$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft File: 847138B5401830B89B52403C777718BB40B2B6B5.mft (raw, json) Hash identifier: 0NYWIylgQj8jyXAdjprXAXAyqXvUX+nmmi0n6pbrXdc= Subject key identifier: 1B:E2:A2:FC:C7:C2:26:E1:D9:78:A0:BC:74:63:B8:C7:33:9F:8E:8E Authority key identifier: 84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5 Certificate issuer: /CN=847138B5401830B89B52403C777718BB40B2B6B5 Certificate serial: 18B3EF8D4C464D9E33C56BF1EA340AC01278F275 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft Manifest number: 04D9 Signing time: Tue 29 Apr 2025 14:19:27 +0000 Manifest this update: Tue 29 Apr 2025 14:14:27 +0000 Manifest next update: Wed 30 Apr 2025 15:39:27 +0000 Files and hashes: 1: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: nMmiIj2RlJjYPT/1+XLEzvCEDF/otDgwrHV2q/RTde4=) 2: BE8A7AC02556C14368364036D5427F53187B6D9D.cer (hash: DgZZLJZ9Eml763gunc/aU0nCab1SiHrkxw0oRdopVbY=) 3: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: B/V5ud+StvDXjqEGvB3k810Cv5LJwyUE9nhfaTbPqMk=) 4: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: lqIlXTFIWSBiRqL977xA8LwWmhjqpimo3uxiYjVeS/M=) 5: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: HYPQYH9q04uUtQ2nRIqre2hb3Qbqb6C2ZO6Rxb9EvzQ=) 6: 847138B5401830B89B52403C777718BB40B2B6B5.crl (hash: jGZluDdBYRJ5AW0ZetCaGG+6VRXjKzC0LiBwTbCZmcY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 15:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:b3:ef:8d:4c:46:4d:9e:33:c5:6b:f1:ea:34:0a:c0:12:78:f2:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847138B5401830B89B52403C777718BB40B2B6B5 Validity Not Before: Apr 29 14:14:27 2025 GMT Not After : Apr 30 15:39:27 2025 GMT Subject: CN=1BE2A2FCC7C226E1D978A0BC7463B8C7339F8E8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:35:b5:c8:12:f4:24:3d:a3:18:2f:b9:c6:d7: b2:3a:2e:9f:ae:da:b2:78:fb:f4:7a:b7:d3:72:a5: 93:40:c4:fd:80:1e:fa:0c:35:2c:63:cd:6d:ca:94: 54:c9:48:76:54:89:c8:68:1f:05:8f:46:10:2d:16: 83:7b:61:00:b7:0c:76:fc:a6:4b:ba:1d:56:27:43: 15:78:f6:36:8a:e8:cd:1c:32:a4:01:77:b5:3a:43: 05:fa:41:dc:f0:8e:3f:56:84:7d:2e:a2:97:ab:38: b5:1c:32:d1:1f:46:eb:2d:a5:92:f2:cc:20:2c:20: be:76:c8:e6:85:5b:ff:ea:15:43:ce:65:85:b4:d7: eb:f4:bb:c2:68:58:3b:90:31:6a:b4:77:16:30:30: 58:61:25:47:02:ea:73:c9:c4:84:44:d0:18:0c:8c: 44:ec:cf:ad:79:54:91:57:69:30:ac:da:b1:8f:3f: a2:61:17:06:0d:ba:fa:02:9d:da:63:54:83:3c:9c: fa:20:8c:2a:2b:07:af:e3:80:27:96:97:c2:a7:53: f7:7a:2f:6c:a6:e9:a0:46:70:23:fb:6b:cd:9b:af: b3:20:9b:eb:ab:d3:00:b6:9b:fa:a6:82:06:5e:95: 4b:ef:d2:aa:5c:c5:e8:2a:14:28:98:03:38:d7:ae: 92:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E2:A2:FC:C7:C2:26:E1:D9:78:A0:BC:74:63:B8:C7:33:9F:8E:8E X509v3 Authority Key Identifier: keyid:84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d1:af:e1:ed:64:bb:1e:da:b7:28:f0:72:bb:15:f2:8c:e9: b1:99:30:2a:16:7b:eb:79:ab:0d:57:5f:85:e0:60:b1:a3:69: 0f:1e:25:90:23:74:a4:76:af:2b:59:ae:e1:91:bc:cd:51:e2: f4:79:85:4f:4c:57:fc:8b:3d:19:7e:1c:b7:ad:38:2f:63:c4: c5:25:85:91:8c:75:3f:39:ad:6b:36:55:13:58:81:fa:67:7c: 1b:25:95:f3:c1:4f:ba:01:95:20:51:d0:59:1b:d0:6b:6f:03: f8:28:48:74:5c:8c:03:4d:ba:e6:d9:17:ad:b0:33:d1:55:68: cc:ab:98:55:b2:21:ef:86:36:9f:25:cc:a0:fd:31:0c:99:48: 30:17:66:d9:bc:a9:66:76:78:76:81:cd:9b:54:fe:5d:b2:e9: e9:91:0b:fc:36:a8:24:f0:dc:ee:98:75:82:16:af:5a:85:b1: 76:88:a3:87:31:ce:e6:63:a4:a6:b5:95:6c:3d:be:61:63:65: 86:0e:c6:7d:41:19:10:e7:ef:90:92:6a:fb:3c:a9:5a:df:ac: 07:4d:86:68:da:f8:ec:a3:ef:d1:1b:a1:b6:3f:d4:25:c7:a7: 4a:02:c8:49:d5:98:22:50:b2:bb:cf:cb:b9:b0:f7:4c:ed:ac: d8:f2:4a:f3 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUGLPvjUxGTZ4zxWvx6jQKwBJ48nUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0 MEIyQjZCNTAeFw0yNTA0MjkxNDE0MjdaFw0yNTA0MzAxNTM5MjdaMDMxMTAvBgNV BAMTKDFCRTJBMkZDQzdDMjI2RTFEOTc4QTBCQzc0NjNCOEM3MzM5RjhFOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDENbXIEvQkPaMYL7nG17I6Lp+u 2rJ4+/R6t9NypZNAxP2AHvoMNSxjzW3KlFTJSHZUichoHwWPRhAtFoN7YQC3DHb8 pku6HVYnQxV49jaK6M0cMqQBd7U6QwX6Qdzwjj9WhH0uoperOLUcMtEfRustpZLy zCAsIL52yOaFW//qFUPOZYW01+v0u8JoWDuQMWq0dxYwMFhhJUcC6nPJxIRE0BgM jETsz615VJFXaTCs2rGPP6JhFwYNuvoCndpjVIM8nPogjCorB6/jgCeWl8KnU/d6 L2ym6aBGcCP7a82br7Mgm+ur0wC2m/qmggZelUvv0qpcxegqFCiYAzjXrpJBAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUG+Ki/MfCJuHZeKC8dGO4xzOfjo4wHwYDVR0j BBgwFoAUhHE4tUAYMLibUkA8d3cYu0CytrUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzQvODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0MEIyQjZCNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0MEIy QjZCNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03 Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvNC84NDcxMzhCNTQwMTgzMEI4OUI1 MjQwM0M3Nzc3MThCQjQwQjJCNkI1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNGv4e1kux7atyjwcrsV 8ozpsZkwKhZ763mrDVdfheBgsaNpDx4lkCN0pHavK1mu4ZG8zVHi9HmFT0xX/Is9 GX4ct604L2PExSWFkYx1PzmtazZVE1iB+md8GyWV88FPugGVIFHQWRvQa28D+ChI dFyMA0265tkXrbAz0VVozKuYVbIh74Y2nyXMoP0xDJlIMBdm2bypZnZ4doHNm1T+ XbLp6ZEL/DaoJPDc7ph1ghavWoWxdoijhzHO5mOkprWVbD2+YWNlhg7GfUEZEOfv kJJq+zypWt+sB02GaNr47KPv0Ruhtj/UJcenSgLISdWYIlCyu8/LubD3TO2s2PJK 8w== -----END CERTIFICATE-----Generated at Tue Apr 29 23:28:38 2025 by rpki-client