$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: WjD0KGmTFHQpIGHBGwQ/5IWGpA6THmRr4EctNkLUr/o= Subject key identifier: EE:9C:44:89:58:C1:82:0C:0C:68:68:D5:CE:74:89:E6:12:8B:A5:DE Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 1BFA61B33EDD9317F4C92683476CD84D4AE8E865 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: D3 Signing time: Sun 27 Apr 2025 18:13:50 +0000 Manifest this update: Sun 27 Apr 2025 18:08:50 +0000 Manifest next update: Mon 28 Apr 2025 19:18:50 +0000 Files and hashes: 1: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: e1N5jC+UvTX6tKnTrwZLJi7r7gK9r6T+rAvS+1LopsI=) 2: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: liZtkDCXL4DmjNQ78r1O/4djDEbWR26m7nKfEkWRmh4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 19:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:fa:61:b3:3e:dd:93:17:f4:c9:26:83:47:6c:d8:4d:4a:e8:e8:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Apr 27 18:08:50 2025 GMT Not After : Apr 28 19:18:50 2025 GMT Subject: CN=EE9C448958C1820C0C6868D5CE7489E6128BA5DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b1:28:a6:d0:c2:80:7d:25:6e:c6:16:e0:52: e2:cb:51:a8:eb:aa:7c:16:4d:06:fd:7b:b1:22:10: 90:f2:c8:d3:7c:b5:9e:08:90:4a:41:46:63:22:cc: ed:5b:01:f7:ee:23:cc:05:2e:1e:29:de:6b:bc:24: 89:6b:a9:a2:33:d6:63:39:55:7d:31:d2:4b:e4:ea: a4:f5:84:cb:42:37:a3:3a:c8:3a:29:27:f1:df:1a: 7b:a8:bb:d7:54:f0:91:54:67:ab:39:6a:99:59:b7: dc:2d:e1:b4:bc:08:97:09:73:e8:ea:ed:b3:ab:cf: 49:cd:4e:6d:07:88:a8:18:e8:43:98:c3:c9:97:09: c7:e4:f2:d6:33:75:94:39:54:3b:aa:d1:64:c8:a0: f6:4a:00:08:9d:02:5f:c2:da:6a:a3:8f:05:02:0c: 6d:99:d1:ea:07:52:a4:9e:3e:d2:88:15:87:f2:bd: f4:28:0e:64:fb:ee:da:9f:d0:99:cf:95:64:1a:da: 97:5e:5d:41:09:00:aa:f2:e9:94:5a:83:f7:87:79: d7:44:f5:91:09:b2:f9:99:fc:6d:05:f6:9b:c8:c0: cb:73:f2:fc:df:fb:e9:60:b5:5f:47:46:2e:7f:61: 88:63:3e:c7:c1:4c:73:6f:8e:38:8d:c2:6c:db:0c: 94:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9C:44:89:58:C1:82:0C:0C:68:68:D5:CE:74:89:E6:12:8B:A5:DE X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:58:82:bb:bd:7f:82:d1:6c:f8:06:f8:74:ca:dc:f0:bd:28: a7:8f:e2:54:cf:09:3d:1a:61:33:5c:89:8d:65:96:a6:83:c7: a9:a1:e7:c1:bc:45:d1:63:a0:69:8c:54:59:5b:6b:4f:86:fc: e0:b3:8f:a4:80:a6:6f:02:61:67:34:ec:e4:13:40:2f:f5:ed: 1d:61:e2:a3:e6:17:de:58:ae:c3:ea:3f:4e:bb:f8:d1:37:21: 27:db:03:ea:74:23:b8:3b:81:6f:c5:c0:2f:f5:90:dc:49:05: 6e:0d:45:c0:2c:cf:18:10:0d:22:38:51:3e:8a:11:25:61:35: 40:5a:9a:80:04:da:c6:aa:41:f0:1d:65:6e:d8:0d:97:b7:5c: cb:9a:9f:97:7f:0c:da:8e:1e:dc:da:72:fc:53:d6:aa:a9:f2: e7:65:33:f4:01:ad:95:85:ed:9f:89:15:a5:55:cc:78:aa:e7: 25:6e:72:97:08:1d:39:dd:be:e1:e0:b8:82:10:7f:df:91:28: 95:db:e9:0a:3a:56:3c:bc:4e:67:a0:44:28:4c:00:4c:89:7d: 53:e1:0d:e4:9d:7b:22:5a:b7:f9:7a:c5:c9:42:ac:f5:67:29: e3:cf:0f:ea:88:98:7f:ff:4b:1b:fe:27:8d:d6:cf:c6:d2:bd: a6:91:9e:98 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUG/phsz7dkxf0ySaDR2zYTUro6GUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNTA0MjcxODA4NTBaFw0yNTA0MjgxOTE4NTBaMDMxMTAvBgNV BAMTKEVFOUM0NDg5NThDMTgyMEMwQzY4NjhENUNFNzQ4OUU2MTI4QkE1REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCesSim0MKAfSVuxhbgUuLLUajr qnwWTQb9e7EiEJDyyNN8tZ4IkEpBRmMizO1bAffuI8wFLh4p3mu8JIlrqaIz1mM5 VX0x0kvk6qT1hMtCN6M6yDopJ/HfGnuou9dU8JFUZ6s5aplZt9wt4bS8CJcJc+jq 7bOrz0nNTm0HiKgY6EOYw8mXCcfk8tYzdZQ5VDuq0WTIoPZKAAidAl/C2mqjjwUC DG2Z0eoHUqSePtKIFYfyvfQoDmT77tqf0JnPlWQa2pdeXUEJAKry6ZRag/eHeddE 9ZEJsvmZ/G0F9pvIwMtz8vzf++lgtV9HRi5/YYhjPsfBTHNvjjiNwmzbDJRZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU7pxEiVjBggwMaGjVznSJ5hKLpd4wHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAkWIK7 vX+C0Wz4Bvh0ytzwvSinj+JUzwk9GmEzXImNZZamg8epoefBvEXRY6BpjFRZW2tP hvzgs4+kgKZvAmFnNOzkE0Av9e0dYeKj5hfeWK7D6j9Ou/jRNyEn2wPqdCO4O4Fv xcAv9ZDcSQVuDUXALM8YEA0iOFE+ihElYTVAWpqABNrGqkHwHWVu2A2Xt1zLmp+X fwzajh7c2nL8U9aqqfLnZTP0Aa2Vhe2fiRWlVcx4quclbnKXCB053b7h4LiCEH/f kSiV2+kKOlY8vE5noEQoTABMiX1T4Q3knXsiWrf5esXJQqz1Zynjzw/qiJh//0sb /ieN1s/G0r2mkZ6Y -----END CERTIFICATE-----Generated at Mon Apr 28 10:18:41 2025 by rpki-client