$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft File: 893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft (raw, json) Hash identifier: mzcx3+W74TISOxtZPeEky/JbI1xOKMt+qXldNDPqMmU= Subject key identifier: 99:18:A4:00:31:81:87:C9:49:DA:CD:42:9C:34:F1:53:68:60:0B:48 Authority key identifier: 89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B Certificate issuer: /CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B Certificate serial: 0F740408278120271995C7B08FA223B38D11125E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft Manifest number: 19 Signing time: Mon 28 Apr 2025 12:59:08 +0000 Manifest this update: Mon 28 Apr 2025 12:54:08 +0000 Manifest next update: Tue 29 Apr 2025 16:11:08 +0000 Files and hashes: 1: 326131343a373538313a366664303a3a2f34342d3434203d3e20323135393334.roa (hash: vaAEu3pMRFdmKcI/nWa8WyzQWeHMb/mh9I6YRbEX9FY=) 2: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: v+wGdsPoD53cB+FPJFplibwWU1IDMTKf0BLLWvOrDJw=) 3: 893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl (hash: EThf/EO9mfDS/YgQdrT8Pu2yfZG/SRwr/iDrU6P7Hmk=) 4: 326131343a373538313a366665303a3a2f34342d3434203d3e20323134383431.roa (hash: bkcmt94VX2qT5AatBWPB20wqy19gXukXDxeJ3DXH2P8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 16:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:74:04:08:27:81:20:27:19:95:c7:b0:8f:a2:23:b3:8d:11:12:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B Validity Not Before: Apr 28 12:54:08 2025 GMT Not After : Apr 29 16:11:08 2025 GMT Subject: CN=9918A400318187C949DACD429C34F15368600B48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bf:16:3b:b2:1c:cb:91:0b:de:ca:2d:ea:4f: 9c:cb:f5:9f:2b:1a:cf:6b:6c:c2:07:36:90:c3:62: 13:99:a6:46:2a:36:fc:12:83:c7:b2:cd:f5:2f:cf: 47:18:d6:5b:fc:aa:71:98:64:41:2b:18:6f:f5:f8: 02:bd:d5:d4:20:c8:ba:35:82:70:61:cd:de:4d:b1: b5:fb:bc:73:9e:48:60:3f:91:41:07:6e:19:03:99: 59:57:fa:bb:10:20:c7:a1:9a:8b:2e:ac:ac:4a:2f: 16:69:19:bf:ce:c5:6e:3a:3c:86:a0:db:ab:d3:c9: 9b:2a:f6:3d:f1:29:22:f3:8a:e3:dd:12:ae:9b:5d: 46:7c:da:d6:b8:64:33:f0:ed:3b:29:a7:d9:4e:1d: 51:59:c6:3e:e3:f2:0f:a4:38:82:6b:cb:5f:65:7a: a7:0c:e4:34:44:b6:ad:6a:db:e0:a9:11:2f:27:40: 07:a2:02:89:4a:fa:95:a3:1e:63:7d:20:00:41:9f: 52:ac:60:b2:6c:0b:68:ed:1f:bd:9e:68:0c:b9:67: 3a:eb:40:85:a8:00:76:e4:e1:01:f8:48:ab:95:bc: 5d:a2:de:67:a6:2a:cc:5f:8e:5d:04:f8:c0:50:7e: 95:1b:76:98:18:ae:5b:92:b2:89:82:77:c1:0d:80: 84:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:18:A4:00:31:81:87:C9:49:DA:CD:42:9C:34:F1:53:68:60:0B:48 X509v3 Authority Key Identifier: keyid:89:3F:D4:1B:DE:22:6C:54:F2:AD:2B:3D:DA:19:C1:A0:B8:F1:20:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8acfa318-2a5c-4241-afbb-387d71e8c596/1/893FD41BDE226C54F2AD2B3DDA19C1A0B8F1206B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:77:2e:41:60:cf:32:e1:5a:64:17:ff:a4:05:9a:b9:5f:07: 38:42:7e:51:b3:d3:41:61:e3:22:c5:f5:39:01:e7:60:e3:17: 4f:99:59:f2:39:f9:c9:6a:17:1c:90:0e:dd:a1:b1:b9:f6:c2: c4:11:9d:4f:95:23:25:a6:80:a8:fa:b8:05:ca:fa:6b:56:5f: 62:5d:61:64:70:2d:68:f8:b4:f2:81:19:1d:60:52:ea:fe:78: c8:27:94:f9:b6:e4:8f:47:ab:36:41:56:56:bb:61:0a:ed:6e: e3:ed:a1:d2:ee:e7:aa:f3:71:82:d6:83:c4:fa:ea:35:51:6e: d5:aa:26:87:fe:d1:61:d5:e3:31:b6:26:eb:e2:50:6a:17:49: a7:62:89:f8:83:7f:33:c2:ae:79:fd:43:a4:62:1b:71:8b:cf: 8d:21:b3:68:8b:ef:8a:c9:57:d0:f3:5a:da:3d:c1:1d:e9:79: 00:0f:37:a2:62:32:d2:60:71:db:dd:aa:57:b0:46:99:23:83: bd:ca:67:f6:3d:4c:47:9e:7b:b6:7f:4f:7e:4f:61:d4:5c:f7: 9b:2e:ff:f7:ca:db:a6:6f:9e:ec:05:09:da:4f:e4:a4:0e:68: cb:44:05:5d:ce:ff:e5:39:45:c7:e5:03:97:af:bf:8c:94:3c: 6d:c6:f6:a5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUD3QECCeBICcZlcewj6Ijs40REl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBC OEYxMjA2QjAeFw0yNTA0MjgxMjU0MDhaFw0yNTA0MjkxNjExMDhaMDMxMTAvBgNV BAMTKDk5MThBNDAwMzE4MTg3Qzk0OURBQ0Q0MjlDMzRGMTUzNjg2MDBCNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSvxY7shzLkQveyi3qT5zL9Z8r Gs9rbMIHNpDDYhOZpkYqNvwSg8eyzfUvz0cY1lv8qnGYZEErGG/1+AK91dQgyLo1 gnBhzd5NsbX7vHOeSGA/kUEHbhkDmVlX+rsQIMehmosurKxKLxZpGb/OxW46PIag 26vTyZsq9j3xKSLziuPdEq6bXUZ82ta4ZDPw7Tspp9lOHVFZxj7j8g+kOIJry19l eqcM5DREtq1q2+CpES8nQAeiAolK+pWjHmN9IABBn1KsYLJsC2jtH72eaAy5Zzrr QIWoAHbk4QH4SKuVvF2i3memKsxfjl0E+MBQfpUbdpgYrluSsomCd8ENgITtAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUmRikADGBh8lJ2s1CnDTxU2hgC0gwHwYDVR0j BBgwFoAUiT/UG94ibFTyrSs92hnBoLjxIGswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGFjZmEzMTgtMmE1Yy00MjQxLWFmYmItMzg3ZDcxZThj NTk2LzEvODkzRkQ0MUJERTIyNkM1NEYyQUQyQjNEREExOUMxQTBCOEYxMjA2Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84OTNGRDQxQkRFMjI2QzU0RjJBRDJCM0RE QTE5QzFBMEI4RjEyMDZCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhY2ZhMzE4LTJhNWMtNDI0MS1hZmJiLTM4N2Q3MWU4YzU5Ni8xLzg5M0ZENDFC REUyMjZDNTRGMkFEMkIzRERBMTlDMUEwQjhGMTIwNkIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCndy5B YM8y4VpkF/+kBZq5Xwc4Qn5Rs9NBYeMixfU5Aedg4xdPmVnyOfnJahcckA7dobG5 9sLEEZ1PlSMlpoCo+rgFyvprVl9iXWFkcC1o+LTygRkdYFLq/njIJ5T5tuSPR6s2 QVZWu2EK7W7j7aHS7ueq83GC1oPE+uo1UW7VqiaH/tFh1eMxtibr4lBqF0mnYon4 g38zwq55/UOkYhtxi8+NIbNoi++KyVfQ81raPcEd6XkADzeiYjLSYHHb3apXsEaZ I4O9ymf2PUxHnnu2f09+T2HUXPebLv/3ytumb57sBQnaT+SkDmjLRAVdzv/lOUXH 5QOXr7+MlDxtxval -----END CERTIFICATE-----Generated at Tue Apr 29 08:33:11 2025 by rpki-client