$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json) Hash identifier: 6wae8n5WDHnd3Ggi66mepV8UpX2GKhIT4ND5cm2H11E= Subject key identifier: DE:07:0C:51:E2:CC:74:62:81:9A:EF:25:6C:53:C4:47:CA:57:A4:CA Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 0DA5579CFB231ABDF728BEE1ED5C4E24A7C3FDA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft Manifest number: 012B Signing time: Fri 04 Apr 2025 19:20:24 +0000 Manifest this update: Fri 04 Apr 2025 19:15:24 +0000 Manifest next update: Sat 05 Apr 2025 19:47:24 +0000 Files and hashes: 1: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: sx/iVfyDskrQoK42os+6TyQoUVUvVUXlGN9RH2id0Fo=) 2: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: YrKMLBs8xCiL955bvB/8G11UYsLmajFWAxqi9VeJEB4=) 3: AS41720.asa (hash: +RbH8buX1T5kTWMGsS+k2hctRH6+R8V1cu3+Qe3+/Rs=) 4: 326130643a623238373a656330303a3a2f34302d3430203d3e20323135363634.roa (hash: ZkXNpKW61UGEN6+3Eq/nkumIj3yuGpDt69ocmobqC/8=) 5: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: U56VGJcjuLrEYPpG7oABc/1/udX8BKChn+eBmuJZDts=) 6: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: WtqgmDwc3f4nCSOQ8ixLkNx8sXt7FaBWfi7I6des1c8=) 7: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: 5lNL9wmLDlet0KrRB5Z2lMcDOBbA6gqsqoS0zWeKarw=) 8: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: bYPPd9HcHavTcfcGpM+ulmmDEDFMIVr0C3fR7prPNz4=) 9: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: aLb2skVo1avQQa/rZy93Jde+x3+bvnv1kpGPWTlaKFM=) 10: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: pyzsZjErsKF/r6TDE4GaASJZY8jmD+uruFgv90V9cVg=) 11: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: kmFg1Ubyi8msuCXkZq9wTUwo9VmgSHMiCqLO0oSubS4=) 12: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: YeBU5ew7EbaM3M5c2zGWzk0Q7RzGkO4TGKp/4byQ64k=) 13: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: 9fvE/EKZJ0AUA6jRvgotTKUfh3uMQWCtvLablu7TiLY=) 14: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: Qv46t81qHTc4uf1Bxldy1f/G+l9sAnh7axBU+G8+9tQ=) 15: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: iavCedfpEd5k0rIG/kL5F/xxOAMPmZq43N15rLvPbic=) 16: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: Wm3IDAOfkV81JSuZK/Na7XnsHjZUJzGcxe64BY1WIhs=) 17: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: o5Ji9Nl0S0iVZZtmrV/Dia6lTq3wC3uyRf91AZlTL/E=) 18: 326130643a623238373a656363303a3a2f34322d3432203d3e20323135363634.roa (hash: GLrga7I6TmqAcqHZCyQLyo7wEkxzFEUlvkIYE9Jlscs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:a5:57:9c:fb:23:1a:bd:f7:28:be:e1:ed:5c:4e:24:a7:c3:fd:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: Apr 4 19:15:24 2025 GMT Not After : Apr 5 19:47:24 2025 GMT Subject: CN=DE070C51E2CC7462819AEF256C53C447CA57A4CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ca:2b:52:09:10:44:ed:86:20:92:9c:41:3a: 28:8a:e7:17:39:1d:0b:8a:08:74:fc:e6:e7:90:b5: bd:73:81:0c:d5:61:5c:6a:00:d6:9c:c3:72:d2:11: 6a:1c:30:67:04:d9:14:e4:7d:90:4b:7a:49:65:56: a6:d4:57:e6:17:92:a4:e1:5f:40:1b:27:c3:de:bb: 79:37:65:35:bd:27:a4:70:33:07:ad:75:41:cd:a2: f4:1e:59:f7:c9:37:08:4b:11:84:25:c6:03:c4:34: 6a:1c:b7:54:31:e4:41:ef:36:94:95:3c:00:67:ac: 3a:53:45:44:1d:34:9d:4a:35:3c:54:ac:1c:f9:84: 10:fd:5b:46:07:32:af:22:c5:79:49:9e:36:70:2d: be:cd:da:3f:89:88:87:52:2c:17:59:92:24:32:4e: 51:02:d4:28:67:32:6c:19:a5:c4:4a:28:99:f0:a6: ab:f1:ef:a6:27:a8:08:d2:87:46:ac:23:34:87:a1: c4:c5:e3:c5:03:d6:2f:96:cd:84:a7:12:03:39:69: 3e:7e:ec:50:4c:6f:77:59:d2:32:e9:10:90:66:45: b9:84:d1:6d:62:d0:20:4a:2b:33:3c:27:6a:80:41: ef:5b:0f:d7:a0:99:ce:3e:a1:0b:5d:1a:4c:49:8d: ad:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:07:0C:51:E2:CC:74:62:81:9A:EF:25:6C:53:C4:47:CA:57:A4:CA X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:74:02:11:78:93:2d:ac:e7:fd:3c:99:2a:b8:bf:0b:57:b0: db:95:ed:53:0e:1a:f8:3f:a0:69:88:ec:6a:03:27:ac:39:d7: 01:f2:6a:ed:9d:0f:d3:97:37:4b:f9:1e:8b:a0:1f:23:16:ae: 44:30:84:6b:0a:b9:3e:25:e5:46:3f:76:16:1d:68:91:d3:39: f1:3a:a2:85:f2:85:80:ef:13:33:6d:f2:1b:59:99:c2:ef:32: bc:f9:77:86:d9:5c:2f:33:dc:97:3a:df:62:0c:df:79:28:ed: 5e:9b:1f:c3:aa:d4:54:75:71:01:d2:a3:17:65:80:5f:7a:9e: b3:e0:f4:c2:2c:15:cd:f5:71:b5:f4:9f:f5:4d:b9:a5:a4:2c: 7d:26:15:80:96:7f:bc:41:45:17:c9:12:25:af:34:d9:10:7d: 3b:6a:69:ab:9e:d8:a6:ce:72:79:00:d1:63:34:9d:00:34:27: 07:ff:d8:80:04:94:f3:8b:2d:cc:b3:ce:64:50:b7:8e:de:0f: 6a:ae:b9:2b:12:90:75:4b:52:d7:c3:61:d7:82:6b:86:ad:17: e7:3e:12:f0:1b:6f:ee:14:5b:c8:0e:18:b2:8f:8b:23:e2:9d: ce:45:78:32:24:6d:57:b0:18:06:93:ee:1b:be:68:60:12:f6: 16:7f:d1:cd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDaVXnPsjGr33KL7h7VxOJKfD/aUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNTA0MDQxOTE1MjRaFw0yNTA0MDUxOTQ3MjRaMDMxMTAvBgNV BAMTKERFMDcwQzUxRTJDQzc0NjI4MTlBRUYyNTZDNTNDNDQ3Q0E1N0E0Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqyitSCRBE7YYgkpxBOiiK5xc5 HQuKCHT85ueQtb1zgQzVYVxqANacw3LSEWocMGcE2RTkfZBLekllVqbUV+YXkqTh X0AbJ8Peu3k3ZTW9J6RwMwetdUHNovQeWffJNwhLEYQlxgPENGoct1Qx5EHvNpSV PABnrDpTRUQdNJ1KNTxUrBz5hBD9W0YHMq8ixXlJnjZwLb7N2j+JiIdSLBdZkiQy TlEC1ChnMmwZpcRKKJnwpqvx76YnqAjSh0asIzSHocTF48UD1i+WzYSnEgM5aT5+ 7FBMb3dZ0jLpEJBmRbmE0W1i0CBKKzM8J2qAQe9bD9egmc4+oQtdGkxJja2zAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU3gcMUeLMdGKBmu8lbFPER8pXpMowHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02 MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnQCEXiTLazn/TyZKri/ C1ew25XtUw4a+D+gaYjsagMnrDnXAfJq7Z0P05c3S/kei6AfIxauRDCEawq5PiXl Rj92Fh1okdM58TqihfKFgO8TM23yG1mZwu8yvPl3htlcLzPclzrfYgzfeSjtXpsf w6rUVHVxAdKjF2WAX3qes+D0wiwVzfVxtfSf9U25paQsfSYVgJZ/vEFFF8kSJa80 2RB9O2ppq57Yps5yeQDRYzSdADQnB//YgASU84stzLPOZFC3jt4Paq65KxKQdUtS 18Nh14Jrhq0X5z4S8Btv7hRbyA4Yso+LI+KdzkV4MiRtV7AYBpPuG75oYBL2Fn/R zQ== -----END CERTIFICATE-----Generated at Fri Apr 4 22:49:49 2025 by rpki-client