$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: hAGqxbJhGQqjNboYj810Sk+r8DcVpChfB0jH4G2jVes= Subject key identifier: C1:54:84:74:41:6C:CF:20:91:24:64:C7:FA:79:C5:27:EF:F2:27:EB Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: 342BCD1CFB9A07AA4026BB6A0E896BF65885D02B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 03A7 Signing time: Fri 06 Jun 2025 01:14:42 +0000 Manifest this update: Fri 06 Jun 2025 01:09:42 +0000 Manifest next update: Sat 07 Jun 2025 04:59:42 +0000 Files and hashes: 1: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: wQ/YXS5V0WqyAz3I38Grxwtf2vC7Tnq0YU0pMolmNpk=) 2: 326131313a353730343a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: e6pNQA8izdBKRkcuzWtfOOmNK456AAkxlNJ6pMTNpsc=) 3: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: EEtfGKQPQ42nFzzdsRfixi4zKQ5tTYPEdAQ1iAcmdE4=) 4: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: Pc4F216M/oD/fxZDUk8HLynWg8D1IQ0ANHs5N2ZC0VQ=) 5: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: /8dVa93viKNoM1pCJooeH0rtbsVAVvDJFpjlC3WNZyI=) 6: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: ma+wlMqMsb7J0TC2Gy822cEZS57hTDfS/GzCjZsgQ1k=) 7: 326131313a353730353a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: YvH+3atWqaB4zJsHYK1cEoa4+J3Y8wbDOetaRpGkY9U=) 8: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: tZxxGd6TZY7iTHWOKlbq4UViZ1YPvec2jEscZS6Hlb4=) 9: 326131313a353730373a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 11LkJhM5pGNm95iRuza8Ye8pvz7Hby+G2YVPV9KFFMI=) 10: 326131313a353730313a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 0SF0WfEKn6tAt+SqtI0zWos8/5DwYGM33/T6SlnO8Oc=) 11: AS48070.asa (hash: YsK0/rV2BmXeHeRJ0VrNqX7Hbez3e33zUXMrV6bup5Y=) 12: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: IiLsd5rWyRAEtPC2BRNztBwgXOWFkCLAq6FHsMnhQxg=) 13: 326131313a353730333a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: amyhppkunQUKDCiBGMFxQfAHBmd/6ZM1Y2JA6Xv6mjw=) 14: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: 242POLRepYH713AUptOGvBkM/JpRNVCsIm5BodQGTyY=) 15: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: SY6OvQv9R/Ut8R5yFxdy0RVK/9dKsg8ZwmC3iNS9Rpw=) 16: 326131313a353730323a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: zY7Phzmd75TKCthkmSaY4oyTFaKkCEl/y4pnJz6mHMw=) 17: 326131313a353730363a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: +GiVUNSbcYm0MXNlVgxa6VflGOlRp9hOfbY/aidYY1U=) 18: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: VIdYFIOIqW5zJ3T1LDGwWjmJ764XjM+ac+86S8Ja5hk=) 19: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: NDHvIIcUiAk7uX5boyMA8yHxKUGe6BZWK+cptlXNnOA=) 20: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: Fqs+xGh2wCPoRebx3WWGGz8gG+3wDYrzV+eGaABVra0=) 21: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: S5WIAkzllTXfMiWpREUuucFgM0BSw7Pb5gT995rR5+k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 04:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:2b:cd:1c:fb:9a:07:aa:40:26:bb:6a:0e:89:6b:f6:58:85:d0:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: Jun 6 01:09:42 2025 GMT Not After : Jun 7 04:59:42 2025 GMT Subject: CN=C1548474416CCF20912464C7FA79C527EFF227EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:78:cd:0c:ac:83:bb:cd:6e:43:ec:75:25:cf: 0a:1e:1a:96:d9:64:bd:44:2d:66:8b:4d:cb:be:d7: 65:99:41:ac:6d:bc:bd:49:42:78:75:16:63:bb:75: f2:ea:a2:87:cf:90:19:73:01:5a:08:73:f3:8a:41: c1:c1:5d:d8:72:ff:95:4c:73:03:7a:df:24:be:ba: 57:bc:fd:f0:44:36:df:21:94:e6:cd:d5:39:69:9e: a5:6a:1b:78:5a:0d:4f:c4:60:88:6c:77:80:51:2b: 6f:be:c1:a2:58:27:67:77:fe:cf:96:b5:84:f3:58: 55:67:56:a9:e2:7d:a9:ea:bf:ba:82:2f:17:94:e9: 81:d1:56:d1:84:6f:54:41:bb:4f:49:df:62:ec:74: eb:b4:c6:3b:54:0d:69:45:90:7d:48:b6:53:1c:66: 14:72:1c:8a:8f:b3:db:f7:aa:1d:d3:0c:e1:c1:f9: d0:84:13:5d:ea:95:c0:ab:0a:0a:ee:00:3b:af:c8: 4d:ae:f6:b4:b0:12:95:94:5e:70:f9:5e:bf:83:0b: f3:00:24:d4:4a:35:48:d4:16:d3:bb:2c:43:3a:98: 11:92:8c:b1:21:32:60:c4:df:6f:1f:62:e2:bb:7b: 49:b3:d6:1a:ea:d0:5e:95:a0:42:a8:58:32:67:67: b2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:54:84:74:41:6C:CF:20:91:24:64:C7:FA:79:C5:27:EF:F2:27:EB X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:91:5e:9c:c9:0d:a5:fe:e6:90:7c:4b:ca:45:a8:d4:14:97: 16:49:6d:ad:18:3d:8c:73:a9:56:42:18:cc:93:31:b3:9f:75: 05:94:bf:69:dd:12:04:16:cd:b2:6a:8a:72:d4:93:55:86:b0: b3:19:59:1f:37:4f:89:f1:aa:95:9a:10:02:0b:a5:a0:61:40: d3:dd:d9:da:5b:cd:b4:ab:bb:ec:74:43:aa:58:71:87:8c:03: 85:b6:08:22:98:f2:c3:9c:42:e9:15:c1:2f:16:d3:53:04:91: b9:da:5b:d9:54:1d:d0:df:7c:9c:21:de:37:6e:2d:f6:aa:a3: f9:67:e1:d7:90:ff:b6:be:56:92:06:ec:1b:6e:37:ac:51:1c: b8:92:d4:41:f4:2c:3a:69:29:13:e0:e4:d0:d6:04:ca:5e:5d: 68:90:b8:21:07:78:3b:b9:17:66:54:0d:b6:38:b0:f0:f7:b6: e3:29:6c:9a:9e:16:17:a4:8f:91:d0:26:3e:76:c2:ca:b5:da: 99:d0:a9:b2:f9:62:7b:72:3c:3d:b4:ff:bb:f2:28:9f:5f:3b: 93:ae:45:be:cc:83:f3:1a:61:3d:c0:e6:53:68:58:08:6c:02: 6d:86:f3:06:9a:4e:d8:c9:6f:53:60:e8:be:20:df:3c:83:a1: f4:d5:2f:c7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNCvNHPuaB6pAJrtqDolr9liF0CswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNTA2MDYwMTA5NDJaFw0yNTA2MDcwNDU5NDJaMDMxMTAvBgNV BAMTKEMxNTQ4NDc0NDE2Q0NGMjA5MTI0NjRDN0ZBNzlDNTI3RUZGMjI3RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzeM0MrIO7zW5D7HUlzwoeGpbZ ZL1ELWaLTcu+12WZQaxtvL1JQnh1FmO7dfLqoofPkBlzAVoIc/OKQcHBXdhy/5VM cwN63yS+ule8/fBENt8hlObN1TlpnqVqG3haDU/EYIhsd4BRK2++waJYJ2d3/s+W tYTzWFVnVqnifanqv7qCLxeU6YHRVtGEb1RBu09J32LsdOu0xjtUDWlFkH1ItlMc ZhRyHIqPs9v3qh3TDOHB+dCEE13qlcCrCgruADuvyE2u9rSwEpWUXnD5Xr+DC/MA JNRKNUjUFtO7LEM6mBGSjLEhMmDE328fYuK7e0mz1hrq0F6VoEKoWDJnZ7ItAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUwVSEdEFszyCRJGTH+nnFJ+/yJ+swHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwZFenMkNpf7mkHxLykWo 1BSXFkltrRg9jHOpVkIYzJMxs591BZS/ad0SBBbNsmqKctSTVYawsxlZHzdPifGq lZoQAguloGFA093Z2lvNtKu77HRDqlhxh4wDhbYIIpjyw5xC6RXBLxbTUwSRudpb 2VQd0N98nCHeN24t9qqj+Wfh15D/tr5WkgbsG243rFEcuJLUQfQsOmkpE+Dk0NYE yl5daJC4IQd4O7kXZlQNtjiw8Pe24ylsmp4WF6SPkdAmPnbCyrXamdCpsvlie3I8 PbT/u/Ion187k65FvsyD8xphPcDmU2hYCGwCbYbzBppO2MlvU2DoviDfPIOh9NUv xw== -----END CERTIFICATE-----Generated at Fri Jun 6 10:55:07 2025 by rpki-client