$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: ysoNm6jhI04GFyCZROwD0XMkxD2HAeybTLCzDnOyoB4= Subject key identifier: E9:5E:68:1A:2C:4A:56:D7:DF:7A:A5:2B:C2:C3:6A:0E:4C:57:42:7B Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 2B3FA2A17577519F9038CA5659815501240AF296 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 0245 Signing time: Wed 04 Jun 2025 20:00:38 +0000 Manifest this update: Wed 04 Jun 2025 19:55:38 +0000 Manifest next update: Thu 05 Jun 2025 23:08:38 +0000 Files and hashes: 1: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Z++XNVAKl2i3elIZ9myp5G2o2TKjv3Anv7s5uuElaws=) 2: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: 8s6apCbfSBT9OkSYWLYZ2QTDstl+5FNrKo7J8pdQOiU=) 3: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk=) 4: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: PeIsCkDSoavJPo2g0zxTJ1XkAim2DieAEnHktN86nIs=) 5: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg=) 6: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: polxJUQuuGvo82QFQvRtgLcGzpMrITqZaH9JMW5PByU=) 7: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=) 8: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=) 9: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: GcV9N8X9s2uHdEzyPc2IWdnUBlbIkV9Ott353G6xxsA=) 10: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo=) 11: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=) 12: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: 7RQ0gXCWkNwXJyLVMAjMT4ifOZKJ140AG/jnIia+kz4=) 13: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=) 14: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: hLmxywOTn2v4iv//wqgMLMQxfJouQHupbxrvDFSX9Zg=) 15: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: s8PXZ6xun7QdEzluX2KYTIUVTeLEFzlJ1flicK9iKH8=) 16: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: 17qN8Bd0gWBZvDkn96RHqKMURz1HVyJmOiwn1OSD2G0=) 17: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:3f:a2:a1:75:77:51:9f:90:38:ca:56:59:81:55:01:24:0a:f2:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Jun 4 19:55:38 2025 GMT Not After : Jun 5 23:08:38 2025 GMT Subject: CN=E95E681A2C4A56D7DF7AA52BC2C36A0E4C57427B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e7:df:54:a1:11:9b:61:95:df:7d:88:39:99: fa:3c:f1:d1:9f:ee:42:dd:ed:9b:b4:82:a1:63:de: 57:60:5f:ef:e2:27:05:df:10:16:bd:ef:86:07:ad: 61:2a:42:c4:1e:29:35:e5:bd:db:60:ec:8d:20:06: c9:bf:d2:ca:9c:f8:ea:b2:2c:5b:8a:28:d7:d2:56: 3f:ce:76:e4:c5:70:ba:02:36:b2:6d:a1:e9:cf:db: 4e:a0:21:e4:b6:78:25:5d:93:4e:f4:b3:86:b9:27: ee:60:f0:af:0a:9d:05:01:c6:ab:be:19:0e:5c:fe: d0:58:ed:71:fa:43:f3:24:0c:b2:33:07:69:ca:e4: 53:a0:fe:90:ef:0c:0b:cd:75:d4:f4:41:fc:73:81: dd:b6:26:27:2f:ce:f9:18:53:cf:8a:36:47:ca:43: 75:57:bb:ce:8c:20:cd:18:5a:0f:c4:82:94:ea:d5: 47:c7:9f:3d:f9:6f:d5:d3:f8:5f:a2:56:4c:17:2d: fd:39:18:b5:40:a2:2b:ea:86:cf:30:6d:97:6f:5b: 4f:5d:27:b5:f0:8f:47:93:84:a3:47:c3:78:09:9a: 6e:f4:74:74:a0:ae:20:61:90:3e:a9:0b:39:d6:3a: 1e:02:b2:42:a3:92:b4:8f:f8:65:39:1d:c4:03:0c: 06:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5E:68:1A:2C:4A:56:D7:DF:7A:A5:2B:C2:C3:6A:0E:4C:57:42:7B X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:97:3d:8b:41:06:5a:b1:fe:ca:35:7f:16:fc:34:29:5b:0c: dd:75:c5:36:4d:63:dc:5d:f5:a9:0d:5e:6b:39:0f:04:99:7a: b9:34:8c:f4:62:a8:bc:9e:9a:a7:22:86:94:f6:36:dc:73:5a: 7a:ae:00:48:fb:a4:3a:89:d0:7e:09:a2:c4:27:3f:ef:58:8e: de:b4:6a:c2:fa:88:ac:e7:4d:45:16:61:3a:ae:1c:1c:b0:95: 18:7c:1a:e8:18:88:81:6c:f1:d5:13:3b:56:9a:e2:02:e2:b6: d0:30:03:42:0a:94:66:65:5a:a7:e4:cd:b2:27:51:20:b3:80: 25:1b:c3:a4:b7:aa:ba:14:ee:b7:fb:aa:a6:78:25:dd:3e:9d: 75:23:ef:46:49:b8:38:d8:8d:4e:e2:f5:ef:a6:6d:94:13:76: 18:82:02:a4:83:d1:9a:99:54:54:51:4b:95:74:41:fa:6b:1a: e6:26:8c:50:26:33:e1:c0:27:b7:67:ce:63:5e:a1:01:db:51: 4e:33:f9:6f:e3:60:bf:d8:27:87:a5:d9:3b:76:8e:f6:5b:8b: af:ee:50:51:4b:12:8d:a0:2a:ef:d3:17:78:69:72:59:d6:d0: 08:60:46:4c:bd:6e:bc:1d:3b:24:8b:30:88:a9:b1:b4:43:ff: 8d:10:70:df -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKz+ioXV3UZ+QOMpWWYFVASQK8pYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNTA2MDQxOTU1MzhaFw0yNTA2MDUyMzA4MzhaMDMxMTAvBgNV BAMTKEU5NUU2ODFBMkM0QTU2RDdERjdBQTUyQkMyQzM2QTBFNEM1NzQyN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA599UoRGbYZXffYg5mfo88dGf 7kLd7Zu0gqFj3ldgX+/iJwXfEBa974YHrWEqQsQeKTXlvdtg7I0gBsm/0sqc+Oqy LFuKKNfSVj/OduTFcLoCNrJtoenP206gIeS2eCVdk070s4a5J+5g8K8KnQUBxqu+ GQ5c/tBY7XH6Q/MkDLIzB2nK5FOg/pDvDAvNddT0Qfxzgd22JicvzvkYU8+KNkfK Q3VXu86MIM0YWg/EgpTq1UfHnz35b9XT+F+iVkwXLf05GLVAoivqhs8wbZdvW09d J7Xwj0eThKNHw3gJmm70dHSgriBhkD6pCznWOh4CskKjkrSP+GU5HcQDDAYPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU6V5oGixKVtffeqUrwsNqDkxXQnswHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVlz2L QQZasf7KNX8W/DQpWwzddcU2TWPcXfWpDV5rOQ8EmXq5NIz0Yqi8npqnIoaU9jbc c1p6rgBI+6Q6idB+CaLEJz/vWI7etGrC+ois501FFmE6rhwcsJUYfBroGIiBbPHV EztWmuIC4rbQMANCCpRmZVqn5M2yJ1Egs4AlG8Okt6q6FO63+6qmeCXdPp11I+9G Sbg42I1O4vXvpm2UE3YYggKkg9GamVRUUUuVdEH6axrmJoxQJjPhwCe3Z85jXqEB 21FOM/lv42C/2CeHpdk7do72W4uv7lBRSxKNoCrv0xd4aXJZ1tAIYEZMvW68HTsk izCIqbG0Q/+NEHDf -----END CERTIFICATE-----Generated at Thu Jun 5 00:27:06 2025 by rpki-client