$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.mft File: EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.mft (raw, json) Hash identifier: 1Hlcb6JMmzs39WmHA4U3jKhM+faYMvc1guLi3Ny/ogQ= Subject key identifier: 04:35:58:99:05:33:FE:1C:82:70:10:59:78:1E:FD:DE:AD:89:D8:0D Authority key identifier: ED:B2:DC:B9:23:52:13:13:E4:6C:ED:D7:E5:05:C1:E6:71:4C:9C:1D Certificate issuer: /CN=EDB2DCB923521313E46CEDD7E505C1E6714C9C1D Certificate serial: 27804DDE82830E7EA1FB44ACB7295450B9A5F6FD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.mft Manifest number: AD Signing time: Sun 15 Jun 2025 09:48:48 +0000 Manifest this update: Sun 15 Jun 2025 09:43:48 +0000 Manifest next update: Mon 16 Jun 2025 11:51:48 +0000 Files and hashes: 1: EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.crl (hash: TFf4OJUycTcebMqymncFt2iwPGTh2iXU/J8XzUkFJhs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 11:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:80:4d:de:82:83:0e:7e:a1:fb:44:ac:b7:29:54:50:b9:a5:f6:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDB2DCB923521313E46CEDD7E505C1E6714C9C1D Validity Not Before: Jun 15 09:43:48 2025 GMT Not After : Jun 16 11:51:48 2025 GMT Subject: CN=043558990533FE1C82701059781EFDDEAD89D80D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6b:ba:7a:39:e2:d5:fa:f8:f4:84:83:3e:3a: ff:a2:02:87:52:35:79:95:02:57:a3:9e:08:45:72: 9d:01:c8:aa:ef:06:9b:c3:b2:af:51:ab:f5:39:93: 51:1c:0d:42:51:0c:1c:ef:a6:9d:86:5b:88:cc:b8: 1a:25:c7:6a:ae:e3:8b:cb:c7:11:97:7a:eb:d8:b8: 69:9e:78:47:5d:7a:8d:cb:36:e6:e7:b4:b1:b4:27: 1e:3a:ed:1a:a4:63:50:e3:b5:54:24:99:20:cc:6b: 40:69:75:b8:04:d6:a1:71:56:ce:0b:24:ab:0d:3c: ae:4b:8d:99:62:71:6b:57:7f:8a:a4:32:35:ba:24: a1:a0:8f:0e:57:68:4b:5a:a9:b9:1c:bd:96:b0:32: d0:55:83:2e:8b:56:48:e6:78:51:8e:86:88:46:4e: c0:8c:15:68:e6:e0:33:14:20:1d:43:e0:c5:20:99: e4:09:3a:77:2d:99:b7:ed:77:f2:71:09:72:dc:e7: 60:95:39:f8:2b:9e:27:8d:ca:76:d1:9d:f7:f2:4b: cd:45:8f:ca:67:89:c6:34:8e:1b:f3:04:eb:66:3f: ec:3a:61:0c:12:a2:5d:a7:8a:85:ba:a3:99:dc:f1: ed:0c:20:3f:2c:e2:46:26:3b:14:90:3f:fa:38:09: e0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:35:58:99:05:33:FE:1C:82:70:10:59:78:1E:FD:DE:AD:89:D8:0D X509v3 Authority Key Identifier: keyid:ED:B2:DC:B9:23:52:13:13:E4:6C:ED:D7:E5:05:C1:E6:71:4C:9C:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/8/EDB2DCB923521313E46CEDD7E505C1E6714C9C1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:46:3f:93:6c:03:1c:cf:d5:9d:4a:a7:03:d6:fe:6e:d5:75: 6f:ec:52:1d:21:18:c1:4d:e7:78:89:fd:f9:32:a4:e8:1d:79: 22:f7:50:3b:11:e3:98:c5:bb:40:87:5b:e8:60:0b:d9:b6:8b: 15:aa:8c:38:65:96:a7:4e:08:18:2e:54:60:d4:06:0c:aa:9b: 8e:80:f2:88:37:c3:4d:02:e3:fd:0f:a3:de:68:80:6a:29:7f: 2e:af:f1:28:ad:36:82:dd:4a:32:c2:81:e5:4c:ec:8b:9f:53: ff:63:a8:df:3f:70:57:a8:80:50:7b:44:8f:a9:e9:ba:1c:c6: 37:e8:5d:90:0d:df:d9:53:b0:52:33:d1:0e:00:10:87:c7:99: 99:64:17:65:c0:4b:a8:a7:c0:98:49:6e:5e:f5:7f:6f:09:b4: 04:0e:2a:5f:70:06:a3:81:4d:76:cc:95:de:b9:6d:de:c2:a5: 5e:76:53:b3:6b:93:cc:fa:9e:00:e3:ea:06:da:b4:b3:60:3d: 91:9e:86:64:dc:9d:81:63:41:10:59:66:1f:b0:98:db:12:b3: b5:fc:72:f4:5b:cb:7d:4a:b2:3d:ed:78:25:8f:e2:77:f8:0b: 05:ab:3f:e3:66:f4:e3:be:f8:42:21:17:41:94:be:85:64:ec: 73:0c:2b:73 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJ4BN3oKDDn6h+0SstylUULml9v0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURCMkRDQjkyMzUyMTMxM0U0NkNFREQ3RTUwNUMxRTY3 MTRDOUMxRDAeFw0yNTA2MTUwOTQzNDhaFw0yNTA2MTYxMTUxNDhaMDMxMTAvBgNV BAMTKDA0MzU1ODk5MDUzM0ZFMUM4MjcwMTA1OTc4MUVGRERFQUQ4OUQ4MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRa7p6OeLV+vj0hIM+Ov+iAodS NXmVAlejnghFcp0ByKrvBpvDsq9Rq/U5k1EcDUJRDBzvpp2GW4jMuBolx2qu44vL xxGXeuvYuGmeeEddeo3LNubntLG0Jx467RqkY1DjtVQkmSDMa0BpdbgE1qFxVs4L JKsNPK5LjZlicWtXf4qkMjW6JKGgjw5XaEtaqbkcvZawMtBVgy6LVkjmeFGOhohG TsCMFWjm4DMUIB1D4MUgmeQJOnctmbftd/JxCXLc52CVOfgrnieNynbRnffyS81F j8pnicY0jhvzBOtmP+w6YQwSol2nioW6o5nc8e0MID8s4kYmOxSQP/o4CeAJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUBDVYmQUz/hyCcBBZeB793q2J2A0wHwYDVR0j BBgwFoAU7bLcuSNSExPkbO3X5QXB5nFMnB0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzgvRURCMkRDQjkyMzUyMTMxM0U0NkNFREQ3RTUwNUMxRTY3MTRDOUMxRC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9FREIyRENCOTIzNTIxMzEzRTQ2Q0VERDdF NTA1QzFFNjcxNEM5QzFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC84L0VEQjJEQ0I5 MjM1MjEzMTNFNDZDRUREN0U1MDVDMUU2NzE0QzlDMUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCIRj+T bAMcz9WdSqcD1v5u1XVv7FIdIRjBTed4if35MqToHXki91A7EeOYxbtAh1voYAvZ tosVqow4ZZanTggYLlRg1AYMqpuOgPKIN8NNAuP9D6PeaIBqKX8ur/EorTaC3Uoy woHlTOyLn1P/Y6jfP3BXqIBQe0SPqem6HMY36F2QDd/ZU7BSM9EOABCHx5mZZBdl wEuop8CYSW5e9X9vCbQEDipfcAajgU12zJXeuW3ewqVedlOza5PM+p4A4+oG2rSz YD2RnoZk3J2BY0EQWWYfsJjbErO1/HL0W8t9SrI97Xglj+J3+AsFqz/jZvTjvvhC IRdBlL6FZOxzDCtz -----END CERTIFICATE-----Generated at Mon Jun 16 02:03:25 2025 by rpki-client