$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.mft File: 6B5432AF3212182697F0E937473AF3EB52E68EA2.mft (raw, json) Hash identifier: B9V0+S5q2n4IJcn530tsgVsYU1GvmqtUhdlaAyC6epo= Subject key identifier: 9F:D8:06:B0:23:DB:D0:56:3C:98:1B:BD:EC:57:B3:AF:F2:9D:EC:98 Authority key identifier: 6B:54:32:AF:32:12:18:26:97:F0:E9:37:47:3A:F3:EB:52:E6:8E:A2 Certificate issuer: /CN=6B5432AF3212182697F0E937473AF3EB52E68EA2 Certificate serial: 66989FB8F38CF6181AC29B72A0A34E375BF365A3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.mft Manifest number: 26 Signing time: Fri 04 Apr 2025 17:15:54 +0000 Manifest this update: Fri 04 Apr 2025 17:10:54 +0000 Manifest next update: Sat 05 Apr 2025 20:45:54 +0000 Files and hashes: 1: 6B5432AF3212182697F0E937473AF3EB52E68EA2.crl (hash: ZVmLUIcKYpWyhlv5nUkaIIyr9ikXvDB+E6vh20qBSZs=) 2: 326131343a373538303a6330303a3a2f34302d3438203d3e20313938303235.roa (hash: SmK/qRdmMgqpKRzEC7oHEgUtqCIOOpsXebSJKkFh9gk=) 3: 326131343a373538303a6330303a3a2f34302d3438203d3e20313531313934.roa (hash: u8FYHOPbqE1MSDqxryvbkkQVPt9ds3RaHvtwriF25Bo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.crl rsync://rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 20:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:98:9f:b8:f3:8c:f6:18:1a:c2:9b:72:a0:a3:4e:37:5b:f3:65:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B5432AF3212182697F0E937473AF3EB52E68EA2 Validity Not Before: Apr 4 17:10:54 2025 GMT Not After : Apr 5 20:45:54 2025 GMT Subject: CN=9FD806B023DBD0563C981BBDEC57B3AFF29DEC98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ff:ff:ea:48:27:13:59:87:4e:b3:95:cc:a4: d1:10:fd:ed:07:e7:bd:7a:b9:ec:1e:7a:5b:88:dd: 60:d6:08:59:66:d2:e6:f2:4f:ea:0f:6e:ed:00:62: 29:e4:f5:d8:85:40:a6:09:da:4c:56:b2:ff:e2:62: 1c:ed:1a:d0:d5:39:e1:26:13:a4:30:48:01:50:df: fe:7f:9c:83:09:6e:6c:bc:82:d0:20:32:c9:5a:c3: a8:55:8c:30:15:87:46:50:06:b7:a5:b9:f1:b1:d5: 0d:a3:6d:f9:33:37:a4:60:13:bb:01:3d:a6:51:8e: 87:78:16:e3:24:a4:19:5d:c8:d2:b9:fb:b6:0e:51: 61:16:cf:f6:8e:b6:1e:64:77:aa:9a:9d:43:fc:a1: ab:df:ed:88:a0:bf:ea:af:6d:d6:23:ed:bb:c0:49: ca:e4:f2:86:2d:39:5c:87:d8:3a:5e:58:42:cc:94: 83:29:9f:f4:0b:3a:b5:27:f0:d8:9d:48:20:d9:5a: 3a:ad:3e:f4:28:52:70:aa:84:98:78:a0:f9:ed:0f: 13:fc:1d:6e:ba:c7:b1:c1:95:3e:48:2f:82:e5:3d: 84:ad:44:30:63:79:77:85:7b:0f:ab:eb:e6:e1:d6: 25:af:8a:de:00:ef:65:5c:8e:14:61:17:27:28:52: b0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D8:06:B0:23:DB:D0:56:3C:98:1B:BD:EC:57:B3:AF:F2:9D:EC:98 X509v3 Authority Key Identifier: keyid:6B:54:32:AF:32:12:18:26:97:F0:E9:37:47:3A:F3:EB:52:E6:8E:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0ef4267e-d149-41e9-bd94-3c51043d2c5b/0/6B5432AF3212182697F0E937473AF3EB52E68EA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:ff:a5:84:ed:7a:b8:06:cc:91:2d:5a:9d:df:36:f6:d7:d8: 55:26:89:ac:0a:93:93:9a:5d:74:7f:91:b9:28:78:3a:bc:41: b9:59:e5:00:24:30:5a:96:04:a3:22:a9:b2:b1:51:f2:8d:94: b1:aa:bd:51:21:79:a7:fd:91:b6:db:62:cc:f2:6f:8a:93:9a: 56:88:da:5b:f2:e9:ac:2a:3b:c2:10:81:23:bf:49:d8:15:61: 2b:d5:f4:8d:95:a7:71:03:66:da:e1:ed:27:15:08:c0:87:17: 49:2a:0b:af:89:3e:26:33:1f:4a:5e:07:96:ed:2a:6d:e8:a6: fb:7c:f7:ba:5a:3d:fb:93:05:d1:ff:41:78:d4:6d:68:1a:b8: 95:74:e4:17:a0:e8:23:3b:5f:17:ed:29:97:dd:d9:33:4f:f1: f2:7b:60:60:32:98:4b:08:ec:b7:87:fa:b6:c3:aa:f8:ab:bb: 5e:19:48:85:4e:d5:64:b5:13:2e:f8:3b:c7:ee:44:5c:88:57: 1e:62:94:43:72:96:8b:7c:cb:de:31:e1:44:d0:70:47:aa:b9: 49:88:b2:55:b6:f5:20:b5:31:1e:a5:b9:a7:e5:e2:d2:6d:65: 01:02:0f:e2:58:7d:26:0e:1c:b8:b6:a1:06:9e:4f:9b:89:b8: 0f:36:2c:44 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZpifuPOM9hgawptyoKNON1vzZaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1NDMyQUYzMjEyMTgyNjk3RjBFOTM3NDczQUYzRUI1 MkU2OEVBMjAeFw0yNTA0MDQxNzEwNTRaFw0yNTA0MDUyMDQ1NTRaMDMxMTAvBgNV BAMTKDlGRDgwNkIwMjNEQkQwNTYzQzk4MUJCREVDNTdCM0FGRjI5REVDOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb///qSCcTWYdOs5XMpNEQ/e0H 5716ueweeluI3WDWCFlm0ubyT+oPbu0AYink9diFQKYJ2kxWsv/iYhztGtDVOeEm E6QwSAFQ3/5/nIMJbmy8gtAgMslaw6hVjDAVh0ZQBrelufGx1Q2jbfkzN6RgE7sB PaZRjod4FuMkpBldyNK5+7YOUWEWz/aOth5kd6qanUP8oavf7Yigv+qvbdYj7bvA Scrk8oYtOVyH2DpeWELMlIMpn/QLOrUn8NidSCDZWjqtPvQoUnCqhJh4oPntDxP8 HW66x7HBlT5IL4LlPYStRDBjeXeFew+r6+bh1iWvit4A72VcjhRhFycoUrDrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUn9gGsCPb0FY8mBu97Fezr/Kd7JgwHwYDVR0j BBgwFoAUa1QyrzISGCaX8Ok3Rzrz61LmjqIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGVmNDI2N2UtZDE0OS00MWU5LWJkOTQtM2M1MTA0M2Qy YzViLzAvNkI1NDMyQUYzMjEyMTgyNjk3RjBFOTM3NDczQUYzRUI1MkU2OEVBMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC82QjU0MzJBRjMyMTIxODI2OTdGMEU5Mzc0 NzNBRjNFQjUyRTY4RUEyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzBlZjQyNjdlLWQxNDktNDFlOS1iZDk0LTNjNTEwNDNkMmM1Yi8wLzZCNTQzMkFG MzIxMjE4MjY5N0YwRTkzNzQ3M0FGM0VCNTJFNjhFQTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCR/6WE 7Xq4BsyRLVqd3zb219hVJomsCpOTml10f5G5KHg6vEG5WeUAJDBalgSjIqmysVHy jZSxqr1RIXmn/ZG222LM8m+Kk5pWiNpb8umsKjvCEIEjv0nYFWEr1fSNladxA2ba 4e0nFQjAhxdJKguviT4mMx9KXgeW7Spt6Kb7fPe6Wj37kwXR/0F41G1oGriVdOQX oOgjO18X7SmX3dkzT/Hye2BgMphLCOy3h/q2w6r4q7teGUiFTtVktRMu+DvH7kRc iFceYpRDcpaLfMveMeFE0HBHqrlJiLJVtvUgtTEepbmn5eLSbWUBAg/iWH0mDhy4 tqEGnk+bibgPNixE -----END CERTIFICATE-----Generated at Sat Apr 5 09:44:58 2025 by rpki-client