$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json) Hash identifier: lWorDDNBi6YPxHlvd9LQzGoFZ2dERananf9U8bo3XTM= Subject key identifier: E5:AC:CA:B0:2B:5B:0D:E9:D7:A4:05:5B:1B:45:3A:03:5B:B2:B1:96 Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Certificate serial: 349AB190865C024CD2A8A58FB35BBABF433737FC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft Manifest number: 01E5 Signing time: Fri 06 Jun 2025 10:40:08 +0000 Manifest this update: Fri 06 Jun 2025 10:35:08 +0000 Manifest next update: Sat 07 Jun 2025 12:55:08 +0000 Files and hashes: 1: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: OTYsTfrglFs/JKFj7RJtAXdrMe1OUcjbc3WSXqeD0dk=) 2: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: KPVNDBydB4lEOCddQAWiNda/rm6IVb4G2i+sUeOhrYg=) 3: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: DvQHKT6M+fkiG6o9KW4wBm0yNbqCXWjg78L/cu4BiJ0=) 4: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: e+p8+Sw9X8S3Ty3gF9pg+LdvDbV5qMXAYBBthQD4LPE=) 5: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: N/lLAQQQKsZcftiPCVeJUyQG9NcumPNNgv8fpMWSqFA=) 6: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: R4oy1L8+rEt1QdmoGVV7PiYt423B/xK5i6kPhc7W9aI=) 7: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: BL4+PYIdcLs3fiOkkamkg94lgyO9kcRHp6ACoQUQ5y8=) 8: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: 9phDdz/jhh9vxdEc5WXHXIl+cdnJzAyh/6SdvyVejiI=) 9: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: M0+yHEN3VX8K+aVDmpusml/7Hx8dbBnadNDMaFbGOzQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 12:55:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:9a:b1:90:86:5c:02:4c:d2:a8:a5:8f:b3:5b:ba:bf:43:37:37:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB Validity Not Before: Jun 6 10:35:08 2025 GMT Not After : Jun 7 12:55:08 2025 GMT Subject: CN=E5ACCAB02B5B0DE9D7A4055B1B453A035BB2B196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e5:f3:09:26:2a:d2:ef:70:79:69:da:53:c3: d4:b3:9e:4a:86:c7:b7:69:2a:d3:85:e9:85:b2:ff: 49:42:4b:d2:b9:78:6c:f6:7b:38:34:37:2e:51:79: ef:84:fe:82:ea:f1:2b:dc:6a:a5:29:3c:9f:7c:04: ad:c2:f3:b8:27:bc:b7:08:00:36:8f:91:db:fe:b0: 45:59:0d:6a:1f:f6:51:c6:5d:0c:b8:84:86:dc:18: 61:ca:be:c7:c4:94:fa:dc:7a:8c:c1:6f:1b:e3:42: 8b:79:97:45:de:15:81:f0:da:11:ed:08:a1:24:85: e0:39:ce:dd:39:f2:b7:61:7f:01:6d:f6:ad:cf:2c: c5:45:bb:f9:3f:31:8c:a8:47:44:70:80:a3:21:c4: 50:04:22:0e:c4:5d:96:45:19:99:93:7a:65:b9:b2: c6:27:d2:86:61:c9:3b:72:38:8b:13:79:dd:ff:76: d5:2d:06:b4:05:11:61:e7:55:f8:58:e2:10:25:2b: d3:06:8e:52:5d:30:99:eb:99:11:d8:28:93:cc:f0: 30:c6:48:d7:27:cd:5e:e8:a9:34:47:2e:4f:3b:31: d9:e8:4b:09:75:75:93:be:b1:6f:ce:60:01:ab:b6: 10:17:12:83:79:34:f8:3a:95:71:38:7e:a1:5e:81: 40:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AC:CA:B0:2B:5B:0D:E9:D7:A4:05:5B:1B:45:3A:03:5B:B2:B1:96 X509v3 Authority Key Identifier: keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6c:1f:72:d7:21:08:42:64:5b:98:fa:07:bf:ff:46:3a:56: dc:cf:1e:98:6d:08:8d:72:e0:1d:7a:20:71:b1:20:02:10:79: fd:ff:4e:9a:98:0f:4f:c4:87:b5:e3:49:1c:b0:69:d8:43:ad: 40:ed:a4:c1:ac:53:80:ee:4b:df:8a:6d:0c:a8:a6:29:8b:a0: 84:15:ce:8e:7f:b5:77:4a:bd:5a:5b:8d:c9:ad:7e:d4:12:2a: 18:3a:21:35:13:be:07:4e:9c:7c:76:1b:c5:7a:7d:33:1d:e6: a8:2c:74:5c:e1:e3:c9:92:a4:62:9a:99:c5:99:8f:1a:ca:58: e4:fd:90:3a:92:fb:99:1a:6d:9b:3a:ff:e4:3a:a2:75:60:e6: aa:77:00:0d:cb:39:2c:e1:27:72:41:f3:2f:f1:f6:2b:a6:f3: b1:4f:3e:30:41:f5:99:a1:93:28:3b:a3:3e:77:ca:5f:a5:55: da:d9:8b:6b:ae:7e:1b:fe:f5:d6:fb:13:d2:cb:a7:44:ba:c3: 58:b5:e3:8f:9d:47:e1:0a:94:68:34:ea:47:dc:8c:6b:28:21: 63:f5:7b:be:11:03:31:bc:98:3a:19:ed:7e:37:a1:05:8d:b9: d0:de:38:09:ec:74:58:52:02:4e:0a:1a:65:dd:64:6c:76:e3: d7:6f:e5:4b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNJqxkIZcAkzSqKWPs1u6v0M3N/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC RUM4OTBCQjAeFw0yNTA2MDYxMDM1MDhaFw0yNTA2MDcxMjU1MDhaMDMxMTAvBgNV BAMTKEU1QUNDQUIwMkI1QjBERTlEN0E0MDU1QjFCNDUzQTAzNUJCMkIxOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl5fMJJirS73B5adpTw9SznkqG x7dpKtOF6YWy/0lCS9K5eGz2ezg0Ny5Ree+E/oLq8SvcaqUpPJ98BK3C87gnvLcI ADaPkdv+sEVZDWof9lHGXQy4hIbcGGHKvsfElPrceozBbxvjQot5l0XeFYHw2hHt CKEkheA5zt058rdhfwFt9q3PLMVFu/k/MYyoR0RwgKMhxFAEIg7EXZZFGZmTemW5 ssYn0oZhyTtyOIsTed3/dtUtBrQFEWHnVfhY4hAlK9MGjlJdMJnrmRHYKJPM8DDG SNcnzV7oqTRHLk87MdnoSwl1dZO+sW/OYAGrthAXEoN5NPg6lXE4fqFegUA9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU5azKsCtbDenXpAVbG0U6A1uysZYwHwYDVR0j BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1 MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbbB9y 1yEIQmRbmPoHv/9GOlbczx6YbQiNcuAdeiBxsSACEHn9/06amA9PxIe140kcsGnY Q61A7aTBrFOA7kvfim0MqKYpi6CEFc6Of7V3Sr1aW43JrX7UEioYOiE1E74HTpx8 dhvFen0zHeaoLHRc4ePJkqRimpnFmY8ayljk/ZA6kvuZGm2bOv/kOqJ1YOaqdwAN yzks4SdyQfMv8fYrpvOxTz4wQfWZoZMoO6M+d8pfpVXa2Ytrrn4b/vXW+xPSy6dE usNYteOPnUfhCpRoNOpH3IxrKCFj9Xu+EQMxvJg6Ge1+N6EFjbnQ3jgJ7HRYUgJO Chpl3WRsduPXb+VL -----END CERTIFICATE-----Generated at Fri Jun 6 23:21:12 2025 by rpki-client