$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft File: 75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft (raw, json) Hash identifier: SihdtgGB7ueRNturcuPBgAvPXouJKo7foikeLeBBztM= Subject key identifier: CC:30:CD:7D:06:84:BE:ED:B1:F9:90:1F:B4:DC:6D:32:69:7D:E7:DC Authority key identifier: 75:D5:C2:EC:D3:0F:68:0D:B5:D1:69:87:F4:57:FE:B4:5D:8B:A9:70 Certificate issuer: /CN=75D5C2ECD30F680DB5D16987F457FEB45D8BA970 Certificate serial: 4CAB37B78684A20C0FCE7F5B1F6F6D7F7EF26E3D Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft Manifest number: 0147 Signing time: Tue 29 Apr 2025 01:26:26 +0000 Manifest this update: Tue 29 Apr 2025 01:21:26 +0000 Manifest next update: Wed 30 Apr 2025 04:11:26 +0000 Files and hashes: 1: 326130363a396634313a3a2f33322d3438203d3e20323135303835.roa (hash: ZKnqXWpL638YuDEQpZ7F3g5bqELtKVJQB4+caqr2NiE=) 2: 75D5C2ECD30F680DB5D16987F457FEB45D8BA970.crl (hash: nKYA9FLB2DAR4wq6EfuaW96ETUQ9X8rBwmeMjIGDkWs=) 3: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: DeNLRbWhS9WKIEvlMBYaR+2p0F2qMHWNHV7i4if0F4Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 04:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ab:37:b7:86:84:a2:0c:0f:ce:7f:5b:1f:6f:6d:7f:7e:f2:6e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75D5C2ECD30F680DB5D16987F457FEB45D8BA970 Validity Not Before: Apr 29 01:21:26 2025 GMT Not After : Apr 30 04:11:26 2025 GMT Subject: CN=CC30CD7D0684BEEDB1F9901FB4DC6D32697DE7DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6a:76:2f:9e:27:f5:22:a1:20:78:9a:0a:b0: e5:b3:47:cb:8d:23:95:c9:0d:fe:5b:a1:8e:bd:0a: a9:20:ad:fa:b0:45:ab:ac:dc:7b:bd:cf:ce:2a:0f: 56:2b:72:77:98:d6:24:77:35:e7:47:a9:b9:92:d5: 60:21:03:c9:7f:cd:63:f7:8d:2d:58:c5:d9:a0:69: b8:a0:24:52:3b:9d:38:19:90:8d:3a:c5:ac:a4:c1: f1:30:57:51:97:83:1c:dc:10:0d:d3:02:77:b1:10: 71:74:bf:90:85:92:c9:68:14:98:3a:ce:21:77:f8: a1:6b:8e:c2:43:c6:e5:b1:4d:35:39:b2:57:c2:90: b0:25:71:2b:0b:3d:83:b7:6e:8c:60:4b:44:b6:13: 04:cc:5e:07:c0:c0:6e:21:1d:fd:c8:b4:92:41:20: d2:20:0c:91:07:f5:08:f4:10:7f:52:dc:9c:17:82: 88:f4:ae:6c:d4:ad:a3:cd:a6:28:ed:1a:59:38:72: 6d:1c:c5:e7:b0:b8:dd:49:b1:15:e7:29:4b:1c:8c: f8:b6:93:a0:aa:ad:47:e5:d8:51:cf:ca:32:61:43: 82:65:7d:55:e3:88:24:16:8a:8d:c5:c0:24:4c:25: 6e:6e:d0:bf:ce:ca:50:06:fd:d1:11:d9:47:6d:d7: 17:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:30:CD:7D:06:84:BE:ED:B1:F9:90:1F:B4:DC:6D:32:69:7D:E7:DC X509v3 Authority Key Identifier: keyid:75:D5:C2:EC:D3:0F:68:0D:B5:D1:69:87:F4:57:FE:B4:5D:8B:A9:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/1/75D5C2ECD30F680DB5D16987F457FEB45D8BA970.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ec:86:36:27:50:43:48:24:82:16:5e:a2:58:61:5f:02:48:56: 82:68:70:03:1f:79:90:b8:2c:f5:62:63:e5:4d:e9:5e:73:41: 9c:c6:0c:9e:2b:4d:54:5b:f7:b6:35:1d:de:74:ea:f6:2c:ad: fd:08:bf:50:f9:b7:c4:c0:4a:95:a1:aa:c5:99:c5:50:75:a9: 24:5c:d8:1d:af:ae:bb:5f:fb:ea:68:b7:ea:35:d4:4c:ab:ee: 61:f1:52:11:ab:b4:1b:5e:86:a9:08:1e:19:0c:9b:2a:d8:85: 8d:60:d5:45:14:13:28:34:94:12:0c:ff:ea:47:0d:ed:e7:55: f3:f6:62:8e:b9:15:1c:9d:78:78:08:38:79:47:19:14:d8:13: 56:7d:13:b1:6c:6a:73:40:fa:c1:59:e4:e7:30:a3:a9:3c:51: e2:8d:83:a6:a5:47:e9:2b:91:c4:1f:6a:fa:b7:da:4b:22:ad: f4:2e:95:1e:88:b4:f8:62:c8:d1:07:60:10:a2:21:6c:18:9d: 09:e0:27:38:22:b5:12:60:10:39:93:d4:ba:a8:a3:db:9a:99: 22:b8:fc:80:c4:32:53:c7:ea:5f:5c:55:11:02:af:6c:7d:34: 32:a8:3c:3d:2b:62:b3:be:03:06:28:42:30:c2:19:79:f7:73: 55:e1:c6:13 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUTKs3t4aEogwPzn9bH29tf37ybj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVENUMyRUNEMzBGNjgwREI1RDE2OTg3RjQ1N0ZFQjQ1 RDhCQTk3MDAeFw0yNTA0MjkwMTIxMjZaFw0yNTA0MzAwNDExMjZaMDMxMTAvBgNV BAMTKENDMzBDRDdEMDY4NEJFRURCMUY5OTAxRkI0REM2RDMyNjk3REU3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/anYvnif1IqEgeJoKsOWzR8uN I5XJDf5boY69CqkgrfqwRaus3Hu9z84qD1YrcneY1iR3NedHqbmS1WAhA8l/zWP3 jS1YxdmgabigJFI7nTgZkI06xaykwfEwV1GXgxzcEA3TAnexEHF0v5CFksloFJg6 ziF3+KFrjsJDxuWxTTU5slfCkLAlcSsLPYO3boxgS0S2EwTMXgfAwG4hHf3ItJJB INIgDJEH9Qj0EH9S3JwXgoj0rmzUraPNpijtGlk4cm0cxeewuN1JsRXnKUscjPi2 k6CqrUfl2FHPyjJhQ4JlfVXjiCQWio3FwCRMJW5u0L/OylAG/dER2Udt1xfnAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUzDDNfQaEvu2x+ZAftNxtMml959wwHwYDVR0j BBgwFoAUddXC7NMPaA210WmH9Ff+tF2LqXAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzEvNzVENUMyRUNEMzBGNjgwREI1RDE2OTg3RjQ1N0ZFQjQ1RDhCQTk3MC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNzVENUMyRUNEMzBGNjgwREI1RDE2OTg3RjQ1N0ZFQjQ1RDhC QTk3MC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03 ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMS83NUQ1QzJFQ0QzMEY2ODBEQjVE MTY5ODdGNDU3RkVCNDVEOEJBOTcwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7IY2J1BDSCSCFl6iWGFf AkhWgmhwAx95kLgs9WJj5U3pXnNBnMYMnitNVFv3tjUd3nTq9iyt/Qi/UPm3xMBK laGqxZnFUHWpJFzYHa+uu1/76mi36jXUTKvuYfFSEau0G16GqQgeGQybKtiFjWDV RRQTKDSUEgz/6kcN7edV8/ZijrkVHJ14eAg4eUcZFNgTVn0TsWxqc0D6wVnk5zCj qTxR4o2DpqVH6SuRxB9q+rfaSyKt9C6VHoi0+GLI0QdgEKIhbBidCeAnOCK1EmAQ OZPUuqij25qZIrj8gMQyU8fqX1xVEQKvbH00Mqg8PStis74DBihCMMIZefdzVeHG Ew== -----END CERTIFICATE-----Generated at Tue Apr 29 12:47:28 2025 by rpki-client