$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft File: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft (raw, json) Hash identifier: taIgIZ4VreRDz7mAk/RD/f0SrBP6mQKVh6Agec6CaS0= Subject key identifier: 32:90:3F:FF:46:4A:8B:D3:45:FF:C6:3E:90:DA:92:A2:AE:2A:A5:C7 Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 Certificate issuer: /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Certificate serial: 07CA309F68E4C7824B49B4B92C3F7EA1F40B3830 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft Manifest number: 02F6 Signing time: Sat 26 Apr 2025 19:54:05 +0000 Manifest this update: Sat 26 Apr 2025 19:49:05 +0000 Manifest next update: Sun 27 Apr 2025 22:16:05 +0000 Files and hashes: 1: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (hash: tHiNPLeborN3MzxDKSTEAgj3ZJMcJjV9OqmGVy4ABhE=) 2: AS202881.asa (hash: n7g3r7+FlCCQyP417H6Uudw0ZEIUQH6oYUZ2fSNBDRU=) 3: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl (hash: HN6M40c1SwSbkMQGxLpacc1xOT1sdWol+grb6g4p7Jw=) 4: 323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa (hash: 3wDhadYEfX0Hhy3fPxID0nH+bbX55tStnGOk9S2bMKU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 22:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ca:30:9f:68:e4:c7:82:4b:49:b4:b9:2c:3f:7e:a1:f4:0b:38:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Validity Not Before: Apr 26 19:49:05 2025 GMT Not After : Apr 27 22:16:05 2025 GMT Subject: CN=32903FFF464A8BD345FFC63E90DA92A2AE2AA5C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:e5:fc:1e:bd:35:cd:1d:97:a5:b2:42:fd: 9c:cf:5b:2e:29:c5:d5:24:b6:09:6d:12:ed:7b:10: f8:11:4d:39:96:3b:ed:ef:34:e7:5d:cd:63:68:73: 8a:23:73:9f:2e:5d:42:f3:c9:9d:5c:65:21:34:64: 68:23:79:97:cf:a1:82:e1:1b:2e:a1:6b:1f:70:c6: e6:62:61:92:1b:35:b6:c4:fe:5b:e0:e8:c7:0d:89: dd:c4:c2:b5:d6:29:1f:0c:08:ba:e8:e5:aa:9d:97: a1:a1:55:88:b4:85:c7:80:24:3c:96:a5:3a:51:43: 33:a0:72:d5:67:80:4b:45:af:9a:c5:e3:33:cd:01: 82:3c:f1:ce:8d:9a:3d:3a:c0:2b:58:32:2b:8f:8e: c7:8b:68:4d:c2:ea:34:19:85:55:61:08:0e:d4:17: 5b:f4:90:8e:c1:24:a1:07:06:f6:39:80:41:b9:40: f0:5e:f9:c8:35:8d:03:4f:83:b0:0c:c2:87:51:1c: 01:e9:17:71:eb:65:ef:f6:59:73:67:4c:b1:41:31: dc:2b:5c:35:ad:10:a3:60:00:57:d5:f6:e4:c0:17: 42:18:9a:8e:02:54:04:3d:52:56:28:97:97:80:f7: 94:47:89:92:21:b3:c1:e9:4a:21:05:ad:13:31:a8: 32:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:90:3F:FF:46:4A:8B:D3:45:FF:C6:3E:90:DA:92:A2:AE:2A:A5:C7 X509v3 Authority Key Identifier: keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:dd:fd:a0:74:a3:b3:ba:a2:32:a4:1d:96:28:5e:e3:bc:ef: 62:82:4f:6c:b9:f3:52:57:94:ae:ae:71:7d:7d:d2:0c:63:eb: a1:a2:d2:c2:22:ac:a6:01:de:8b:eb:f8:a9:36:ef:32:fa:c0: 56:cc:e8:4e:5f:01:a4:0b:11:c9:15:ec:0b:1c:2c:3f:0a:80: 7f:f6:a6:c2:ac:3c:5c:7a:35:66:11:29:ac:3a:76:8b:89:3c: fc:4c:93:e2:e6:64:8e:ed:b9:a7:a6:5c:03:b8:4b:b6:21:68: 58:c9:f4:cc:b7:8f:f0:d8:d1:5c:93:46:44:c4:57:6f:e3:05: d8:64:0a:2a:63:c7:19:6b:1c:63:a8:3f:3f:34:dc:3e:e2:23: 77:35:b3:e9:00:0f:a5:1b:27:ef:07:d2:8d:88:f3:cf:e6:68: 42:83:b3:63:65:7b:10:9b:40:0b:f6:22:04:e1:72:fa:76:90: bb:05:cc:db:c0:25:48:cf:41:8e:3a:48:ef:70:08:1b:06:66: 36:67:64:44:ae:87:e0:52:c9:97:09:86:be:f1:93:52:03:2f: 50:a9:81:ea:50:fe:8e:ed:7b:a5:93:c1:62:cc:d0:87:67:6d: ca:39:25:5d:5e:56:66:22:fd:90:3e:d8:17:a2:f0:c0:98:f5: 6a:49:67:ed -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUB8own2jkx4JLSbS5LD9+ofQLODAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDY0Mjk3NWY1MzVmNDVmZDlmNmQ4ZmVhNjI2YmM2ZDI0 YmM5ZDhkODAeFw0yNTA0MjYxOTQ5MDVaFw0yNTA0MjcyMjE2MDVaMDMxMTAvBgNV BAMTKDMyOTAzRkZGNDY0QThCRDM0NUZGQzYzRTkwREE5MkEyQUUyQUE1QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+j+X8Hr01zR2XpbJC/ZzPWy4p xdUktgltEu17EPgRTTmWO+3vNOddzWNoc4ojc58uXULzyZ1cZSE0ZGgjeZfPoYLh Gy6hax9wxuZiYZIbNbbE/lvg6McNid3EwrXWKR8MCLro5aqdl6GhVYi0hceAJDyW pTpRQzOgctVngEtFr5rF4zPNAYI88c6Nmj06wCtYMiuPjseLaE3C6jQZhVVhCA7U F1v0kI7BJKEHBvY5gEG5QPBe+cg1jQNPg7AMwodRHAHpF3HrZe/2WXNnTLFBMdwr XDWtEKNgAFfV9uTAF0IYmo4CVAQ9UlYol5eA95RHiZIhs8HpSiEFrRMxqDKJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUMpA//0ZKi9NF/8Y+kNqSoq4qpccwHwYDVR0j BBgwFoAU1kKXX1NfRf2fbY/qYmvG0kvJ2NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2 OTgwLzMvRDY0Mjk3NUY1MzVGNDVGRDlGNkQ4RkVBNjI2QkM2RDI0QkM5RDhEOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFrS1hYMU5mUmYyZmJZX3FZbXZHMGt2 SjJOZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMy9ENjQyOTc1RjUzNUY0NUZEOUY2 RDhGRUE2MjZCQzZEMjRCQzlEOEQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATN39oHSjs7qiMqQdlihe 47zvYoJPbLnzUleUrq5xfX3SDGProaLSwiKspgHei+v4qTbvMvrAVszoTl8BpAsR yRXsCxwsPwqAf/amwqw8XHo1ZhEprDp2i4k8/EyT4uZkju25p6ZcA7hLtiFoWMn0 zLeP8NjRXJNGRMRXb+MF2GQKKmPHGWscY6g/PzTcPuIjdzWz6QAPpRsn7wfSjYjz z+ZoQoOzY2V7EJtAC/YiBOFy+naQuwXM28AlSM9BjjpI73AIGwZmNmdkRK6H4FLJ lwmGvvGTUgMvUKmB6lD+ju17pZPBYszQh2dtyjklXV5WZiL9kD7YF6LwwJj1akln 7Q== -----END CERTIFICATE-----Generated at Sun Apr 27 06:33:32 2025 by rpki-client