$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft File: 5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft (raw, json) Hash identifier: Zi+L7LRUzIwvbE165aqsRtz3DkimqdR0YOLVRUl4UJE= Subject key identifier: C9:4C:95:C2:6A:0D:0E:08:6A:0D:2D:B3:E5:2C:DE:8A:D3:3F:8D:2B Authority key identifier: 5F:95:85:45:0A:7F:92:1A:B3:B8:45:D4:4D:7E:CF:55:EC:DD:F7:A9 Certificate issuer: /CN=5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9 Certificate serial: 4BB6C1A742667F486A80E738936561E41FE31452 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft Manifest number: 12 Signing time: Sun 27 Apr 2025 03:33:44 +0000 Manifest this update: Sun 27 Apr 2025 03:28:44 +0000 Manifest next update: Mon 28 Apr 2025 06:41:44 +0000 Files and hashes: 1: 326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa (hash: GjvfeB16Dq44ljlvPcegJERTdmH8Ubv3C8M2ssZH0r4=) 2: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: wCQx6AVbdx3+Kj+Us2aAmoxx84TC0UWyCZ76TDOkAHY=) 3: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: 0unAsI8V1gSzCFkFuiXCKj+qBRO+IDm5TxOFvRQfPXM=) 4: 5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.crl (hash: 23YmIDHlPSwC6YddwO4d3bLJad2UEPSfZM3kH/mkW0g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 19:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b6:c1:a7:42:66:7f:48:6a:80:e7:38:93:65:61:e4:1f:e3:14:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9 Validity Not Before: Apr 27 03:28:44 2025 GMT Not After : Apr 28 06:41:44 2025 GMT Subject: CN=C94C95C26A0D0E086A0D2DB3E52CDE8AD33F8D2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a3:f8:96:ca:82:86:8a:7f:35:e6:a8:2f:69: 83:6d:48:9b:c8:31:41:1b:d1:5d:54:0f:9c:3c:03: 21:aa:f5:d9:d4:64:8a:33:18:83:d9:52:1a:a1:8c: 70:1d:2e:a5:12:34:a4:76:8e:f9:2a:8d:9e:e5:a9: f9:83:43:33:02:a1:4d:7c:ce:1f:49:53:e8:30:f7: 51:0b:7c:8b:75:66:61:4d:42:78:d0:9f:6b:5d:ce: c0:df:79:f3:a2:00:74:1a:65:95:0a:4b:dc:4f:96: 71:0e:3c:11:9c:f1:4d:04:65:ad:34:63:48:e5:31: 6d:99:d4:7d:a9:87:25:0d:7d:8a:7a:45:ec:77:27: 8c:3a:d6:9d:be:63:8f:d0:26:b2:bd:18:75:73:09: df:bd:b8:de:7f:93:9d:86:c7:dc:78:43:69:dd:8a: 50:d7:24:3c:e6:d6:40:51:8b:3d:b5:71:26:7d:de: ff:1c:af:98:28:a5:5c:ad:3a:ce:c9:e5:1e:3e:87: 07:0d:dc:fd:99:3e:42:a5:81:d0:44:a5:67:40:d7: 16:0f:49:c6:33:9c:fb:3f:28:0f:78:05:62:03:e5: 81:c5:f8:43:6d:fb:a9:b5:24:2f:76:29:53:50:c1: 49:c9:09:ef:e1:eb:ad:d4:1d:2d:a2:e2:c9:96:99: 73:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4C:95:C2:6A:0D:0E:08:6A:0D:2D:B3:E5:2C:DE:8A:D3:3F:8D:2B X509v3 Authority Key Identifier: keyid:5F:95:85:45:0A:7F:92:1A:B3:B8:45:D4:4D:7E:CF:55:EC:DD:F7:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:4f:c8:6b:ce:4f:aa:20:72:49:95:47:81:c7:7e:67:d6:5c: 47:0b:f8:b4:1e:fa:99:1f:f4:f5:d7:b6:0a:dd:4d:6e:a9:2a: 7e:c1:c5:61:3f:a8:c8:fc:e2:65:95:d3:5d:e1:65:18:c1:be: d3:2d:91:c8:e4:49:d8:eb:d5:4f:a0:e8:ba:de:4d:aa:00:34: 15:bd:34:6b:3e:de:e9:f7:df:96:fa:36:c3:74:ee:3d:e1:9e: 5e:f2:37:88:f3:13:54:6a:9c:0f:36:01:e5:a3:3e:6c:79:4a: bd:21:9c:49:86:70:db:cd:20:e7:cf:e8:8e:77:c0:59:79:ab: 57:38:ea:72:3c:7a:54:a1:43:7a:87:d6:db:b7:f5:a7:04:53: af:87:a3:10:02:eb:bc:03:35:7b:07:50:f8:88:c4:00:cb:ee: 30:b9:4f:79:f5:01:7c:9c:70:0e:84:50:97:41:8d:c9:33:a2: fd:d7:f3:02:23:93:72:45:bb:30:6d:70:57:a3:66:38:84:5e: 96:8c:27:2c:94:2e:a3:ad:95:50:5c:bd:3d:46:18:b9:fb:cb: a6:8c:21:4f:36:41:58:e4:38:17:d8:8a:34:3a:3a:ec:42:b5: 24:f8:bd:45:ba:26:fa:4b:49:ee:02:f5:67:21:35:c9:43:26: 1e:51:d2:8d -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUS7bBp0Jmf0hqgOc4k2Vh5B/jFFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY5NTg1NDUwQTdGOTIxQUIzQjg0NUQ0NEQ3RUNGNTVF Q0RERjdBOTAeFw0yNTA0MjcwMzI4NDRaFw0yNTA0MjgwNjQxNDRaMDMxMTAvBgNV BAMTKEM5NEM5NUMyNkEwRDBFMDg2QTBEMkRCM0U1MkNERThBRDMzRjhEMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBo/iWyoKGin815qgvaYNtSJvI MUEb0V1UD5w8AyGq9dnUZIozGIPZUhqhjHAdLqUSNKR2jvkqjZ7lqfmDQzMCoU18 zh9JU+gw91ELfIt1ZmFNQnjQn2tdzsDfefOiAHQaZZUKS9xPlnEOPBGc8U0EZa00 Y0jlMW2Z1H2phyUNfYp6Rex3J4w61p2+Y4/QJrK9GHVzCd+9uN5/k52Gx9x4Q2nd ilDXJDzm1kBRiz21cSZ93v8cr5gopVytOs7J5R4+hwcN3P2ZPkKlgdBEpWdA1xYP ScYznPs/KA94BWID5YHF+ENt+6m1JC92KVNQwUnJCe/h663UHS2i4smWmXPLAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUyUyVwmoNDghqDS2z5SzeitM/jSswHwYDVR0j BBgwFoAUX5WFRQp/khqzuEXUTX7PVezd96kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzIvNUY5NTg1NDUwQTdGOTIxQUIzQjg0NUQ0NEQ3RUNGNTVFQ0RERjdBOS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNUY5NTg1NDUwQTdGOTIxQUIzQjg0NUQ0NEQ3RUNGNTVFQ0RE RjdBOS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMi81Rjk1ODU0NTBBN0Y5MjFBQjNC ODQ1RDQ0RDdFQ0Y1NUVDRERGN0E5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0/Ia85PqiBySZVHgcd+ Z9ZcRwv4tB76mR/09de2Ct1NbqkqfsHFYT+oyPziZZXTXeFlGMG+0y2RyORJ2OvV T6Dout5NqgA0Fb00az7e6ffflvo2w3TuPeGeXvI3iPMTVGqcDzYB5aM+bHlKvSGc SYZw280g58/ojnfAWXmrVzjqcjx6VKFDeofW27f1pwRTr4ejEALrvAM1ewdQ+IjE AMvuMLlPefUBfJxwDoRQl0GNyTOi/dfzAiOTckW7MG1wV6NmOIRelownLJQuo62V UFy9PUYYufvLpowhTzZBWOQ4F9iKNDo67EK1JPi9Rbom+ktJ7gL1ZyE1yUMmHlHS jQ== -----END CERTIFICATE-----Generated at Sun Apr 27 05:51:46 2025 by rpki-client