$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.mft File: 6B5432AF3212182697F0E937473AF3EB52E68EA2.mft (raw, json) Hash identifier: 1gmQ5yxSxjG5kLpIa3tXvny0XchVrnIgFdsCMNSMypE= Subject key identifier: 7F:2F:73:70:7B:9B:51:7F:4B:5A:D3:01:89:52:9C:DD:AD:82:2B:5B Authority key identifier: 6B:54:32:AF:32:12:18:26:97:F0:E9:37:47:3A:F3:EB:52:E6:8E:A2 Certificate issuer: /CN=6B5432AF3212182697F0E937473AF3EB52E68EA2 Certificate serial: 58C4E19E99D2A66810C09A38A7144FA35C673677 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.mft Manifest number: 44 Signing time: Sun 27 Apr 2025 19:00:17 +0000 Manifest this update: Sun 27 Apr 2025 18:55:17 +0000 Manifest next update: Mon 28 Apr 2025 22:37:17 +0000 Files and hashes: 1: 326131343a373538303a6330303a3a2f34302d3438203d3e20313938303235.roa (hash: SmK/qRdmMgqpKRzEC7oHEgUtqCIOOpsXebSJKkFh9gk=) 2: 326131343a373538303a6330303a3a2f34302d3438203d3e20313531313934.roa (hash: u8FYHOPbqE1MSDqxryvbkkQVPt9ds3RaHvtwriF25Bo=) 3: 6B5432AF3212182697F0E937473AF3EB52E68EA2.crl (hash: Ar1u2YHA+mB8umJyLoI/oXAet3TRGQv3EEFYBvryyJo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.crl rsync://rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 22:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:c4:e1:9e:99:d2:a6:68:10:c0:9a:38:a7:14:4f:a3:5c:67:36:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B5432AF3212182697F0E937473AF3EB52E68EA2 Validity Not Before: Apr 27 18:55:17 2025 GMT Not After : Apr 28 22:37:17 2025 GMT Subject: CN=7F2F73707B9B517F4B5AD30189529CDDAD822B5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:d5:e0:4a:a5:5c:a2:33:6a:bc:0d:3c:e8: ac:27:7f:09:01:42:91:ef:a8:c0:d7:8f:6f:14:46: b1:31:9f:81:78:43:76:84:32:8f:fe:1f:dd:8f:04: 7c:9d:be:15:3f:9d:e5:ac:d1:f4:92:4e:e4:08:6b: a6:13:c5:d0:7b:07:ff:fb:22:25:30:0c:6b:3b:62: 08:1a:33:0b:05:b1:78:2d:92:d6:0c:7f:6d:94:38: d5:fd:53:6e:81:45:ea:27:a8:20:d1:60:05:fa:ad: a1:e1:99:d9:a1:43:66:db:0d:02:06:c4:05:d6:cd: e9:a6:72:7e:15:31:8a:a0:20:d9:88:0a:71:b3:a4: 60:5b:80:f1:6e:ac:d5:63:8e:0a:1d:7e:20:44:bf: 0d:e5:d3:e4:f4:cd:aa:a7:3e:e4:a1:82:a4:13:20: 8d:87:95:93:8e:e0:5a:d2:f9:80:2f:da:28:db:2d: 2a:ee:b5:ba:48:ea:1d:44:29:dc:c6:39:e9:4c:9b: 93:f3:dd:d4:a9:e6:e5:5c:5c:c6:1a:7c:6d:a7:66: 20:c7:b7:36:52:cb:96:6e:78:29:79:15:b2:3c:aa: 34:0f:96:c6:21:c0:05:3b:48:e5:e5:e8:b6:eb:8d: 91:64:fa:ec:8d:fb:01:12:49:ae:f1:4f:10:bd:e4: a4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2F:73:70:7B:9B:51:7F:4B:5A:D3:01:89:52:9C:DD:AD:82:2B:5B X509v3 Authority Key Identifier: keyid:6B:54:32:AF:32:12:18:26:97:F0:E9:37:47:3A:F3:EB:52:E6:8E:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:71:52:c2:92:9f:5c:bf:77:0b:f0:71:d2:9a:8e:d7:cc:5f: 63:b7:f0:7f:f9:aa:44:46:08:05:51:48:40:c7:5a:cf:76:b5: 53:f5:42:31:c9:99:23:c9:9f:de:c0:c4:e3:a7:af:98:c5:58: bc:54:fc:2a:a1:a7:99:19:6e:4c:99:83:5c:86:66:df:36:5e: 6e:48:2f:c4:92:f4:6c:e2:e1:24:63:50:64:e0:e5:6b:b0:90: 94:3f:e3:9f:85:ac:6d:34:58:54:09:63:fb:ae:e3:58:94:f8: 94:24:e1:b1:f7:db:12:87:68:24:a9:47:da:38:ff:12:40:48: 13:0d:8f:a5:8b:f4:df:23:4a:de:9d:87:f1:85:cf:12:48:16: bc:5e:a6:27:a0:d9:48:d8:a1:ba:b5:9e:f6:e0:c1:2d:f7:b9: 77:ef:67:0b:e9:cd:a3:ad:7c:34:4e:8b:90:c4:96:ca:0c:d5: 17:39:02:44:ed:13:4e:e5:1a:56:a4:fa:1e:93:3f:6c:5b:ad: e3:16:16:d3:d9:36:8e:9a:d4:ce:e4:d8:89:d6:d2:e5:a5:10: 4a:29:13:e2:2a:65:40:f4:d4:a6:e8:21:3c:96:7d:e3:ee:55: bb:6a:da:53:73:e3:1d:29:76:a0:bd:ae:0a:44:88:08:05:c0: de:e0:76:9d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWMThnpnSpmgQwJo4pxRPo1xnNncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1NDMyQUYzMjEyMTgyNjk3RjBFOTM3NDczQUYzRUI1 MkU2OEVBMjAeFw0yNTA0MjcxODU1MTdaFw0yNTA0MjgyMjM3MTdaMDMxMTAvBgNV BAMTKDdGMkY3MzcwN0I5QjUxN0Y0QjVBRDMwMTg5NTI5Q0REQUQ4MjJCNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB19XgSqVcojNqvA086KwnfwkB QpHvqMDXj28URrExn4F4Q3aEMo/+H92PBHydvhU/neWs0fSSTuQIa6YTxdB7B//7 IiUwDGs7YggaMwsFsXgtktYMf22UONX9U26BReonqCDRYAX6raHhmdmhQ2bbDQIG xAXWzemmcn4VMYqgINmICnGzpGBbgPFurNVjjgodfiBEvw3l0+T0zaqnPuShgqQT II2HlZOO4FrS+YAv2ijbLSrutbpI6h1EKdzGOelMm5Pz3dSp5uVcXMYafG2nZiDH tzZSy5ZueCl5FbI8qjQPlsYhwAU7SOXl6LbrjZFk+uyN+wESSa7xTxC95KQdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUfy9zcHubUX9LWtMBiVKc3a2CK1swHwYDVR0j BBgwFoAUa1QyrzISGCaX8Ok3Rzrz61LmjqIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGVmNDI2N2UtZDE0OS00MWU5LWJkOTQtM2M1MTA0M2Qy YzViLzAvNkI1NDMyQUYzMjEyMTgyNjk3RjBFOTM3NDczQUYzRUI1MkU2OEVBMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC82QjU0MzJBRjMyMTIxODI2OTdGMEU5Mzc0 NzNBRjNFQjUyRTY4RUEyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzBlZjQyNjdlLWQxNDktNDFlOS1iZDk0LTNjNTEwNDNkMmM1Yi8wLzZCNTQzMkFG MzIxMjE4MjY5N0YwRTkzNzQ3M0FGM0VCNTJFNjhFQTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC8cVLC kp9cv3cL8HHSmo7XzF9jt/B/+apERggFUUhAx1rPdrVT9UIxyZkjyZ/ewMTjp6+Y xVi8VPwqoaeZGW5MmYNchmbfNl5uSC/EkvRs4uEkY1Bk4OVrsJCUP+OfhaxtNFhU CWP7ruNYlPiUJOGx99sSh2gkqUfaOP8SQEgTDY+li/TfI0renYfxhc8SSBa8XqYn oNlI2KG6tZ724MEt97l372cL6c2jrXw0TouQxJbKDNUXOQJE7RNO5RpWpPoekz9s W63jFhbT2TaOmtTO5NiJ1tLlpRBKKRPiKmVA9NSm6CE8ln3j7lW7atpTc+MdKXag va4KRIgIBcDe4Had -----END CERTIFICATE-----Generated at Mon Apr 28 10:37:58 2025 by rpki-client