$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: C9hGd0lWc0+X8vtZkxYVYVSPDQ2Gwix0c6ngA/ITBjQ= Subject key identifier: B8:7F:DA:86:30:97:10:C7:34:6F:26:BD:06:B0:B9:DE:F8:69:1C:28 Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 5F5861AA69E9FDC4C4038C92BADEFD55B434094C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: 1D Signing time: Sun 27 Apr 2025 21:41:49 +0000 Manifest this update: Sun 27 Apr 2025 21:36:49 +0000 Manifest next update: Tue 29 Apr 2025 01:35:49 +0000 Files and hashes: 1: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: BFT8GbG7CSJ9YmzS1PjnMDrg1nwAcfXEJPEfuo5FzQk=) 2: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: XxS9zprV7IX1JjrBQQ+JptkD2bW89WKl615fH9J1hzc=) 3: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: CT4eFoRg3ki7VftK+qGYCAIUehVzWWpnllG5NmzRWJ0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 23:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:58:61:aa:69:e9:fd:c4:c4:03:8c:92:ba:de:fd:55:b4:34:09:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Apr 27 21:36:49 2025 GMT Not After : Apr 29 01:35:49 2025 GMT Subject: CN=B87FDA86309710C7346F26BD06B0B9DEF8691C28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9c:f8:32:26:9a:6e:b2:62:8b:0d:61:51:66: 78:fc:41:0f:15:e5:39:ae:9b:d5:6f:8c:39:04:d9: 78:40:47:35:e1:92:2b:bf:30:a3:23:bc:b6:28:21: c8:1a:10:1e:e9:e2:95:e9:3f:5c:f4:b2:07:97:27: 2b:17:62:42:be:02:d8:95:95:d8:79:d9:00:5b:c9: 04:b1:ed:27:d6:be:ef:48:d2:0b:9c:cb:6e:41:9a: 47:0f:d6:6e:8b:c4:0b:51:37:22:61:b5:51:dd:2d: 4f:7f:26:bd:b6:38:8e:48:e5:87:a5:9a:81:c0:9b: f9:95:13:f4:60:36:7d:c1:37:52:7d:50:cd:6a:dc: e2:8e:03:29:5e:d1:f3:a7:3d:e1:ec:d9:95:01:a2: 92:89:55:8a:8b:99:a3:b9:8e:3f:f5:27:24:3a:ac: 66:04:92:ca:3a:68:a4:f6:92:be:ae:68:65:c3:fc: eb:e5:48:39:d7:0f:7b:b2:05:9b:c5:1b:a3:41:40: 19:df:82:5d:26:a5:fe:4a:35:80:b8:b9:9d:a7:d7: 99:e3:60:86:4c:67:38:91:e0:ed:d6:b6:af:83:dd: 9d:48:15:c2:58:54:68:96:a2:5d:8d:16:43:00:3f: db:31:37:7f:f8:45:e6:f5:8d:52:40:5c:96:12:aa: 42:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7F:DA:86:30:97:10:C7:34:6F:26:BD:06:B0:B9:DE:F8:69:1C:28 X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:2e:81:f3:55:ac:1e:ab:4a:13:e8:9d:e3:50:99:0c:cd:d1: 14:aa:72:0e:76:02:8a:c9:c1:49:0e:3d:34:c5:d9:92:1d:12: d9:a4:d9:c6:a5:94:e6:bd:59:21:6c:f9:6b:31:dd:72:11:aa: 21:c0:57:41:5d:1d:ad:66:7f:0f:4f:41:9f:bb:18:16:e8:c1: ef:03:5d:1b:9d:d4:31:34:e9:71:08:5f:ba:65:2e:1c:a4:c3: cc:8d:57:f9:85:91:7c:15:71:7f:14:64:e0:ad:82:79:94:cf: 10:94:06:45:a4:b6:42:d7:bc:de:1f:1f:f7:0b:92:99:cc:9f: 81:83:27:21:6c:c4:93:4e:51:3d:b2:b4:8f:8d:51:a2:06:d1: f4:99:b6:60:e2:f7:1f:c7:69:8f:e3:0b:4b:44:39:9e:09:76: 70:19:41:84:59:a5:2d:e8:e2:a6:ee:4d:c2:01:98:b2:d7:80: 05:fa:c2:bb:42:fd:81:d1:59:25:47:a8:df:13:12:3d:d5:4b: ad:cd:1c:91:2a:ed:3e:56:dc:53:0c:50:c0:82:c8:cf:8e:f5: 97:6d:f5:94:d9:76:ad:b0:e7:e2:6c:59:2e:bc:c0:d2:e6:8c: 29:c9:b1:79:23:ef:61:aa:ff:54:3b:73:00:bb:30:4e:32:26: 1a:55:c0:2f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUX1hhqmnp/cTEA4ySut79VbQ0CUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNTA0MjcyMTM2NDlaFw0yNTA0MjkwMTM1NDlaMDMxMTAvBgNV BAMTKEI4N0ZEQTg2MzA5NzEwQzczNDZGMjZCRDA2QjBCOURFRjg2OTFDMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQnPgyJppusmKLDWFRZnj8QQ8V 5Tmum9VvjDkE2XhARzXhkiu/MKMjvLYoIcgaEB7p4pXpP1z0sgeXJysXYkK+AtiV ldh52QBbyQSx7SfWvu9I0gucy25BmkcP1m6LxAtRNyJhtVHdLU9/Jr22OI5I5Yel moHAm/mVE/RgNn3BN1J9UM1q3OKOAyle0fOnPeHs2ZUBopKJVYqLmaO5jj/1JyQ6 rGYEkso6aKT2kr6uaGXD/OvlSDnXD3uyBZvFG6NBQBnfgl0mpf5KNYC4uZ2n15nj YIZMZziR4O3Wtq+D3Z1IFcJYVGiWol2NFkMAP9sxN3/4Reb1jVJAXJYSqkI/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUuH/ahjCXEMc0bya9BrC53vhpHCgwHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBLoHz Vaweq0oT6J3jUJkMzdEUqnIOdgKKycFJDj00xdmSHRLZpNnGpZTmvVkhbPlrMd1y EaohwFdBXR2tZn8PT0GfuxgW6MHvA10bndQxNOlxCF+6ZS4cpMPMjVf5hZF8FXF/ FGTgrYJ5lM8QlAZFpLZC17zeHx/3C5KZzJ+BgychbMSTTlE9srSPjVGiBtH0mbZg 4vcfx2mP4wtLRDmeCXZwGUGEWaUt6OKm7k3CAZiy14AF+sK7Qv2B0VklR6jfExI9 1UutzRyRKu0+VtxTDFDAgsjPjvWXbfWU2XatsOfibFkuvMDS5owpybF5I+9hqv9U O3MAuzBOMiYaVcAv -----END CERTIFICATE-----Generated at Mon Apr 28 09:17:34 2025 by rpki-client