$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.mft File: F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.mft (raw, json) Hash identifier: 01dRYdyeD9Rw27p5OGWZgPGvYDLNptt5ff1a0RAC1Io= Subject key identifier: 42:2C:FB:3D:18:29:6C:BC:D6:3B:BF:1E:61:FE:93:B5:AC:67:C0:8B Authority key identifier: F8:17:E6:F7:FB:2A:DE:48:7E:A7:B5:C6:D3:6B:E9:D4:5D:69:D1:6B Certificate issuer: /CN=F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B Certificate serial: 048C725AEF6CE535B26D647D900B2C3D07AFB92F Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.mft Manifest number: 0458 Signing time: Mon 28 Apr 2025 03:19:50 +0000 Manifest this update: Mon 28 Apr 2025 03:14:50 +0000 Manifest next update: Tue 29 Apr 2025 04:43:50 +0000 Files and hashes: 1: F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.crl (hash: UGJge6gYjr0MhwgA1XhJdbBcU7m1y+z9EJtzCosmg1Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 19:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:8c:72:5a:ef:6c:e5:35:b2:6d:64:7d:90:0b:2c:3d:07:af:b9:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B Validity Not Before: Apr 28 03:14:50 2025 GMT Not After : Apr 29 04:43:50 2025 GMT Subject: CN=422CFB3D18296CBCD63BBF1E61FE93B5AC67C08B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9e:8c:f0:23:b6:a9:c1:7b:6a:d5:4f:af:bc: ae:bd:ca:3f:67:e7:a3:1d:85:15:7e:70:6d:4b:88: c2:9a:70:1f:93:52:36:83:a2:a9:41:79:ba:99:b4: c9:21:21:e3:38:43:96:55:a2:18:ae:03:70:1a:9f: 8e:bc:f5:c2:cd:aa:af:a5:86:03:ec:47:15:37:71: 74:7d:7c:ad:3a:18:e3:07:d1:bb:4c:23:0e:d5:95: 37:f2:f4:97:4f:3b:19:4e:81:8b:8b:e7:2e:01:6d: 59:2d:8f:26:44:49:02:f7:40:93:86:95:0f:61:37: 76:ec:e5:d8:10:8e:58:54:6a:aa:7a:91:ed:74:74: 25:b5:e0:7f:2d:1e:0b:0f:a6:45:43:9f:e7:92:6e: 17:20:80:18:7b:d1:da:6e:64:03:51:22:2a:f5:d0: bd:d5:eb:62:7b:f3:b3:86:2d:a7:02:34:5d:81:b3: 60:90:26:72:de:e5:99:07:9c:b0:d3:12:4f:6f:50: 9b:7d:ae:44:2a:a6:19:9e:27:5f:44:6f:af:c5:39: 9f:64:f7:32:41:8f:52:b5:a8:af:63:ae:25:91:33: 57:de:7d:bc:1a:d4:80:88:54:e0:b9:a4:7c:56:9b: 90:65:f3:83:3b:0c:ba:50:f8:eb:07:f8:85:33:5e: 8d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2C:FB:3D:18:29:6C:BC:D6:3B:BF:1E:61:FE:93:B5:AC:67:C0:8B X509v3 Authority Key Identifier: keyid:F8:17:E6:F7:FB:2A:DE:48:7E:A7:B5:C6:D3:6B:E9:D4:5D:69:D1:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:17:d1:72:f3:f5:ac:dc:32:19:30:36:dd:94:68:aa:ef:49: 6a:2a:1d:a0:e4:d9:b7:56:6c:45:0f:23:42:83:6a:14:9f:35: 4c:c7:ca:a7:7f:a4:2c:19:48:27:6e:5d:75:35:5e:9e:9c:d5: 43:de:7d:fe:df:0c:f8:cf:83:a2:0a:60:a1:19:b3:33:61:eb: 04:7d:a7:52:ed:12:4a:d5:27:7a:c2:11:04:ad:43:03:0c:44: 11:97:ac:44:8d:f2:55:64:f1:c8:d5:0d:40:c3:a1:9e:a8:ba: bb:93:e4:dc:b2:c7:27:8b:d3:7c:7d:93:62:5f:e1:ff:4d:d3: bd:a7:63:a5:d3:94:fb:59:20:69:30:fc:79:2a:a1:0b:46:03: c8:70:4f:09:02:9d:14:9b:f9:7a:b9:d5:68:30:86:bd:8a:d7: c9:70:5c:b3:11:64:a5:17:60:dd:55:38:6c:14:d3:cf:f7:72: d4:49:f9:b6:8d:ea:91:51:1b:c3:89:78:c2:58:a5:cd:4c:fe: 86:4d:c5:35:df:13:6f:65:be:3b:d0:10:2f:d9:df:40:94:39: 6d:57:dd:4b:44:3c:36:6e:c0:5e:ea:70:4a:35:85:3e:54:21: b2:af:68:60:14:cc:00:44:a0:a1:d7:30:12:56:87:e3:5a:59: db:9b:0b:77 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUBIxyWu9s5TWybWR9kAssPQevuS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgxN0U2RjdGQjJBREU0ODdFQTdCNUM2RDM2QkU5RDQ1 RDY5RDE2QjAeFw0yNTA0MjgwMzE0NTBaFw0yNTA0MjkwNDQzNTBaMDMxMTAvBgNV BAMTKDQyMkNGQjNEMTgyOTZDQkNENjNCQkYxRTYxRkU5M0I1QUM2N0MwOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNnozwI7apwXtq1U+vvK69yj9n 56MdhRV+cG1LiMKacB+TUjaDoqlBebqZtMkhIeM4Q5ZVohiuA3Aan4689cLNqq+l hgPsRxU3cXR9fK06GOMH0btMIw7VlTfy9JdPOxlOgYuL5y4BbVktjyZESQL3QJOG lQ9hN3bs5dgQjlhUaqp6ke10dCW14H8tHgsPpkVDn+eSbhcggBh70dpuZANRIir1 0L3V62J787OGLacCNF2Bs2CQJnLe5ZkHnLDTEk9vUJt9rkQqphmeJ19Eb6/FOZ9k 9zJBj1K1qK9jriWRM1fefbwa1ICIVOC5pHxWm5Bl84M7DLpQ+OsH+IUzXo3PAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUQiz7PRgpbLzWO78eYf6TtaxnwIswHwYDVR0j BBgwFoAU+Bfm9/sq3kh+p7XG02vp1F1p0WswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzQvRjgxN0U2RjdGQjJBREU0ODdFQTdCNUM2RDM2QkU5RDQ1RDY5RDE2Qi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvRjgxN0U2RjdGQjJBREU0ODdFQTdCNUM2RDM2QkU5RDQ1RDY5 RDE2Qi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03 Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvNC9GODE3RTZGN0ZCMkFERTQ4N0VB N0I1QzZEMzZCRTlENDVENjlEMTZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxfRcvP1rNwyGTA23ZRo qu9JaiodoOTZt1ZsRQ8jQoNqFJ81TMfKp3+kLBlIJ25ddTVenpzVQ959/t8M+M+D ogpgoRmzM2HrBH2nUu0SStUnesIRBK1DAwxEEZesRI3yVWTxyNUNQMOhnqi6u5Pk 3LLHJ4vTfH2TYl/h/03TvadjpdOU+1kgaTD8eSqhC0YDyHBPCQKdFJv5ernVaDCG vYrXyXBcsxFkpRdg3VU4bBTTz/dy1En5to3qkVEbw4l4wlilzUz+hk3FNd8Tb2W+ O9AQL9nfQJQ5bVfdS0Q8Nm7AXupwSjWFPlQhsq9oYBTMAESgodcwElaH41pZ25sL dw== -----END CERTIFICATE-----Generated at Mon Apr 28 09:11:55 2025 by rpki-client