$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: eOvSVzpEEvG4wlpv8UN8dda0BBdDe2gvm76D+zetuOY= Subject key identifier: 04:B3:3B:E7:BF:5D:54:7B:32:5E:5A:6E:6A:F1:03:D1:75:EE:65:7C Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 421C7166DAA84D12FB3387AE1C2F17169B54A997 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 034E Signing time: Fri 04 Apr 2025 17:05:42 +0000 Manifest this update: Fri 04 Apr 2025 17:00:42 +0000 Manifest next update: Sat 05 Apr 2025 21:00:42 +0000 Files and hashes: 1: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: nmhaoLhqUBAnDccEuteaqmwjmYCIqjMWJmqWnwMVbc8=) 2: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: 2/naNLsZWsKbctisH+91/rgvttkXh//515D4Dxt3bfg=) 3: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: NZcAKMAEu2FS5Zqz0hBFL7Zpu38dDC8QIhg4PJE0Lh4=) 4: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: pYw0P56zFi4wRkkwvPxK0X9Amc7AuJTA4uP+hbzqcfs=) 5: 39332e3131352e3234382e302f32332d3234203d3e203631333137.roa (hash: 0/T6IoKQBi00uh7Y09G6cYWB2BOwaTjGjtIb2V0Qu7A=) 6: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: PU42k0wAchjpLij07Ins7mvpDktS3c483KnPxGuaf7I=) 7: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: yDRyc1h8O+mXAEgAFoITsNpFI2VU0vygznR0PJDNh0M=) 8: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: OZBNVOvtp3V7O1L8kF6JcTp/niAHFDMwWI3RV/AoyZY=) 9: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: 0WbmVPBd7zgC2SL3Fm8CgtXhup4l1o9yAzuF8bM6PBs=) 10: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: g8GfxZyUsq5sAHB2Ct+7Z9GS7IIVHVNG2gaO8plmjSA=) 11: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: ghJtjkOdvSP9f6K1/P4oVqqUSWvmBGivU3PmXNlfCRM=) 12: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: 67hzJ7+qEviKc+JKiq3KV4OqZ4fSU1BU+NXzASboCBg=) 13: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: YyMBgTPVms4MPnbkUVc7TpGwl6ukB7kzc/uAePl3SRA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:1c:71:66:da:a8:4d:12:fb:33:87:ae:1c:2f:17:16:9b:54:a9:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: Apr 4 17:00:42 2025 GMT Not After : Apr 5 21:00:42 2025 GMT Subject: CN=04B33BE7BF5D547B325E5A6E6AF103D175EE657C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:df:a2:30:5b:fc:1b:f5:08:14:e2:70:a1:06: 08:3c:93:d5:77:90:16:99:56:ce:d8:4a:98:22:ee: 00:9d:d2:4f:8b:f7:c6:25:3b:01:14:ce:a2:26:f5: 84:f8:69:b9:f4:7d:87:f1:f0:b2:f9:b3:9e:52:7d: 6b:26:50:ca:ee:62:71:cc:e2:75:38:5b:fe:77:a2: 27:ef:77:23:c6:dc:86:51:e0:6b:3d:1b:f8:33:b9: 39:ac:61:3e:dd:d3:ab:69:d1:a7:69:bd:c0:94:34: d9:4c:5d:87:7f:59:31:cc:4e:aa:0a:91:e1:01:e1: a1:32:6b:68:09:bc:a9:f5:11:cb:bd:4f:c9:8a:11: 5a:72:b5:53:88:20:a3:a7:21:19:0a:d8:25:07:cd: 75:7a:3d:f0:78:0b:ac:bd:b3:b3:0c:d7:22:f0:be: d7:41:22:1c:de:3c:79:5f:5f:4c:f8:ff:40:3d:dc: 76:6f:2f:ef:c0:50:90:e3:42:3d:0b:22:9b:08:26: 6d:fc:a7:83:d4:81:ee:bf:9f:e4:93:77:54:6b:d1: 00:4b:14:03:8b:3d:a6:bc:88:d2:76:49:09:05:46: 31:1f:b4:3d:72:1c:4f:52:7f:5d:b7:3c:0c:c9:2b: 7f:f8:56:9d:ff:50:a7:5f:40:7e:31:c1:d6:76:9c: 56:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B3:3B:E7:BF:5D:54:7B:32:5E:5A:6E:6A:F1:03:D1:75:EE:65:7C X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:5d:18:bf:1d:a9:04:69:d9:db:71:c7:82:a0:12:85:4b:f3: f3:3f:b6:d6:f0:61:9e:bf:ae:2a:f0:dc:f9:ce:fb:3a:bb:e1: f3:48:f6:69:13:f0:3f:e4:55:ca:83:31:bd:0a:fa:96:5f:31: 75:ef:e7:81:ec:51:85:02:b8:85:aa:73:ca:18:f6:45:e4:b6: ef:a8:7d:db:f5:47:0f:cc:e7:42:73:27:97:d0:5f:66:69:76: 58:f2:75:29:08:6e:24:a9:bc:f8:e3:a8:d0:99:b9:31:70:78: 1e:6d:13:3f:54:ce:69:9f:fe:fd:b4:ec:c0:40:f1:b4:69:7a: bb:f5:0f:f5:13:db:a6:f4:55:7e:df:9d:2a:d3:b5:a8:ed:b3: 02:1c:1c:96:03:4d:e3:b4:16:97:36:b2:ad:82:75:7a:db:91: d6:94:21:9b:aa:99:77:12:1e:21:f2:a4:9a:6f:a3:ea:98:f5: 0c:68:cd:ab:0b:56:d9:e6:b6:d9:17:f3:d2:2c:69:aa:ba:60: 53:dc:c5:a2:f0:f6:2c:ed:4b:66:79:f7:28:33:be:fc:a0:66: e0:55:8f:95:d1:5f:36:cf:09:5d:e5:0f:57:7e:c3:bf:99:88: c7:01:d2:15:98:f8:be:e6:ac:36:c1:01:09:83:68:22:72:a3: 56:e6:c1:8e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQhxxZtqoTRL7M4euHC8XFptUqZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNTA0MDQxNzAwNDJaFw0yNTA0MDUyMTAwNDJaMDMxMTAvBgNV BAMTKDA0QjMzQkU3QkY1RDU0N0IzMjVFNUE2RTZBRjEwM0QxNzVFRTY1N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR36IwW/wb9QgU4nChBgg8k9V3 kBaZVs7YSpgi7gCd0k+L98YlOwEUzqIm9YT4abn0fYfx8LL5s55SfWsmUMruYnHM 4nU4W/53oifvdyPG3IZR4Gs9G/gzuTmsYT7d06tp0adpvcCUNNlMXYd/WTHMTqoK keEB4aEya2gJvKn1Ecu9T8mKEVpytVOIIKOnIRkK2CUHzXV6PfB4C6y9s7MM1yLw vtdBIhzePHlfX0z4/0A93HZvL+/AUJDjQj0LIpsIJm38p4PUge6/n+STd1Rr0QBL FAOLPaa8iNJ2SQkFRjEftD1yHE9Sf123PAzJK3/4Vp3/UKdfQH4xwdZ2nFYvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBLM7579dVHsyXlpuavED0XXuZXwwHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI10Yvx2pBGnZ23HHgqAS hUvz8z+21vBhnr+uKvDc+c77Orvh80j2aRPwP+RVyoMxvQr6ll8xde/ngexRhQK4 hapzyhj2ReS276h92/VHD8znQnMnl9BfZml2WPJ1KQhuJKm8+OOo0Jm5MXB4Hm0T P1TOaZ/+/bTswEDxtGl6u/UP9RPbpvRVft+dKtO1qO2zAhwclgNN47QWlzayrYJ1 etuR1pQhm6qZdxIeIfKkmm+j6pj1DGjNqwtW2ea22Rfz0ixpqrpgU9zFovD2LO1L Znn3KDO+/KBm4FWPldFfNs8JXeUPV37Dv5mIxwHSFZj4vuasNsEBCYNoInKjVubB jg== -----END CERTIFICATE-----Generated at Sat Apr 5 03:48:29 2025 by rpki-client