$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft File: A816FDA8ADEC8085A8A348E698709DE583B219B5.mft (raw, json) Hash identifier: DJFcUa9P1e01ge5lT2oc+0mhOJTHHthU1X+CyTWAF4g= Subject key identifier: 01:08:81:59:BB:CB:6D:C6:CC:1F:73:B3:BE:57:7B:C5:B3:29:B6:A5 Authority key identifier: A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5 Certificate issuer: /CN=A816FDA8ADEC8085A8A348E698709DE583B219B5 Certificate serial: 0DA7A603F19D79C08D9E9A5BD82CC076F7C8F3C1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft Manifest number: 02E2 Signing time: Mon 28 Apr 2025 08:44:31 +0000 Manifest this update: Mon 28 Apr 2025 08:39:31 +0000 Manifest next update: Tue 29 Apr 2025 08:58:31 +0000 Files and hashes: 1: A816FDA8ADEC8085A8A348E698709DE583B219B5.crl (hash: N84gKSFcoKNbWOBPPaBi7Ksoj98CZQJNNPmCTZBb5pY=) 2: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: qaHIJSPkxJsqQxmrUEOF/0vyCpR/vYUBJ2KiKF+IkLk=) 3: 326130373a353463373a356630303a3a2f34302d3438203d3e20323135353737.roa (hash: Ba5xfWqOndYVE5HvV9FAMJv5ExmemcLNBu1Yv2cHUgw=) 4: 326130373a353463373a353430303a3a2f33382d3338203d3e20323136343535.roa (hash: WgAgPO7m2PRtW/hhLgCh/LUbstT+o0+84QgZ+UQ8JTY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 06:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:a7:a6:03:f1:9d:79:c0:8d:9e:9a:5b:d8:2c:c0:76:f7:c8:f3:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A816FDA8ADEC8085A8A348E698709DE583B219B5 Validity Not Before: Apr 28 08:39:31 2025 GMT Not After : Apr 29 08:58:31 2025 GMT Subject: CN=01088159BBCB6DC6CC1F73B3BE577BC5B329B6A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f7:03:4a:a3:92:2d:32:05:b9:af:aa:b8:8f: e1:09:80:3f:e6:c5:07:c9:b7:db:d4:c0:f4:67:7e: e0:31:b4:cf:7c:d7:73:61:fb:8e:33:b6:e5:d4:31: d6:53:a2:1d:72:27:dd:1d:c3:51:60:31:bd:a8:58: 41:8c:f1:57:ba:4f:ad:64:13:64:bc:f6:57:07:cd: de:bf:40:0e:80:f4:45:b3:70:65:bb:fb:8b:9c:f5: 08:d0:5f:65:00:89:96:36:8f:73:47:c1:86:77:e2: fe:02:23:4a:b9:64:93:70:d8:d8:ab:cc:27:10:e5: 8a:f0:26:83:59:19:cc:19:8d:19:0e:a4:2b:75:06: 58:50:cc:45:cf:f5:18:d7:51:db:ea:45:90:4e:0b: 53:9e:ef:a5:44:ba:c5:d2:b1:26:2b:1e:4c:8a:ff: 41:f9:9e:77:cf:37:57:96:26:a7:5e:c2:70:19:df: b1:47:63:6c:f0:7c:43:d6:66:fe:74:c4:6a:50:34: 97:e6:a8:fd:13:98:10:fc:34:7a:6a:dd:18:09:76: b2:c9:9d:9e:74:5e:da:0d:43:e1:12:b1:8e:9a:26: 60:60:aa:c2:33:e9:b4:96:80:99:34:57:16:43:bc: 2a:fe:79:c9:ec:cf:23:d3:38:5e:e6:e3:84:28:2a: 07:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:08:81:59:BB:CB:6D:C6:CC:1F:73:B3:BE:57:7B:C5:B3:29:B6:A5 X509v3 Authority Key Identifier: keyid:A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c0:1e:1e:c1:e4:63:ef:19:5b:1b:65:83:41:11:c9:a6:42: a0:96:6e:c2:ea:c3:1c:d3:d0:74:c6:e7:e9:e0:4d:86:47:57: 58:b5:73:39:ca:d5:a5:74:0c:75:ef:c9:82:f3:70:cc:e8:00: c2:82:17:1a:db:34:cd:ab:e2:13:aa:b4:53:bc:37:c4:16:d4: 3e:5b:a0:56:ee:b9:e9:c5:9c:a2:02:f6:36:a9:f4:e4:b4:1e: af:25:f8:3a:5f:fa:a6:cb:63:97:ba:37:cf:2c:67:17:27:d7: 88:88:ec:61:e6:89:2b:b0:08:c3:40:8c:55:a5:b2:af:c1:fd: da:93:86:6d:e8:f9:8e:3d:72:ca:aa:30:b1:70:e8:01:3f:91: d4:63:83:9f:b2:0b:05:09:df:72:a3:43:2c:02:e1:23:6d:8c: ad:e0:c7:c4:e8:06:08:ab:ed:5b:10:e3:af:94:fb:05:12:42: 50:f5:52:09:32:04:c1:ea:5d:3a:df:37:6e:2c:69:a7:7f:fe: 6d:2e:ff:5a:36:a6:91:b1:0f:a9:87:3e:4d:df:9f:7a:87:4c: e3:4b:0d:db:02:99:ce:0a:7b:6f:65:86:f1:07:e7:79:b1:1b: 0f:1b:43:44:69:87:89:ce:85:c0:06:28:0e:79:a0:86:16:95: 24:a9:95:11 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDaemA/GdecCNnppb2CzAdvfI88EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgxNkZEQThBREVDODA4NUE4QTM0OEU2OTg3MDlERTU4 M0IyMTlCNTAeFw0yNTA0MjgwODM5MzFaFw0yNTA0MjkwODU4MzFaMDMxMTAvBgNV BAMTKDAxMDg4MTU5QkJDQjZEQzZDQzFGNzNCM0JFNTc3QkM1QjMyOUI2QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU9wNKo5ItMgW5r6q4j+EJgD/m xQfJt9vUwPRnfuAxtM9813Nh+44ztuXUMdZToh1yJ90dw1FgMb2oWEGM8Ve6T61k E2S89lcHzd6/QA6A9EWzcGW7+4uc9QjQX2UAiZY2j3NHwYZ34v4CI0q5ZJNw2Nir zCcQ5YrwJoNZGcwZjRkOpCt1BlhQzEXP9RjXUdvqRZBOC1Oe76VEusXSsSYrHkyK /0H5nnfPN1eWJqdewnAZ37FHY2zwfEPWZv50xGpQNJfmqP0TmBD8NHpq3RgJdrLJ nZ50XtoNQ+ESsY6aJmBgqsIz6bSWgJk0VxZDvCr+ecnszyPTOF7m44QoKge1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUAQiBWbvLbcbMH3Ozvld7xbMptqUwHwYDVR0j BBgwFoAUqBb9qK3sgIWoo0jmmHCd5YOyGbUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzAvQTgxNkZEQThBREVDODA4NUE4QTM0OEU2OTg3MDlERTU4M0IyMTlCNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9BODE2RkRBOEFERUM4MDg1QThBMzQ4RTY5 ODcwOURFNTgzQjIxOUI1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8wL0E4MTZGREE4 QURFQzgwODVBOEEzNDhFNjk4NzA5REU1ODNCMjE5QjUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArwB4e weRj7xlbG2WDQRHJpkKglm7C6sMc09B0xufp4E2GR1dYtXM5ytWldAx178mC83DM 6ADCghca2zTNq+ITqrRTvDfEFtQ+W6BW7rnpxZyiAvY2qfTktB6vJfg6X/qmy2OX ujfPLGcXJ9eIiOxh5okrsAjDQIxVpbKvwf3ak4Zt6PmOPXLKqjCxcOgBP5HUY4Of sgsFCd9yo0MsAuEjbYyt4MfE6AYIq+1bEOOvlPsFEkJQ9VIJMgTB6l063zduLGmn f/5tLv9aNqaRsQ+phz5N3596h0zjSw3bApnOCntvZYbxB+d5sRsPG0NEaYeJzoXA BigOeaCGFpUkqZUR -----END CERTIFICATE-----Generated at Mon Apr 28 13:14:21 2025 by rpki-client