$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft File: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json) Hash identifier: 2s1M1VGTg8R0cDWQcnuFnDwda8NbRVFvwjiTTNL5WQY= Subject key identifier: F7:5C:62:3B:0A:EB:29:CD:5B:12:15:53:04:EA:A6:C6:6D:DE:F5:3F Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Certificate serial: 28453393FC9E482EA319787EEE731E469883F3CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft Manifest number: 043E Signing time: Sun 16 Feb 2025 16:06:46 +0000 Manifest this update: Sun 16 Feb 2025 16:01:46 +0000 Manifest next update: Mon 17 Feb 2025 17:25:46 +0000 Files and hashes: 1: 3139332e39332e3135322e302f32342d3234203d3e20313939363134.roa (hash: jNaGJEHXg+vn+v2vVdhmJa1IVdEz/D1ggT5kvM1c0Hk=) 2: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: jAOxURrHtZvlqdFVdBr3F4ACmPO4DT4L5AmOtZPktVY=) 3: 3139332e39332e3135332e302f32342d3234203d3e203439313237.roa (hash: muToXyQQPQk1kATIKIk2PX93pnZZn2qQ05PiLXKydlA=) 4: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: j/tvDF/xrBJ6Z/GVFcZpOag/ZBQuFXiJ56kFmYlSx34=) 5: 3139332e39332e3135352e302f32342d3234203d3e203230343733.roa (hash: Yia13ZpyH/rxCHPO1ZKxkaJKT40u4xmMRfCLnQCmpaw=) 6: 3139332e39332e3135352e302f32342d3234203d3e203631333137.roa (hash: SV7SbziqH7eMIEMJIbsVc3dV1p2SM237aRtzHljTDkg=) 7: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: NLU++5xZjzD437PtmNgvfxHCqYMIFnb00RqdIBmj2Iw=) 8: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: ahyvLUPMAPC6OtCd9FxnPFqZkqo6y0DiThPZ2ydy7i8=) 9: 3139332e39332e3135332e302f32342d3234203d3e20323134303336.roa (hash: FgMfWX7zLNqyUMvyIkAVqVqXpYApxS0iTmFAdZ7lH9Q=) 10: 3139332e39332e3135342e302f32342d3234203d3e20323131343135.roa (hash: lcDvK25Krwnz/wCtWIMtJ+GA0fjdNOA7l7WMMKyVVUU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:45:33:93:fc:9e:48:2e:a3:19:78:7e:ee:73:1e:46:98:83:f3:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Validity Not Before: Feb 16 16:01:46 2025 GMT Not After : Feb 17 17:25:46 2025 GMT Subject: CN=F75C623B0AEB29CD5B12155304EAA6C66DDEF53F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:80:d2:1d:6a:ff:42:27:b6:09:d3:83:37:f1: c3:9d:6d:18:27:4d:7c:f4:2c:4c:51:c0:ab:f9:10: 8e:7f:f5:c9:38:79:2d:79:02:5d:e7:3f:f6:8a:88: e1:4b:22:22:1c:20:20:f1:bc:31:ae:9e:e0:42:f9: 6a:8b:7d:0b:8c:f1:f2:f6:06:4b:86:8e:fe:a9:29: ee:6c:b8:b8:96:35:63:c9:8e:81:c1:1b:4e:34:27: 17:1f:78:41:47:34:1c:d5:58:45:d1:61:4e:22:7c: 70:01:19:0e:23:b6:3e:1d:90:32:b3:3f:05:e8:45: 09:f5:92:5b:47:f8:68:67:6a:48:a4:ff:bd:06:a3: 52:61:d2:03:99:2b:9d:81:85:85:b7:ad:40:a9:3f: 1d:f5:6c:6c:76:48:20:bd:ca:db:f2:e2:36:34:c7: 4f:9a:ca:28:58:db:11:8d:9a:64:2d:90:e9:79:ed: fe:30:0b:19:3b:6a:7e:a1:d6:53:0f:b0:69:e8:fb: 62:cd:3e:55:96:e1:25:06:e6:1d:d5:b5:0c:41:95: 8a:cf:e3:06:a4:3f:ac:ef:af:71:59:d9:78:1b:67: 24:86:2f:6d:c6:29:d2:91:14:cc:2a:4c:eb:2c:d4: 46:09:0c:53:96:15:37:a5:5d:eb:c0:43:b5:7c:53: 4b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5C:62:3B:0A:EB:29:CD:5B:12:15:53:04:EA:A6:C6:6D:DE:F5:3F X509v3 Authority Key Identifier: keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:43:48:d5:44:c5:3e:8a:46:67:60:47:e5:e3:96:87:4f:cb: 2d:1c:b3:0d:09:05:e2:6e:85:46:14:a9:35:84:29:79:26:ae: 2f:41:cb:5d:20:3c:19:26:34:85:07:9c:43:e2:6c:8e:4f:88: ce:2d:ad:33:71:78:29:44:ef:6a:76:80:09:a6:ce:b6:c0:78: bc:d1:14:9d:8a:bc:79:f7:a3:df:93:e5:43:2b:30:10:75:81: 09:9c:cd:25:74:1b:16:dc:00:c9:10:6e:f3:e7:7b:2e:7e:ac: 8b:2b:92:5a:0e:57:35:90:ca:89:59:18:33:18:59:45:c9:9c: 52:04:79:b3:e8:09:ed:7b:bd:45:20:fb:b9:13:23:14:0b:60: e4:12:0c:ca:d6:dd:a0:2f:eb:9d:2c:d3:6b:a9:c3:a3:a1:71: 15:6f:fb:95:0c:e9:02:48:5b:94:43:33:9b:90:71:54:cc:be: 74:7d:31:2e:4c:f2:06:2b:4f:6d:e0:79:7c:2f:87:55:d7:ab: 7b:07:68:bc:88:b8:5e:a4:a0:92:6e:ac:1f:c8:11:af:8a:3a: 4a:c9:0f:c7:f1:c2:42:b2:6b:74:aa:fe:9b:f5:dc:9a:5e:75: 94:b7:99:1a:bd:9b:d7:f1:9c:61:42:e1:8c:a1:3d:a8:63:52: 43:82:19:02 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKEUzk/yeSC6jGXh+7nMeRpiD888wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx NjJlMWFhZDAeFw0yNTAyMTYxNjAxNDZaFw0yNTAyMTcxNzI1NDZaMDMxMTAvBgNV BAMTKEY3NUM2MjNCMEFFQjI5Q0Q1QjEyMTU1MzA0RUFBNkM2NkRERUY1M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCigNIdav9CJ7YJ04M38cOdbRgn TXz0LExRwKv5EI5/9ck4eS15Al3nP/aKiOFLIiIcICDxvDGunuBC+WqLfQuM8fL2 BkuGjv6pKe5suLiWNWPJjoHBG040JxcfeEFHNBzVWEXRYU4ifHABGQ4jtj4dkDKz PwXoRQn1kltH+Ghnakik/70Go1Jh0gOZK52BhYW3rUCpPx31bGx2SCC9ytvy4jY0 x0+ayihY2xGNmmQtkOl57f4wCxk7an6h1lMPsGno+2LNPlWW4SUG5h3VtQxBlYrP 4wakP6zvr3FZ2XgbZySGL23GKdKRFMwqTOss1EYJDFOWFTelXevAQ7V8U0sNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU91xiOwrrKc1bEhVTBOqmxm3e9T8wHwYDVR0j BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0 OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ dUdxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjUyZDgxNC0z ZDJmLTRkZjQtODE0MC1kZmI1MzBmNzQ5MTIvMC9GMjlGQkFCNERCODY3RjZCRDlB N0VGRjZBQTU1RDk4QzE2MkUxQUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUNI1UTFPopGZ2BH5eOW h0/LLRyzDQkF4m6FRhSpNYQpeSauL0HLXSA8GSY0hQecQ+Jsjk+Izi2tM3F4KUTv anaACabOtsB4vNEUnYq8efej35PlQyswEHWBCZzNJXQbFtwAyRBu8+d7Ln6siyuS Wg5XNZDKiVkYMxhZRcmcUgR5s+gJ7Xu9RSD7uRMjFAtg5BIMytbdoC/rnSzTa6nD o6FxFW/7lQzpAkhblEMzm5BxVMy+dH0xLkzyBitPbeB5fC+HVderewdovIi4XqSg km6sH8gRr4o6SskPx/HCQrJrdKr+m/Xcml51lLeZGr2b1/GcYULhjKE9qGNSQ4IZ Ag== -----END CERTIFICATE-----Generated at Sun Feb 16 22:25:05 2025 by rpki-client