$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft File: 847138B5401830B89B52403C777718BB40B2B6B5.mft (raw, json) Hash identifier: amDzpKgliSrr+t/e1Vo7fC8BuVdjkaFAxEzbWHcOYoQ= Subject key identifier: 87:07:B9:8B:E6:CC:77:78:2E:6A:AC:49:93:DB:67:5F:B5:5F:F9:32 Authority key identifier: 84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5 Certificate issuer: /CN=847138B5401830B89B52403C777718BB40B2B6B5 Certificate serial: 225FE97482A5DC44F3F2CBE49E3F322C0C4171AF Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft Manifest number: 04D7 Signing time: Mon 28 Apr 2025 03:19:54 +0000 Manifest this update: Mon 28 Apr 2025 03:14:54 +0000 Manifest next update: Tue 29 Apr 2025 06:08:54 +0000 Files and hashes: 1: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: lqIlXTFIWSBiRqL977xA8LwWmhjqpimo3uxiYjVeS/M=) 2: 847138B5401830B89B52403C777718BB40B2B6B5.crl (hash: bAExfd0l8n4TY3f/L7RcsgpBZhgutFB4llM2wDBzax8=) 3: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: nMmiIj2RlJjYPT/1+XLEzvCEDF/otDgwrHV2q/RTde4=) 4: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: B/V5ud+StvDXjqEGvB3k810Cv5LJwyUE9nhfaTbPqMk=) 5: BE8A7AC02556C14368364036D5427F53187B6D9D.cer (hash: DgZZLJZ9Eml763gunc/aU0nCab1SiHrkxw0oRdopVbY=) 6: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: HYPQYH9q04uUtQ2nRIqre2hb3Qbqb6C2ZO6Rxb9EvzQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 06:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:5f:e9:74:82:a5:dc:44:f3:f2:cb:e4:9e:3f:32:2c:0c:41:71:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847138B5401830B89B52403C777718BB40B2B6B5 Validity Not Before: Apr 28 03:14:54 2025 GMT Not After : Apr 29 06:08:54 2025 GMT Subject: CN=8707B98BE6CC77782E6AAC4993DB675FB55FF932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:7e:93:89:cf:d4:0d:76:04:c8:6f:50:33: 5d:cc:16:06:23:f7:1a:23:62:bd:94:00:43:c0:55: 48:88:72:33:da:b2:df:5d:8f:37:b7:39:fb:75:c9: 54:c0:fa:0c:df:8e:67:51:e2:90:17:73:df:69:ad: 11:22:25:29:bb:0c:5e:14:52:26:f7:74:ce:8d:f8: b5:98:7f:95:69:07:53:4f:75:44:23:13:38:d8:25: b4:d3:0b:0a:91:9c:f7:37:a8:91:1b:ff:ab:9f:6a: 12:77:53:c6:98:ed:1f:fe:94:3e:48:3e:2c:5d:e9: e8:c4:fa:8f:58:05:e5:56:1e:93:48:e3:30:6e:b8: 24:3d:9a:37:02:41:14:16:ee:2e:0d:07:2e:c1:3f: 5c:4c:09:01:36:91:9e:1c:70:bd:13:a1:48:86:f6: 58:0a:7d:71:5d:80:8d:b4:68:8c:98:fe:2d:4c:24: e1:53:97:1d:51:26:1f:63:36:0d:92:91:9e:2d:76: 9d:46:18:65:07:3e:57:a6:f9:05:c5:e0:bd:05:0f: d4:e3:51:6d:98:a0:49:11:e5:18:f6:71:c0:ea:13: 29:f0:53:bb:ad:d0:64:42:13:91:c1:fd:05:7e:83: b6:55:f2:81:bb:ff:cf:7b:c0:2d:62:6c:a6:ae:35: c6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:07:B9:8B:E6:CC:77:78:2E:6A:AC:49:93:DB:67:5F:B5:5F:F9:32 X509v3 Authority Key Identifier: keyid:84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:59:f9:7a:60:b4:52:8c:78:68:38:d2:f8:df:24:a6:df:c6: bf:30:6e:2a:5d:21:a8:2c:f9:26:f5:31:2d:79:83:5f:c4:08: 38:e9:23:82:67:1a:4d:65:8a:3b:ec:b8:e8:5e:22:21:56:89: 71:6e:13:7d:c7:28:be:ab:70:e8:32:e3:08:06:ca:a9:ad:ca: 9b:ec:87:8f:36:54:a0:66:aa:bb:93:8a:26:1b:66:ad:94:22: 56:c7:97:2b:cf:83:ac:cf:c8:fa:53:d7:16:e3:6b:32:82:d2: a0:a6:86:03:03:d8:a4:f2:5f:b4:86:0b:52:58:d7:e5:2b:33: f0:4f:ff:1d:2a:09:61:a8:d3:08:48:46:ee:8e:89:18:53:9d: 4d:56:4a:7c:b9:1e:d6:10:4f:1a:fe:b9:93:3f:44:fd:34:5d: 51:9b:63:5c:ec:8b:c5:87:c7:0a:6e:60:ef:93:b7:c4:73:97: 41:46:8e:de:24:61:82:f4:e5:e3:c9:4e:80:41:cb:06:be:9a: 45:c6:c1:1b:2e:01:d9:84:fd:a4:77:29:b6:79:7b:d0:21:32: da:4e:7f:e4:da:dd:6e:4f:35:0f:ed:49:31:b2:f1:d0:42:c2: e8:c7:b3:47:38:50:02:32:ec:a8:67:8f:20:4a:18:70:67:11: 64:48:af:4f -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUIl/pdIKl3ETz8svknj8yLAxBca8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0 MEIyQjZCNTAeFw0yNTA0MjgwMzE0NTRaFw0yNTA0MjkwNjA4NTRaMDMxMTAvBgNV BAMTKDg3MDdCOThCRTZDQzc3NzgyRTZBQUM0OTkzREI2NzVGQjU1RkY5MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hH6Tic/UDXYEyG9QM13MFgYj 9xojYr2UAEPAVUiIcjPast9djze3Oft1yVTA+gzfjmdR4pAXc99prREiJSm7DF4U Uib3dM6N+LWYf5VpB1NPdUQjEzjYJbTTCwqRnPc3qJEb/6ufahJ3U8aY7R/+lD5I Pixd6ejE+o9YBeVWHpNI4zBuuCQ9mjcCQRQW7i4NBy7BP1xMCQE2kZ4ccL0ToUiG 9lgKfXFdgI20aIyY/i1MJOFTlx1RJh9jNg2SkZ4tdp1GGGUHPlem+QXF4L0FD9Tj UW2YoEkR5Rj2ccDqEynwU7ut0GRCE5HB/QV+g7ZV8oG7/897wC1ibKauNcbxAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUhwe5i+bMd3guaqxJk9tnX7Vf+TIwHwYDVR0j BBgwFoAUhHE4tUAYMLibUkA8d3cYu0CytrUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzQvODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0MEIyQjZCNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0MEIy QjZCNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03 Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvNC84NDcxMzhCNTQwMTgzMEI4OUI1 MjQwM0M3Nzc3MThCQjQwQjJCNkI1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVn5emC0Uox4aDjS+N8k pt/GvzBuKl0hqCz5JvUxLXmDX8QIOOkjgmcaTWWKO+y46F4iIVaJcW4Tfccovqtw 6DLjCAbKqa3Km+yHjzZUoGaqu5OKJhtmrZQiVseXK8+DrM/I+lPXFuNrMoLSoKaG AwPYpPJftIYLUljX5Ssz8E//HSoJYajTCEhG7o6JGFOdTVZKfLke1hBPGv65kz9E /TRdUZtjXOyLxYfHCm5g75O3xHOXQUaO3iRhgvTl48lOgEHLBr6aRcbBGy4B2YT9 pHcptnl70CEy2k5/5Nrdbk81D+1JMbLx0ELC6MezRzhQAjLsqGePIEoYcGcRZEiv Tw== -----END CERTIFICATE-----Generated at Mon Apr 28 21:26:49 2025 by rpki-client