$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft File: D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft (raw, json) Hash identifier: pHZj9mIe4V5MXj2MfAj+yifOfmUPUW0ku+H/Ek1d65Q= Subject key identifier: DC:D6:3E:FD:9D:43:3E:B4:E2:F2:E3:89:5A:8B:6B:17:39:68:EA:25 Authority key identifier: D5:85:C9:65:DE:AE:D8:ED:3E:CA:AF:E1:89:BB:A5:88:38:99:D4:DB Certificate issuer: /CN=D585C965DEAED8ED3ECAAFE189BBA5883899D4DB Certificate serial: 602C3D2B882015186EDF7C59E047BEDA319A21F0 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft Manifest number: E5 Signing time: Sat 26 Apr 2025 15:25:10 +0000 Manifest this update: Sat 26 Apr 2025 15:20:10 +0000 Manifest next update: Sun 27 Apr 2025 18:54:10 +0000 Files and hashes: 1: 326130363a313238373a333a3a2f34382d3438203d3e203236303036.roa (hash: w5l+CabII55oIdXWCx1z3Pe4YPAruD0IwV5kDPe/Izw=) 2: 326130363a313238373a613030303a3a2f33362d3336203d3e2030.roa (hash: FjsYrEo0wEgNS89VaZKiwt5EudZo4T5v9dS11TtDpgA=) 3: D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.crl (hash: g9t+4p+tt2xHLPcr8KFtfDaEREb/lkD3uR6Umw+ofP0=) 4: 326130363a313238373a313a3a2f34382d3438203d3e203236303036.roa (hash: RRFtJdru0BMWcPpyQm75lctxeDIcv7Yna91EEvrVE94=) 5: 326130363a313238373a323a3a2f34382d3438203d3e203236303036.roa (hash: xMjHyR2jjzGKsZBr54akxLyksZAzhwNtCuo7fa289pA=) 6: 326130363a313238373a343a3a2f34382d3438203d3e203236303036.roa (hash: Ctd56m2rWeHWuAb0S/ld3PRKI+krAr55ECb4mHWz0ec=) 7: 326130363a313238373a3a2f34382d3438203d3e203236303036.roa (hash: thL3dmlPHCJX1QS3/ZL6JUaOsctEk/xQ5Wem6QfHJSw=) 8: 326130363a313238373a353a3a2f34382d3438203d3e203236303036.roa (hash: epec3uw8M1QNqA9uXsJCI0b7PlJjYk15VpY2YlD1pmo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.crl rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 07:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:2c:3d:2b:88:20:15:18:6e:df:7c:59:e0:47:be:da:31:9a:21:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D585C965DEAED8ED3ECAAFE189BBA5883899D4DB Validity Not Before: Apr 26 15:20:10 2025 GMT Not After : Apr 27 18:54:10 2025 GMT Subject: CN=DCD63EFD9D433EB4E2F2E3895A8B6B173968EA25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:95:06:af:61:c0:ab:f3:93:cc:7c:1a:a6: cf:6c:2a:9e:43:6b:b5:88:3f:4d:4b:1c:86:5e:d6: 47:1e:0f:5e:ad:8b:62:a1:b4:26:11:04:d1:fc:d2: 0f:d3:64:97:42:02:95:29:76:ef:34:b8:ef:65:de: cc:25:c1:02:2c:1d:2a:e2:7c:1b:ed:b1:2a:99:fa: 8d:ee:2a:52:c8:a6:2b:b6:0c:01:7e:4d:f3:e9:a9: 56:c3:ac:f8:89:cf:25:5d:8b:d8:30:c7:c7:47:b2: c7:7d:31:77:58:12:41:60:c1:1e:5e:b4:4d:5c:50: 44:45:f2:9b:84:14:10:75:9a:d0:91:5b:b2:16:92: b1:25:9d:9c:8e:36:c7:ed:6f:bc:f9:df:6d:15:12: 3a:ea:c3:4a:db:e1:e7:95:f7:69:ce:bd:ee:bc:d7: a4:a9:a2:76:11:50:58:20:d0:3e:8a:df:ab:38:fb: de:c1:2f:50:e7:95:f4:36:26:03:17:01:ac:1a:05: 16:0b:2d:94:98:f4:bb:d1:2e:52:ec:ff:e6:85:34: 92:f7:3c:1d:5c:d9:43:fa:9f:1c:dd:67:1c:64:fd: c0:56:b4:a2:e5:e3:92:74:ab:ab:29:4d:ed:b8:44: 56:d8:da:49:55:2e:8f:a9:cb:10:f6:f3:9b:40:13: 7c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D6:3E:FD:9D:43:3E:B4:E2:F2:E3:89:5A:8B:6B:17:39:68:EA:25 X509v3 Authority Key Identifier: keyid:D5:85:C9:65:DE:AE:D8:ED:3E:CA:AF:E1:89:BB:A5:88:38:99:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:a3:fd:c6:2c:60:62:6b:12:fd:27:d5:75:c6:18:d2:5d:6c: c6:b6:06:ab:41:98:f8:e6:22:8d:cd:5e:23:02:d7:41:e3:f8: be:7b:1e:58:9a:1f:db:2b:e2:08:a9:e5:82:08:73:df:33:87: 56:c4:08:ee:b1:7f:ac:36:1d:07:b1:e8:94:df:bc:75:ef:c2: 78:8a:ce:5d:f2:f5:b6:7a:11:13:fa:20:2a:7d:eb:b4:40:8a: 85:e5:79:b0:b0:75:b1:f9:37:64:07:f2:c3:55:d6:a3:7c:30: 19:f3:e2:5c:47:3f:74:90:13:4b:67:25:93:f7:12:26:88:f0: c1:0e:8a:aa:61:26:fe:28:73:84:18:93:ef:49:00:7c:a2:4f: 85:4d:85:63:ff:91:d0:22:34:7c:f2:61:f2:17:ce:87:aa:e8: ce:2b:7b:11:12:40:c3:64:c8:0b:ec:88:5b:2d:60:d9:d3:0a: 1b:81:ee:a9:dc:66:1e:ea:14:f4:14:56:a2:e2:47:ab:53:2c: bb:6e:d1:a1:3e:8e:31:21:39:54:55:0a:bd:40:3b:26:87:d3: 6d:c2:65:0c:67:ad:1d:e0:08:a7:b3:55:08:81:6c:3d:71:9f: 13:9d:8e:d8:c4:a4:a3:23:77:9d:a6:0d:e8:f2:7c:c7:84:68: fd:02:d9:b4 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUYCw9K4ggFRhu33xZ4Ee+2jGaIfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU4NUM5NjVERUFFRDhFRDNFQ0FBRkUxODlCQkE1ODgz ODk5RDREQjAeFw0yNTA0MjYxNTIwMTBaFw0yNTA0MjcxODU0MTBaMDMxMTAvBgNV BAMTKERDRDYzRUZEOUQ0MzNFQjRFMkYyRTM4OTVBOEI2QjE3Mzk2OEVBMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2IpUGr2HAq/OTzHwaps9sKp5D a7WIP01LHIZe1kceD16ti2KhtCYRBNH80g/TZJdCApUpdu80uO9l3swlwQIsHSri fBvtsSqZ+o3uKlLIpiu2DAF+TfPpqVbDrPiJzyVdi9gwx8dHssd9MXdYEkFgwR5e tE1cUERF8puEFBB1mtCRW7IWkrElnZyONsftb7z5320VEjrqw0rb4eeV92nOve68 16SponYRUFgg0D6K36s4+97BL1DnlfQ2JgMXAawaBRYLLZSY9LvRLlLs/+aFNJL3 PB1c2UP6nxzdZxxk/cBWtKLl45J0q6spTe24RFbY2klVLo+pyxD285tAE3zFAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU3NY+/Z1DPrTi8uOJWotrFzlo6iUwHwYDVR0j BBgwFoAU1YXJZd6u2O0+yq/hibuliDiZ1NswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTUzNjIzYzQtMzNiZC00MzhhLWE5M2UtMDE4ZDY1YzRl ODM3LzEvRDU4NUM5NjVERUFFRDhFRDNFQ0FBRkUxODlCQkE1ODgzODk5RDREQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvRDU4NUM5NjVERUFFRDhFRDNFQ0FBRkUxODlCQkE1ODgzODk5 RDREQi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81NTM2MjNjNC0z M2JkLTQzOGEtYTkzZS0wMThkNjVjNGU4MzcvMS9ENTg1Qzk2NURFQUVEOEVEM0VD QUFGRTE4OUJCQTU4ODM4OTlENERCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6P9xixgYmsS/SfVdcYY 0l1sxrYGq0GY+OYijc1eIwLXQeP4vnseWJof2yviCKnlgghz3zOHVsQI7rF/rDYd B7HolN+8de/CeIrOXfL1tnoRE/ogKn3rtECKheV5sLB1sfk3ZAfyw1XWo3wwGfPi XEc/dJATS2clk/cSJojwwQ6KqmEm/ihzhBiT70kAfKJPhU2FY/+R0CI0fPJh8hfO h6rozit7ERJAw2TIC+yIWy1g2dMKG4HuqdxmHuoU9BRWouJHq1Msu27RoT6OMSE5 VFUKvUA7JofTbcJlDGetHeAIp7NVCIFsPXGfE52O2MSkoyN3naYN6PJ8x4Ro/QLZ tA== -----END CERTIFICATE-----Generated at Sat Apr 26 18:27:08 2025 by rpki-client