$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: Oe0VCytMV2DLgaaqTvvHDu9DxAVjKXln80Ui9ajeL8I= Subject key identifier: 01:3B:EA:AF:C4:95:CD:A2:A3:00:73:5B:57:DC:C1:45:CA:7B:E8:7D Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 328E22B336DAEDE63C85945B1F849B25D1402C1D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 0214 Signing time: Mon 28 Apr 2025 11:14:38 +0000 Manifest this update: Mon 28 Apr 2025 11:09:38 +0000 Manifest next update: Tue 29 Apr 2025 14:44:38 +0000 Files and hashes: 1: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: PVZKgqPd5+uP3TYw9hGf7VyM5ONnTlscGi8VEBQ1P0M=) 2: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: RA+L2a9rUnQEkE0h3dE9SdgUVHKokLJZl3eEmnwupDU=) 3: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: dUzgpny38MghrKpugSdB9dzvd5zDywxo+PBsCyfJHn4=) 4: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: kUd+OV7q9DAowS2L3/fdq/oS4HUMTFtScny+gWU7CG0=) 5: 326131343a316563373a663030653a3a2f34382d3438203d3e203336383332.roa (hash: 0dTOq5r3nzcU4nhnM0SPSmfHWBkaaGJU3KJhAxTcvLU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 14:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:8e:22:b3:36:da:ed:e6:3c:85:94:5b:1f:84:9b:25:d1:40:2c:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Apr 28 11:09:38 2025 GMT Not After : Apr 29 14:44:38 2025 GMT Subject: CN=013BEAAFC495CDA2A300735B57DCC145CA7BE87D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a3:b5:00:63:2b:23:b2:aa:dc:ab:24:ee:23: c6:4f:f9:87:2d:19:4a:47:04:84:01:23:e2:9e:e1: d5:92:95:0b:39:d3:29:61:0f:b2:b4:3b:2f:e8:11: 02:eb:0a:ce:46:6b:82:a5:2f:62:15:40:1d:ca:c6: 56:45:49:46:e1:d5:18:8a:b5:e0:bf:0b:73:59:56: 29:29:29:20:9d:73:b7:aa:77:41:8d:f8:1d:bc:ad: 3c:24:c5:6d:8d:39:57:59:ab:2f:d6:bd:73:4b:5b: 11:00:c6:6e:ff:2b:5b:6e:73:50:cb:eb:2e:34:4e: 20:5d:6f:82:51:ce:a4:09:8b:47:5f:52:b4:f9:81: 39:86:53:78:6f:3c:70:5f:35:0a:4f:81:ed:49:78: 66:f6:47:ac:ec:eb:ed:f2:0c:99:4e:91:8f:1a:44: 52:a6:ae:18:e5:54:14:0b:b9:8a:2e:69:b4:ba:f5: b5:c4:ae:40:06:07:41:d3:ae:2f:cf:8e:87:f4:a2: b5:87:16:ed:00:0d:34:bc:15:50:7f:58:af:e8:dd: 20:97:5c:eb:68:ec:76:e2:47:5b:72:0f:3d:3b:d8: a0:a1:3a:7a:09:9c:cc:e3:06:be:a0:f7:e9:ff:67: a8:60:5d:15:dc:4c:80:f1:fa:24:6f:80:b4:22:9d: bf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:3B:EA:AF:C4:95:CD:A2:A3:00:73:5B:57:DC:C1:45:CA:7B:E8:7D X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:ea:03:e2:06:91:bb:88:ce:61:47:1a:d0:e8:8b:af:08:3c: 3b:e1:4f:6e:00:9f:a0:d7:b6:fe:a9:f4:b2:19:23:fd:3b:ec: 45:3d:1d:93:44:7f:7a:71:da:83:c5:f2:64:51:b4:c7:f3:80: f3:84:c9:37:27:da:54:cf:3f:5d:9e:9a:c1:02:18:c7:ec:4b: 3f:33:9b:a8:aa:24:b8:0e:b0:07:3a:b0:81:0c:d9:80:91:af: 76:b6:2e:c5:83:f5:c4:20:30:a5:3b:77:07:3b:75:d2:83:07: f6:d4:18:5d:0d:37:07:bc:60:38:ab:7e:fe:63:73:35:84:9a: c6:06:65:c2:8c:4a:76:63:93:e6:d4:6a:fc:6e:29:b1:e7:b1: 5f:44:68:a4:cd:3c:5c:a9:33:e8:d0:73:97:0f:33:a2:84:cf: 77:ec:dd:a4:28:d6:cd:bf:1a:6a:85:c4:a6:f0:08:ac:45:e5: 2a:fc:64:f7:64:5f:e2:48:63:06:51:9e:a3:89:ae:6f:d3:9b: f1:53:7a:21:5e:0e:3b:ca:a9:5e:48:a0:4c:aa:93:e4:8b:44: 84:b9:4c:38:5b:5e:1b:22:63:35:00:b5:17:3f:bb:8b:0c:13: da:ce:35:eb:a7:ec:ce:f0:d6:bc:37:ae:7d:ec:d7:8f:c7:4e: 3e:e1:54:31 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMo4iszba7eY8hZRbH4SbJdFALB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNTA0MjgxMTA5MzhaFw0yNTA0MjkxNDQ0MzhaMDMxMTAvBgNV BAMTKDAxM0JFQUFGQzQ5NUNEQTJBMzAwNzM1QjU3RENDMTQ1Q0E3QkU4N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDo7UAYysjsqrcqyTuI8ZP+Yct GUpHBIQBI+Ke4dWSlQs50ylhD7K0Oy/oEQLrCs5Ga4KlL2IVQB3KxlZFSUbh1RiK teC/C3NZVikpKSCdc7eqd0GN+B28rTwkxW2NOVdZqy/WvXNLWxEAxm7/K1tuc1DL 6y40TiBdb4JRzqQJi0dfUrT5gTmGU3hvPHBfNQpPge1JeGb2R6zs6+3yDJlOkY8a RFKmrhjlVBQLuYouabS69bXErkAGB0HTri/Pjof0orWHFu0ADTS8FVB/WK/o3SCX XOto7HbiR1tyDz072KChOnoJnMzjBr6g9+n/Z6hgXRXcTIDx+iRvgLQinb8vAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUATvqr8SVzaKjAHNbV9zBRcp76H0wHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBY6gPi BpG7iM5hRxrQ6IuvCDw74U9uAJ+g17b+qfSyGSP9O+xFPR2TRH96cdqDxfJkUbTH 84DzhMk3J9pUzz9dnprBAhjH7Es/M5uoqiS4DrAHOrCBDNmAka92ti7Fg/XEIDCl O3cHO3XSgwf21BhdDTcHvGA4q37+Y3M1hJrGBmXCjEp2Y5Pm1Gr8bimx57FfRGik zTxcqTPo0HOXDzOihM937N2kKNbNvxpqhcSm8AisReUq/GT3ZF/iSGMGUZ6jia5v 05vxU3ohXg47yqleSKBMqpPki0SEuUw4W14bImM1ALUXP7uLDBPazjXrp+zO8Na8 N6597NePx04+4VQx -----END CERTIFICATE-----Generated at Tue Apr 29 02:27:43 2025 by rpki-client