$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft File: B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft (raw, json) Hash identifier: HlR2K85wxHD0NSThXjR8PUBVbPeqa2YADf/01sWQfN8= Subject key identifier: 29:EC:C5:CA:C6:12:B0:C3:DF:34:20:95:81:48:F8:7B:64:62:0F:42 Authority key identifier: B9:75:96:A9:0E:CE:84:DC:11:5D:E5:53:E8:98:A9:B2:2A:36:C9:C4 Certificate issuer: /CN=B97596A90ECE84DC115DE553E898A9B22A36C9C4 Certificate serial: 5E70D6568A51BE5B5C51E0224853E65574F932FA Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft Manifest number: 6D Signing time: Sun 27 Apr 2025 13:32:35 +0000 Manifest this update: Sun 27 Apr 2025 13:27:35 +0000 Manifest next update: Mon 28 Apr 2025 17:30:35 +0000 Files and hashes: 1: 326130393a353463333a3a2f33322d3438203d3e20323135313437.roa (hash: Hh49k+Xt2ffEnf+1AdAQ2KRXHiXFSnVa9rayhA3bylc=) 2: 326130393a353463333a613034663a3a2f34382d3438203d3e20323135313437.roa (hash: DYKApsC0Xy9yKLi3q0BaMZa16VHMvjlxYhlK7Vyadxk=) 3: B97596A90ECE84DC115DE553E898A9B22A36C9C4.crl (hash: K62sN4Ke3+/T8pXbdj2zVqCCmhAkIUQExRCIS5tmgAo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:70:d6:56:8a:51:be:5b:5c:51:e0:22:48:53:e6:55:74:f9:32:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B97596A90ECE84DC115DE553E898A9B22A36C9C4 Validity Not Before: Apr 27 13:27:35 2025 GMT Not After : Apr 28 17:30:35 2025 GMT Subject: CN=29ECC5CAC612B0C3DF3420958148F87B64620F42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:53:16:3b:d4:a1:5c:56:b3:e0:09:b5:72:34: 57:ff:6f:b1:ec:41:f1:d0:d7:25:20:d9:dd:a2:5f: b5:48:d5:18:36:92:ab:7b:a5:b2:0c:43:09:50:c0: 11:97:9a:87:67:80:e3:6d:79:44:6d:21:43:11:bc: 52:3b:04:45:05:87:e3:86:86:d4:92:79:4c:f7:ba: 7c:90:73:2c:4c:5f:36:f2:06:49:bc:db:8a:76:81: 11:d2:06:e4:b8:a6:6e:8e:8c:71:b7:f1:44:cf:23: de:56:de:32:4c:f6:e4:b8:67:f3:01:b9:4a:3a:4d: ca:38:d2:9c:65:ff:e3:2c:4c:23:a4:93:d3:09:f0: e2:d8:8a:67:ef:eb:13:4b:1b:c2:81:cf:3e:2a:5d: 4a:1e:e2:15:2e:88:e9:d2:5e:85:63:45:99:0f:d1: ef:2b:84:ef:45:dc:d6:e1:eb:34:8e:b1:98:b9:c2: 12:ac:43:91:92:d0:16:f0:b7:ea:f9:d8:f2:f9:0e: 16:a3:09:8a:11:25:3f:f0:34:52:f4:9d:a5:fc:f9: 86:bf:e4:f0:e4:af:12:42:a7:3b:16:77:22:f5:62: 5f:be:2b:f8:19:8f:90:83:d7:74:7a:2f:bc:b7:17: 05:f8:97:79:f3:17:df:74:0d:c1:a9:28:8d:42:a7: c1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EC:C5:CA:C6:12:B0:C3:DF:34:20:95:81:48:F8:7B:64:62:0F:42 X509v3 Authority Key Identifier: keyid:B9:75:96:A9:0E:CE:84:DC:11:5D:E5:53:E8:98:A9:B2:2A:36:C9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:0a:30:2b:c2:ca:90:df:96:a7:d0:33:f3:9d:74:dc:ba:d9: e2:4f:aa:ce:8a:3f:e7:4c:35:53:ab:42:bb:6f:c0:bd:0c:62: e2:10:cb:c0:b0:63:82:29:d6:2c:eb:e4:a9:09:ef:1f:8f:e6: f9:ec:3a:b7:42:fa:47:39:42:6c:58:ff:b5:61:45:fc:b6:4d: ec:db:69:85:33:ef:f7:64:02:75:74:20:c9:b6:9d:3f:61:32: d7:c3:7d:3c:c9:b0:6e:0f:ba:51:06:7d:bd:69:04:46:2d:1a: d7:46:d2:83:26:aa:77:39:a2:14:53:d7:53:40:ae:d2:d9:85: 0d:5d:77:6d:f8:ff:02:ff:ed:0a:64:6c:21:6f:62:7c:cd:99: 5e:c2:c7:4e:93:44:92:e5:dd:60:e9:cf:be:cd:0c:1f:43:e3: 39:89:37:47:f8:c6:ab:31:7c:e6:c2:cb:76:d8:9f:cd:27:73: 19:04:65:0b:59:8a:2f:37:32:db:db:ed:37:9b:f6:00:9f:6f: 59:cc:8a:48:09:e7:f3:ea:56:21:cf:45:8c:1f:e6:c3:97:18: 05:3a:59:23:d6:8a:49:8e:51:c4:f3:fe:67:dd:e6:f2:c6:42: c1:a1:51:ff:8b:8e:26:cf:32:52:3e:04:5b:3d:1a:e0:21:20: de:50:79:29 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUXnDWVopRvltcUeAiSFPmVXT5MvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3NTk2QTkwRUNFODREQzExNURFNTUzRTg5OEE5QjIy QTM2QzlDNDAeFw0yNTA0MjcxMzI3MzVaFw0yNTA0MjgxNzMwMzVaMDMxMTAvBgNV BAMTKDI5RUNDNUNBQzYxMkIwQzNERjM0MjA5NTgxNDhGODdCNjQ2MjBGNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGUxY71KFcVrPgCbVyNFf/b7Hs QfHQ1yUg2d2iX7VI1Rg2kqt7pbIMQwlQwBGXmodngONteURtIUMRvFI7BEUFh+OG htSSeUz3unyQcyxMXzbyBkm824p2gRHSBuS4pm6OjHG38UTPI95W3jJM9uS4Z/MB uUo6Tco40pxl/+MsTCOkk9MJ8OLYimfv6xNLG8KBzz4qXUoe4hUuiOnSXoVjRZkP 0e8rhO9F3Nbh6zSOsZi5whKsQ5GS0Bbwt+r52PL5DhajCYoRJT/wNFL0naX8+Ya/ 5PDkrxJCpzsWdyL1Yl++K/gZj5CD13R6L7y3FwX4l3nzF990DcGpKI1Cp8FZAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUKezFysYSsMPfNCCVgUj4e2RiD0IwHwYDVR0j BBgwFoAUuXWWqQ7OhNwRXeVT6Jipsio2ycQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzMvQjk3NTk2QTkwRUNFODREQzExNURFNTUzRTg5OEE5QjIyQTM2QzlDNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQjk3NTk2QTkwRUNFODREQzExNURFNTUzRTg5OEE5QjIyQTM2 QzlDNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1m MDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvMy9COTc1OTZBOTBFQ0U4NERDMTE1 REU1NTNFODk4QTlCMjJBMzZDOUM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyAowK8LKkN+Wp9Az8510 3LrZ4k+qzoo/50w1U6tCu2/AvQxi4hDLwLBjginWLOvkqQnvH4/m+ew6t0L6RzlC bFj/tWFF/LZN7NtphTPv92QCdXQgybadP2Ey18N9PMmwbg+6UQZ9vWkERi0a10bS gyaqdzmiFFPXU0Cu0tmFDV13bfj/Av/tCmRsIW9ifM2ZXsLHTpNEkuXdYOnPvs0M H0PjOYk3R/jGqzF85sLLdtifzSdzGQRlC1mKLzcy29vtN5v2AJ9vWcyKSAnn8+pW Ic9FjB/mw5cYBTpZI9aKSY5RxPP+Z93m8sZCwaFR/4uOJs8yUj4EWz0a4CEg3lB5 KQ== -----END CERTIFICATE-----Generated at Mon Apr 28 02:01:28 2025 by rpki-client