$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: +ZJof12LUVvzDJUwlsUUiz3x3T4VL3rI1NXUG8025C0= Subject key identifier: FD:F7:16:2A:86:02:76:77:86:9F:53:F0:AC:FB:32:C3:05:7A:4D:27 Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 480ADA12A536EE5429A11F716FB32B83579420F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 03E8 Signing time: Fri 06 Jun 2025 15:07:30 +0000 Manifest this update: Fri 06 Jun 2025 15:02:30 +0000 Manifest next update: Sat 07 Jun 2025 16:26:30 +0000 Files and hashes: 1: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: cwrS6A/oM7uVoRnag/rHPBb4Qk8hZAq3bZyA0gVPCzk=) 2: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: OKc3uZvr3kmY38TGv/j5cCd/d8TD6IBU2hGWJY9u+K0=) 3: 3138352e322e3136322e302f32332d3234203d3e20323135323639.roa (hash: sEO5Q+LtE+juFIMx1yqrmSkIjuvpVFxY8R1aiQqtGzs=) 4: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: qGNft1uCzkGwuPJH7iDQ4xUhWrhNnduWexIhT+DgvI8=) 5: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: DuCHe81tO8TVOKBTNFQCS5fRuYDjbGZfxshPpJZXNzc=) 6: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: NTsZLgAvzGWVuhE5ai0qyLvzawg7gf4bUhpBFQNGmbs=) 7: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: qxlkfW/nLMV9I5WoI6HQ89q00naILT20Rguml63Zf0A=) 8: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: hY/iIpaGanxmxatebFYi3ijTkZjHjUc/Iwjsijc0S+E=) 9: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: ujOzcUFn73GlYynt8yef9LZrmhEywDFvXOhmuSoBoLw=) 10: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: oQj2no095+LyjZGzWOfw+sSJOW/7fRxpgUOPswu5nqM=) 11: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: LBMUHWugPGnJtw9mI4PuIshgxiedjcAOS8XKlWg3eYE=) 12: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: dPumV3w+l5K00Z5figZidyPpD2Xj/WObq95u77jhIK4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:0a:da:12:a5:36:ee:54:29:a1:1f:71:6f:b3:2b:83:57:94:20:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Jun 6 15:02:30 2025 GMT Not After : Jun 7 16:26:30 2025 GMT Subject: CN=FDF7162A86027677869F53F0ACFB32C3057A4D27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1d:b3:95:a3:77:63:53:8b:3d:e1:e4:d0:e9: 62:a6:9e:87:ce:c8:1c:23:84:a5:24:2c:ba:3a:a3: 73:a6:a4:a1:da:08:57:b1:72:50:61:19:0f:11:61: 30:db:05:6a:0a:c7:c7:ac:e4:44:e7:9b:84:7d:2c: c1:63:31:ed:db:30:4c:ee:6c:a4:31:6c:80:08:c5: df:d3:27:2d:0f:6a:a6:bc:8a:a5:51:d1:cd:da:04: 48:36:a3:a7:38:b0:47:f2:55:ef:aa:97:b6:60:f9: ee:12:f8:e7:75:3e:72:d4:70:43:06:21:5c:ae:fc: 31:e0:b1:4b:09:7a:99:06:cf:fe:81:eb:76:30:58: f3:bd:af:81:81:6d:54:5c:78:bc:99:1f:32:68:5f: bd:02:40:4c:4d:13:7b:50:33:2a:e2:82:64:66:55: e5:14:4d:9c:fa:b9:ac:17:b0:21:5d:2c:76:7a:e5: 2c:91:3f:46:0b:a9:35:b4:23:f6:01:d4:26:89:55: 23:6c:51:19:49:f3:87:17:8e:f4:af:8b:2a:bd:2e: ae:3c:39:6a:27:83:44:4a:93:97:72:2f:ab:6e:c9: 99:a9:38:74:4d:aa:99:fc:7f:bc:bb:06:84:d3:7c: 6e:a5:c4:ba:52:63:04:87:6d:b7:c3:9b:2c:d6:32: 73:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F7:16:2A:86:02:76:77:86:9F:53:F0:AC:FB:32:C3:05:7A:4D:27 X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:26:45:90:aa:f6:ee:27:36:0e:0e:95:9b:1d:59:fd:f0:79: ff:33:47:c9:ae:d9:58:45:41:a6:f1:5a:7b:dc:20:48:c7:7f: 0a:a6:9d:3a:84:1b:8f:40:49:5a:83:ad:74:70:b1:01:e1:f5: 29:37:1b:e7:91:36:9a:d3:55:14:83:af:81:a9:9e:11:4b:c6: dd:29:3f:74:69:63:76:e8:2b:b5:d3:aa:dc:e8:e7:7c:d6:2f: f9:9c:cc:4f:94:fe:7a:16:c9:fe:f0:cb:f5:65:21:4d:35:f2: 9e:2f:01:e0:2d:39:fc:b5:9c:e3:d4:83:1e:ea:51:93:ed:10: 96:69:56:1e:23:55:32:f9:f9:14:76:58:c5:7b:c2:b2:4c:a0: 27:d0:89:c3:dd:49:a8:d9:05:e0:92:f4:15:5c:ad:10:4e:83: 29:98:64:09:ae:6e:34:0c:14:02:68:a1:15:d0:e5:07:a2:d2: 29:12:55:a4:bc:c2:17:0b:af:ad:4d:1f:0c:f7:15:01:bf:1f: f5:aa:fd:44:ee:ff:67:02:50:19:1f:4b:a8:11:20:1c:42:e2: a0:f3:e5:86:6f:81:3d:84:68:72:f1:43:f1:a6:66:fd:08:35: 33:fc:88:ce:7d:66:f8:b1:36:76:a3:d6:dc:38:f5:7b:61:8e: de:72:fb:37 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSAraEqU27lQpoR9xb7Mrg1eUIPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNTA2MDYxNTAyMzBaFw0yNTA2MDcxNjI2MzBaMDMxMTAvBgNV BAMTKEZERjcxNjJBODYwMjc2Nzc4NjlGNTNGMEFDRkIzMkMzMDU3QTREMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoHbOVo3djU4s94eTQ6WKmnofO yBwjhKUkLLo6o3OmpKHaCFexclBhGQ8RYTDbBWoKx8es5ETnm4R9LMFjMe3bMEzu bKQxbIAIxd/TJy0Paqa8iqVR0c3aBEg2o6c4sEfyVe+ql7Zg+e4S+Od1PnLUcEMG IVyu/DHgsUsJepkGz/6B63YwWPO9r4GBbVRceLyZHzJoX70CQExNE3tQMyrigmRm VeUUTZz6uawXsCFdLHZ65SyRP0YLqTW0I/YB1CaJVSNsURlJ84cXjvSviyq9Lq48 OWong0RKk5dyL6tuyZmpOHRNqpn8f7y7BoTTfG6lxLpSYwSHbbfDmyzWMnO5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/fcWKoYCdneGn1PwrPsywwV6TScwHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbiZFkKr27ic2Dg6Vmx1Z /fB5/zNHya7ZWEVBpvFae9wgSMd/CqadOoQbj0BJWoOtdHCxAeH1KTcb55E2mtNV FIOvgameEUvG3Sk/dGljdugrtdOq3OjnfNYv+ZzMT5T+ehbJ/vDL9WUhTTXyni8B 4C05/LWc49SDHupRk+0QlmlWHiNVMvn5FHZYxXvCskygJ9CJw91JqNkF4JL0FVyt EE6DKZhkCa5uNAwUAmihFdDlB6LSKRJVpLzCFwuvrU0fDPcVAb8f9ar9RO7/ZwJQ GR9LqBEgHELioPPlhm+BPYRocvFD8aZm/Qg1M/yIzn1m+LE2dqPW3Dj1e2GO3nL7 Nw== -----END CERTIFICATE-----Generated at Fri Jun 6 22:10:12 2025 by rpki-client