$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft File: FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft (raw, json) Hash identifier: qnfCFOxr2PTA3SeDa3yMGOWZXT7R/MfsfeTWWjD3Mbc= Subject key identifier: 32:E0:77:D9:28:FE:59:54:09:BB:DC:4D:5E:BC:FE:7C:05:4F:11:5B Authority key identifier: FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B Certificate issuer: /CN=FA8F32A0B21DD2779315422B5A2184C649E03C0B Certificate serial: 01F06556CB3062263DA1D5F4645083F51E8B2C57 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft Manifest number: 03CA Signing time: Sun 27 Apr 2025 07:14:38 +0000 Manifest this update: Sun 27 Apr 2025 07:09:38 +0000 Manifest next update: Mon 28 Apr 2025 09:35:38 +0000 Files and hashes: 1: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: /CFUhpNUUZNwoRgflpnALQIis6DpR20ZsBTAXpcqHGA=) 2: FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl (hash: scidiRnRK3OWY8OPfyEm/pbnweSUaVaOErIdkqH0jUQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 00:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f0:65:56:cb:30:62:26:3d:a1:d5:f4:64:50:83:f5:1e:8b:2c:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA8F32A0B21DD2779315422B5A2184C649E03C0B Validity Not Before: Apr 27 07:09:38 2025 GMT Not After : Apr 28 09:35:38 2025 GMT Subject: CN=32E077D928FE595409BBDC4D5EBCFE7C054F115B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:57:c2:f2:fd:43:70:0c:e0:8f:c7:8c:8f:f6: bc:00:9f:5a:07:da:15:0c:17:31:18:3b:82:be:8b: 40:ab:c1:74:f6:62:a1:3c:93:82:dd:d4:88:c1:43: 79:ea:79:0a:d1:39:d3:a8:7d:f1:89:a3:0f:f6:e6: e9:12:aa:b4:3f:4b:da:82:5b:0e:ba:3b:4e:cb:a9: 88:09:94:2c:cb:91:29:2b:1f:bd:e1:af:af:60:23: 54:e6:95:d1:a8:cb:3c:93:bd:3f:d0:8a:f5:cd:95: d5:89:d3:07:39:16:39:43:f4:08:62:b8:34:00:c7: ad:9b:95:c6:a5:d7:30:8e:6b:8e:e3:3c:4c:79:c6: 77:95:5e:22:29:f0:b7:a6:60:d3:7a:e7:cb:bf:5f: f5:3c:90:0c:98:54:c8:14:d7:3e:f2:38:a2:cb:67: 9a:50:e7:34:42:db:b8:61:26:73:f1:87:01:2b:ef: 9d:2d:2a:71:10:92:c0:8c:b7:86:8f:41:bf:fc:a7: 25:19:42:7a:a3:4f:d1:06:f5:70:b3:2d:13:88:65: 87:5b:4a:30:1e:ed:93:7f:af:74:a1:04:f2:7b:43: bf:0b:ab:c0:4a:12:01:50:70:cb:22:ad:16:bc:c2: 9d:5d:87:1d:b2:12:90:23:93:b6:70:88:df:9d:26: 9a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E0:77:D9:28:FE:59:54:09:BB:DC:4D:5E:BC:FE:7C:05:4F:11:5B X509v3 Authority Key Identifier: keyid:FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:c9:e3:62:37:e0:9b:70:64:79:f2:0c:4b:be:8d:c9:38:07: 2f:e1:6a:52:55:92:84:75:0f:19:7f:46:f8:f7:8e:4f:1d:9b: ef:a2:93:d6:91:09:4e:00:a6:ea:c5:be:ac:aa:a2:a1:03:9d: 2b:13:5a:33:b3:29:39:49:59:dd:8a:0d:1a:e9:8f:3a:58:a1: bf:04:33:9f:d4:78:7d:c3:72:88:5f:d3:65:37:67:79:80:9e: 3c:65:1a:1d:9a:c7:0a:43:4b:15:7c:29:34:05:3d:34:97:14: 1a:40:f7:e0:c8:5e:a9:ca:80:7c:04:cc:3e:ec:98:26:83:2b: 30:1a:8f:f6:cb:44:5a:c3:88:c0:df:59:b8:fe:77:06:3d:c9: ab:ff:fa:4f:67:4f:d9:f2:d4:49:1e:71:9c:8b:63:84:5d:0a: 4e:68:c3:63:95:1c:13:91:e1:bd:05:2a:02:08:cb:a5:79:89: 9c:7f:76:18:f9:0d:d3:bf:bc:ad:52:27:77:e6:2a:d6:89:55: a3:2b:4a:91:d6:1e:25:1f:c8:ff:82:fc:da:89:77:2d:54:bf: b9:22:f4:ef:26:23:d9:17:1c:bf:57:9e:9d:37:40:ee:08:03: 4f:8d:bb:69:23:c3:5b:70:34:de:5d:5d:2b:18:2f:91:7b:79: 5f:c9:48:19 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUAfBlVsswYiY9odX0ZFCD9R6LLFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE4RjMyQTBCMjFERDI3NzkzMTU0MjJCNUEyMTg0QzY0 OUUwM0MwQjAeFw0yNTA0MjcwNzA5MzhaFw0yNTA0MjgwOTM1MzhaMDMxMTAvBgNV BAMTKDMyRTA3N0Q5MjhGRTU5NTQwOUJCREM0RDVFQkNGRTdDMDU0RjExNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBV8Ly/UNwDOCPx4yP9rwAn1oH 2hUMFzEYO4K+i0CrwXT2YqE8k4Ld1IjBQ3nqeQrROdOoffGJow/25ukSqrQ/S9qC Ww66O07LqYgJlCzLkSkrH73hr69gI1TmldGoyzyTvT/QivXNldWJ0wc5FjlD9Ahi uDQAx62blcal1zCOa47jPEx5xneVXiIp8LemYNN658u/X/U8kAyYVMgU1z7yOKLL Z5pQ5zRC27hhJnPxhwEr750tKnEQksCMt4aPQb/8pyUZQnqjT9EG9XCzLROIZYdb SjAe7ZN/r3ShBPJ7Q78Lq8BKEgFQcMsirRa8wp1dhx2yEpAjk7ZwiN+dJprZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUMuB32Sj+WVQJu9xNXrz+fAVPEVswHwYDVR0j BBgwFoAU+o8yoLId0neTFUIrWiGExkngPAswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzEvRkE4RjMyQTBCMjFERDI3NzkzMTU0MjJCNUEyMTg0QzY0OUUwM0MwQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9GQThGMzJBMEIyMUREMjc3OTMxNTQyMkI1 QTIxODRDNjQ5RTAzQzBCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8xL0ZBOEYzMkEw QjIxREQyNzc5MzE1NDIyQjVBMjE4NEM2NDlFMDNDMEIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFyeNi N+CbcGR58gxLvo3JOAcv4WpSVZKEdQ8Zf0b4945PHZvvopPWkQlOAKbqxb6sqqKh A50rE1ozsyk5SVndig0a6Y86WKG/BDOf1Hh9w3KIX9NlN2d5gJ48ZRodmscKQ0sV fCk0BT00lxQaQPfgyF6pyoB8BMw+7JgmgyswGo/2y0Raw4jA31m4/ncGPcmr//pP Z0/Z8tRJHnGci2OEXQpOaMNjlRwTkeG9BSoCCMuleYmcf3YY+Q3Tv7ytUid35irW iVWjK0qR1h4lH8j/gvzaiXctVL+5IvTvJiPZFxy/V56dN0DuCANPjbtpI8NbcDTe XV0rGC+Re3lfyUgZ -----END CERTIFICATE-----Generated at Sun Apr 27 13:10:52 2025 by rpki-client