$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json) Hash identifier: foBHck6+GUtU023ZBFOXeGd63/0CgMRE47xk6ALp1Hg= Subject key identifier: 8D:EE:F8:21:41:E8:9C:C2:B0:08:57:F5:53:88:03:DA:BB:2D:CA:29 Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Certificate serial: 32DEEBA7A9CF42CFE94B6C8DE202721DEE366FAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft Manifest number: 044C Signing time: Fri 18 Apr 2025 18:23:54 +0000 Manifest this update: Fri 18 Apr 2025 18:18:54 +0000 Manifest next update: Sat 19 Apr 2025 20:17:54 +0000 Files and hashes: 1: 3134362e3234372e36322e302f32342d3234203d3e203234383531.roa (hash: 3irJhAGcE48vEZNOxKTwKsy4d69RVyIL6ZEClAmlLA0=) 2: 38312e32372e39362e302f32302d3230203d3e203234383531.roa (hash: XazNaC+hpMVCJhcoP3zL+9MGci5nPbb/SboV8YXiO2c=) 3: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: 9+FZkYZJDrAO8glFkvgjTiEvb5Qwhiw23HjMr9LVc4I=) 4: 3134362e3234372e34382e302f32332d3234203d3e203234383531.roa (hash: CYrx2Q8+pBHAyk1lGd5Mg9MkvR7v5zfpX8Vn/ABu+6Q=) 5: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: y4OGbSGooI8V9euRtHx6jpjRwWGZstdSARXhTQ70Yxg=) 6: 3134362e3234372e35392e302f32342d3234203d3e203234383531.roa (hash: cISB3c/lX6ECxkwGaCM313qUlrkmfGXNHg9Sn5Duu/E=) 7: 38312e32372e39362e302f32342d3234203d3e203234383531.roa (hash: ZdZRlvPz8E9OObfHOShlKU2uuHjCBKEbQURGTOBsuE8=) 8: 3134362e3234372e35312e302f32342d3234203d3e203234383531.roa (hash: zRn95fZoa98Dxgk18rTQZPg3Vz861tTnSVUdcy0yTb0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Apr 2025 20:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:de:eb:a7:a9:cf:42:cf:e9:4b:6c:8d:e2:02:72:1d:ee:36:6f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Validity Not Before: Apr 18 18:18:54 2025 GMT Not After : Apr 19 20:17:54 2025 GMT Subject: CN=8DEEF82141E89CC2B00857F5538803DABB2DCA29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fb:03:64:2f:02:d8:d9:b8:e4:12:00:f6:99: 4f:ab:45:f7:24:13:27:da:80:6a:4a:19:c9:5b:12: 89:97:0f:b9:8b:00:c3:0e:58:01:09:92:0a:ef:f5: 1e:95:76:fd:cb:e1:ec:18:37:f0:c9:04:c1:98:a1: e2:c2:a0:9a:ce:07:b9:e0:b7:bc:8e:76:87:ae:0a: 06:6d:f1:f7:ee:e4:62:4e:d7:e6:84:f3:c5:40:df: 07:85:fc:46:10:30:58:e7:f5:24:35:ac:1b:1c:d2: ec:5e:69:6d:89:c4:74:9e:88:2b:07:18:94:f5:f3: 5d:8f:7e:db:31:46:e8:d7:39:33:a1:6c:97:65:0d: 1e:a7:5d:d5:b5:04:4b:06:a9:ca:57:ca:ff:a4:10: 2b:d1:a6:18:80:95:be:72:e2:13:75:8e:f6:92:a7: cd:c1:dc:60:b5:aa:5e:d2:6d:d6:a6:71:9c:ba:34: 2e:37:bc:58:65:9e:71:44:3c:8d:50:d9:08:10:97: 3d:60:34:d3:23:0f:1b:4e:24:1f:eb:3b:01:ad:07: 16:c2:09:ff:c9:f7:20:f9:ac:7f:d9:7c:4d:20:4d: 33:f3:c6:90:55:a0:ea:7c:46:f5:68:35:ca:aa:57: 0a:3e:43:a8:18:d2:4b:3a:40:30:48:f7:78:e6:38: 2d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EE:F8:21:41:E8:9C:C2:B0:08:57:F5:53:88:03:DA:BB:2D:CA:29 X509v3 Authority Key Identifier: keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:9c:1a:0c:ea:05:ad:7e:3c:c7:4b:a3:ea:0c:84:85:0b:d8: 58:57:3f:4b:31:6f:51:14:6d:a8:8a:92:5f:d9:3f:82:a6:97: 7e:51:41:88:b9:d1:46:44:dd:79:a4:26:e8:26:38:2d:ca:a8: f6:a5:eb:d9:61:d2:db:06:d3:bd:04:a1:a7:4d:31:c7:dd:53: 7a:3c:cf:20:3f:bb:04:3a:a2:1a:6b:02:4b:c7:43:20:cc:0d: 4f:20:08:37:09:c8:e3:99:7f:9e:29:07:5c:ea:d3:2b:1d:93: 75:56:7a:80:a7:6d:88:69:ef:2e:14:4b:31:05:06:b6:c8:05: 92:bf:fb:b8:fb:ea:18:86:fa:0b:16:cd:34:ad:a2:41:18:88: b2:aa:33:3e:7e:79:6d:d7:17:be:38:d3:8c:86:52:7a:d2:2b: ca:57:c2:54:fa:89:44:5d:95:03:08:17:1d:2b:86:23:fc:02: 7f:d4:44:11:ac:f2:fa:18:3c:35:8a:fd:04:b5:91:f7:36:08: 02:1f:b5:b6:b0:f8:b4:20:d0:83:60:94:d4:d6:d1:38:fc:ff: bb:71:52:af:d1:7d:06:f8:4b:b7:2e:14:d6:7b:db:3a:63:c2: 3b:d4:fc:21:db:59:63:c2:7b:9c:54:df:91:37:28:7e:0d:b9: d6:c9:bd:d6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMt7rp6nPQs/pS2yN4gJyHe42b60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTZjNTA5YmE0OGU1YjUwNDk0NTcyZTA1YzQ1YzU4ZTdl MTZkODdmYjAeFw0yNTA0MTgxODE4NTRaFw0yNTA0MTkyMDE3NTRaMDMxMTAvBgNV BAMTKDhERUVGODIxNDFFODlDQzJCMDA4NTdGNTUzODgwM0RBQkIyRENBMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX+wNkLwLY2bjkEgD2mU+rRfck EyfagGpKGclbEomXD7mLAMMOWAEJkgrv9R6Vdv3L4ewYN/DJBMGYoeLCoJrOB7ng t7yOdoeuCgZt8ffu5GJO1+aE88VA3weF/EYQMFjn9SQ1rBsc0uxeaW2JxHSeiCsH GJT1812PftsxRujXOTOhbJdlDR6nXdW1BEsGqcpXyv+kECvRphiAlb5y4hN1jvaS p83B3GC1ql7SbdamcZy6NC43vFhlnnFEPI1Q2QgQlz1gNNMjDxtOJB/rOwGtBxbC Cf/J9yD5rH/ZfE0gTTPzxpBVoOp8RvVoNcqqVwo+Q6gY0ks6QDBI93jmOC0DAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUje74IUHonMKwCFf1U4gD2rstyikwHwYDVR0j BBgwFoAUpsUJukjltQSUVy4FxFxY5+Fth/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYtOTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1 NWM1LzEvQTZDNTA5QkE0OEU1QjUwNDk0NTcyRTA1QzQ1QzU4RTdFMTZEODdGQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BzVUp1a2psdFFTVVZ5NEZ4RnhZNS1G dGhfcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzhiYjQ0Ni05 MWMwLTQxMzgtYTMzYS1iNDc4NjVkZTU1YzUvMS9BNkM1MDlCQTQ4RTVCNTA0OTQ1 NzJFMDVDNDVDNThFN0UxNkQ4N0ZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwJwaDOoFrX48x0uj6gyE hQvYWFc/SzFvURRtqIqSX9k/gqaXflFBiLnRRkTdeaQm6CY4Lcqo9qXr2WHS2wbT vQShp00xx91TejzPID+7BDqiGmsCS8dDIMwNTyAINwnI45l/nikHXOrTKx2TdVZ6 gKdtiGnvLhRLMQUGtsgFkr/7uPvqGIb6CxbNNK2iQRiIsqozPn55bdcXvjjTjIZS etIrylfCVPqJRF2VAwgXHSuGI/wCf9REEazy+hg8NYr9BLWR9zYIAh+1trD4tCDQ g2CU1NbROPz/u3FSr9F9BvhLty4U1nvbOmPCO9T8IdtZY8J7nFTfkTcofg251sm9 1g== -----END CERTIFICATE-----Generated at Sat Apr 19 12:16:35 2025 by rpki-client