$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft File: A4A082EAE8EF48C7B407C40E742479EADD862089.mft (raw, json) Hash identifier: TqqCdUjZJDJM01FqkXXoI0zAV+a3QkF34/QZLWfPym8= Subject key identifier: 1B:EB:44:7D:56:91:04:8D:9C:32:AD:55:CF:07:50:78:0F:7D:D4:16 Authority key identifier: A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 Certificate issuer: /CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Certificate serial: 42F7EC12B3FF0B7C56BEAB46FCA4CCEE70D3E58C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft Manifest number: B5 Signing time: Sun 27 Apr 2025 17:07:40 +0000 Manifest this update: Sun 27 Apr 2025 17:02:40 +0000 Manifest next update: Mon 28 Apr 2025 20:53:40 +0000 Files and hashes: 1: 326130663a383563313a3339303a3a2f34382d3438203d3e20323135343730.roa (hash: /ul2/wI6OjmF90yvjh37x7TtdkRoh3MUQv78SD8t7W0=) 2: A4A082EAE8EF48C7B407C40E742479EADD862089.crl (hash: bZZCBjwdiduU37dj8rn6EhPI0dpQhZqPD1dvJo+auZU=) 3: 326130663a383563313a6234643a3a2f34382d3438203d3e20323133343238.roa (hash: MorJ8/zqWP+ENMZ78Dfg8lahRlU/VfcwHwmQyMuE7hc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f7:ec:12:b3:ff:0b:7c:56:be:ab:46:fc:a4:cc:ee:70:d3:e5:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A082EAE8EF48C7B407C40E742479EADD862089 Validity Not Before: Apr 27 17:02:40 2025 GMT Not After : Apr 28 20:53:40 2025 GMT Subject: CN=1BEB447D5691048D9C32AD55CF0750780F7DD416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cb:b2:1c:da:a0:5b:01:64:96:5c:17:d3:6b: a1:c9:01:00:80:4e:7e:11:d7:19:a6:b4:dd:12:d3: b4:3b:a2:d6:ab:35:ac:23:aa:64:6b:d2:02:af:55: 06:ac:95:38:0f:ea:cd:b0:ae:43:28:8a:82:a9:fd: 77:65:25:ac:59:ce:66:8e:66:af:c2:a5:ee:e5:a7: 33:3a:d5:ac:74:a0:6c:cf:f8:05:83:7e:0f:fa:df: 30:6d:8c:46:83:11:35:8a:43:2f:70:9a:65:c6:91: e8:ef:5e:53:e3:71:0d:3d:63:69:c5:8a:8f:43:66: 73:db:92:73:1e:d5:79:1b:f0:a6:98:64:24:65:e3: ee:f7:44:a2:93:cc:53:c8:f9:b4:f0:61:54:99:f3: ec:4a:2f:b7:ed:b2:44:ce:d9:43:16:ae:9c:82:09: 3e:13:d8:5b:27:bc:db:3c:c9:c0:6a:69:49:0e:1b: b2:a5:32:05:90:9d:a2:77:99:6d:6d:fe:d4:43:71: ad:0a:bf:14:35:31:8c:c1:95:af:f4:ba:eb:9f:df: f5:51:86:8d:98:f1:c3:8d:9e:84:aa:10:7c:a8:e6: a6:2b:28:22:c9:70:70:e3:9d:fa:4b:ba:89:33:e5: cf:8b:29:1d:aa:e5:59:a5:53:30:90:0a:5b:76:29: 1c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EB:44:7D:56:91:04:8D:9C:32:AD:55:CF:07:50:78:0F:7D:D4:16 X509v3 Authority Key Identifier: keyid:A4:A0:82:EA:E8:EF:48:C7:B4:07:C4:0E:74:24:79:EA:DD:86:20:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/A4A082EAE8EF48C7B407C40E742479EADD862089.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/1/A4A082EAE8EF48C7B407C40E742479EADD862089.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:41:0e:b6:b1:52:18:86:27:b7:84:fa:91:3b:95:0c:f9:bc: f7:38:0c:7f:40:1c:34:0b:fe:35:dc:71:d2:9f:06:ce:4e:16: 2f:81:89:3e:ba:89:d2:09:fe:bb:eb:f5:81:ec:b8:3d:38:81: ed:23:bc:98:df:6f:5c:f5:3b:6a:6a:b0:41:ce:2f:3e:2b:30: e6:53:a9:ef:fa:de:f3:f4:bc:05:f0:e8:ea:10:69:39:4c:74: b5:36:a1:c4:2d:ef:6d:80:b7:93:45:c5:ed:b4:da:13:d7:0d: 5a:4e:5f:3c:77:82:07:0b:46:c8:ec:94:61:c6:86:11:40:e7: ba:f7:a8:0a:1e:4e:aa:fd:90:95:6b:5d:8e:35:a5:84:24:3a: fe:71:72:84:f6:1b:7f:9f:ee:bd:64:27:73:d3:eb:13:ff:20: 9f:f6:b2:13:7f:ad:d7:6b:c9:a4:01:ed:10:c9:41:de:5c:1b: e4:69:f1:84:52:3f:b0:17:65:70:80:09:fe:03:d1:48:87:72: 83:8f:7a:92:52:2d:99:20:56:8e:78:4f:57:38:ff:0a:81:32: ab:f5:43:2b:7b:12:1a:1a:90:84:eb:84:5a:64:86:86:59:94: 54:b4:17:1b:58:e2:c1:49:3f:a9:ab:cf:50:d9:4b:47:0f:3c: ae:55:02:f4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQvfsErP/C3xWvqtG/KTM7nDT5YwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFE RDg2MjA4OTAeFw0yNTA0MjcxNzAyNDBaFw0yNTA0MjgyMDUzNDBaMDMxMTAvBgNV BAMTKDFCRUI0NDdENTY5MTA0OEQ5QzMyQUQ1NUNGMDc1MDc4MEY3REQ0MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUy7Ic2qBbAWSWXBfTa6HJAQCA Tn4R1xmmtN0S07Q7otarNawjqmRr0gKvVQaslTgP6s2wrkMoioKp/XdlJaxZzmaO Zq/Cpe7lpzM61ax0oGzP+AWDfg/63zBtjEaDETWKQy9wmmXGkejvXlPjcQ09Y2nF io9DZnPbknMe1Xkb8KaYZCRl4+73RKKTzFPI+bTwYVSZ8+xKL7ftskTO2UMWrpyC CT4T2FsnvNs8ycBqaUkOG7KlMgWQnaJ3mW1t/tRDca0KvxQ1MYzBla/0uuuf3/VR ho2Y8cONnoSqEHyo5qYrKCLJcHDjnfpLuokz5c+LKR2q5VmlUzCQClt2KRwpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUG+tEfVaRBI2cMq1VzwdQeA991BYwHwYDVR0j BBgwFoAUpKCC6ujvSMe0B8QOdCR56t2GIIkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzEvQTRBMDgyRUFFOEVGNDhDN0I0MDdDNDBFNzQyNDc5RUFERDg2MjA4OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9BNEEwODJFQUU4RUY0OEM3QjQwN0M0MEU3 NDI0NzlFQUREODYyMDg5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8xL0E0QTA4MkVB RThFRjQ4QzdCNDA3QzQwRTc0MjQ3OUVBREQ4NjIwODkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBPQQ62 sVIYhie3hPqRO5UM+bz3OAx/QBw0C/413HHSnwbOThYvgYk+uonSCf676/WB7Lg9 OIHtI7yY329c9TtqarBBzi8+KzDmU6nv+t7z9LwF8OjqEGk5THS1NqHELe9tgLeT RcXttNoT1w1aTl88d4IHC0bI7JRhxoYRQOe696gKHk6q/ZCVa12ONaWEJDr+cXKE 9ht/n+69ZCdz0+sT/yCf9rITf63Xa8mkAe0QyUHeXBvkafGEUj+wF2VwgAn+A9FI h3KDj3qSUi2ZIFaOeE9XOP8KgTKr9UMrexIaGpCE64RaZIaGWZRUtBcbWOLBST+p q89Q2UtHDzyuVQL0 -----END CERTIFICATE-----Generated at Mon Apr 28 02:15:35 2025 by rpki-client