$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: KNdPRl62pkHbHibbycq1I3MxkLAIPCgqnOPCxCT3xLQ= Subject key identifier: 4D:6F:C1:92:25:80:CD:59:39:78:41:76:0E:A4:5B:25:A7:BD:6D:2D Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 120D3BB5B185555B7F5AD70D1B815F8A8F3E8F12 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 01F7 Signing time: Sat 05 Apr 2025 07:12:10 +0000 Manifest this update: Sat 05 Apr 2025 07:07:10 +0000 Manifest next update: Sun 06 Apr 2025 09:01:10 +0000 Files and hashes: 1: 326131343a373538303a393230303a3a2f34302d3438203d3e20313430393135.roa (hash: n6lsjVYHHKKKPmzUm98edFKQEZTX7R3BteBSBE3ZmTg=) 2: 326131343a373538303a393330303a3a2f34302d3438203d3e20323136323939.roa (hash: 0JNkK9KnjI4w2zV41Uw2bLOQhv0TkTdwPhPOAejMVJo=) 3: 326131343a373538303a393130303a3a2f34302d3438203d3e20323031333836.roa (hash: HGfpWKFgSmhSbJJ0S3ZdUrJxu8/156bUgg5vlqYKRis=) 4: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: U077yyaZRbfy7N/KyjCB4FmgdWCgoTlfL1ejtcHsU/8=) 5: 326131343a373538303a393130303a3a2f34302d3438203d3e20323136323939.roa (hash: c4wfh1kOphA8Axvw6+dnj3lAut4b1kpMpQW/rZEnV+o=) 6: 326131343a373538303a393630303a3a2f34302d3438203d3e20313533333736.roa (hash: a3qLcUPi+RQppEqo978zrfnO/2oaV9TKnigMH0wuHZQ=) 7: 326131343a373538303a393430303a3a2f33392d3438203d3e20313430393135.roa (hash: mVqYPHXZFgCW00Y2ej0uNLFZlmcciaFr8mPxKhhXZIs=) 8: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: cFxWp20cVK0UfiJxxcLtUOXevD3OgB7dMefIF5hBHOk=) 9: 326131343a373538303a393030303a3a2f34302d3438203d3e20323134363433.roa (hash: TpBOht4fHdBbgzn8V6oN1sv1lzMWI2nPHKIFH/SJnHk=) 10: 326131343a373538313a653030303a3a2f33362d3438203d3e20323134363433.roa (hash: x9Ws2a9hchs2I1MVNTnPpvnZFWRirIvQpeIuGTe39hw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 09:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:0d:3b:b5:b1:85:55:5b:7f:5a:d7:0d:1b:81:5f:8a:8f:3e:8f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Apr 5 07:07:10 2025 GMT Not After : Apr 6 09:01:10 2025 GMT Subject: CN=4D6FC1922580CD59397841760EA45B25A7BD6D2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:94:09:70:d7:dc:5c:9b:fc:ea:cf:e4:ac:0c: bf:77:7b:46:ac:ca:37:d7:69:32:45:a8:3d:d1:1e: 4e:da:6d:d0:48:a0:2c:e4:a6:52:bc:d2:2f:e8:02: 8d:b8:39:d9:24:11:f8:31:02:f7:76:83:45:ad:c5: c5:43:10:1a:b9:3f:f7:ea:91:7e:d5:8a:4f:b6:84: 41:a9:07:f8:b6:a5:4f:a4:3c:fa:0a:e8:3c:06:84: 35:e5:1c:be:df:6e:1b:f3:a0:e1:5c:2c:71:0a:5a: 49:cc:e3:6e:b8:43:81:05:e1:72:1c:4a:d8:b7:93: 8d:2f:f6:ac:f0:90:1d:3d:c8:03:ea:2f:19:62:c3: d9:90:59:8a:c6:b5:f9:c0:d2:73:d8:11:a6:af:e2: 45:28:05:75:64:9e:dd:96:e6:11:c3:5b:68:f5:93: 24:52:87:fc:54:6a:22:5c:f9:71:2d:dc:29:b3:d5: ca:26:55:91:7d:98:31:73:0f:32:ab:34:7f:07:34: a8:9b:34:40:d8:5a:bc:9f:ce:42:28:ee:1a:9b:7a: 58:e2:de:6e:d9:cf:7d:74:72:66:4d:5f:22:a6:b7: 20:02:f5:e6:dd:de:b8:96:09:e1:3f:d1:e4:cc:97: e1:22:0f:28:e2:96:39:90:e8:41:04:8e:59:59:4e: 58:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6F:C1:92:25:80:CD:59:39:78:41:76:0E:A4:5B:25:A7:BD:6D:2D X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:af:cd:5e:4b:d0:1b:3b:0d:39:b2:6f:27:f1:0b:a0:46:61: a8:42:42:33:00:47:d0:62:4a:7a:43:05:05:31:39:3b:e3:55: 20:e0:fe:8e:c8:e0:85:7f:3d:ac:78:8c:9c:79:a2:10:26:b1: 07:c8:98:c8:b2:5e:e8:92:35:aa:fc:f5:77:ce:22:75:3c:7b: cb:c3:ac:0d:5f:a5:80:f3:f9:38:fe:40:d4:8d:44:58:d9:b2: b5:de:68:6c:06:06:07:e4:83:1f:26:99:f0:42:9d:5f:67:e8: b9:e9:f9:e1:0b:28:70:7b:9f:4f:17:b9:ed:e9:07:91:f6:d4: 3f:6a:0d:36:da:be:b1:54:5d:79:bb:77:12:3c:ae:97:2e:cd: b7:a9:92:f0:25:df:82:e5:91:1e:80:d0:c0:7d:a1:aa:65:b5: 88:99:ad:a1:96:c8:5c:51:34:4c:1a:da:0d:08:06:16:e2:99: b6:1d:24:1a:5d:9b:b3:b8:68:8a:84:3b:f8:ef:bc:43:29:9d: 5a:43:c2:14:76:4d:f4:9f:5e:c9:05:ec:33:41:f5:56:62:53: b8:35:db:0d:a9:9c:7c:5c:48:07:c2:b5:a2:b2:a5:a2:28:5a: c2:ed:f8:b0:fc:38:8c:55:71:0d:57:26:09:f7:f1:df:67:a8: fd:4b:0b:4e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUEg07tbGFVVt/WtcNG4Ffio8+jxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNTA0MDUwNzA3MTBaFw0yNTA0MDYwOTAxMTBaMDMxMTAvBgNV BAMTKDRENkZDMTkyMjU4MENENTkzOTc4NDE3NjBFQTQ1QjI1QTdCRDZEMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNlAlw19xcm/zqz+SsDL93e0as yjfXaTJFqD3RHk7abdBIoCzkplK80i/oAo24OdkkEfgxAvd2g0WtxcVDEBq5P/fq kX7Vik+2hEGpB/i2pU+kPPoK6DwGhDXlHL7fbhvzoOFcLHEKWknM4264Q4EF4XIc Sti3k40v9qzwkB09yAPqLxliw9mQWYrGtfnA0nPYEaav4kUoBXVknt2W5hHDW2j1 kyRSh/xUaiJc+XEt3Cmz1comVZF9mDFzDzKrNH8HNKibNEDYWryfzkIo7hqbelji 3m7Zz310cmZNXyKmtyAC9ebd3riWCeE/0eTMl+EiDyjiljmQ6EEEjllZTlg9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUTW/BkiWAzVk5eEF2DqRbJae9bS0wHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCbr81e S9AbOw05sm8n8QugRmGoQkIzAEfQYkp6QwUFMTk741Ug4P6OyOCFfz2seIyceaIQ JrEHyJjIsl7okjWq/PV3ziJ1PHvLw6wNX6WA8/k4/kDUjURY2bK13mhsBgYH5IMf JpnwQp1fZ+i56fnhCyhwe59PF7nt6QeR9tQ/ag022r6xVF15u3cSPK6XLs23qZLw Jd+C5ZEegNDAfaGqZbWIma2hlshcUTRMGtoNCAYW4pm2HSQaXZuzuGiKhDv477xD KZ1aQ8IUdk30n17JBewzQfVWYlO4NdsNqZx8XEgHwrWisqWiKFrC7fiw/DiMVXEN VyYJ9/HfZ6j9SwtO -----END CERTIFICATE-----Generated at Sat Apr 5 17:51:00 2025 by rpki-client