16:7b:12: 86:99:16:d2:7c:1c:7e:a0:ba:14:b3:cd:9d:d7:7c:28:68:35: 0d:d2:da:40:78:66:86:f1:98:43:a3:41:86:6d:1d:4d:e6:85: 9e:82:10:9e:7e:54:e1:c2:8c:3d:7f:80:50:4a:a1:da:d2:eb: 2b:eb:e0:23:ab:23:c5:7c:84:4d:14:79:27:52:ec:0c:0e:a1: 15:06:a0:d6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUadcnNJv912+8W9ZlWosNeiWyWt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNTA2MDYxNDAyMzBaFw0yNTA2MDcxNjI3MzBaMDMxMTAvBgNV BAMTKEU4RjQ1OUVGNkQ3QjA2QTM4RUNBNDJFMThERjc4NEI5M0M1RkM3QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOhw8lfj3EGFrBkHQvLW+gF67Q A6VwnRKDEfLMFEk1f6rfQAM9Mu2Q+iOT/8/i07HOYehCET8lNlVHv/Pq/T8FSZvY pza6/gi0E7TiLh+Sr0sxdiso8QNJy8j0o8JSufxAI/Gm6kf0+k1QJR/mIo7S2uVu VkVkTkG3+8pwPIqk82CKol8iwkW/o5UVjOJEESVXPJQ+InqnE3MA5sn1o+VA47b+ V8ybvoYrLEisBaqov81D3CMNJWyhtOOr09iMMD4TIKJI7Egst922lVmZI0ikLNfH EzOEpPiLq0c8s1fk543JQoMDnShelKuCbQhnJ8g1oSEt6ieebsgOeBvBVxx5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6PRZ7217BqOOykLhjfeEuTxfx6UwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOL7wFFLMXH1AC5gyXQjn epVU7PdpNmC1TxjhgJrMrkOno5kAwVHCtsXvXhYEhURyhklIuP/ush/dgK7dMpxn 0ku25J8odvPjgtFO/uD9O99wHwGEXnQAnncwryAFlJuMmi3zPmkmO+i11Y/ZEbPG A1BeQaqzsskTscRmmNW3UV1BfFP1nVFjIHBOPm9pGPfwSsFLrgaQNRDQohDOTJJZ e3D1NeVeMn/RieAhpVC/uveXFnsShpkW0nwcfqC6FLPNndd8KGg1DdLaQHhmhvGY Q6NBhm0dTeaFnoIQnn5U4cKMPX+AUEqh2tLrK+vgI6sjxXyETRR5J1LsDA6hFQag 1g== -----END CERTIFICATE-----Generated at Fri Jun 6 23:29:18 2025 by rpki-client