$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/6EC74C12BEB63E6D47484ACE255EC241A80F5486.mft File: 6EC74C12BEB63E6D47484ACE255EC241A80F5486.mft (raw, json) Hash identifier: xHecbMtLWONQwGwAI5QL1wCVgmBZ5q37EGOmrTt047g= Subject key identifier: 6D:27:F7:95:1F:DF:9B:C2:9F:E7:DC:7D:F6:91:00:82:F6:77:02:6F Authority key identifier: 6E:C7:4C:12:BE:B6:3E:6D:47:48:4A:CE:25:5E:C2:41:A8:0F:54:86 Certificate issuer: /CN=6EC74C12BEB63E6D47484ACE255EC241A80F5486 Certificate serial: 5F14D1B129D69BF840D7C1DE821401CA57F68473 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/6EC74C12BEB63E6D47484ACE255EC241A80F5486.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/6EC74C12BEB63E6D47484ACE255EC241A80F5486.mft Manifest number: 33 Signing time: Mon 28 Apr 2025 07:06:53 +0000 Manifest this update: Mon 28 Apr 2025 07:01:53 +0000 Manifest next update: Tue 29 Apr 2025 08:38:53 +0000 Files and hashes: 1: 6EC74C12BEB63E6D47484ACE255EC241A80F5486.crl (hash: c3J9AP2tww3C3tBFOFsOUkMvSllAzeh5dKFkbyQTA44=) 2: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (hash: 3qXl5FbKnzkRN6THBxhJGfWR/NW3B6cW7HVh5EatIt4=) 3: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (hash: kLshiO0rOW+ggqCV108F0+7nFme7ukmop3yjQDLvDOs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/6EC74C12BEB63E6D47484ACE255EC241A80F5486.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/6EC74C12BEB63E6D47484ACE255EC241A80F5486.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/6EC74C12BEB63E6D47484ACE255EC241A80F5486.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 08:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:14:d1:b1:29:d6:9b:f8:40:d7:c1:de:82:14:01:ca:57:f6:84:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EC74C12BEB63E6D47484ACE255EC241A80F5486 Validity Not Before: Apr 28 07:01:53 2025 GMT Not After : Apr 29 08:38:53 2025 GMT Subject: CN=6D27F7951FDF9BC29FE7DC7DF6910082F677026F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:56:f9:b6:5c:ea:c8:1b:60:94:be:2d:22:c4: 80:95:73:e5:73:ba:5a:d2:17:71:3a:57:83:ed:f8: 0c:a9:db:e8:65:8e:fc:16:84:e4:41:1b:c9:0e:b5: d7:74:35:5f:4d:3f:2d:a3:38:de:1f:e9:94:98:c0: b6:56:9d:b6:d8:2e:7a:7e:4f:3e:6c:90:e8:2d:98: 8e:7f:dc:43:6a:e0:b1:15:2e:6e:61:e6:71:69:61: 55:98:e7:a2:5a:60:c2:6a:26:57:fd:eb:39:f7:fe: ac:8c:32:bf:76:96:7f:18:97:c6:88:3f:b1:59:d4: 9e:85:21:de:4b:c0:3b:f2:bb:65:bc:f5:9c:0f:49: c7:c6:27:ea:21:e7:63:32:49:4e:dd:66:46:4b:cd: 48:59:91:80:b1:8c:b9:e9:ab:84:3c:26:6e:bd:51: f9:03:38:97:72:d0:1d:70:0f:40:bb:e7:0b:e3:ed: 6c:c9:ac:0f:b8:0b:0d:eb:20:80:c1:3f:d8:5b:8c: 14:2f:5f:0a:b3:fa:b6:17:fe:03:69:25:a7:3b:fb: 85:fa:44:50:f1:a0:ce:47:e1:81:c5:7b:46:92:8f: f7:d0:1b:c0:7e:7f:31:cb:50:f8:27:30:40:68:04: 43:4a:c1:f1:1d:55:e2:6c:dc:f4:8a:2e:da:c6:0d: 2f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:27:F7:95:1F:DF:9B:C2:9F:E7:DC:7D:F6:91:00:82:F6:77:02:6F X509v3 Authority Key Identifier: keyid:6E:C7:4C:12:BE:B6:3E:6D:47:48:4A:CE:25:5E:C2:41:A8:0F:54:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/6EC74C12BEB63E6D47484ACE255EC241A80F5486.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/6EC74C12BEB63E6D47484ACE255EC241A80F5486.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/5/6EC74C12BEB63E6D47484ACE255EC241A80F5486.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:c9:d7:64:c1:1a:36:90:22:df:bd:ed:bb:cd:94:a7:60:31: a4:dc:e5:c6:ba:9a:57:cd:30:ed:8a:25:a9:8b:5f:ce:07:c2: 23:37:1b:02:d7:ff:b3:b9:bb:5f:b9:b2:e7:23:61:8f:bd:ab: dc:3a:a2:f5:78:8e:7e:4d:bd:69:6c:de:6f:fb:73:2c:b6:3d: e0:27:2d:77:c2:6d:d7:39:5c:f5:8b:e6:05:80:9b:82:4f:bf: 7f:25:e3:a6:d8:60:12:60:a1:6a:9e:c6:d7:1d:53:71:61:2c: 72:f4:91:fb:f7:3f:62:2d:a9:3a:37:23:a0:bb:37:04:62:7a: ca:e5:8c:cf:da:d6:3c:99:9e:36:b5:c2:09:11:3f:d5:89:19: 69:fc:bd:0b:05:7a:1c:1f:c9:06:49:54:a4:1b:b0:4d:fd:5e: 80:ad:78:0d:7d:e5:0f:cb:07:7b:27:d9:8f:81:b9:aa:ee:3f: 27:57:cd:4e:ef:f0:aa:0b:37:d3:3f:7c:4a:72:ee:77:44:dc: 38:53:ea:36:a2:a4:25:52:16:7e:ca:46:16:4c:28:1c:0c:c3: 52:db:05:a1:35:99:bf:bf:e0:f8:cb:23:c1:a0:c6:db:a2:55: ed:09:a9:80:7f:0f:a3:0b:80:41:96:89:0b:91:7a:7d:ad:32: 68:bb:a6:5b -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUXxTRsSnWm/hA18HeghQBylf2hHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVDNzRDMTJCRUI2M0U2RDQ3NDg0QUNFMjU1RUMyNDFB ODBGNTQ4NjAeFw0yNTA0MjgwNzAxNTNaFw0yNTA0MjkwODM4NTNaMDMxMTAvBgNV BAMTKDZEMjdGNzk1MUZERjlCQzI5RkU3REM3REY2OTEwMDgyRjY3NzAyNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxVvm2XOrIG2CUvi0ixICVc+Vz ulrSF3E6V4Pt+Ayp2+hljvwWhORBG8kOtdd0NV9NPy2jON4f6ZSYwLZWnbbYLnp+ Tz5skOgtmI5/3ENq4LEVLm5h5nFpYVWY56JaYMJqJlf96zn3/qyMMr92ln8Yl8aI P7FZ1J6FId5LwDvyu2W89ZwPScfGJ+oh52MySU7dZkZLzUhZkYCxjLnpq4Q8Jm69 UfkDOJdy0B1wD0C75wvj7WzJrA+4Cw3rIIDBP9hbjBQvXwqz+rYX/gNpJac7+4X6 RFDxoM5H4YHFe0aSj/fQG8B+fzHLUPgnMEBoBENKwfEdVeJs3PSKLtrGDS+lAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUbSf3lR/fm8Kf59x99pEAgvZ3Am8wHwYDVR0j BBgwFoAUbsdMEr62Pm1HSErOJV7CQagPVIYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzUvNkVDNzRDMTJCRUI2M0U2RDQ3NDg0QUNFMjU1RUMyNDFBODBGNTQ4Ni5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNkVDNzRDMTJCRUI2M0U2RDQ3NDg0QUNFMjU1RUMyNDFBODBG NTQ4Ni5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1l NWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvNS82RUM3NEMxMkJFQjYzRTZENDc0 ODRBQ0UyNTVFQzI0MUE4MEY1NDg2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsnXZMEaNpAi373tu82U p2AxpNzlxrqaV80w7YolqYtfzgfCIzcbAtf/s7m7X7my5yNhj72r3Dqi9XiOfk29 aWzeb/tzLLY94Cctd8Jt1zlc9YvmBYCbgk+/fyXjpthgEmChap7G1x1TcWEscvSR +/c/Yi2pOjcjoLs3BGJ6yuWMz9rWPJmeNrXCCRE/1YkZafy9CwV6HB/JBklUpBuw Tf1egK14DX3lD8sHeyfZj4G5qu4/J1fNTu/wqgs30z98SnLud0TcOFPqNqKkJVIW fspGFkwoHAzDUtsFoTWZv7/g+MsjwaDG26JV7QmpgH8PowuAQZaJC5F6fa0yaLum Ww== -----END CERTIFICATE-----Generated at Mon Apr 28 22:54:23 2025 by rpki-client