$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: KDkyTRBC6RfkTtcFrl88TzeCN/PLkk2XfLdQyxVx0EI= Subject key identifier: 73:42:45:5C:9F:5E:39:A8:F2:CF:6E:26:BA:18:45:3C:36:D9:47:37 Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 47CB6CD0D030F6BBDB2F6BB25A76BCEF1B1358D4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: 018D Signing time: Sat 26 Apr 2025 03:43:17 +0000 Manifest this update: Sat 26 Apr 2025 03:38:17 +0000 Manifest next update: Sun 27 Apr 2025 04:19:17 +0000 Files and hashes: 1: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: Bu8eu+s1xKEjCs05/XkV2x0FQLM16iFsGrYGYNvS9M8=) 2: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: bxVB82a+95LslGzpBk83CiLY+JHDvySJbHGfaL4Revk=) 3: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: HVQR2cbKt8VVrQisjkBAhrhp4KsXJej/OLSmUeqTsY0=) 4: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: 5jLn1tYtti5DJK9TqNkdMibH5mGLzDQe1BN0OVxqnag=) 5: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: pcBpSLX6wjD10TMOktRdBOucXd2A5gfG7C3Lecbh8gI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 04:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:cb:6c:d0:d0:30:f6:bb:db:2f:6b:b2:5a:76:bc:ef:1b:13:58:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: Apr 26 03:38:17 2025 GMT Not After : Apr 27 04:19:17 2025 GMT Subject: CN=7342455C9F5E39A8F2CF6E26BA18453C36D94737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:45:52:e3:a8:5e:49:61:e0:2d:52:2a:91:f1: c4:48:53:cc:30:65:f2:5b:d5:fb:1f:f5:80:0a:a8: bd:85:94:e5:04:3e:0a:9f:ed:15:d0:ea:39:4e:a0: c2:e6:fc:ab:28:73:b1:9a:51:6a:5d:e5:86:aa:3e: 11:91:e1:96:a2:15:2c:77:08:d0:ba:e4:c7:f8:26: 65:7b:46:c3:19:d1:da:9b:27:c1:2b:56:2a:7a:32: 8b:1a:5f:fe:19:3b:2f:cc:5f:69:e8:84:96:b2:cf: 71:75:33:8e:92:bf:38:e3:79:48:6f:fc:59:f8:f7: 8f:7c:16:06:39:24:d4:7a:97:ac:56:13:a5:f4:e9: 99:f5:31:ca:d8:d8:a0:d5:26:7c:66:dc:e4:99:d2: 0e:1c:3e:e2:d6:52:14:b2:e5:9b:4e:1a:bf:5f:c9: 8b:7e:e5:8b:05:6e:c1:a4:59:ee:0b:95:8a:02:d5: ed:6b:57:a9:a7:32:20:f5:6d:02:59:fa:f4:00:0c: a2:3a:b2:96:bb:3c:1e:66:da:08:d2:58:f8:fb:d6: 3e:38:59:1d:18:89:64:42:07:5d:78:37:13:3a:c9: 5b:57:4f:81:f0:06:58:e4:61:41:2f:a3:f3:da:50: 29:22:65:37:bf:38:95:9a:c7:16:e0:bc:6b:97:a3: 87:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:42:45:5C:9F:5E:39:A8:F2:CF:6E:26:BA:18:45:3C:36:D9:47:37 X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:59:e3:47:91:c4:00:3e:77:4d:53:d4:2b:7d:2b:ab:10:38: c5:08:da:56:e2:e4:7f:77:21:2c:f9:0c:5c:0c:14:f2:11:d4: c9:2d:b4:18:d8:eb:50:e2:84:db:a7:c9:c7:c8:42:31:5c:ca: 4d:6a:f6:f1:aa:6b:05:69:e3:a1:cb:3c:26:32:a2:d2:3f:a1: 2e:7d:d1:6c:6c:55:b1:03:2d:c6:31:26:5a:0e:ec:0b:e7:04: 0b:11:f2:f4:6d:32:5b:65:b1:c7:27:8c:0c:8b:ca:a4:42:35: f8:f3:56:84:4e:b6:60:6a:39:90:7d:17:7b:f4:65:35:92:df: dd:6d:02:4e:10:57:79:36:7a:62:e1:4c:d7:00:fb:4f:f1:7e: 8b:35:54:93:24:2f:80:70:54:cb:0d:b6:30:ca:2d:16:60:d5: 67:0e:f9:a8:62:51:07:37:72:65:84:1a:29:d7:80:30:c7:89: 63:d9:13:28:8c:12:ff:af:58:ff:a9:9f:2d:65:11:29:66:ba: b7:8a:4c:04:a6:0e:e8:7f:1a:a1:20:e4:24:d3:50:08:1e:0b: ec:30:bb:3b:eb:81:3a:30:e0:0d:67:52:80:29:a6:84:a7:9b: dd:fe:84:e0:ff:80:9e:6f:9d:e6:86:d9:85:b2:87:44:6f:d5: 30:94:2e:95 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUR8ts0NAw9rvbL2uyWna87xsTWNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNTA0MjYwMzM4MTdaFw0yNTA0MjcwNDE5MTdaMDMxMTAvBgNV BAMTKDczNDI0NTVDOUY1RTM5QThGMkNGNkUyNkJBMTg0NTNDMzZEOTQ3MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4RVLjqF5JYeAtUiqR8cRIU8ww ZfJb1fsf9YAKqL2FlOUEPgqf7RXQ6jlOoMLm/Ksoc7GaUWpd5YaqPhGR4ZaiFSx3 CNC65Mf4JmV7RsMZ0dqbJ8ErVip6MosaX/4ZOy/MX2nohJayz3F1M46SvzjjeUhv /Fn49498FgY5JNR6l6xWE6X06Zn1McrY2KDVJnxm3OSZ0g4cPuLWUhSy5ZtOGr9f yYt+5YsFbsGkWe4LlYoC1e1rV6mnMiD1bQJZ+vQADKI6spa7PB5m2gjSWPj71j44 WR0YiWRCB114NxM6yVtXT4HwBljkYUEvo/PaUCkiZTe/OJWaxxbgvGuXo4cPAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUc0JFXJ9eOajyz24muhhFPDbZRzcwHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApWeNH kcQAPndNU9QrfSurEDjFCNpW4uR/dyEs+QxcDBTyEdTJLbQY2OtQ4oTbp8nHyEIx XMpNavbxqmsFaeOhyzwmMqLSP6EufdFsbFWxAy3GMSZaDuwL5wQLEfL0bTJbZbHH J4wMi8qkQjX481aETrZgajmQfRd79GU1kt/dbQJOEFd5Nnpi4UzXAPtP8X6LNVST JC+AcFTLDbYwyi0WYNVnDvmoYlEHN3JlhBop14Awx4lj2RMojBL/r1j/qZ8tZREp Zrq3ikwEpg7ofxqhIOQk01AIHgvsMLs764E6MOANZ1KAKaaEp5vd/oTg/4Ceb53m htmFsodEb9UwlC6V -----END CERTIFICATE-----Generated at Sat Apr 26 17:46:03 2025 by rpki-client