$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft File: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json) Hash identifier: W9KTUYPOChDesz55P3WeTHdpQhtTLbKWwld9Io6lf4g= Subject key identifier: 8E:DF:11:06:1B:39:78:9C:31:65:24:C5:71:B9:0E:65:2D:E8:2F:3C Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Certificate serial: 1A38D1A7801AC20B096554AF7A4CA795CC647D09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft Manifest number: 045F Signing time: Thu 13 Mar 2025 11:17:00 +0000 Manifest this update: Thu 13 Mar 2025 11:12:00 +0000 Manifest next update: Fri 14 Mar 2025 14:14:00 +0000 Files and hashes: 1: 3139332e39332e3135342e302f32342d3234203d3e20323131343135.roa (hash: lcDvK25Krwnz/wCtWIMtJ+GA0fjdNOA7l7WMMKyVVUU=) 2: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: 9vxNIYejgXrEjr43KSb/OawuM8iiekVut0MsCiVG/+g=) 3: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: j/tvDF/xrBJ6Z/GVFcZpOag/ZBQuFXiJ56kFmYlSx34=) 4: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: jAOxURrHtZvlqdFVdBr3F4ACmPO4DT4L5AmOtZPktVY=) 5: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: NLU++5xZjzD437PtmNgvfxHCqYMIFnb00RqdIBmj2Iw=) 6: 3139332e39332e3135352e302f32342d3234203d3e203230343733.roa (hash: Yia13ZpyH/rxCHPO1ZKxkaJKT40u4xmMRfCLnQCmpaw=) 7: 3139332e39332e3135322e302f32342d3234203d3e20313939363134.roa (hash: jNaGJEHXg+vn+v2vVdhmJa1IVdEz/D1ggT5kvM1c0Hk=) 8: 3139332e39332e3135332e302f32342d3234203d3e20323134303336.roa (hash: FgMfWX7zLNqyUMvyIkAVqVqXpYApxS0iTmFAdZ7lH9Q=) 9: 3139332e39332e3135332e302f32342d3234203d3e203439313237.roa (hash: muToXyQQPQk1kATIKIk2PX93pnZZn2qQ05PiLXKydlA=) 10: 3139332e39332e3135352e302f32342d3234203d3e203631333137.roa (hash: SV7SbziqH7eMIEMJIbsVc3dV1p2SM237aRtzHljTDkg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Mar 2025 14:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:38:d1:a7:80:1a:c2:0b:09:65:54:af:7a:4c:a7:95:cc:64:7d:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Validity Not Before: Mar 13 11:12:00 2025 GMT Not After : Mar 14 14:14:00 2025 GMT Subject: CN=8EDF11061B39789C316524C571B90E652DE82F3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:66:a6:84:86:28:9e:ef:d2:32:c3:ad:d9:99: fb:1b:bd:26:2e:0e:13:9b:51:1d:9d:ba:8c:5f:2c: c8:6f:bb:58:da:5a:1b:fa:fa:9f:35:17:7c:81:8f: 19:8f:95:0f:11:1f:be:b8:76:63:e0:91:fc:2b:11: 99:30:ff:a2:65:28:4b:68:37:bf:f2:85:5c:ec:14: 27:c3:3c:0e:9c:0b:98:b1:03:f7:6f:0b:fb:cf:17: c3:78:7f:e2:d4:bf:39:c1:93:a4:23:24:c0:7e:64: 19:e8:06:97:69:fa:d0:20:89:88:bb:65:01:69:f0: c4:06:f8:a5:db:9e:3a:3b:39:2d:d5:51:ac:3d:49: 57:c0:f9:46:3e:93:d0:ae:4c:a0:16:15:a4:dc:14: d7:64:51:f6:92:71:2a:8d:72:05:68:14:e8:8e:92: 0d:69:c7:fb:27:4a:66:1d:56:9f:f4:62:d4:69:b3: e1:cd:a4:80:ef:93:7b:3b:9f:49:5e:d7:00:19:59: 8b:12:9e:19:d7:1d:10:5a:62:65:94:37:35:66:18: c9:f2:ff:aa:60:ac:0f:67:b7:bf:f4:7a:5a:e5:e8: e8:ee:72:ac:d6:9c:8c:c6:5a:d9:56:f7:6d:ff:ed: 3d:b0:49:14:00:cd:8e:a6:72:47:a5:78:42:38:8c: d2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DF:11:06:1B:39:78:9C:31:65:24:C5:71:B9:0E:65:2D:E8:2F:3C X509v3 Authority Key Identifier: keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:8b:fb:27:0d:8c:06:a1:7f:a3:58:01:78:7d:12:59:e0:d9: 50:f8:d4:00:dd:cd:26:49:f2:a2:fd:e8:ce:0b:df:8a:be:44: 38:85:42:4a:21:d3:97:3d:e8:66:b7:bc:e3:a9:3f:71:5b:20: 7f:53:b6:f1:c5:bb:26:e7:ee:af:c8:2c:37:b2:fb:29:71:45: b6:7a:e8:95:ba:85:36:f1:bf:85:fb:69:d5:9e:dd:fe:59:32: 46:45:7a:18:b9:46:6a:87:c3:ac:5b:58:14:f2:0d:ab:14:9b: 95:c6:88:3f:c0:50:9f:0f:f6:f2:4f:ac:d4:1b:ba:a7:a7:b4: 34:fb:fc:3d:ac:71:9b:40:84:af:01:37:3c:09:34:a0:d4:dd: 7b:a0:07:ff:bf:c6:12:b2:ad:68:5b:a2:84:a6:49:f1:f0:4c: 96:48:b1:6e:c5:c1:1d:86:5c:de:f9:52:cf:92:a3:6d:48:46: 8b:69:74:ab:47:10:ff:9d:24:9d:72:98:47:56:14:a6:da:b2: 00:7b:a6:14:93:76:53:48:f3:9c:f5:41:49:3a:4b:ba:97:80: cf:a5:51:90:1c:47:b2:4a:2a:ab:31:57:75:ec:90:6b:7c:aa: 05:4b:78:f9:03:d5:95:77:79:aa:64:b6:64:d0:81:40:0c:ce: b1:22:75:99 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGjjRp4AawgsJZVSvekynlcxkfQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx NjJlMWFhZDAeFw0yNTAzMTMxMTEyMDBaFw0yNTAzMTQxNDE0MDBaMDMxMTAvBgNV BAMTKDhFREYxMTA2MUIzOTc4OUMzMTY1MjRDNTcxQjkwRTY1MkRFODJGM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ZqaEhiie79Iyw63ZmfsbvSYu DhObUR2duoxfLMhvu1jaWhv6+p81F3yBjxmPlQ8RH764dmPgkfwrEZkw/6JlKEto N7/yhVzsFCfDPA6cC5ixA/dvC/vPF8N4f+LUvznBk6QjJMB+ZBnoBpdp+tAgiYi7 ZQFp8MQG+KXbnjo7OS3VUaw9SVfA+UY+k9CuTKAWFaTcFNdkUfaScSqNcgVoFOiO kg1px/snSmYdVp/0YtRps+HNpIDvk3s7n0le1wAZWYsSnhnXHRBaYmWUNzVmGMny /6pgrA9nt7/0elrl6OjucqzWnIzGWtlW923/7T2wSRQAzY6mckeleEI4jNK3AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUjt8RBhs5eJwxZSTFcbkOZS3oLzwwHwYDVR0j BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0 OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ dUdxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjUyZDgxNC0z ZDJmLTRkZjQtODE0MC1kZmI1MzBmNzQ5MTIvMC9GMjlGQkFCNERCODY3RjZCRDlB N0VGRjZBQTU1RDk4QzE2MkUxQUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYv7Jw2MBqF/o1gBeH0S WeDZUPjUAN3NJknyov3ozgvfir5EOIVCSiHTlz3oZre846k/cVsgf1O28cW7Jufu r8gsN7L7KXFFtnrolbqFNvG/hftp1Z7d/lkyRkV6GLlGaofDrFtYFPINqxSblcaI P8BQnw/28k+s1Bu6p6e0NPv8Paxxm0CErwE3PAk0oNTde6AH/7/GErKtaFuihKZJ 8fBMlkixbsXBHYZc3vlSz5KjbUhGi2l0q0cQ/50knXKYR1YUptqyAHumFJN2U0jz nPVBSTpLupeAz6VRkBxHskoqqzFXdeyQa3yqBUt4+QPVlXd5qmS2ZNCBQAzOsSJ1 mQ== -----END CERTIFICATE-----Generated at Thu Mar 13 23:17:19 2025 by rpki-client