$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft File: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json) Hash identifier: ABU0N8kS69/Sg9KSjC1FTEgLBID7mmcADbuBRBUstn8= Subject key identifier: 8F:F8:FA:85:04:D1:BE:F7:40:E8:37:BD:2D:0B:96:34:54:D7:D1:37 Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Certificate serial: 72EE612131193877E93AEF69235111F4DF1DC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft Manifest number: 03C9 Signing time: Fri 25 Apr 2025 23:54:56 +0000 Manifest this update: Fri 25 Apr 2025 23:49:56 +0000 Manifest next update: Sun 27 Apr 2025 03:50:56 +0000 Files and hashes: 1: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: ii72WRjo+pDoTtYybgLKaFsOG8JUV0CPdunTnf7/tAg=) 2: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: lxi2m0tJ4IwcIv1Qu/mxuwgzf8BGdtHdxfKNM9mKZEQ=) 3: 34362e3138332e33312e302f32342d3234203d3e20383334.roa (hash: xUsUi3YtopFm9VP8hMqKJ5OknqKCy1oSAbxFuFcm2oA=) 4: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: MBTQi0HOcbTwY/4fQl+vTOHLOQ2FmR/EhBIZ6Dj3u14=) 5: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: 93WlArlicDYcrFXuyD5oQHa3ZB3bdIjadlrADmzUdDQ=) 6: 34362e3138332e32392e302f32342d3234203d3e20313734.roa (hash: iFoLwhPM2dsVM0j9MR72yEvFI7xyXfHeaQDbIOf/NSg=) 7: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: eznERkc7DZbwVr+HCdvBRo/nv4eEoy29a9bx8QDzOz0=) 8: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: yMp4N27BXYFMvxFXpYtEzVI3r3SVHmOz4dCZdlG1vnk=) 9: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: 4jq0qwMJqWtfRUuzz3vPyKHtua4FM5/8Y3cvVGfTKBM=) 10: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: OTzEE0j8HgzayX+RZ1E3AVUH7pezM9fdok3hFGFr83U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 03:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ee:61:21:31:19:38:77:e9:3a:ef:69:23:51:11:f4:df:1d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Validity Not Before: Apr 25 23:49:56 2025 GMT Not After : Apr 27 03:50:56 2025 GMT Subject: CN=8FF8FA8504D1BEF740E837BD2D0B963454D7D137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:52:8b:a8:ad:61:48:35:f8:28:8a:78:a0: 55:d3:4d:8e:ce:0b:9a:a5:28:6e:ad:fb:1e:ba:64: 19:74:7e:a9:af:3c:b3:4a:cb:63:f1:2e:c7:f4:81: a3:a1:cf:36:86:ab:45:f4:cb:98:80:a7:c1:de:81: 07:9e:d1:65:d1:76:1d:f8:cb:24:bc:4b:47:81:24: 76:81:82:6c:bc:2d:41:1f:1e:f4:21:fb:a2:66:ee: c2:f6:16:6e:3d:4d:2f:c8:6d:84:f0:eb:bb:6b:a0: 85:11:49:ee:f3:5d:83:f9:05:00:f6:ea:b3:7a:46: 99:17:94:e6:a6:1b:d5:31:ac:0b:ca:58:3b:72:2f: da:b6:d6:92:0b:32:96:b7:1d:ba:a3:ed:43:28:37: 33:a2:99:30:0c:8f:d4:85:67:cc:17:c5:82:b1:67: f0:ac:67:09:d3:d3:58:5d:6f:a0:39:4b:1a:4b:31: a1:49:9e:90:8e:37:c1:04:49:d3:06:3a:85:cc:01: 91:7f:dd:1e:4b:45:69:12:a6:c1:5f:17:f3:d0:81: f1:e6:ad:bf:c4:54:ce:85:33:2f:5b:a1:f6:e1:a8: f9:13:36:16:29:f7:bb:db:ca:6a:fb:3d:c8:c8:05: 1c:d7:eb:e8:25:27:89:b3:da:dd:58:e2:af:87:52: 97:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F8:FA:85:04:D1:BE:F7:40:E8:37:BD:2D:0B:96:34:54:D7:D1:37 X509v3 Authority Key Identifier: keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f6:c1:7f:25:b1:b6:ce:ab:8f:76:cc:69:40:23:e7:48:b2: 29:5e:c7:4a:8c:c7:af:27:83:8e:3f:5e:d6:e4:40:be:31:f0: 7b:49:3d:fb:72:33:69:11:c7:9f:aa:cd:70:75:50:8e:b7:4d: 93:0f:4d:84:5e:c4:c3:c9:32:8b:92:5e:9c:2b:d2:31:4c:b8: 44:22:c6:39:23:87:1c:f5:b6:fb:33:d8:49:7c:a2:67:9d:ed: 51:87:57:23:e6:6b:83:7e:76:73:88:bb:43:c6:14:29:39:f0: 13:d9:2b:68:b0:25:d0:d5:64:c0:8d:b2:74:89:1f:7e:66:28: 8f:98:36:f5:18:38:c8:46:d1:b9:7a:8e:16:e7:16:5e:6e:3d: ae:30:83:99:e9:5b:66:41:9f:84:53:97:ad:f0:78:04:6d:bb: 05:4f:14:d4:35:2a:c7:d8:37:6d:86:05:5c:22:24:6c:58:d8: ad:2f:87:ae:df:be:ea:53:f0:62:28:12:74:4b:0c:b8:9e:eb: a1:28:b0:f8:7c:e7:e9:5a:c1:4d:37:97:4d:b1:54:6a:c0:e1: 80:50:1a:fd:20:0c:7b:78:bf:5f:0a:22:2f:4b:d4:4b:42:6e: b5:04:e0:d9:c6:c4:d7:de:fd:e4:ac:e5:bd:12:2f:52:3b:f4: a2:43:e3:e3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgITcu5hITEZOHfpOu9pI1ER9N8dxDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygyNGU1Mzc4OGJkNGVmYTIzYjFhODIwN2I3ZTc0YThlMWNj Njc3YjAwMB4XDTI1MDQyNTIzNDk1NloXDTI1MDQyNzAzNTA1NlowMzExMC8GA1UE AxMoOEZGOEZBODUwNEQxQkVGNzQwRTgzN0JEMkQwQjk2MzQ1NEQ3RDEzNzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMCMUouorWFINfgoinigVdNNjs4L mqUobq37HrpkGXR+qa88s0rLY/Eux/SBo6HPNoarRfTLmICnwd6BB57RZdF2HfjL JLxLR4EkdoGCbLwtQR8e9CH7ombuwvYWbj1NL8hthPDru2ughRFJ7vNdg/kFAPbq s3pGmReU5qYb1TGsC8pYO3Iv2rbWkgsylrcduqPtQyg3M6KZMAyP1IVnzBfFgrFn 8KxnCdPTWF1voDlLGksxoUmekI43wQRJ0wY6hcwBkX/dHktFaRKmwV8X89CB8eat v8RUzoUzL1uh9uGo+RM2Fin3u9vKavs9yMgFHNfr6CUnibPa3Vjir4dSl/UCAwEA AaOCAkcwggJDMB0GA1UdDgQWBBSP+PqFBNG+90DoN70tC5Y0VNfRNzAfBgNVHSME GDAWgBQk5TeIvU76I7GoIHt+dKjhzGd7ADAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS8xNmFjYjlhMC02ZDFlLTRhZTQtOTE3Ny1kOTM4ZTk4MDQz OTUvMC8yNEU1Mzc4OEJENEVGQTIzQjFBODIwN0I3RTc0QThFMUNDNjc3QjAwLmNy bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvSk9VM2lMMU8taU94cUNCN2ZuU280Y3hu ZXdBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov L3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzE2YWNiOWEwLTZk MWUtNGFlNC05MTc3LWQ5MzhlOTgwNDM5NS8wLzI0RTUzNzg4QkQ0RUZBMjNCMUE4 MjA3QjdFNzRBOEUxQ0M2NzdCMDAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBS9sF/JbG2zquPdsxpQCPn SLIpXsdKjMevJ4OOP17W5EC+MfB7ST37cjNpEcefqs1wdVCOt02TD02EXsTDyTKL kl6cK9IxTLhEIsY5I4cc9bb7M9hJfKJnne1Rh1cj5muDfnZziLtDxhQpOfAT2Sto sCXQ1WTAjbJ0iR9+ZiiPmDb1GDjIRtG5eo4W5xZebj2uMIOZ6VtmQZ+EU5et8HgE bbsFTxTUNSrH2DdthgVcIiRsWNitL4eu377qU/BiKBJ0Swy4nuuhKLD4fOfpWsFN N5dNsVRqwOGAUBr9IAx7eL9fCiIvS9RLQm61BODZxsTX3v3krOW9Ei9SO/SiQ+Pj -----END CERTIFICATE-----Generated at Sat Apr 26 19:20:17 2025 by rpki-client