$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft File: 8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json) Hash identifier: m5qCxn6bSDOdbc/646k8o6yMLfquxtZZ3Ptob0mfr2s= Subject key identifier: 9F:11:E4:F1:9E:AE:31:97:4A:2D:F3:04:94:41:90:AD:4A:36:75:02 Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 Certificate issuer: /CN=8184669b0189b7fabe05e700325a0d74957beb27 Certificate serial: 16C067F73331F85FCCF75B9F8D3844B45B9CBB3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft Manifest number: 1D Signing time: Sun 20 Apr 2025 22:29:22 +0000 Manifest this update: Sun 20 Apr 2025 22:24:22 +0000 Manifest next update: Tue 22 Apr 2025 02:23:22 +0000 Files and hashes: 1: 3231332e3135372e3132322e302f32342d3234203d3e20383334.roa (hash: XBixnko3qtEccfsl7C8E/1A0CemeZocPCP9lkkwrqDw=) 2: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: obPbW0ZKO9rq4yp7c5UqzqijavPW0CV78gaYhHaBReI=) 3: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: Q6BG5pqzyYVw0rZ8IweSVklty3Ezsihpo3yhYy5JcDg=) 4: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: u6D0nQIamyf1rwT6EphlkmgpGmdsHhrROhbEzSFSSxQ=) 5: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: fkThFrWbc2SNg5nWL/DjCmp7efO9LKVSLfyHO63Odeo=) 6: 3231332e3135372e3132312e302f32342d3234203d3e20383334.roa (hash: KzRDONoUEdWtAmYoE3nM54cz2mZ3OTHGtsETHEM2i5I=) 7: 3231332e3135372e3132332e302f32342d3234203d3e20313337353137.roa (hash: 101KeXXnBE7X7QLTvc7Gr7DVuO0YIAuTdg47tJ4yQUU=) 8: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: cK22q6rO6KtktflqsQYlSr1z73xEpoVM/WNGnd6YIEI=) 9: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: U2rsj2GmpPBYV9RPLITNHzbaDI2Gxelnlov5msxX9eI=) 10: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: oXC9Asr9SJ7DSslxSZaWUX9xWnSBbY5iUxbxwvvcFUI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Apr 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:c0:67:f7:33:31:f8:5f:cc:f7:5b:9f:8d:38:44:b4:5b:9c:bb:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27 Validity Not Before: Apr 20 22:24:22 2025 GMT Not After : Apr 22 02:23:22 2025 GMT Subject: CN=9F11E4F19EAE31974A2DF304944190AD4A367502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:75:f9:b3:55:f6:de:6c:ea:ae:1d:da:fb:9a: 74:a3:fb:e4:a0:bb:5d:1c:24:03:34:0b:84:f1:45: 03:28:13:38:1c:8c:fb:73:f3:f3:47:0b:87:e1:25: 86:ce:32:2f:d4:88:b0:70:0d:65:57:a7:00:a6:51: 82:c2:ec:8c:5e:e0:46:2f:69:ef:0e:21:f2:9a:f5: cb:97:a5:46:a9:a2:2d:02:ec:a6:7d:01:7d:ea:1e: a0:7e:ce:75:e8:dc:b9:62:b3:ea:04:9f:e9:8a:34: c7:60:8f:6a:46:3b:e7:e7:44:6f:dd:00:58:ac:73: 2c:f5:4a:61:f7:78:0e:42:05:b9:8d:54:3b:e0:cf: 93:bf:f9:ff:d1:d1:31:99:c6:33:d1:6e:c3:cd:98: 61:6c:d1:da:2f:b7:43:74:f1:3d:2d:f2:b6:56:35: b6:71:40:40:eb:1e:35:a2:6a:e9:dc:66:51:30:a6: a0:02:ee:1f:dc:bb:79:13:5c:dc:ec:fc:0e:b2:46: bf:f1:dd:00:42:e8:70:3f:63:83:05:6e:b2:00:9f: 22:a0:7f:b4:13:4f:29:e3:cb:42:84:ce:3b:25:2d: 73:e6:ca:12:8c:72:b3:ab:f1:cd:4a:ed:ce:e7:d5: 24:d7:9d:11:f3:4e:92:7d:fd:1c:3b:ea:a3:0a:28: 1c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:11:E4:F1:9E:AE:31:97:4A:2D:F3:04:94:41:90:AD:4A:36:75:02 X509v3 Authority Key Identifier: keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:06:aa:4b:74:dc:b2:55:fe:6b:86:59:a5:df:42:f7:a8:df: 1c:d8:3e:61:4c:b8:c7:2a:67:98:2f:32:06:e0:b0:4b:45:26: b7:e0:83:be:5c:50:05:cd:ee:0f:e2:b1:dc:bd:27:ad:51:2c: d5:64:a1:4e:1f:9c:07:ee:55:a8:9c:e5:9b:37:c7:79:6e:57: 2f:52:b1:c4:c0:e8:56:87:dd:fa:a7:e9:30:e3:46:6c:ac:64: 85:1e:39:ee:8b:78:8a:05:5d:75:7d:37:83:bb:50:8f:24:19: aa:47:30:dc:08:ef:e0:aa:4d:02:30:28:6e:42:f0:07:57:fd: ac:3a:9d:11:bf:10:73:d9:52:ec:de:55:4b:ab:1f:e5:be:ac: 07:bd:fb:99:a4:30:ff:2a:0a:03:09:9d:9c:82:73:c0:8e:47: 4a:de:dd:a4:a6:a4:2b:bb:e3:16:42:cb:f1:96:01:9c:b9:c0: a0:9b:38:a5:1f:a0:55:c9:28:69:7b:d0:ca:75:2a:9f:36:3d: a3:6a:d3:76:a2:10:de:4b:9e:3c:95:fc:37:ac:83:48:c8:26: 84:20:23:05:32:ee:0a:e2:27:3b:3e:13:59:ea:bd:f2:30:70: eb:ed:df:a0:64:ed:f6:ab:21:38:6c:70:29:39:af:03:4b:4a: d7:73:5f:b6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFsBn9zMx+F/M91ufjThEtFucuz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4NDY2OWIwMTg5YjdmYWJlMDVlNzAwMzI1YTBkNzQ5 NTdiZWIyNzAeFw0yNTA0MjAyMjI0MjJaFw0yNTA0MjIwMjIzMjJaMDMxMTAvBgNV BAMTKDlGMTFFNEYxOUVBRTMxOTc0QTJERjMwNDk0NDE5MEFENEEzNjc1MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCadfmzVfbebOquHdr7mnSj++Sg u10cJAM0C4TxRQMoEzgcjPtz8/NHC4fhJYbOMi/UiLBwDWVXpwCmUYLC7Ixe4EYv ae8OIfKa9cuXpUapoi0C7KZ9AX3qHqB+znXo3Llis+oEn+mKNMdgj2pGO+fnRG/d AFiscyz1SmH3eA5CBbmNVDvgz5O/+f/R0TGZxjPRbsPNmGFs0dovt0N08T0t8rZW NbZxQEDrHjWiauncZlEwpqAC7h/cu3kTXNzs/A6yRr/x3QBC6HA/Y4MFbrIAnyKg f7QTTynjy0KEzjslLXPmyhKMcrOr8c1K7c7n1STXnRHzTpJ9/Rw76qMKKBz7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUnxHk8Z6uMZdKLfMElEGQrUo2dQIwHwYDVR0j BBgwFoAUgYRmmwGJt/q+BecAMloNdJV76ycwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTQzMWU0MmUtMGQ3Zi00NGQwLTgxM2YtYjVlM2EyYWJi ZTI1LzAvODE4NDY2OUIwMTg5QjdGQUJFMDVFNzAwMzI1QTBENzQ5NTdCRUIyNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dZUm1td0dKdF9xLUJlY0FNbG9OZEpW NzZ5Yy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNDMxZTQyZS0w ZDdmLTQ0ZDAtODEzZi1iNWUzYTJhYmJlMjUvMC84MTg0NjY5QjAxODlCN0ZBQkUw NUU3MDAzMjVBMEQ3NDk1N0JFQjI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAaqS3TcslX+a4ZZpd9C 96jfHNg+YUy4xypnmC8yBuCwS0Umt+CDvlxQBc3uD+Kx3L0nrVEs1WShTh+cB+5V qJzlmzfHeW5XL1KxxMDoVofd+qfpMONGbKxkhR457ot4igVddX03g7tQjyQZqkcw 3Ajv4KpNAjAobkLwB1f9rDqdEb8Qc9lS7N5VS6sf5b6sB737maQw/yoKAwmdnIJz wI5HSt7dpKakK7vjFkLL8ZYBnLnAoJs4pR+gVckoaXvQynUqnzY9o2rTdqIQ3kue PJX8N6yDSMgmhCAjBTLuCuInOz4TWeq98jBw6+3foGTt9qshOGxwKTmvA0tK13Nf tg== -----END CERTIFICATE-----Generated at Mon Apr 21 01:18:49 2025 by rpki-client