$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft File: B6366F3DD14AC5399103961C30642E6779892C6C.mft (raw, json) Hash identifier: WLNdMCE0HyJ9/2hnqDxBjosYbEDHjZy4hiOjX1V8trU= Subject key identifier: 71:2F:84:8A:65:77:52:F6:9C:80:57:6F:FF:87:CB:36:D3:8D:51:74 Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C Certificate issuer: /CN=B6366F3DD14AC5399103961C30642E6779892C6C Certificate serial: 2DD8C4173C72E0310E02B05B0BFA3DC6970D279E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft Manifest number: 016D Signing time: Mon 28 Apr 2025 04:07:05 +0000 Manifest this update: Mon 28 Apr 2025 04:02:05 +0000 Manifest next update: Tue 29 Apr 2025 07:06:05 +0000 Files and hashes: 1: 326130363a313238333a386130303a3a2f34302d3438203d3e20323131303636.roa (hash: /Rv6Qyd4oJNesSRg3hY6FH8XM9bnDURMSVi/jtj0pWA=) 2: B6366F3DD14AC5399103961C30642E6779892C6C.crl (hash: gddm3NMg1J3lw9FdphjNe7B4m5VnsK9883FmH43M4yk=) 3: 326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa (hash: viX/3SQM4nfUuWRAgbcq7qnkCzLamDSQbyAAFuwSt0E=) 4: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (hash: dd3FrIdYxmcCZ+0yiqqDqpbbY31J+y6oBOm7qM8H0EU=) 5: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (hash: Bbj3dkfLCLvHSBOV2mo0X/dvVWVRNeC0CCNXaIH1NSU=) 6: 326130363a313238333a386330303a3a2f34302d3438203d3e20323131303636.roa (hash: Fozivs5VK4pgLoGEsqoGlUwV1cuRecwfPaBUsSrDB4Y=) 7: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (hash: NwxUM+Bu0lOfXqc/NSfMdy0y0UUCQqdUXqKBNCkgBgQ=) 8: 326130363a313238333a386230303a3a2f34302d3438203d3e20323131303636.roa (hash: HcR8I97oYThFv0VpxMGU5cj9rhive5rP2rR8SXDiybY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 03:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d8:c4:17:3c:72:e0:31:0e:02:b0:5b:0b:fa:3d:c6:97:0d:27:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C Validity Not Before: Apr 28 04:02:05 2025 GMT Not After : Apr 29 07:06:05 2025 GMT Subject: CN=712F848A657752F69C80576FFF87CB36D38D5174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a2:85:33:3d:47:71:d5:08:56:07:fe:19:48: 51:94:2a:d3:cf:82:a6:91:45:86:6f:1a:bc:9d:98: 09:29:4f:11:0b:85:24:b5:44:5e:94:3a:04:e5:8b: cb:25:15:e9:cd:29:12:71:24:fc:ef:e3:13:f2:89: 31:24:7b:88:93:09:8c:fc:70:db:e7:31:9e:e2:1e: b4:bd:52:87:12:9d:2c:56:ba:96:e6:dc:61:c9:2b: 00:d0:bd:ef:2b:c7:fa:ae:89:8f:2d:5e:8d:fa:c1: 8f:41:d1:5b:a1:a2:32:18:91:dd:0f:2a:3c:28:97: d8:92:0d:b3:b3:1d:5a:7d:71:eb:b3:86:7a:63:b6: 99:f1:90:48:ae:c0:fd:f6:f5:19:5c:00:7a:76:fa: ae:20:16:ab:03:72:c2:e2:7d:69:73:ee:bc:d4:df: 8d:9b:40:6c:bb:45:74:67:22:58:d5:a7:2b:d2:20: f2:e4:98:3b:dd:c2:67:ab:de:c8:2b:30:21:8d:a1: 98:25:c3:d3:a1:df:30:b0:df:0f:3c:20:2d:73:dc: a0:a7:b5:6b:5b:02:79:70:ca:77:c3:ee:f0:39:f9: cd:a6:53:0c:c5:4b:b9:fc:13:a3:b2:cd:ee:d8:05: ed:f4:29:df:15:6d:b7:64:6e:92:cc:df:c5:fd:41: f9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2F:84:8A:65:77:52:F6:9C:80:57:6F:FF:87:CB:36:D3:8D:51:74 X509v3 Authority Key Identifier: keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:7d:a4:06:66:bf:a7:61:e2:fe:7e:a6:23:23:f3:cc:1c:b9: 17:5e:89:d7:e3:40:a3:b2:42:19:45:1f:55:58:19:af:fb:7f: 3b:e7:ea:a3:7b:57:97:a6:0c:d3:48:c7:6b:8e:80:27:33:ae: 92:7b:1b:33:e7:44:80:73:0c:d5:02:31:55:c9:0e:dd:e6:7c: 11:91:e4:ae:37:28:d9:f3:82:da:d3:ef:f3:d5:e2:3f:54:cf: 47:a9:39:c7:b6:4c:4f:07:de:1e:4f:45:d8:dd:b2:d5:2e:09: 26:6d:07:13:03:d2:34:e8:57:7f:da:20:08:35:5b:be:d8:77: 18:fb:23:6f:71:b7:5e:41:cb:83:0c:82:4a:4a:3e:a0:f0:2e: 51:3f:d1:09:c9:04:57:e4:fb:36:9d:45:38:14:06:de:25:e9: a9:34:39:7c:c2:bf:09:fa:d5:aa:fe:19:8f:0f:32:99:c1:32: 29:cc:5a:2f:7a:c9:f0:76:90:54:9c:14:84:a1:f7:5d:4d:56: 02:44:30:90:ba:49:d0:50:08:1e:1c:5c:3f:eb:2b:32:ee:c1: bb:dd:8a:b9:29:5e:83:35:18:40:09:c2:35:87:87:82:83:6e: a4:cf:7e:6b:c3:05:35:6a:7c:ba:39:ac:59:01:57:aa:ec:58: 37:a8:7e:cd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULdjEFzxy4DEOArBbC/o9xpcNJ54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3 OTg5MkM2QzAeFw0yNTA0MjgwNDAyMDVaFw0yNTA0MjkwNzA2MDVaMDMxMTAvBgNV BAMTKDcxMkY4NDhBNjU3NzUyRjY5QzgwNTc2RkZGODdDQjM2RDM4RDUxNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGooUzPUdx1QhWB/4ZSFGUKtPP gqaRRYZvGrydmAkpTxELhSS1RF6UOgTli8slFenNKRJxJPzv4xPyiTEke4iTCYz8 cNvnMZ7iHrS9UocSnSxWupbm3GHJKwDQve8rx/quiY8tXo36wY9B0VuhojIYkd0P Kjwol9iSDbOzHVp9ceuzhnpjtpnxkEiuwP329RlcAHp2+q4gFqsDcsLifWlz7rzU 342bQGy7RXRnIljVpyvSIPLkmDvdwmer3sgrMCGNoZglw9Oh3zCw3w88IC1z3KCn tWtbAnlwynfD7vA5+c2mUwzFS7n8E6Oyze7YBe30Kd8VbbdkbpLM38X9QfndAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUcS+EimV3UvacgFdv/4fLNtONUXQwHwYDVR0j BBgwFoAUtjZvPdFKxTmRA5YcMGQuZ3mJLGwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzIvQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3OTg5MkM2Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvMS9CNjM2NkYzREQxNEFDNTM5OTEwMzk2MUMz MDY0MkU2Nzc5ODkyQzZDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi8yL0I2MzY2RjNE RDE0QUM1Mzk5MTAzOTYxQzMwNjQyRTY3Nzk4OTJDNkMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1faQG Zr+nYeL+fqYjI/PMHLkXXonX40CjskIZRR9VWBmv+3875+qje1eXpgzTSMdrjoAn M66Sexsz50SAcwzVAjFVyQ7d5nwRkeSuNyjZ84La0+/z1eI/VM9HqTnHtkxPB94e T0XY3bLVLgkmbQcTA9I06Fd/2iAINVu+2HcY+yNvcbdeQcuDDIJKSj6g8C5RP9EJ yQRX5Ps2nUU4FAbeJempNDl8wr8J+tWq/hmPDzKZwTIpzFovesnwdpBUnBSEofdd TVYCRDCQuknQUAgeHFw/6ysy7sG73Yq5KV6DNRhACcI1h4eCg26kz35rwwU1any6 OaxZAVeq7Fg3qH7N -----END CERTIFICATE-----Generated at Mon Apr 28 14:25:51 2025 by rpki-client