$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft File: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft (raw, json) Hash identifier: lvPfrQSKyFRGMuGq6AHji204O9N2I3eOolinEu8RSEY= Subject key identifier: 7E:9C:72:65:E3:18:D9:95:72:9E:8C:41:53:20:56:09:17:42:D2:F8 Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3 Certificate issuer: /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3 Certificate serial: 613AFD5BAAC38C704D680849EA330CD7314161C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft Manifest number: 64 Signing time: Sun 27 Apr 2025 13:48:46 +0000 Manifest this update: Sun 27 Apr 2025 13:43:46 +0000 Manifest next update: Mon 28 Apr 2025 14:43:46 +0000 Files and hashes: 1: AS215296.asa (hash: KrR5zn63OO70MAFM8gtDuEtBLfsmvIW52AgRXOTcWcs=) 2: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (hash: 9+L5QD9C8ye40Ikj2zBEBBChEOO2tsV/W1In9gyAruM=) 3: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (hash: 54w2F3M9c9ZMYqej/uVTYoc9lVaBw0QpLSZEW7mlB7o=) 4: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl (hash: jK+l5AtHcYYUWYk9yRp92NwBkNo57seF54F4vza/xLQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 14:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:3a:fd:5b:aa:c3:8c:70:4d:68:08:49:ea:33:0c:d7:31:41:61:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3 Validity Not Before: Apr 27 13:43:46 2025 GMT Not After : Apr 28 14:43:46 2025 GMT Subject: CN=7E9C7265E318D995729E8C41532056091742D2F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:34:36:af:7c:b7:41:06:78:e7:5c:7a:9d:3d: e4:60:6b:3b:c7:13:56:dd:e9:60:dd:f4:63:64:e9: 31:aa:fb:f0:d5:fa:50:49:27:d9:14:31:eb:b9:11: 50:2c:25:93:61:f7:bf:14:b4:ee:17:d9:86:67:10: ae:32:a9:a2:dd:31:4c:60:33:56:8b:7a:7e:c6:17: 81:a6:80:5a:16:18:46:9f:f7:e7:9c:1a:9b:66:37: 62:ab:75:41:a9:6b:63:26:ea:05:46:36:f9:dd:64: d2:06:bf:17:a4:df:d1:c4:0b:49:f2:02:9e:47:26: 8c:73:79:18:bf:ac:43:6d:ff:22:f9:ac:0e:a2:0a: f9:0e:44:5b:1a:02:f5:d1:6e:29:d4:2b:0f:12:75: 48:19:50:d4:e0:e9:ac:09:41:c2:8d:52:98:f8:dd: ad:15:8a:a2:5e:cd:05:5a:9f:ee:9d:23:5c:01:73: 71:10:4f:c4:67:20:7d:8a:a4:99:32:57:89:2b:13: 0f:37:8e:bb:27:ed:51:f8:44:46:fe:12:c2:d0:c3: 57:51:5b:6f:13:85:8b:12:cb:d3:9d:7d:81:ec:d9: dc:c9:19:b9:c1:aa:0c:5c:7b:f7:15:63:bc:fc:02: 58:9d:b8:49:cc:c9:4e:84:d6:8c:db:01:80:01:a3: f1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9C:72:65:E3:18:D9:95:72:9E:8C:41:53:20:56:09:17:42:D2:F8 X509v3 Authority Key Identifier: keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5b:cb:a3:7e:a6:d2:e0:23:4e:70:c1:54:82:18:9b:1f:ae: d7:72:bd:b1:cc:b9:b6:3a:83:22:de:ad:8b:d1:ff:30:1d:94: ac:53:24:26:44:8a:26:52:b8:7f:92:95:cb:a8:8b:f2:1e:d1: 3c:8e:5e:41:09:24:ca:df:44:52:e9:6d:18:44:4a:e9:b1:ac: 8d:86:71:bc:8b:d4:ea:90:06:d0:7e:95:25:89:e3:ad:6f:82: 37:79:e2:18:63:dc:45:90:29:30:fb:5e:84:ea:14:da:dc:70: cc:99:84:66:95:ad:27:59:60:66:2c:90:1b:d3:c9:82:76:f5: d0:1b:b5:44:6f:fb:f9:30:66:0e:7e:91:fb:7d:57:8d:62:02: ce:71:2c:74:28:97:86:58:24:64:f8:d1:8b:7e:af:a5:0d:ef: 17:42:65:4f:c5:a4:ec:b2:a4:95:9b:8e:be:9f:36:cf:dd:78: a6:2b:2e:af:ec:3b:51:d7:08:ba:e8:c4:c1:4e:62:5c:55:ac: c2:da:ed:5a:e6:c3:e0:16:ae:4b:3c:1a:39:67:ca:c7:6e:86: 02:37:98:d4:71:e5:69:78:65:0d:76:d9:8d:10:25:b0:df:eb: 88:35:ba:9f:a6:30:25:25:45:79:c4:66:ce:3e:4e:86:8d:01: f6:5e:d6:8a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYTr9W6rDjHBNaAhJ6jMM1zFBYccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4ZDdkYzk3NzliMjc4MTVlYmI1YzNmNWZjZjA3Y2M1 ODM3MDhiMzAeFw0yNTA0MjcxMzQzNDZaFw0yNTA0MjgxNDQzNDZaMDMxMTAvBgNV BAMTKDdFOUM3MjY1RTMxOEQ5OTU3MjlFOEM0MTUzMjA1NjA5MTc0MkQyRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDINDavfLdBBnjnXHqdPeRgazvH E1bd6WDd9GNk6TGq+/DV+lBJJ9kUMeu5EVAsJZNh978UtO4X2YZnEK4yqaLdMUxg M1aLen7GF4GmgFoWGEaf9+ecGptmN2KrdUGpa2Mm6gVGNvndZNIGvxek39HEC0ny Ap5HJoxzeRi/rENt/yL5rA6iCvkORFsaAvXRbinUKw8SdUgZUNTg6awJQcKNUpj4 3a0ViqJezQVan+6dI1wBc3EQT8RnIH2KpJkyV4krEw83jrsn7VH4REb+EsLQw1dR W28ThYsSy9OdfYHs2dzJGbnBqgxce/cVY7z8AliduEnMyU6E1ozbAYABo/H/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUfpxyZeMY2ZVynoxBUyBWCRdC0vgwHwYDVR0j BBgwFoAUV419yXebJ4Feu1w/X88HzFg3CLMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWNhMjUzNTAtOWUzZi00NmUxLWFlMmItMWM2MWI2ZWE1 YWUyLzAvNTc4RDdEQzk3NzlCMjc4MTVFQkI1QzNGNUZDRjA3Q0M1ODM3MDhCMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Y0MTl5WGViSjRGZXUxd19YODhIekZn M0NMTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lY2EyNTM1MC05 ZTNmLTQ2ZTEtYWUyYi0xYzYxYjZlYTVhZTIvMC81NzhEN0RDOTc3OUIyNzgxNUVC QjVDM0Y1RkNGMDdDQzU4MzcwOEIzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlvLo36m0uAjTnDBVIIY mx+u13K9scy5tjqDIt6ti9H/MB2UrFMkJkSKJlK4f5KVy6iL8h7RPI5eQQkkyt9E UultGERK6bGsjYZxvIvU6pAG0H6VJYnjrW+CN3niGGPcRZApMPtehOoU2txwzJmE ZpWtJ1lgZiyQG9PJgnb10Bu1RG/7+TBmDn6R+31XjWICznEsdCiXhlgkZPjRi36v pQ3vF0JlT8Wk7LKklZuOvp82z914pisur+w7UdcIuujEwU5iXFWswtrtWubD4Bau SzwaOWfKx26GAjeY1HHlaXhlDXbZjRAlsN/riDW6n6YwJSVFecRmzj5Oho0B9l7W ig== -----END CERTIFICATE-----Generated at Mon Apr 28 02:51:34 2025 by rpki-client