$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft File: CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft (raw, json) Hash identifier: /RKZ67rBZ45J4wnsMV1SUrK/AYbm/KGDW9FV9svBJVg= Subject key identifier: 7F:0A:2D:22:60:8C:80:4B:B2:37:91:08:54:FA:53:DC:24:7B:EF:83 Authority key identifier: CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD Certificate issuer: /CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD Certificate serial: 58ACD72FC00FC39E90EE7E6B08FCF1B7961E4035 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft Manifest number: 0133 Signing time: Mon 28 Apr 2025 03:51:15 +0000 Manifest this update: Mon 28 Apr 2025 03:46:15 +0000 Manifest next update: Tue 29 Apr 2025 07:13:15 +0000 Files and hashes: 1: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: Nyn9oM7uD3t9zeyaIzVAMa0fIXr9id1B4aigY0eVgwU=) 2: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: Q5gjl44KzFA6g8+tW8lygBoA3oaZ4qvSEamF1iUuuio=) 3: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: wTqD67Uqf1W/idPthA4sHinaJ2FPLZ88IN640ixPrCU=) 4: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: ahz6gPUt4YrcLpOD9Ozfm8bYrgH1OTsLIpfe4cqXpMc=) 5: CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl (hash: 5LUmUdRZrkixaJftYmxu5w7vXO0kvSf8yuXs8zPnUlg=) 6: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: 4NAkvNhOgG+FdQOl5H1HgnY8A0ca/GD2rGJr4GFMtSI=) 7: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: vFXjegY0vnmzgiKwFkv4TNQvgCv0y7neNveGux2ZS+w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 19:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ac:d7:2f:c0:0f:c3:9e:90:ee:7e:6b:08:fc:f1:b7:96:1e:40:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD Validity Not Before: Apr 28 03:46:15 2025 GMT Not After : Apr 29 07:13:15 2025 GMT Subject: CN=7F0A2D22608C804BB237910854FA53DC247BEF83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e8:84:28:23:22:e6:95:59:cc:67:25:f8:ba: 5d:8a:12:46:d3:fe:fd:5d:46:6f:03:84:8a:03:aa: 92:6e:e6:a2:f8:d2:83:44:09:f9:3f:2f:4d:92:dd: e7:c0:ac:fd:3d:32:52:1b:dc:91:49:39:64:1f:95: fd:40:3f:48:af:78:a0:ec:c2:7f:a2:e5:1b:d6:06: 8a:86:97:25:27:25:c4:cf:c6:a4:7f:f4:34:6b:ba: 7c:8f:52:2c:d2:b8:8e:3e:5a:f7:9b:e1:87:1a:a9: f5:07:5e:c1:4a:e0:a1:05:99:76:67:c0:44:e6:02: 5d:be:9e:d6:ed:f1:22:3c:2d:99:bc:74:ef:02:b5: 7c:0c:0f:3e:9d:df:37:d3:c4:a1:ee:6d:f5:59:b8: 08:f1:3e:b1:2f:bb:83:c2:9f:c6:0a:e9:74:dd:ef: 57:95:56:be:47:c8:8f:da:02:65:af:90:6f:9d:11: 49:14:5d:a2:4a:a5:a1:3b:10:b1:9b:bf:93:45:6f: 90:16:1f:8d:df:42:e4:55:da:56:89:ab:25:8e:43: 84:49:04:24:ea:06:4b:3d:79:2e:f0:2a:ea:36:2e: 06:23:41:12:53:ec:53:74:0d:db:f5:9c:13:1f:62: 5b:8f:f6:62:62:94:49:a2:04:cb:d0:4b:51:90:c8: 70:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0A:2D:22:60:8C:80:4B:B2:37:91:08:54:FA:53:DC:24:7B:EF:83 X509v3 Authority Key Identifier: keyid:CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:0b:6d:eb:8b:a0:cd:05:8e:63:49:78:87:19:c2:e1:33:44: cf:04:2f:bd:72:91:80:c8:e8:d4:c1:4f:0b:7a:44:9b:a1:04: e1:8e:fd:0b:05:a8:6a:36:84:6e:90:2d:e6:a3:47:cf:60:fd: 52:a9:bb:8f:12:1c:3d:e8:64:bf:da:1e:ec:37:2d:26:cc:2c: 75:89:25:d9:3b:44:f8:cd:99:91:ed:61:5e:6b:37:6b:70:27: 77:7e:1d:95:df:da:fc:25:07:3e:a2:d6:5a:7c:ec:c0:af:c2: 54:10:ac:d7:f0:0a:2c:bd:94:c1:a8:ec:42:74:6c:4c:52:8d: e1:33:23:1b:1d:94:ce:03:86:6f:23:2e:d0:86:fa:5f:a0:91: 1d:58:99:91:ec:d6:aa:fa:80:2c:23:04:e4:0f:98:8f:a1:f7: 50:8d:68:b2:16:d4:92:be:d3:83:c4:6f:f9:5e:9d:8f:5e:f9: 92:5e:a2:2a:66:ee:55:fe:f3:9a:be:c4:18:5e:97:17:83:8c: 22:ac:50:cf:f5:51:34:4a:55:13:94:fb:d3:67:3c:63:ce:93: c8:db:9b:35:1d:04:cc:f7:bd:06:55:e4:00:ed:5f:97:38:a6: 3f:3e:d6:1a:8f:12:e1:72:32:0d:28:f1:4e:15:ae:f6:04:a6: 78:7b:8c:93 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUWKzXL8APw56Q7n5rCPzxt5YeQDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgz Rjk1NTFDRDAeFw0yNTA0MjgwMzQ2MTVaFw0yNTA0MjkwNzEzMTVaMDMxMTAvBgNV BAMTKDdGMEEyRDIyNjA4QzgwNEJCMjM3OTEwODU0RkE1M0RDMjQ3QkVGODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ6IQoIyLmlVnMZyX4ul2KEkbT /v1dRm8DhIoDqpJu5qL40oNECfk/L02S3efArP09MlIb3JFJOWQflf1AP0iveKDs wn+i5RvWBoqGlyUnJcTPxqR/9DRrunyPUizSuI4+Wveb4YcaqfUHXsFK4KEFmXZn wETmAl2+ntbt8SI8LZm8dO8CtXwMDz6d3zfTxKHubfVZuAjxPrEvu4PCn8YK6XTd 71eVVr5HyI/aAmWvkG+dEUkUXaJKpaE7ELGbv5NFb5AWH43fQuRV2laJqyWOQ4RJ BCTqBks9eS7wKuo2LgYjQRJT7FN0Ddv1nBMfYluP9mJilEmiBMvQS1GQyHD3AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUfwotImCMgEuyN5EIVPpT3CR774MwHwYDVR0j BBgwFoAUzhtPQ2e2pV80ypgaDWynWD+VUc0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzEvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1NTFDRC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1 NTFDRC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvMS9DRTFCNEY0MzY3QjZBNTVGMzRD QTk4MUEwRDZDQTc1ODNGOTU1MUNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggtt64ugzQWOY0l4hxnC 4TNEzwQvvXKRgMjo1MFPC3pEm6EE4Y79CwWoajaEbpAt5qNHz2D9Uqm7jxIcPehk v9oe7DctJswsdYkl2TtE+M2Zke1hXms3a3And34dld/a/CUHPqLWWnzswK/CVBCs 1/AKLL2UwajsQnRsTFKN4TMjGx2UzgOGbyMu0Ib6X6CRHViZkezWqvqALCME5A+Y j6H3UI1oshbUkr7Tg8Rv+V6dj175kl6iKmbuVf7zmr7EGF6XF4OMIqxQz/VRNEpV E5T702c8Y86TyNubNR0EzPe9BlXkAO1flzimPz7WGo8S4XIyDSjxThWu9gSmeHuM kw== -----END CERTIFICATE-----Generated at Mon Apr 28 09:09:30 2025 by rpki-client