$ rpki-client -vvf rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft File: FF0595CB477C33B6B94C7E477213C842A6067D6B.mft (raw, json) Hash identifier: eNj6cRA1ZeY6qsuVFMCaq1Ip9lcMRLWu0tjWHcx/PaM= Subject key identifier: 0E:04:02:E8:07:6A:C0:04:A9:82:60:06:6F:9C:43:74:67:50:14:A7 Authority key identifier: FF:05:95:CB:47:7C:33:B6:B9:4C:7E:47:72:13:C8:42:A6:06:7D:6B Certificate issuer: /CN=FF0595CB477C33B6B94C7E477213C842A6067D6B Certificate serial: 73A4F231412C211A785BE2D86A095BEC8BAE3C74 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.cer Subject info access: rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft Manifest number: 0554 Signing time: Mon 16 Jun 2025 16:24:13 +0000 Manifest this update: Mon 16 Jun 2025 16:19:13 +0000 Manifest next update: Tue 17 Jun 2025 18:20:13 +0000 Files and hashes: 1: FF0595CB477C33B6B94C7E477213C842A6067D6B.crl (hash: 84AsQZ7ITPJXQWBOlyNlWcZveaDfUR69JFp5UGHANcw=) Validation: OK Signature path: rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.crl rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.cer rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 14:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:a4:f2:31:41:2c:21:1a:78:5b:e2:d8:6a:09:5b:ec:8b:ae:3c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF0595CB477C33B6B94C7E477213C842A6067D6B Validity Not Before: Jun 16 16:19:13 2025 GMT Not After : Jun 17 18:20:13 2025 GMT Subject: CN=0E0402E8076AC004A98260066F9C4374675014A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cf:08:45:52:4d:c9:f9:27:d6:66:17:eb:a7: e4:74:fb:ca:14:72:9e:5f:2d:12:99:72:3b:1e:ca: ab:1a:42:5c:70:15:ab:90:d2:e5:0f:09:0c:db:55: f1:ff:4f:d3:eb:2a:62:06:d3:ff:11:ec:df:93:59: 18:0b:00:57:b6:9f:d7:4a:e4:2c:46:ea:df:2f:89: 59:ad:49:bd:63:27:24:d5:03:d9:c1:df:aa:fa:d4: 52:29:5a:67:2c:5a:4f:65:af:53:bf:77:4f:20:09: a8:97:b0:3e:15:88:15:b7:64:86:a8:13:dc:4a:c8: 0a:9b:22:7d:03:d6:b3:31:e9:6b:5f:c5:59:0e:d6: d5:2a:24:fc:ab:b6:e4:c7:a3:3d:53:d4:ab:5b:cf: 39:5e:3f:d1:4a:13:2f:17:a3:52:37:3d:47:b4:0e: c2:cb:91:6e:24:4a:c3:fa:13:51:31:22:64:1f:19: fa:d8:b6:7e:8c:04:8c:3b:e5:6a:14:64:6c:82:2b: f0:de:05:0b:2d:8b:37:be:31:b4:21:60:6a:b6:1c: 64:f8:56:49:ca:9d:98:a8:87:7a:48:65:08:cd:06: a0:54:50:09:65:f4:ba:6e:4b:ef:4a:41:f3:b9:62: 71:e0:25:77:17:a2:30:7b:08:c9:58:7b:fe:f4:4c: 9c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:04:02:E8:07:6A:C0:04:A9:82:60:06:6F:9C:43:74:67:50:14:A7 X509v3 Authority Key Identifier: keyid:FF:05:95:CB:47:7C:33:B6:B9:4C:7E:47:72:13:C8:42:A6:06:7D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.cer Subject Information Access: Signed Object - URI:rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:81:13:cf:b8:fd:5c:62:6d:ab:13:9c:cb:de:91:b9:ff:99: e2:b7:ca:0d:b0:02:4b:e7:ca:3e:96:22:1c:c9:9d:97:4d:a1: 0c:66:41:64:ac:e7:ec:43:bc:5e:dc:ec:60:f1:7b:a1:fa:7c: 7d:58:83:b6:db:cb:c8:d0:64:b1:42:65:dd:4b:c2:23:3d:84: f8:89:c1:b9:f6:be:74:fe:96:32:6b:32:ee:e1:cf:b7:3f:03: 93:84:c0:05:02:c4:0e:c3:55:4c:b7:ed:6d:87:56:f8:c3:ca: 96:07:65:b6:88:bb:8b:c0:56:42:ff:13:e6:c5:41:92:02:b9: b6:94:c1:1d:e5:d0:d4:57:04:cb:45:38:15:01:6a:68:5c:b7: e4:06:39:6d:00:03:e1:7b:84:6c:30:93:3f:85:b6:c9:1a:e1: 19:1f:32:3f:57:c0:18:c7:5e:ac:23:08:60:de:0b:89:89:6c: 83:c0:83:79:54:7e:b9:21:b5:b1:94:3a:36:e0:5e:fc:5d:b6: fb:51:0d:74:93:35:9c:e0:23:69:34:07:71:d3:0b:ce:4d:3b: 16:4a:b5:9c:fe:69:c4:3d:21:ff:a2:d4:f6:08:3e:59:cf:94: ae:98:ee:79:bc:60:d4:1e:ea:86:5d:df:6d:95:b4:75:62:94: c1:e6:39:fd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUc6TyMUEsIRp4W+LYaglb7IuuPHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYwNTk1Q0I0NzdDMzNCNkI5NEM3RTQ3NzIxM0M4NDJB NjA2N0Q2QjAeFw0yNTA2MTYxNjE5MTNaFw0yNTA2MTcxODIwMTNaMDMxMTAvBgNV BAMTKDBFMDQwMkU4MDc2QUMwMDRBOTgyNjAwNjZGOUM0Mzc0Njc1MDE0QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWzwhFUk3J+SfWZhfrp+R0+8oU cp5fLRKZcjseyqsaQlxwFauQ0uUPCQzbVfH/T9PrKmIG0/8R7N+TWRgLAFe2n9dK 5CxG6t8viVmtSb1jJyTVA9nB36r61FIpWmcsWk9lr1O/d08gCaiXsD4ViBW3ZIao E9xKyAqbIn0D1rMx6WtfxVkO1tUqJPyrtuTHoz1T1KtbzzleP9FKEy8Xo1I3PUe0 DsLLkW4kSsP6E1ExImQfGfrYtn6MBIw75WoUZGyCK/DeBQstize+MbQhYGq2HGT4 VknKnZioh3pIZQjNBqBUUAll9LpuS+9KQfO5YnHgJXcXojB7CMlYe/70TJxjAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUDgQC6AdqwASpgmAGb5xDdGdQFKcwHwYDVR0j BBgwFoAU/wWVy0d8M7a5TH5HchPIQqYGfWswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5xcy5udS9yZXBvL2N5bnRlc3QvMi9G RjA1OTVDQjQ3N0MzM0I2Qjk0QzdFNDc3MjEzQzg0MkE2MDY3RDZCLmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NjZTAwY2Y5LTA0YTUtNDNkMS04Yjg5 LWVkZmE2MGNkOGQ0YS8yL0ZGMDU5NUNCNDc3QzMzQjZCOTRDN0U0NzcyMTNDODQy QTYwNjdENkIuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9ycGtpLnFzLm51L3JlcG8vY3ludGVzdC8yL0ZGMDU5NUNCNDc3QzMzQjZCOTRD N0U0NzcyMTNDODQyQTYwNjdENkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAygRPPuP1cYm2rE5zL3pG5 /5nit8oNsAJL58o+liIcyZ2XTaEMZkFkrOfsQ7xe3Oxg8Xuh+nx9WIO228vI0GSx QmXdS8IjPYT4icG59r50/pYyazLu4c+3PwOThMAFAsQOw1VMt+1th1b4w8qWB2W2 iLuLwFZC/xPmxUGSArm2lMEd5dDUVwTLRTgVAWpoXLfkBjltAAPhe4RsMJM/hbbJ GuEZHzI/V8AYx16sIwhg3guJiWyDwIN5VH65IbWxlDo24F78Xbb7UQ10kzWc4CNp NAdx0wvOTTsWSrWc/mnEPSH/otT2CD5Zz5SumO55vGDUHuqGXd9tlbR1YpTB5jn9 -----END CERTIFICATE-----Generated at Mon Jun 16 18:25:15 2025 by rpki-client