$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: 27UUFY6DGyPSFzfQkBkLCkTu16PZ8ls//MKVxdTM3Lk= Subject key identifier: 1A:ED:10:9A:98:42:2B:21:2C:21:84:F0:26:30:14:1C:A5:B4:B4:C7 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 6C15BE8243080EE7E5D233B4E83DED06F1B914EB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 01FD Signing time: Fri 04 Apr 2025 12:29:12 +0000 Manifest this update: Fri 04 Apr 2025 12:24:12 +0000 Manifest next update: Sat 05 Apr 2025 13:21:12 +0000 Files and hashes: 1: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: kyhJCUB0IZ58PgjtuOoqKcwGy0FM5AeasKvHtiY4Nqs=) 2: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: polxJUQuuGvo82QFQvRtgLcGzpMrITqZaH9JMW5PByU=) 3: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg=) 4: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: s8PXZ6xun7QdEzluX2KYTIUVTeLEFzlJ1flicK9iKH8=) 5: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: 7RQ0gXCWkNwXJyLVMAjMT4ifOZKJ140AG/jnIia+kz4=) 6: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: 17qN8Bd0gWBZvDkn96RHqKMURz1HVyJmOiwn1OSD2G0=) 7: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo=) 8: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: hLmxywOTn2v4iv//wqgMLMQxfJouQHupbxrvDFSX9Zg=) 9: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=) 10: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=) 11: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk=) 12: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: PeIsCkDSoavJPo2g0zxTJ1XkAim2DieAEnHktN86nIs=) 13: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Z++XNVAKl2i3elIZ9myp5G2o2TKjv3Anv7s5uuElaws=) 14: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=) 15: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: GcV9N8X9s2uHdEzyPc2IWdnUBlbIkV9Ott353G6xxsA=) 16: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=) 17: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: weaMyUhyt7DjpaGR5/VabWoMYvK3iZCF6goeQ4qv4Yc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 13:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:15:be:82:43:08:0e:e7:e5:d2:33:b4:e8:3d:ed:06:f1:b9:14:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Apr 4 12:24:12 2025 GMT Not After : Apr 5 13:21:12 2025 GMT Subject: CN=1AED109A98422B212C2184F02630141CA5B4B4C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:df:4b:e8:ac:9b:a6:7a:e6:b3:e3:1d:07:c6: f7:e6:96:11:2b:b5:f3:67:b1:cc:c7:e0:81:db:23: a2:7a:6a:d8:d2:ae:26:32:90:64:81:19:0f:69:19: bc:37:42:82:c7:53:ea:d0:04:40:ba:9d:7d:aa:7c: 19:57:76:e7:df:8f:0a:f8:a1:07:ea:6e:70:05:f7: 28:31:88:83:c6:84:49:a3:07:10:fc:c4:57:b0:aa: 1a:41:c7:64:1e:44:53:c2:43:c2:c4:be:3f:52:78: c6:fc:ef:a6:ce:98:c2:f9:12:15:dc:82:8b:2e:38: 43:47:a9:1c:03:6b:82:a9:54:8e:c3:62:80:a7:13: 5b:da:5a:6e:73:a9:1a:b6:3f:62:dc:4d:63:81:db: 8c:eb:67:aa:f6:e9:30:44:39:8e:78:12:31:7f:e7: 4b:7a:f7:99:a1:38:56:9c:9e:cf:db:03:19:1b:9a: 21:ac:ba:5f:c9:10:e4:1a:c2:8d:28:62:d8:23:e3: 26:80:1e:dd:09:f2:85:3a:05:f8:23:57:f1:e0:14: 1d:b5:a4:df:62:c7:2b:94:6c:20:da:98:26:84:6b: 65:c3:d3:d1:c4:d8:a7:84:b4:62:4e:81:b8:ff:23: 93:24:8d:c7:27:0a:0f:97:93:8b:7e:d2:a3:c6:8d: d0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:ED:10:9A:98:42:2B:21:2C:21:84:F0:26:30:14:1C:A5:B4:B4:C7 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e9:0a:12:cd:f1:ae:c6:18:5b:b9:cc:dd:27:df:51:4c:54: 3c:0c:79:fa:c1:d5:e2:20:37:50:bd:1d:79:38:1a:f6:b8:ad: 7b:a8:cb:a1:83:cd:9f:77:a7:5e:65:2b:cb:3d:11:73:da:44: ff:30:53:ac:02:6f:e1:0d:31:9b:07:7b:b4:fc:99:10:0f:35: 63:2c:f1:8a:19:b9:8b:31:02:78:81:4f:51:53:48:1b:2c:f5: 64:1b:9d:06:a2:62:d9:64:3d:f8:55:80:1f:cb:0a:7f:a6:8f: d9:3a:6b:7a:26:44:43:32:70:be:9b:de:32:c6:0e:15:59:fe: 78:67:1c:74:aa:e8:24:e5:e4:0c:a4:82:3c:f6:d8:f5:87:ff: af:70:4d:75:b7:62:0d:d0:22:36:d7:04:ec:42:3d:19:53:19: 18:b8:18:29:97:ff:93:77:6e:fa:7b:55:39:48:5b:9d:fb:90: 0d:07:50:60:8d:a4:1f:e1:ce:75:fc:03:79:b0:21:66:4c:29: cd:dd:16:0f:a3:3c:d1:ec:95:9b:75:ba:ef:63:39:4e:44:fe: 83:4d:fe:68:ea:31:3e:10:2e:2f:88:7d:55:d1:42:a5:0e:db: 0d:64:ac:4f:f5:8b:3a:83:82:ce:dc:93:f0:dc:68:1b:f3:36: 23:cc:f9:b2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbBW+gkMIDufl0jO06D3tBvG5FOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNTA0MDQxMjI0MTJaFw0yNTA0MDUxMzIxMTJaMDMxMTAvBgNV BAMTKDFBRUQxMDlBOTg0MjJCMjEyQzIxODRGMDI2MzAxNDFDQTVCNEI0QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC730vorJumeuaz4x0HxvfmlhEr tfNnsczH4IHbI6J6atjSriYykGSBGQ9pGbw3QoLHU+rQBEC6nX2qfBlXduffjwr4 oQfqbnAF9ygxiIPGhEmjBxD8xFewqhpBx2QeRFPCQ8LEvj9SeMb876bOmML5EhXc gosuOENHqRwDa4KpVI7DYoCnE1vaWm5zqRq2P2LcTWOB24zrZ6r26TBEOY54EjF/ 50t695mhOFacns/bAxkbmiGsul/JEOQawo0oYtgj4yaAHt0J8oU6BfgjV/HgFB21 pN9ixyuUbCDamCaEa2XD09HE2KeEtGJOgbj/I5MkjccnCg+Xk4t+0qPGjdBhAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUGu0QmphCKyEsIYTwJjAUHKW0tMcwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBO6QoS zfGuxhhbuczdJ99RTFQ8DHn6wdXiIDdQvR15OBr2uK17qMuhg82fd6deZSvLPRFz 2kT/MFOsAm/hDTGbB3u0/JkQDzVjLPGKGbmLMQJ4gU9RU0gbLPVkG50GomLZZD34 VYAfywp/po/ZOmt6JkRDMnC+m94yxg4VWf54Zxx0qugk5eQMpII89tj1h/+vcE11 t2IN0CI21wTsQj0ZUxkYuBgpl/+Td276e1U5SFud+5ANB1BgjaQf4c51/AN5sCFm TCnN3RYPozzR7JWbdbrvYzlORP6DTf5o6jE+EC4viH1V0UKlDtsNZKxP9Ys6g4LO 3JPw3Ggb8zYjzPmy -----END CERTIFICATE-----Generated at Sat Apr 5 04:37:32 2025 by rpki-client