$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft File: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json) Hash identifier: sMA15kukJ+yGk/GaBfOWKdrEmM++SWDi2OqQM7g4Mpo= Subject key identifier: E9:DA:4F:13:B1:DA:9A:5B:58:0B:16:43:0E:9D:91:4E:7E:BF:C1:9F Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Certificate serial: 7B9BFE39AA474DCE0194E8BB4884E1228D497126 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft Manifest number: 04D1 Signing time: Sat 07 Jun 2025 01:32:32 +0000 Manifest this update: Sat 07 Jun 2025 01:27:32 +0000 Manifest next update: Sun 08 Jun 2025 05:14:32 +0000 Files and hashes: 1: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: NLU++5xZjzD437PtmNgvfxHCqYMIFnb00RqdIBmj2Iw=) 2: 3139332e39332e3135332e302f32342d3234203d3e20323134303336.roa (hash: FgMfWX7zLNqyUMvyIkAVqVqXpYApxS0iTmFAdZ7lH9Q=) 3: 3139332e39332e3135352e302f32342d3234203d3e203631333137.roa (hash: SV7SbziqH7eMIEMJIbsVc3dV1p2SM237aRtzHljTDkg=) 4: 3139332e39332e3135322e302f32342d3234203d3e20313939363134.roa (hash: jNaGJEHXg+vn+v2vVdhmJa1IVdEz/D1ggT5kvM1c0Hk=) 5: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: xCzp0qQR6EK0esz1t+okpI4ICsSXx8AjSAwALQpRkCI=) 6: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: jAOxURrHtZvlqdFVdBr3F4ACmPO4DT4L5AmOtZPktVY=) 7: 3139332e39332e3135332e302f32342d3234203d3e203439313237.roa (hash: muToXyQQPQk1kATIKIk2PX93pnZZn2qQ05PiLXKydlA=) 8: 3139332e39332e3135342e302f32342d3234203d3e20323131343135.roa (hash: lcDvK25Krwnz/wCtWIMtJ+GA0fjdNOA7l7WMMKyVVUU=) 9: 3139332e39332e3135352e302f32342d3234203d3e203230343733.roa (hash: Yia13ZpyH/rxCHPO1ZKxkaJKT40u4xmMRfCLnQCmpaw=) 10: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: j/tvDF/xrBJ6Z/GVFcZpOag/ZBQuFXiJ56kFmYlSx34=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 05:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:9b:fe:39:aa:47:4d:ce:01:94:e8:bb:48:84:e1:22:8d:49:71:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Validity Not Before: Jun 7 01:27:32 2025 GMT Not After : Jun 8 05:14:32 2025 GMT Subject: CN=E9DA4F13B1DA9A5B580B16430E9D914E7EBFC19F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:44:0b:96:c2:04:67:4f:65:18:b4:2d:bc:46: 6f:49:8c:41:ef:93:1b:28:0e:a7:6e:2f:2c:fc:e9: 9f:22:c1:3b:16:dd:06:d9:80:8a:d1:25:2b:8b:06: da:6f:18:37:67:fa:7b:59:0c:b8:c7:42:48:ce:ac: 67:ac:2f:5a:83:f3:e3:d9:f2:c6:e5:da:cd:fa:87: a6:a6:9c:e0:af:1b:97:f8:0c:96:32:7a:23:1e:78: 40:b4:86:a0:25:13:09:5e:d0:c2:30:b7:94:be:97: 5d:45:a5:34:b7:cb:74:da:34:74:c7:0d:37:81:18: 72:02:2d:eb:0a:56:11:6e:83:b7:ba:b8:a5:ff:2d: 9c:eb:10:68:53:24:0c:f6:d4:10:ae:1e:9e:67:75: e7:9c:26:ab:c2:c4:24:3d:c0:1a:43:18:1d:39:df: 7b:94:b8:71:8c:f6:ff:27:14:10:67:d7:bb:26:d3: 73:33:a0:c3:55:3d:67:22:fd:ea:f2:e6:d5:fa:87: c5:f1:06:a8:b1:66:49:45:21:fd:71:34:25:74:39: e6:50:ae:7e:64:51:57:5d:7f:53:ce:db:8b:20:2c: dd:af:71:d8:8e:5e:8b:ab:66:7b:d0:dc:3d:15:6a: dd:fd:5c:66:05:61:b9:f7:d0:ef:77:91:ff:c4:78: a8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DA:4F:13:B1:DA:9A:5B:58:0B:16:43:0E:9D:91:4E:7E:BF:C1:9F X509v3 Authority Key Identifier: keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:ac:f3:2e:77:d2:b7:88:9f:0e:b0:a7:7c:7e:31:c6:42:1f: 9e:63:b7:3f:39:2b:01:11:8f:e1:b4:69:38:d7:50:e9:56:87: b9:67:12:bf:45:ae:75:ee:4a:2f:56:cd:22:8c:5f:42:de:02: d6:03:3a:ff:41:a0:83:0e:5c:2e:27:49:3b:c8:cd:2a:bd:58: 5c:d2:cd:b0:1c:14:0f:f9:b0:81:f8:2b:d0:f6:33:c5:f1:e8: 6a:37:ba:cb:2a:a6:97:b5:68:ef:5f:24:07:fa:28:1e:94:4c: 11:f8:bf:32:ef:16:78:29:84:48:a2:98:75:98:ac:2a:84:82: 2c:47:11:c2:2a:f0:25:33:44:e0:e9:c1:6e:52:fa:1b:d2:f1: 8c:fb:a0:6c:c8:a3:8a:bd:e1:c4:88:5e:ec:b1:e7:66:a2:2b: b5:ff:fc:a3:8a:af:64:bc:2a:20:5e:d7:92:a9:0b:b2:e5:08: 61:3e:be:2e:89:6c:1a:ec:cd:73:c5:b7:c8:af:bc:0b:d8:9d: c2:d7:62:03:0d:c7:c6:97:86:c3:47:b5:de:85:b8:36:30:a5: 73:27:5a:e0:62:32:ad:85:81:91:cf:76:30:f4:36:36:90:ef: 58:2e:ee:be:e2:05:18:90:92:25:cd:cb:8d:e0:f9:9e:57:b0: a2:df:23:e2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUe5v+OapHTc4BlOi7SIThIo1JcSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx NjJlMWFhZDAeFw0yNTA2MDcwMTI3MzJaFw0yNTA2MDgwNTE0MzJaMDMxMTAvBgNV BAMTKEU5REE0RjEzQjFEQTlBNUI1ODBCMTY0MzBFOUQ5MTRFN0VCRkMxOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDARAuWwgRnT2UYtC28Rm9JjEHv kxsoDqduLyz86Z8iwTsW3QbZgIrRJSuLBtpvGDdn+ntZDLjHQkjOrGesL1qD8+PZ 8sbl2s36h6amnOCvG5f4DJYyeiMeeEC0hqAlEwle0MIwt5S+l11FpTS3y3TaNHTH DTeBGHICLesKVhFug7e6uKX/LZzrEGhTJAz21BCuHp5ndeecJqvCxCQ9wBpDGB05 33uUuHGM9v8nFBBn17sm03MzoMNVPWci/ery5tX6h8XxBqixZklFIf1xNCV0OeZQ rn5kUVddf1PO24sgLN2vcdiOXourZnvQ3D0Vat39XGYFYbn30O93kf/EeKjJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6dpPE7HamltYCxZDDp2RTn6/wZ8wHwYDVR0j BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0 OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ dUdxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjUyZDgxNC0z ZDJmLTRkZjQtODE0MC1kZmI1MzBmNzQ5MTIvMC9GMjlGQkFCNERCODY3RjZCRDlB N0VGRjZBQTU1RDk4QzE2MkUxQUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvazzLnfSt4ifDrCnfH4x xkIfnmO3PzkrARGP4bRpONdQ6VaHuWcSv0Wude5KL1bNIoxfQt4C1gM6/0Gggw5c LidJO8jNKr1YXNLNsBwUD/mwgfgr0PYzxfHoaje6yyqml7Vo718kB/ooHpRMEfi/ Mu8WeCmESKKYdZisKoSCLEcRwirwJTNE4OnBblL6G9LxjPugbMijir3hxIhe7LHn ZqIrtf/8o4qvZLwqIF7XkqkLsuUIYT6+LolsGuzNc8W3yK+8C9idwtdiAw3HxpeG w0e13oW4NjClcyda4GIyrYWBkc92MPQ2NpDvWC7uvuIFGJCSJc3LjeD5nlewot8j 4g== -----END CERTIFICATE-----Generated at Sat Jun 7 16:59:26 2025 by rpki-client