$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: +7sotL/Jp+oESZr7zhMXmCaUhLNcaQ8zLWcQ1rDIuEE= Subject key identifier: D8:57:73:31:6D:C8:53:7C:5F:5C:71:09:A2:CB:5B:7C:F2:C5:88:B6 Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 6D4C8AF1D79A51DDF93A0B1B11B45E675CCF1CFD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 014B Signing time: Sun 27 Apr 2025 11:37:11 +0000 Manifest this update: Sun 27 Apr 2025 11:32:11 +0000 Manifest next update: Mon 28 Apr 2025 12:02:11 +0000 Files and hashes: 1: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: xL09RaMvNnk3zcTxJYCpyR11r2WfajekNMt0OPCzbqM=) 2: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: fzl6j+FAC258G1N9wOfd3Qdn6lMXUn+te6tG0m8+gmY=) 3: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: R+o6n+RjWkxiRu/ckQJHanWEp0DumqtvHG3oGP82QQ8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 12:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:4c:8a:f1:d7:9a:51:dd:f9:3a:0b:1b:11:b4:5e:67:5c:cf:1c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Apr 27 11:32:11 2025 GMT Not After : Apr 28 12:02:11 2025 GMT Subject: CN=D85773316DC8537C5F5C7109A2CB5B7CF2C588B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0c:a0:84:90:04:07:82:20:fc:44:aa:4d:31: 33:97:d4:4d:2d:f2:c7:17:db:da:d4:57:bb:e5:09: 59:cc:5d:09:8d:90:b1:d7:46:f1:f0:af:e7:fe:7d: 2f:5d:6f:51:1e:a7:1d:62:82:ac:58:52:ae:ea:c6: 18:a6:20:83:9f:79:3b:67:08:e6:9a:e6:27:0c:48: af:69:de:4b:51:f7:33:1b:15:88:4d:52:e2:b0:59: f7:ef:20:61:87:c3:db:ce:c9:3c:b2:90:ea:ee:1b: 9e:7e:1b:d5:e8:57:f7:12:09:80:c6:93:a7:ad:1a: a2:ef:f5:d3:33:1d:9f:3c:3c:31:d3:78:85:76:ef: 71:6d:6d:4a:12:38:bb:d9:4b:18:fc:ce:38:89:82: 97:08:b5:e2:45:5d:a7:18:91:63:aa:76:9d:70:f4: 59:16:f8:56:86:95:bf:31:73:23:71:38:63:f9:46: 7c:4f:88:0b:0d:2c:68:8d:12:f9:c6:35:30:1e:19: 31:8c:78:d7:7a:02:70:7a:29:b1:ae:3e:89:0a:e7: 12:21:25:6a:11:b4:9a:da:28:a0:5a:79:37:35:eb: bf:6e:e1:bd:7f:51:2d:e9:bb:a1:46:19:49:0a:25: 50:d8:00:f3:06:35:6e:81:b1:74:4f:29:11:42:f0: 32:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:57:73:31:6D:C8:53:7C:5F:5C:71:09:A2:CB:5B:7C:F2:C5:88:B6 X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ef:62:64:bc:4b:08:c7:cd:d3:ba:d6:38:1b:c2:77:8b:87: cc:fa:ae:63:7d:5c:01:c0:6b:1c:7c:a4:12:df:37:c2:7d:3f: 03:80:52:01:3f:a8:51:b5:f2:5f:ad:01:54:5f:d3:41:60:cc: fc:d9:b8:e8:38:05:19:ce:29:fe:f5:de:07:07:d1:01:ed:ec: 3d:d7:ce:77:86:2b:5a:7c:4c:76:bb:73:25:85:c6:e4:a2:6d: 72:fa:25:f5:ff:a1:5e:b4:51:05:9d:34:d6:30:9c:d2:ed:68: 0e:92:a8:9b:7a:50:c1:66:a9:e8:fe:61:13:c2:12:af:92:cb: f8:ce:fe:37:11:4a:45:83:a3:12:2e:9e:61:db:f3:39:19:25: a0:cc:c6:bf:5e:03:06:1c:bd:d4:82:48:71:93:05:27:86:f5: 27:f9:e5:20:cb:70:7a:8f:1a:88:11:a4:7b:d6:3d:c4:8b:6b: ab:a7:d3:c3:97:c5:d4:42:88:2d:37:22:77:3d:3a:0b:0c:11: c8:e5:38:f2:74:28:fa:73:b4:4a:db:28:0f:d5:24:6c:22:cc: d0:1c:6c:73:43:d3:00:f3:45:c0:68:ff:0b:40:8d:da:2a:6e: c2:ae:51:11:87:b8:b1:e5:d8:2a:f9:3b:d4:e8:b0:81:e2:2f: 22:bd:d3:87 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbUyK8deaUd35OgsbEbReZ1zPHP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNTA0MjcxMTMyMTFaFw0yNTA0MjgxMjAyMTFaMDMxMTAvBgNV BAMTKEQ4NTc3MzMxNkRDODUzN0M1RjVDNzEwOUEyQ0I1QjdDRjJDNTg4QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeDKCEkAQHgiD8RKpNMTOX1E0t 8scX29rUV7vlCVnMXQmNkLHXRvHwr+f+fS9db1Eepx1igqxYUq7qxhimIIOfeTtn COaa5icMSK9p3ktR9zMbFYhNUuKwWffvIGGHw9vOyTyykOruG55+G9XoV/cSCYDG k6etGqLv9dMzHZ88PDHTeIV273FtbUoSOLvZSxj8zjiJgpcIteJFXacYkWOqdp1w 9FkW+FaGlb8xcyNxOGP5RnxPiAsNLGiNEvnGNTAeGTGMeNd6AnB6KbGuPokK5xIh JWoRtJraKKBaeTc1679u4b1/US3pu6FGGUkKJVDYAPMGNW6BsXRPKRFC8DL1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU2FdzMW3IU3xfXHEJostbfPLFiLYwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCL72Jk vEsIx83TutY4G8J3i4fM+q5jfVwBwGscfKQS3zfCfT8DgFIBP6hRtfJfrQFUX9NB YMz82bjoOAUZzin+9d4HB9EB7ew91853hitafEx2u3Mlhcbkom1y+iX1/6FetFEF nTTWMJzS7WgOkqibelDBZqno/mETwhKvksv4zv43EUpFg6MSLp5h2/M5GSWgzMa/ XgMGHL3UgkhxkwUnhvUn+eUgy3B6jxqIEaR71j3Ei2urp9PDl8XUQogtNyJ3PToL DBHI5TjydCj6c7RK2ygP1SRsIszQHGxzQ9MA80XAaP8LQI3aKm7CrlERh7ix5dgq +TvU6LCB4i8ivdOH -----END CERTIFICATE-----Generated at Mon Apr 28 01:07:38 2025 by rpki-client