$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: UAQS1gDZZw5n6+3dP2MIr8z0Z36fhQou+s16yIYYdbI= Subject key identifier: 57:5A:21:79:47:01:4E:9F:6A:D4:A3:89:E9:C6:FA:27:A2:70:C7:1A Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 4100CAAEF04DA7FB688D24B3B3C3977F1DA2C995 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 0119 Signing time: Sat 26 Apr 2025 03:24:29 +0000 Manifest this update: Sat 26 Apr 2025 03:19:29 +0000 Manifest next update: Sun 27 Apr 2025 03:25:29 +0000 Files and hashes: 1: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: /QxjD03xEid/qifRFZJYPdRYAXl5BcSzNXjpwyE+9lo=) 2: 326130623a346530343a3a2f33322d3438203d3e203236393534.roa (hash: LizvwJL2nprToghg5qQqGpfO97UmahWuyDJ1ZaaEJS0=) 3: 5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer (hash: xVnvGBOQAGx7ddcmxacteZKEbUgAqtkW3B5rWiVC4Gw=) 4: 36322e3138322e3139322e302f32312d3234203d3e203236393534.roa (hash: Ik7anBwPgCuhmGi57S9xoCnrcZASk7NJHdOlyprymaY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 03:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:00:ca:ae:f0:4d:a7:fb:68:8d:24:b3:b3:c3:97:7f:1d:a2:c9:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Apr 26 03:19:29 2025 GMT Not After : Apr 27 03:25:29 2025 GMT Subject: CN=575A217947014E9F6AD4A389E9C6FA27A270C71A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fd:37:77:e8:3e:a6:d6:d8:3b:58:19:fa:98: c7:dc:a5:64:96:91:4b:1d:76:bf:a4:6c:15:3d:29: 8b:fe:7a:5e:6f:a0:5c:80:ad:7a:8f:51:bd:5e:bc: de:59:02:ab:af:2d:dc:f2:11:65:d8:8f:f8:76:eb: 3b:6d:66:8d:1a:46:1a:2c:cc:7e:bd:aa:13:5d:d6: 28:4a:b6:a0:92:5b:88:f9:40:46:f9:2d:14:41:7a: 5f:ae:9d:e1:a9:fd:36:fc:04:89:6d:8c:66:ce:04: 07:0b:24:f6:08:8a:bd:45:0a:56:b1:98:a2:ab:d5: e3:0f:12:16:10:e6:46:4a:09:bd:6f:c2:1e:3d:00: b3:1d:df:9a:b8:a8:85:4c:29:83:05:5a:16:22:74: 3d:19:2f:44:d6:07:63:c3:3c:e6:de:13:60:d0:21: 27:cc:e5:50:76:ff:f4:c8:c4:a7:92:ae:49:a0:8e: 38:1c:de:af:49:9a:c7:a0:fe:53:44:9d:0e:73:0f: 68:aa:a0:07:2e:ba:4f:52:f8:ca:45:cc:ab:ee:78: 09:4d:89:14:1a:13:49:48:1f:ec:13:6c:43:4a:20: c1:05:49:d2:58:21:e3:b9:37:bf:f9:30:68:cb:9f: bb:93:b6:d1:b8:3d:b1:0f:af:a2:a8:3f:27:3d:aa: ea:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5A:21:79:47:01:4E:9F:6A:D4:A3:89:E9:C6:FA:27:A2:70:C7:1A X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:fc:f0:4a:5d:7e:c9:ee:6d:46:19:4c:ac:d9:c2:40:af:81: b3:e8:25:7a:20:cb:9b:8f:c2:97:84:c2:f2:a5:38:70:6e:a4: 83:03:03:87:ef:d9:ea:03:5e:30:a0:fb:58:50:a8:c9:06:48: b2:98:f7:02:c4:1d:9f:54:f8:bb:f9:52:cc:93:4d:36:8f:61: 88:42:ae:63:b9:75:00:7a:16:28:79:89:71:02:71:74:ba:8d: 3c:77:51:03:5c:25:71:1a:1f:6e:c6:1c:a4:19:ec:b4:2e:1c: d7:d4:cd:a1:81:e7:ca:98:f5:f8:30:cb:ad:a7:f6:4c:ae:c3: f7:fb:60:a7:51:25:53:13:ee:76:3e:a3:4f:fb:fd:a0:19:c7: 82:01:e4:84:fc:e0:65:83:b2:b0:f3:ef:80:de:c7:12:85:a8: 92:ba:e1:99:2b:4e:91:9e:3d:77:48:51:62:e1:11:68:f8:52: 95:69:01:45:d1:e9:e5:d0:a2:a2:28:35:b8:54:f4:b6:2f:61: a1:8b:bb:8e:78:76:79:32:91:4c:74:02:1f:96:d6:80:bb:1a: 4e:c6:37:d2:bd:1d:bf:ec:49:91:5c:4a:a5:76:3a:01:18:b6: 47:e9:98:fc:72:98:24:53:72:dd:2a:d8:e4:91:2e:85:2c:25: 74:3a:51:be -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQQDKrvBNp/tojSSzs8OXfx2iyZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNTA0MjYwMzE5MjlaFw0yNTA0MjcwMzI1MjlaMDMxMTAvBgNV BAMTKDU3NUEyMTc5NDcwMTRFOUY2QUQ0QTM4OUU5QzZGQTI3QTI3MEM3MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC/Td36D6m1tg7WBn6mMfcpWSW kUsddr+kbBU9KYv+el5voFyArXqPUb1evN5ZAquvLdzyEWXYj/h26zttZo0aRhos zH69qhNd1ihKtqCSW4j5QEb5LRRBel+uneGp/Tb8BIltjGbOBAcLJPYIir1FClax mKKr1eMPEhYQ5kZKCb1vwh49ALMd35q4qIVMKYMFWhYidD0ZL0TWB2PDPObeE2DQ ISfM5VB2//TIxKeSrkmgjjgc3q9Jmseg/lNEnQ5zD2iqoAcuuk9S+MpFzKvueAlN iRQaE0lIH+wTbENKIMEFSdJYIeO5N7/5MGjLn7uTttG4PbEPr6KoPyc9qurHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUV1oheUcBTp9q1KOJ6cb6J6JwxxowHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/zwSl1+ye5tRhlMrNnC QK+Bs+gleiDLm4/Cl4TC8qU4cG6kgwMDh+/Z6gNeMKD7WFCoyQZIspj3AsQdn1T4 u/lSzJNNNo9hiEKuY7l1AHoWKHmJcQJxdLqNPHdRA1wlcRofbsYcpBnstC4c19TN oYHnypj1+DDLraf2TK7D9/tgp1ElUxPudj6jT/v9oBnHggHkhPzgZYOysPPvgN7H EoWokrrhmStOkZ49d0hRYuERaPhSlWkBRdHp5dCioig1uFT0ti9hoYu7jnh2eTKR THQCH5bWgLsaTsY30r0dv+xJkVxKpXY6ARi2R+mY/HKYJFNy3SrY5JEuhSwldDpR vg== -----END CERTIFICATE-----Generated at Sat Apr 26 20:54:22 2025 by rpki-client