$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft File: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft (raw, json) Hash identifier: lka2DSWnzPy5ExvRGlMUi9bmqpXm9my6RbhWvEtX/Zc= Subject key identifier: AD:1C:D7:5B:14:5A:09:EE:D9:AC:6E:DE:86:D6:24:84:94:FB:8F:8A Authority key identifier: 58:E9:2F:2C:38:59:C2:D0:EF:32:2A:87:16:88:CB:22:92:8E:2F:3E Certificate issuer: /CN=58E92F2C3859C2D0EF322A871688CB22928E2F3E Certificate serial: 4578BC23BD9084AE7B6F3701222F9A96EA3C6708 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft Manifest number: 0234 Signing time: Sun 27 Apr 2025 12:41:56 +0000 Manifest this update: Sun 27 Apr 2025 12:36:56 +0000 Manifest next update: Mon 28 Apr 2025 13:51:56 +0000 Files and hashes: 1: 326131343a313463313a3130303a3a2f34382d3438203d3e203531303139.roa (hash: 69RcUidZnQ+LqgABsH+Kh3UWsC9vqAhVCCjeesgrVBw=) 2: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.crl (hash: NQtlXLiqvKT31cmitvDqTzX8XHbHjF8pFYmULweWTwM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 13:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:78:bc:23:bd:90:84:ae:7b:6f:37:01:22:2f:9a:96:ea:3c:67:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58E92F2C3859C2D0EF322A871688CB22928E2F3E Validity Not Before: Apr 27 12:36:56 2025 GMT Not After : Apr 28 13:51:56 2025 GMT Subject: CN=AD1CD75B145A09EED9AC6EDE86D6248494FB8F8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9a:3d:2b:fe:a3:ac:4f:0f:15:82:17:38:7b: c8:64:a3:cd:16:4d:68:d8:19:b6:b9:b2:4e:13:8d: 96:06:63:c3:e1:97:d7:6c:34:23:97:e4:ec:96:f6: 5c:03:18:00:7e:76:e9:70:d9:1c:16:87:83:38:06: 31:d1:94:4d:ca:f7:3f:e6:ea:8f:f6:7f:cf:ae:55: 6e:81:c7:f2:9d:73:ef:80:b3:6d:ec:38:a7:70:56: 0c:16:9f:40:cb:ae:e1:39:01:5d:c6:1a:45:95:b3: 93:7d:c8:89:6e:ac:ae:5e:7d:83:2f:52:28:ca:0f: 31:36:e7:63:2e:3f:9c:ee:7c:2d:6b:3f:4c:69:f6: 7e:bb:ba:12:cb:dd:50:b9:30:bc:eb:7d:f8:21:77: dc:ce:f5:da:b7:b5:ce:80:3c:19:55:b5:72:4d:8e: 77:ed:ff:f8:c8:24:fa:c1:07:20:05:ad:13:29:65: 6c:05:34:46:6b:38:e3:83:03:a5:86:7b:46:95:ce: 1f:1f:50:49:95:ac:ea:c1:66:02:52:97:e9:ed:e0: 3a:63:38:05:b3:47:8d:87:12:1a:80:36:93:70:9d: 94:e3:10:eb:61:62:3b:c3:fa:d1:44:7e:cf:ac:68: 0e:78:08:cd:b6:c2:14:f0:7e:a3:af:ad:ed:e0:7f: 1f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1C:D7:5B:14:5A:09:EE:D9:AC:6E:DE:86:D6:24:84:94:FB:8F:8A X509v3 Authority Key Identifier: keyid:58:E9:2F:2C:38:59:C2:D0:EF:32:2A:87:16:88:CB:22:92:8E:2F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/3/58E92F2C3859C2D0EF322A871688CB22928E2F3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:33:09:a2:72:4b:7d:30:3a:2d:bf:a1:2f:29:d8:9c:cd:c5: 0d:49:74:0e:3a:7a:07:dd:eb:ff:2c:e3:ed:3f:de:27:ac:6c: 4b:a6:80:aa:99:af:9a:2c:56:0e:cf:bb:ca:99:a6:23:6f:71: 20:ff:14:af:57:00:18:bf:47:dd:f7:b9:7c:50:97:cd:18:a2: a6:7e:45:a8:fe:8d:50:d7:f0:a8:9d:66:29:d0:f4:c8:a6:8c: 2c:f8:c5:5b:a7:6e:f4:7b:cb:44:67:cb:73:56:16:e6:3d:6f: 5d:3c:19:2c:e7:77:b2:46:66:37:bf:72:8e:d6:31:d4:6d:c4: 72:8f:b7:a8:e3:90:bd:6b:78:a7:c9:be:c5:1f:ba:40:67:c1: d6:27:fb:8f:62:6c:40:ca:ea:83:bb:a2:6c:f0:cb:50:89:a9: 49:74:88:b3:62:e5:08:3d:bb:32:f4:05:e1:2a:a6:40:8e:0c: 23:ab:b3:97:d9:1e:a7:ed:39:7d:92:6c:fa:85:d4:89:9e:1b: 3b:ba:e0:62:47:c0:80:0b:25:2d:8e:67:41:be:b4:53:df:87: 23:0d:22:42:b4:fd:d1:ed:51:8c:9e:8f:2a:9e:1e:e5:d2:89: a1:a3:b1:a8:8f:00:e3:06:38:b8:b3:bc:70:08:ab:f4:8b:ba: c4:25:86:2e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURXi8I72QhK57bzcBIi+aluo8ZwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThFOTJGMkMzODU5QzJEMEVGMzIyQTg3MTY4OENCMjI5 MjhFMkYzRTAeFw0yNTA0MjcxMjM2NTZaFw0yNTA0MjgxMzUxNTZaMDMxMTAvBgNV BAMTKEFEMUNENzVCMTQ1QTA5RUVEOUFDNkVERTg2RDYyNDg0OTRGQjhGOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEmj0r/qOsTw8Vghc4e8hko80W TWjYGba5sk4TjZYGY8Phl9dsNCOX5OyW9lwDGAB+dulw2RwWh4M4BjHRlE3K9z/m 6o/2f8+uVW6Bx/Kdc++As23sOKdwVgwWn0DLruE5AV3GGkWVs5N9yIlurK5efYMv UijKDzE252MuP5zufC1rP0xp9n67uhLL3VC5MLzrffghd9zO9dq3tc6APBlVtXJN jnft//jIJPrBByAFrRMpZWwFNEZrOOODA6WGe0aVzh8fUEmVrOrBZgJSl+nt4Dpj OAWzR42HEhqANpNwnZTjEOthYjvD+tFEfs+saA54CM22whTwfqOvre3gfx9FAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUrRzXWxRaCe7ZrG7ehtYkhJT7j4owHwYDVR0j BBgwFoAUWOkvLDhZwtDvMiqHFojLIpKOLz4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzMvNThFOTJGMkMzODU5QzJEMEVGMzIyQTg3MTY4OENCMjI5MjhFMkYzRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0zNWNkLTQ1 MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC81OEU5MkYyQzM4NTlDMkQwRUYzMjJBODcx Njg4Q0IyMjkyOEUyRjNFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8zLzU4RTkyRjJD Mzg1OUMyRDBFRjMyMkE4NzE2ODhDQjIyOTI4RTJGM0UubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAAMwmi ckt9MDotv6EvKdiczcUNSXQOOnoH3ev/LOPtP94nrGxLpoCqma+aLFYOz7vKmaYj b3Eg/xSvVwAYv0fd97l8UJfNGKKmfkWo/o1Q1/ConWYp0PTIpows+MVbp270e8tE Z8tzVhbmPW9dPBks53eyRmY3v3KO1jHUbcRyj7eo45C9a3inyb7FH7pAZ8HWJ/uP YmxAyuqDu6Js8MtQialJdIizYuUIPbsy9AXhKqZAjgwjq7OX2R6n7Tl9kmz6hdSJ nhs7uuBiR8CACyUtjmdBvrRT34cjDSJCtP3R7VGMno8qnh7l0omho7GojwDjBji4 s7xwCKv0i7rEJYYu -----END CERTIFICATE-----Generated at Mon Apr 28 06:14:12 2025 by rpki-client