$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: bC79+hXrx8J+rjB7mPZ65bIFCrbRAptYKxIv7uzcU+8= Subject key identifier: A7:81:C2:92:1A:60:35:64:21:63:C6:CF:86:2A:EE:92:B2:20:90:C4 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 3B605175735660B00D02DB9CC4150008B2E3F54A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 02DA Signing time: Fri 06 Jun 2025 15:47:30 +0000 Manifest this update: Fri 06 Jun 2025 15:42:30 +0000 Manifest next update: Sat 07 Jun 2025 16:12:30 +0000 Files and hashes: 1: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (hash: k6qvY6qYLtrsDEyi8J+SScxT9enfuaIRYNZH2IHqC8o=) 2: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: Rwly6/kgbO6JKgkSqIGKO5lCxARNS+2XBvmIDmlBMI0=) 3: 3135392e3235332e362e302f32342d3234203d3e20383334.roa (hash: 5NdQ//spLweNzxs8zHAGi1gJMib8lPFrPng4LsW41ME=) 4: 3135392e3235332e322e302f32342d3234203d3e20383334.roa (hash: Io0uqsNFWMRzWK0hBxO5SHV2H5/pOpKQHlMKDuh/MnA=) 5: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: cKnNLC66X19KWTLeS9BLlyG6jkzxqkdJwZjUWCrZPHc=) 6: 3138352e31332e3232352e302f32342d3234203d3e203631333137.roa (hash: 8TzKoFnFzYaSWN5mBXGHVTu7YevWpqGi2XUkHCPKssM=) 7: 3138352e31332e3232362e302f32342d3234203d3e20323132323338.roa (hash: 2juSKbgGusV+FdSvpGdGhRB+b7yvZfXJLqRbkLs4Lo0=) 8: 3138352e31332e3232372e302f32342d3234203d3e203533333536.roa (hash: fyjNZl2BnH5gWmJXj7IkwC9hLUY6iDMpaWQ6H8Zs07M=) 9: 3135392e3235332e352e302f32342d3234203d3e203533333536.roa (hash: 9QDAlicDZU2dKA/slyHao02LhaPY7/2iCnESN6BbiqA=) 10: 3231372e32382e3133382e302f32342d3234203d3e20323039393736.roa (hash: oyOFvRhi/TPEOopsZuEaDpEux2304igP8lMcDVdyDmE=) 11: 3135392e3235332e312e302f32342d3234203d3e20383334.roa (hash: +Cgri0dz3lCclo0MuT04LNn4FtNZlpiIq1+Gu2V5CA8=) 12: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (hash: uV5gP669aq0NtuCXuZBm6wWsNYwP/024H/522nPjCx8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:60:51:75:73:56:60:b0:0d:02:db:9c:c4:15:00:08:b2:e3:f5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Jun 6 15:42:30 2025 GMT Not After : Jun 7 16:12:30 2025 GMT Subject: CN=A781C2921A6035642163C6CF862AEE92B22090C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:67:e5:22:97:b4:dd:52:82:50:d0:b9:10:eb: 4f:f3:6a:65:f3:d0:ab:7e:c6:77:63:f7:30:c3:80: 36:ab:1e:7a:f8:ff:dd:73:4b:d0:44:ba:5b:a6:0f: 5e:ae:2d:83:87:c3:11:f3:5f:90:e1:49:03:69:db: f6:dc:8b:1b:a3:40:73:49:9c:26:76:59:cd:3c:12: f9:68:d4:60:8c:0d:41:1a:1b:4e:6c:f3:59:25:22: d7:21:02:b8:7a:26:20:b4:2f:5d:bb:da:b4:9c:e9: dc:af:a0:de:a8:97:9d:75:55:8d:1c:39:94:a9:4e: 24:c3:95:b8:3a:e9:d5:96:2d:91:4d:e8:76:59:49: 98:ea:69:84:e1:74:30:84:44:f7:96:8e:7c:c4:fb: ba:89:e9:9d:eb:31:5d:02:06:91:4d:77:55:77:38: e2:ce:04:87:85:9e:7a:ba:ea:14:01:73:2d:f2:b0: a5:3c:43:5d:35:df:1e:5f:71:8f:b5:a2:c5:4f:80: 87:58:1c:8f:af:a3:29:bd:7b:9f:e7:3d:3d:c8:16: 12:c9:41:e6:4e:4e:00:ef:31:6a:24:42:04:b6:8b: 00:bc:f0:bc:66:c7:fb:99:94:93:33:f3:ce:02:99: ef:2c:bc:66:c7:28:9d:c5:9b:fd:d3:1c:b6:a9:20: ce:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:81:C2:92:1A:60:35:64:21:63:C6:CF:86:2A:EE:92:B2:20:90:C4 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:95:1c:a7:0a:f3:cf:4b:51:75:0a:f4:a6:ec:5e:56:a4:f6: 68:09:ae:76:25:72:c8:96:d9:86:3f:e0:2f:29:90:3a:3f:3b: 7e:55:ab:65:0d:2a:88:4c:59:9c:17:15:f9:3b:1f:3c:86:4f: 64:4f:24:b2:5a:cd:25:2f:dd:1e:28:f9:cb:0e:2a:4a:09:0d: be:17:bd:1b:2c:8d:d5:52:f9:87:3f:4a:6c:a5:f2:d5:25:af: b5:1a:60:dd:98:bb:8f:ce:c6:4f:26:95:01:33:1b:e6:35:5b: 67:0f:cd:56:3a:90:6e:f2:7e:b2:48:2a:2c:0b:e2:c9:70:a1: b9:2d:e2:90:b2:53:60:24:24:d7:38:6a:44:ae:4e:86:fb:65: 59:93:a4:d4:1b:40:77:1f:de:d8:83:bc:26:7a:95:8e:c3:e2: 2e:16:74:ab:6f:c9:1d:c3:4c:d3:6c:be:d3:f0:1a:66:d3:6f: a3:af:fb:b2:51:a8:1d:1a:6a:aa:b6:63:84:c9:13:e7:68:a0: 29:e0:3d:bc:a4:11:40:5a:71:30:49:aa:73:3d:a2:0f:ef:23: 97:82:fc:5e:3e:ae:4e:db:05:93:e6:8f:29:c4:da:13:8a:34: b7:b3:54:6e:7a:10:b8:30:80:2f:c5:c5:e6:5b:44:25:7c:0b: b5:7d:07:30 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUO2BRdXNWYLANAtucxBUACLLj9UowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNTA2MDYxNTQyMzBaFw0yNTA2MDcxNjEyMzBaMDMxMTAvBgNV BAMTKEE3ODFDMjkyMUE2MDM1NjQyMTYzQzZDRjg2MkFFRTkyQjIyMDkwQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZ+Uil7TdUoJQ0LkQ60/zamXz 0Kt+xndj9zDDgDarHnr4/91zS9BEulumD16uLYOHwxHzX5DhSQNp2/bcixujQHNJ nCZ2Wc08Evlo1GCMDUEaG05s81klItchArh6JiC0L1272rSc6dyvoN6ol511VY0c OZSpTiTDlbg66dWWLZFN6HZZSZjqaYThdDCERPeWjnzE+7qJ6Z3rMV0CBpFNd1V3 OOLOBIeFnnq66hQBcy3ysKU8Q1013x5fcY+1osVPgIdYHI+voym9e5/nPT3IFhLJ QeZOTgDvMWokQgS2iwC88Lxmx/uZlJMz884Cme8svGbHKJ3Fm/3THLapIM4VAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUp4HCkhpgNWQhY8bPhirukrIgkMQwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5Ucpwrzz0tRdQr0puxe VqT2aAmudiVyyJbZhj/gLymQOj87flWrZQ0qiExZnBcV+TsfPIZPZE8kslrNJS/d Hij5yw4qSgkNvhe9GyyN1VL5hz9KbKXy1SWvtRpg3Zi7j87GTyaVATMb5jVbZw/N VjqQbvJ+skgqLAviyXChuS3ikLJTYCQk1zhqRK5OhvtlWZOk1BtAdx/e2IO8JnqV jsPiLhZ0q2/JHcNM02y+0/AaZtNvo6/7slGoHRpqqrZjhMkT52igKeA9vKQRQFpx MEmqcz2iD+8jl4L8Xj6uTtsFk+aPKcTaE4o0t7NUbnoQuDCAL8XF5ltEJXwLtX0H MA== -----END CERTIFICATE-----Generated at Fri Jun 6 22:28:23 2025 by rpki-client