$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: vpqgOR4NENY0fB8+jYCxUlEy85NccOMirUriuA/82ao= Subject key identifier: 97:C9:84:6C:F5:DA:86:04:88:18:58:A8:41:18:5C:67:3F:FD:E9:74 Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: 52EF53E40F90022D943D6220673596EE16759779 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 0351 Signing time: Thu 03 Apr 2025 18:24:14 +0000 Manifest this update: Thu 03 Apr 2025 18:19:14 +0000 Manifest next update: Fri 04 Apr 2025 21:45:14 +0000 Files and hashes: 1: 326131313a353730373a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: yXrlXEmbJ+W468Anpz8E2TYdQ5p48eYhmRv8EWEFWss=) 2: 326131313a353730333a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 4u/gNCBvytd7eZSyyMh6T2KiCJ3m+wg7l3GvlAdV7y4=) 3: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: XD3V5dJXTVRCxQzxxC2QHwrcf2NvhNrbOoV/LwRhC+0=) 4: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: OiF9NTgLIvpgOtsU+ET8v0G7trHw/6kgGm+sQfii6jA=) 5: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: 2t1rBhnp/nx2NbYLLBT6459cj12qNkxF/Y+7pwb3JUg=) 6: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: U7ZpZq92KRjLluBChNmcNbVK0yuDCFIu2VYYNCvyYhE=) 7: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: GzEfYNi6/vde9duBI4GoacY9I1ImrO0osp4FqLdS6w0=) 8: 326131313a353730323a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: jpJvrreRDifLrtBDiVkCHa/ih9KUqNO+TXds5XFOzYA=) 9: 326131313a353730343a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: vfJJza7tgDeLAPDMVyN5V6KQIqwick9H3Cppm/e5D7Y=) 10: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: QSf1f4sZpmKAqesOD+5GkB0Z3X1d4jZecHW/qgpOz7c=) 11: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: P6VpVcg2APhRrCeqSdvJWAeWYuUD0ufb44Yi4WeNSS4=) 12: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: WtMw6gTmYTWCmtNsyMU8znGs+9TK96TMgDW07igAViw=) 13: 326131313a353730313a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 8rSYC/rmOaG6QMucx38lab+ttuAxpdA8gF20Sx392S0=) 14: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: 6xKp24gU5DBAB1Kw+WWXfVQhj34i1+UyseAfrABT8A8=) 15: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: sG7xJcGXXNelwP0OQPmktIIcLBds9MKYJ+MswFajjRU=) 16: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: TMlytZ8X0slW9x4jJKyuBdUnUnMpROm7M/wSYhg+WrM=) 17: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: M1W/UI7nVvcG5IlyKmaYpsnNndD+L3rNJ9g8XuVAe1c=) 18: AS48070.asa (hash: YsK0/rV2BmXeHeRJ0VrNqX7Hbez3e33zUXMrV6bup5Y=) 19: 326131313a353730363a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: AfUd0g6EM08gdKu3gWYFuswqhaPb+uAVwfADq4dSUAA=) 20: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: abkTgvFhAoj4f+KMDGBQF/dpnMqoiBMVzOOia/8N82A=) 21: 326131313a353730353a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: abdx96bGasEt79nv1n4PdtuPD35/cpm50ioY9tC3qus=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 04 Apr 2025 16:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ef:53:e4:0f:90:02:2d:94:3d:62:20:67:35:96:ee:16:75:97:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: Apr 3 18:19:14 2025 GMT Not After : Apr 4 21:45:14 2025 GMT Subject: CN=97C9846CF5DA8604881858A841185C673FFDE974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:29:e7:9d:56:e8:6c:52:36:9c:a6:94:b2:c8: 36:81:cf:4e:62:53:b1:d9:1a:2a:30:83:8d:b4:61: b6:3f:2a:bb:b2:52:85:30:99:69:f1:eb:57:b2:ae: 61:4f:6a:f4:76:36:1d:f2:a4:ff:9e:0f:df:9c:a8: 75:8a:fa:10:69:29:6d:44:ad:08:e9:b5:28:30:f1: 77:90:81:aa:b5:d4:a2:10:f6:60:c6:f9:d0:01:86: f6:bd:5b:56:b2:5b:e1:ac:68:da:8e:e7:a7:f7:6c: ee:96:88:74:c8:65:1a:f1:12:17:64:3c:7a:a9:93: 9a:1f:eb:2b:46:aa:1f:64:be:24:b0:7e:60:67:05: ef:f3:da:7a:c5:78:5e:f9:03:7d:5e:aa:a7:0b:60: 6b:0c:f4:d6:bc:aa:10:99:98:b4:6e:1a:7d:73:b8: 36:21:bf:bc:44:e8:06:d0:21:95:e1:b9:12:41:f6: db:84:d4:79:a4:8b:28:af:2f:2c:19:61:3b:8c:e9: 29:3a:18:0b:f9:4c:9f:d6:e9:1c:4d:35:ad:d0:f2: 91:ca:7b:fd:3a:7f:fc:28:0a:dc:f8:46:23:33:e1: c1:7f:75:0a:53:b2:18:5d:5d:88:4e:ed:a5:10:af: dc:af:d2:7f:54:96:c6:2c:e3:a9:17:52:aa:ea:59: 22:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C9:84:6C:F5:DA:86:04:88:18:58:A8:41:18:5C:67:3F:FD:E9:74 X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:30:fb:c6:c7:40:a9:a2:c2:10:09:32:5d:68:50:18:4b:64: b4:58:20:85:a1:d4:ef:1e:8d:a6:4a:46:48:16:ab:af:c6:e2: 80:57:59:b8:03:3e:28:21:37:a7:df:06:81:97:bb:47:a1:94: 27:1c:ee:a9:6d:56:e8:55:73:8d:6d:c7:0d:6c:ff:b0:eb:e6: be:e9:8f:8f:4c:ca:fc:d2:6a:c8:a3:b4:ea:19:a9:27:dc:d4: 4b:6d:d1:b3:c6:1d:72:73:ca:66:7c:82:39:30:5c:11:e2:37: dd:51:2e:d5:b3:c3:14:29:9d:04:c4:63:24:f1:31:2a:0a:73: 19:a3:8a:12:fe:fa:54:c0:1e:b8:56:e1:fd:6a:cb:52:f7:e3: 57:59:08:91:14:d2:45:e7:e8:4f:38:c8:51:36:92:9d:1e:04: b5:5f:b7:c9:2e:8b:2f:70:ad:6b:3d:03:11:a0:c8:2e:c6:9f: 09:f8:ea:9b:b8:0d:33:92:bf:d0:52:9b:9b:84:41:ef:82:cf: de:2f:75:81:e9:01:07:9d:17:4b:2f:4b:a2:7b:ce:46:cf:d6: ba:17:52:57:fb:0e:7c:a2:ad:5d:bb:db:85:c9:fa:66:e0:ae: 59:c4:b8:1f:c2:87:5a:03:b9:c9:cf:e7:93:6b:aa:0a:2a:5a: cc:2d:c3:98 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUu9T5A+QAi2UPWIgZzWW7hZ1l3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNTA0MDMxODE5MTRaFw0yNTA0MDQyMTQ1MTRaMDMxMTAvBgNV BAMTKDk3Qzk4NDZDRjVEQTg2MDQ4ODE4NThBODQxMTg1QzY3M0ZGREU5NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVKeedVuhsUjacppSyyDaBz05i U7HZGiowg420YbY/KruyUoUwmWnx61eyrmFPavR2Nh3ypP+eD9+cqHWK+hBpKW1E rQjptSgw8XeQgaq11KIQ9mDG+dABhva9W1ayW+GsaNqO56f3bO6WiHTIZRrxEhdk PHqpk5of6ytGqh9kviSwfmBnBe/z2nrFeF75A31eqqcLYGsM9Na8qhCZmLRuGn1z uDYhv7xE6AbQIZXhuRJB9tuE1HmkiyivLywZYTuM6Sk6GAv5TJ/W6RxNNa3Q8pHK e/06f/woCtz4RiMz4cF/dQpTshhdXYhO7aUQr9yv0n9UlsYs46kXUqrqWSK7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUl8mEbPXahgSIGFioQRhcZz/96XQwHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDD7xsdAqaLCEAkyXWhQ GEtktFgghaHU7x6NpkpGSBarr8bigFdZuAM+KCE3p98GgZe7R6GUJxzuqW1W6FVz jW3HDWz/sOvmvumPj0zK/NJqyKO06hmpJ9zUS23Rs8YdcnPKZnyCOTBcEeI33VEu 1bPDFCmdBMRjJPExKgpzGaOKEv76VMAeuFbh/WrLUvfjV1kIkRTSRefoTzjIUTaS nR4EtV+3yS6LL3Ctaz0DEaDILsafCfjqm7gNM5K/0FKbm4RB74LP3i91gekBB50X Sy9LonvORs/WuhdSV/sOfKKtXbvbhcn6ZuCuWcS4H8KHWgO5yc/nk2uqCipazC3D mA== -----END CERTIFICATE-----Generated at Fri Apr 4 01:05:23 2025 by rpki-client