$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft File: 41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft (raw, json) Hash identifier: z/HageL3LN+bTHUDxBfiSqovrxEkZXxqLwjCZwI+gbs= Subject key identifier: 73:C0:BB:4C:DC:63:E3:0F:C1:AE:91:31:E0:D4:75:F6:8F:3C:1C:6C Authority key identifier: 41:C6:B5:56:7A:DB:76:46:22:2A:1B:9F:1A:A7:03:8F:0C:2D:4B:4B Certificate issuer: /CN=41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B Certificate serial: 4FDDFF6C3B712B22DF04131ACC5C6E8B85DC8FD3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft Manifest number: FC Signing time: Sat 26 Apr 2025 17:11:45 +0000 Manifest this update: Sat 26 Apr 2025 17:06:45 +0000 Manifest next update: Sun 27 Apr 2025 20:36:45 +0000 Files and hashes: 1: 41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl (hash: WhKaPR0A7C8zfc1haymc6K76ZunLy4WUxU5h//8FhN8=) 2: 326131343a373538353a3a2f34382d3438203d3e20323134343531.roa (hash: 1/nE4baiMVs2LRMXh5sGVXRwRPcJEy8duBZuI+RSScs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 20:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:dd:ff:6c:3b:71:2b:22:df:04:13:1a:cc:5c:6e:8b:85:dc:8f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B Validity Not Before: Apr 26 17:06:45 2025 GMT Not After : Apr 27 20:36:45 2025 GMT Subject: CN=73C0BB4CDC63E30FC1AE9131E0D475F68F3C1C6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c1:1a:1b:70:90:3b:de:90:93:b9:9b:c3:eb: df:cc:92:4d:0f:95:6b:88:82:32:9f:64:f4:13:bc: 3c:d5:38:af:ed:73:fa:b8:36:4f:23:d4:c5:cd:0f: a6:68:36:75:60:74:a0:63:0e:85:b2:dd:d8:da:ec: 91:14:41:b6:17:e8:d9:b1:b2:a2:55:db:f6:b5:59: bd:8e:73:ee:97:66:30:5a:be:c8:21:3c:3d:4a:0e: 92:0b:04:d4:fc:3b:a7:62:91:1e:7b:66:72:dc:b5: 96:44:45:b9:85:77:b3:a9:cf:bb:a8:84:1b:c1:ae: 6b:37:69:23:86:c5:0d:fc:f0:87:0c:40:d3:d5:a8: 78:7b:19:df:77:2d:38:cd:d6:d5:f6:75:f1:10:a7: 16:3e:5c:77:a3:2b:e8:63:dc:8c:1c:ae:2a:01:8b: 3f:d0:06:36:e1:45:87:f9:de:c6:1f:c6:b6:81:87: 94:3b:0b:b0:9d:7f:ed:4b:5c:a5:57:e4:66:6f:c2: 2c:de:63:45:ef:1d:cd:e5:20:f9:e9:4a:22:3c:f6: f6:04:e9:1f:34:bb:f6:b2:77:9b:0b:34:fd:ce:95: e5:32:4e:d4:b8:59:7b:cb:59:ff:2b:73:56:c1:44: b6:ad:12:d7:6b:01:62:ed:e3:0e:e1:4e:a2:9b:5b: 20:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C0:BB:4C:DC:63:E3:0F:C1:AE:91:31:E0:D4:75:F6:8F:3C:1C:6C X509v3 Authority Key Identifier: keyid:41:C6:B5:56:7A:DB:76:46:22:2A:1B:9F:1A:A7:03:8F:0C:2D:4B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:25:d6:ab:93:79:c6:e9:36:e0:7b:1b:c3:0f:cb:3a:eb:1c: 73:08:1a:b5:61:0b:36:fa:a9:e5:15:01:e2:af:1a:18:8f:05: 78:a4:b0:d8:ec:3e:d1:2a:c0:77:08:56:77:03:7c:ac:24:ee: a2:00:83:9e:1e:68:0d:4b:7e:87:62:33:8e:be:83:10:10:eb: 95:48:5f:71:8c:01:43:31:5d:11:aa:2e:73:5c:5a:a5:98:35: f8:fa:13:f8:eb:4b:12:13:e5:21:41:4b:f6:07:b2:7e:ce:cb: e3:28:a5:6b:55:bb:de:a7:8c:26:47:eb:8c:50:a5:7f:a3:fa: aa:35:28:b3:d0:ce:a4:71:58:36:88:75:c5:ff:6e:f1:ca:4e: 1b:b2:93:55:05:05:dc:78:17:9e:3c:ff:5c:9a:37:e5:33:b8: 6a:9c:85:4a:45:81:55:04:8b:a9:c7:bc:69:5d:60:d1:4a:fc: f1:3e:9b:51:74:92:f9:52:1b:9d:87:3d:b5:ca:f7:d6:a8:c1: a3:d4:ca:77:89:c9:97:ca:d5:f4:4e:25:a7:33:13:1f:3b:bf: 95:35:ac:e0:f5:15:f2:f9:c3:69:38:06:c0:0d:51:11:f3:92: 08:c4:9d:d3:c4:eb:80:d4:25:ef:3d:45:21:18:93:37:1f:54: c9:aa:c6:e5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUT93/bDtxKyLfBBMazFxui4Xcj9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFDNkI1NTY3QURCNzY0NjIyMkExQjlGMUFBNzAzOEYw QzJENEI0QjAeFw0yNTA0MjYxNzA2NDVaFw0yNTA0MjcyMDM2NDVaMDMxMTAvBgNV BAMTKDczQzBCQjRDREM2M0UzMEZDMUFFOTEzMUUwRDQ3NUY2OEYzQzFDNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAwRobcJA73pCTuZvD69/Mkk0P lWuIgjKfZPQTvDzVOK/tc/q4Nk8j1MXND6ZoNnVgdKBjDoWy3dja7JEUQbYX6Nmx sqJV2/a1Wb2Oc+6XZjBavsghPD1KDpILBNT8O6dikR57ZnLctZZERbmFd7Opz7uo hBvBrms3aSOGxQ388IcMQNPVqHh7Gd93LTjN1tX2dfEQpxY+XHejK+hj3IwcrioB iz/QBjbhRYf53sYfxraBh5Q7C7Cdf+1LXKVX5GZvwizeY0XvHc3lIPnpSiI89vYE 6R80u/ayd5sLNP3OleUyTtS4WXvLWf8rc1bBRLatEtdrAWLt4w7hTqKbWyDVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUc8C7TNxj4w/BrpEx4NR19o88HGwwHwYDVR0j BBgwFoAUQca1VnrbdkYiKhufGqcDjwwtS0swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl OTUwLzEvNDFDNkI1NTY3QURCNzY0NjIyMkExQjlGMUFBNzAzOEYwQzJENEI0Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MUM2QjU1NjdBREI3NjQ2MjIyQTFCOUYx QUE3MDM4RjBDMkQ0QjRCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyY2Y4YmE3LWNiMDItNDE4Yi1iZTA0LTRkOWYzYTA3ZTk1MC8xLzQxQzZCNTU2 N0FEQjc2NDYyMjJBMUI5RjFBQTcwMzhGMEMyRDRCNEIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAuJdar k3nG6TbgexvDD8s66xxzCBq1YQs2+qnlFQHirxoYjwV4pLDY7D7RKsB3CFZ3A3ys JO6iAIOeHmgNS36HYjOOvoMQEOuVSF9xjAFDMV0Rqi5zXFqlmDX4+hP460sSE+Uh QUv2B7J+zsvjKKVrVbvep4wmR+uMUKV/o/qqNSiz0M6kcVg2iHXF/27xyk4bspNV BQXceBeePP9cmjflM7hqnIVKRYFVBIupx7xpXWDRSvzxPptRdJL5Uhudhz21yvfW qMGj1Mp3icmXytX0TiWnMxMfO7+VNazg9RXy+cNpOAbADVER85IIxJ3TxOuA1CXv PUUhGJM3H1TJqsbl -----END CERTIFICATE-----Generated at Sun Apr 27 12:15:32 2025 by rpki-client