$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.mft File: F861C17CCC63A8FE4F54B725229D4182E376702E.mft (raw, json) Hash identifier: raiPcqyzIX8RYH9+NPizyZReTXKT1S+nd6u8pB/w54E= Subject key identifier: 15:0D:13:EA:6C:84:64:D4:DE:DF:58:55:A1:A8:66:97:F7:B8:03:49 Authority key identifier: F8:61:C1:7C:CC:63:A8:FE:4F:54:B7:25:22:9D:41:82:E3:76:70:2E Certificate issuer: /CN=F861C17CCC63A8FE4F54B725229D4182E376702E Certificate serial: 19733254F056CB73046EE776F9C76FA8239EFD95 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F861C17CCC63A8FE4F54B725229D4182E376702E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.mft Manifest number: 34 Signing time: Mon 28 Apr 2025 23:51:20 +0000 Manifest this update: Mon 28 Apr 2025 23:46:20 +0000 Manifest next update: Wed 30 Apr 2025 02:33:20 +0000 Files and hashes: 1: F861C17CCC63A8FE4F54B725229D4182E376702E.crl (hash: gOW2yCltK2F9++D2r5OKH293E467YdwUxv4HV52ujGw=) 2: 326131343a373538303a373030303a3a2f33362d3336203d3e20323135313038.roa (hash: nEpVXZ4G7eLeVLBw2JFUizV21nv5AkYeo88InoKYBm4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.crl rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F861C17CCC63A8FE4F54B725229D4182E376702E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 17:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:73:32:54:f0:56:cb:73:04:6e:e7:76:f9:c7:6f:a8:23:9e:fd:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F861C17CCC63A8FE4F54B725229D4182E376702E Validity Not Before: Apr 28 23:46:20 2025 GMT Not After : Apr 30 02:33:20 2025 GMT Subject: CN=150D13EA6C8464D4DEDF5855A1A86697F7B80349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:15:2a:29:aa:cb:d2:c5:d8:8f:77:d3:fc:f4: 20:79:a9:61:a8:b4:2c:03:1a:df:9a:18:9d:62:28: e9:b8:5e:d4:ad:6e:8d:e9:67:ea:ae:8b:06:00:58: 7c:3f:24:ae:5a:15:b4:9a:b6:b2:57:67:9d:3d:b3: d9:e6:ed:8f:00:a7:33:a6:b9:8c:f7:fa:49:74:ec: 0e:d8:a8:3c:54:72:ab:7b:28:7d:c0:d7:48:66:21: 44:92:cb:82:ee:89:e9:35:de:43:b9:4c:fb:b2:ff: f4:9e:0e:bc:da:39:b1:5f:eb:8e:8a:a0:c5:af:72: 17:87:a3:23:74:74:3a:ec:05:5a:dc:75:c0:f6:5e: df:72:75:d2:29:7a:8d:08:d3:f4:f1:4f:f9:0a:22: 94:36:3c:bb:02:a8:cf:8a:59:ca:f1:39:29:79:b4: 01:9e:df:1b:10:f6:61:40:04:c2:92:a2:63:cd:f7: 37:e9:b8:86:a3:cb:49:ce:e3:d6:80:e0:9f:b1:f6: ba:88:d8:88:8d:19:76:5d:f9:aa:f1:79:ad:c1:32: 9c:f5:62:64:bc:72:3f:5d:4f:7e:d9:1b:07:5d:35: 4d:bb:81:8e:f7:a3:69:34:fb:14:f4:65:ee:83:b0: 94:90:cf:52:a8:19:17:55:20:db:55:24:90:f5:18: af:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0D:13:EA:6C:84:64:D4:DE:DF:58:55:A1:A8:66:97:F7:B8:03:49 X509v3 Authority Key Identifier: keyid:F8:61:C1:7C:CC:63:A8:FE:4F:54:B7:25:22:9D:41:82:E3:76:70:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F861C17CCC63A8FE4F54B725229D4182E376702E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:cd:f9:2d:dd:71:51:a1:8c:37:8e:e0:1c:7c:57:3c:75:d9: c0:98:22:e0:51:2a:07:19:06:67:b1:5b:ca:ed:73:c0:59:67: 71:26:27:0b:61:36:b4:24:bb:38:07:6d:52:53:63:1b:b0:7f: 6a:8d:91:c0:e8:80:d5:69:31:07:77:9f:58:c3:d5:84:2f:50: 10:dc:3e:50:9d:48:89:01:51:9b:24:91:c4:92:0c:92:60:5f: a0:0a:af:69:4c:4a:ae:21:39:04:d9:13:3a:51:25:0e:db:b6: 0c:ff:69:24:ba:d4:1b:f4:1c:90:f7:9d:9c:4c:36:49:67:9e: 25:47:d7:e3:5c:4a:3f:d7:bc:36:84:4f:99:19:5f:60:82:f6: c9:38:51:96:9f:1c:f7:9d:a7:4a:cd:f0:49:d4:35:bd:45:f7: 50:33:2c:87:9f:36:db:52:41:26:2b:89:92:27:55:f8:5d:71: c8:46:7c:31:44:d3:13:b4:d6:cd:c6:d5:37:0a:0c:2c:a7:91: 34:48:66:0a:9e:bf:20:64:81:6a:de:4c:63:70:ef:a8:90:f2: 31:cf:23:bc:23:55:6b:72:a5:79:f7:82:7d:dd:01:ee:7b:2d: a9:58:49:3a:44:aa:27:88:17:3e:61:d7:a5:27:c2:c1:fd:64: 61:b7:e2:b9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGXMyVPBWy3MEbud2+cdvqCOe/ZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg2MUMxN0NDQzYzQThGRTRGNTRCNzI1MjI5RDQxODJF Mzc2NzAyRTAeFw0yNTA0MjgyMzQ2MjBaFw0yNTA0MzAwMjMzMjBaMDMxMTAvBgNV BAMTKDE1MEQxM0VBNkM4NDY0RDRERURGNTg1NUExQTg2Njk3RjdCODAzNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEFSopqsvSxdiPd9P89CB5qWGo tCwDGt+aGJ1iKOm4XtStbo3pZ+quiwYAWHw/JK5aFbSatrJXZ509s9nm7Y8ApzOm uYz3+kl07A7YqDxUcqt7KH3A10hmIUSSy4Luiek13kO5TPuy//SeDrzaObFf646K oMWvcheHoyN0dDrsBVrcdcD2Xt9yddIpeo0I0/TxT/kKIpQ2PLsCqM+KWcrxOSl5 tAGe3xsQ9mFABMKSomPN9zfpuIajy0nO49aA4J+x9rqI2IiNGXZd+arxea3BMpz1 YmS8cj9dT37ZGwddNU27gY73o2k0+xT0Ze6DsJSQz1KoGRdVINtVJJD1GK/PAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFQ0T6myEZNTe31hVoahml/e4A0kwHwYDVR0j BBgwFoAU+GHBfMxjqP5PVLclIp1BguN2cC4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTAyOGVjZGUtMmJiYS00ZTQ2LWEyNDUtZmJjODFkNWMx NDMyLzAvRjg2MUMxN0NDQzYzQThGRTRGNTRCNzI1MjI5RDQxODJFMzc2NzAyRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GODYxQzE3Q0NDNjNBOEZFNEY1NEI3MjUy MjlENDE4MkUzNzY3MDJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEwMjhlY2RlLTJiYmEtNGU0Ni1hMjQ1LWZiYzgxZDVjMTQzMi8wL0Y4NjFDMTdD Q0M2M0E4RkU0RjU0QjcyNTIyOUQ0MTgyRTM3NjcwMkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCCzfkt 3XFRoYw3juAcfFc8ddnAmCLgUSoHGQZnsVvK7XPAWWdxJicLYTa0JLs4B21SU2Mb sH9qjZHA6IDVaTEHd59Yw9WEL1AQ3D5QnUiJAVGbJJHEkgySYF+gCq9pTEquITkE 2RM6USUO27YM/2kkutQb9ByQ952cTDZJZ54lR9fjXEo/17w2hE+ZGV9ggvbJOFGW nxz3nadKzfBJ1DW9RfdQMyyHnzbbUkEmK4mSJ1X4XXHIRnwxRNMTtNbNxtU3Cgws p5E0SGYKnr8gZIFq3kxjcO+okPIxzyO8I1VrcqV594J93QHuey2pWEk6RKoniBc+ YdelJ8LB/WRht+K5 -----END CERTIFICATE-----Generated at Tue Apr 29 08:29:41 2025 by rpki-client