$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: 9SOK6xRB+bbweslX+HapQG5UqDmsNZp6/1YXTK2mvxc= Subject key identifier: 35:41:94:CB:27:79:E2:28:5C:F7:BE:25:31:F3:90:35:32:58:8B:83 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 0813266A6B863DCD086E7F4C23A9F777C79C523F Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 18 Signing time: Sun 27 Apr 2025 15:43:06 +0000 Manifest this update: Sun 27 Apr 2025 15:38:06 +0000 Manifest next update: Tue 29 Apr 2025 04:42:06 +0000 Files and hashes: 1: 326130623a346530373a363065303a3a2f34342d3438203d3e203339333531.roa (hash: /JgrvpSR1ZDGP36oDONfP8baAAR4FG/skafz4v4Fs6E=) 2: 326130623a346530373a363064303a3a2f34342d3438203d3e20323134373031.roa (hash: uV2TLwh180zk/DItScOuiwKDHaU99Mhyx8m59bwZFmA=) 3: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: kpEFk9LlIrL+f8g9Sn69djCuhB8Caht8MZ8sv4LHso4=) 4: 326130623a346530373a363030303a3a2f34312d3438203d3e20323134373031.roa (hash: 4kUbGyjkNaSVg+CdxZZIcLS92ZdRbZtwjsOz4Bjkgro=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 14:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:13:26:6a:6b:86:3d:cd:08:6e:7f:4c:23:a9:f7:77:c7:9c:52:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Apr 27 15:38:06 2025 GMT Not After : Apr 29 04:42:06 2025 GMT Subject: CN=354194CB2779E2285CF7BE2531F3903532588B83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c3:2e:01:ec:e0:04:cf:68:03:78:da:f0:aa: 84:b4:7a:6d:6c:d4:21:16:cd:7f:1e:bc:af:dd:18: 41:66:5f:9a:51:2a:37:5d:d3:74:0d:15:9b:e7:ce: 30:37:85:74:cf:e7:77:c3:63:1d:01:73:ea:9b:fd: 88:06:2b:a7:35:47:3f:ac:35:1d:72:48:12:38:72: d0:ad:67:5e:d5:d4:e4:7b:cd:64:e7:52:37:11:46: 87:9c:ba:a9:d3:cb:38:80:89:ef:3c:77:4f:04:ce: 51:65:59:bf:a9:c0:3a:8c:5e:70:7e:bd:1e:8b:6c: 29:c6:84:6f:75:b8:86:0a:e0:7b:3a:67:83:1c:8f: 87:fc:78:84:5e:8d:69:7a:12:2d:36:15:96:db:41: 2a:bf:6f:23:02:b5:de:a2:fc:cb:cb:44:0c:aa:6c: 33:44:09:7a:f5:79:06:75:41:14:5b:a0:96:13:8f: cc:f8:8b:01:6e:07:92:79:ba:cf:8f:92:63:98:f2: e8:9a:5f:8d:13:f0:5d:64:b1:ac:26:c7:32:5e:5f: 86:80:50:ed:c3:e4:ce:ad:46:b8:e1:18:5d:7a:df: 79:9a:68:cd:3f:08:7f:62:88:ee:b8:c4:1b:c2:a7: 50:92:7f:e1:e5:4d:3e:9c:cc:b1:73:38:f2:6b:1a: 05:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:41:94:CB:27:79:E2:28:5C:F7:BE:25:31:F3:90:35:32:58:8B:83 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:4a:87:ce:02:2a:a7:76:ee:75:69:80:45:bf:d5:d9:e0:1b: 5a:55:53:4b:01:bf:62:b1:64:96:b8:99:d9:e6:f4:b9:7c:b1: 1e:ea:26:62:e1:9e:2f:f2:58:ea:90:5c:5f:dd:e6:17:67:5f: 44:ba:4a:9b:ed:c6:a0:89:54:d2:05:1f:d2:ed:c6:54:92:86: 8d:5c:a5:ce:53:79:fb:e1:8b:14:ff:2e:8f:a8:21:f4:6c:c8: 19:a4:a1:78:a3:0d:da:c8:0c:43:6b:d6:63:8b:a1:ca:51:be: a4:d7:28:38:87:0e:60:3f:ad:9b:26:ff:b3:09:1e:dc:78:1c: 14:06:8e:40:35:b6:3f:76:42:b8:4a:3d:a1:5e:c9:82:60:14: e9:5d:fc:45:bc:65:a2:51:67:bb:eb:ee:37:7c:06:c4:1e:d1: 85:5c:42:a3:c7:5a:07:14:e7:90:c6:8e:ee:b3:37:dc:42:12: 11:5d:9b:15:0e:45:ef:44:f0:84:fb:5c:5e:7a:09:47:4e:f0: ef:f7:d9:76:c1:8e:89:5c:fe:48:10:fa:5c:5b:d7:32:c8:56: f8:3d:c2:98:14:84:4c:52:9c:ab:f6:63:4e:11:33:85:12:1a: a4:4f:94:33:61:ac:24:a3:2a:ef:2a:84:10:c3:e1:e1:05:49: 1c:ee:0a:9b -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUCBMmamuGPc0Ibn9MI6n3d8ecUj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNTA0MjcxNTM4MDZaFw0yNTA0MjkwNDQyMDZaMDMxMTAvBgNV BAMTKDM1NDE5NENCMjc3OUUyMjg1Q0Y3QkUyNTMxRjM5MDM1MzI1ODhCODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpwy4B7OAEz2gDeNrwqoS0em1s 1CEWzX8evK/dGEFmX5pRKjdd03QNFZvnzjA3hXTP53fDYx0Bc+qb/YgGK6c1Rz+s NR1ySBI4ctCtZ17V1OR7zWTnUjcRRoecuqnTyziAie88d08EzlFlWb+pwDqMXnB+ vR6LbCnGhG91uIYK4Hs6Z4Mcj4f8eIRejWl6Ei02FZbbQSq/byMCtd6i/MvLRAyq bDNECXr1eQZ1QRRboJYTj8z4iwFuB5J5us+PkmOY8uiaX40T8F1ksawmxzJeX4aA UO3D5M6tRrjhGF1633maaM0/CH9iiO64xBvCp1CSf+HlTT6czLFzOPJrGgUvAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUNUGUyyd54ihc974lMfOQNTJYi4MwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv0qHzgIqp3budWmARb/V 2eAbWlVTSwG/YrFklriZ2eb0uXyxHuomYuGeL/JY6pBcX93mF2dfRLpKm+3GoIlU 0gUf0u3GVJKGjVylzlN5++GLFP8uj6gh9GzIGaSheKMN2sgMQ2vWY4uhylG+pNco OIcOYD+tmyb/swke3HgcFAaOQDW2P3ZCuEo9oV7JgmAU6V38RbxlolFnu+vuN3wG xB7RhVxCo8daBxTnkMaO7rM33EISEV2bFQ5F70TwhPtcXnoJR07w7/fZdsGOiVz+ SBD6XFvXMshW+D3CmBSETFKcq/ZjThEzhRIapE+UM2GsJKMq7yqEEMPh4QVJHO4K mw== -----END CERTIFICATE-----Generated at Mon Apr 28 01:22:31 2025 by rpki-client