$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft File: 847138B5401830B89B52403C777718BB40B2B6B5.mft (raw, json) Hash identifier: GIymGPG07OredE7v/1uQg4XH14pnSw8IXBxc6Ly3Zo4= Subject key identifier: CE:52:B5:94:46:D0:0A:32:EA:4B:4A:4A:B5:44:68:13:28:56:F9:B9 Authority key identifier: 84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5 Certificate issuer: /CN=847138B5401830B89B52403C777718BB40B2B6B5 Certificate serial: 46B4A8C53C9B92B071EC3553DAEC9123D32CF5B4 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft Manifest number: 04B7 Signing time: Sat 05 Apr 2025 23:20:02 +0000 Manifest this update: Sat 05 Apr 2025 23:15:02 +0000 Manifest next update: Mon 07 Apr 2025 03:17:02 +0000 Files and hashes: 1: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: HYPQYH9q04uUtQ2nRIqre2hb3Qbqb6C2ZO6Rxb9EvzQ=) 2: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: lqIlXTFIWSBiRqL977xA8LwWmhjqpimo3uxiYjVeS/M=) 3: 847138B5401830B89B52403C777718BB40B2B6B5.crl (hash: GjWmJvKcZJaqaektVC3TQY6kf48rSst/2+cLb/GQ61Q=) 4: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: nMmiIj2RlJjYPT/1+XLEzvCEDF/otDgwrHV2q/RTde4=) 5: BE8A7AC02556C14368364036D5427F53187B6D9D.cer (hash: DgZZLJZ9Eml763gunc/aU0nCab1SiHrkxw0oRdopVbY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 03:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b4:a8:c5:3c:9b:92:b0:71:ec:35:53:da:ec:91:23:d3:2c:f5:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847138B5401830B89B52403C777718BB40B2B6B5 Validity Not Before: Apr 5 23:15:02 2025 GMT Not After : Apr 7 03:17:02 2025 GMT Subject: CN=CE52B59446D00A32EA4B4A4AB54468132856F9B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:93:64:1a:e7:0b:6a:38:e6:ab:d9:ae:c1:63: 78:f3:89:76:03:64:b0:70:fb:4b:8c:77:b1:5c:90: 74:40:2a:fb:bf:ef:5f:2d:ce:a5:11:25:69:dc:89: ab:96:fc:0d:01:60:3c:b3:6d:c2:bf:c8:cd:05:d3: 1d:72:7e:62:bc:d8:11:bb:cd:b9:c6:4a:c2:d6:08: dc:dd:19:e6:7f:30:39:b7:08:1a:87:88:c0:2b:e2: 11:29:e2:2a:3f:ce:d3:29:8b:32:2f:82:46:7b:b3: ab:b2:ff:d3:4c:f8:c5:77:0f:31:bc:cd:87:d1:b1: bd:33:a2:5f:1c:b8:db:f5:b3:0a:5f:0b:46:b5:81: 03:ee:6c:28:82:79:1d:db:da:b4:96:b1:89:73:7d: d7:fe:b2:55:44:19:c1:d2:ca:4f:62:09:a1:33:4b: d0:9f:f9:91:d6:fe:38:1d:e9:15:fc:0a:d9:f5:da: 09:f3:dd:e8:22:fd:67:77:b2:0f:03:cf:ae:1b:d8: 31:13:2b:81:fd:44:61:bc:11:3a:08:3b:ad:5e:37: df:db:32:a9:7a:ff:f1:4e:a4:32:35:d0:9e:3e:54: 45:84:64:a3:3b:90:f8:ab:74:61:d2:c0:3c:63:8d: eb:64:35:ad:a7:e6:41:f2:5d:45:2a:c8:21:c1:ae: 9d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:52:B5:94:46:D0:0A:32:EA:4B:4A:4A:B5:44:68:13:28:56:F9:B9 X509v3 Authority Key Identifier: keyid:84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:33:c6:74:7a:dc:e8:9c:96:55:73:f3:bd:03:67:fd:52:d8: b7:13:4b:90:da:d1:4a:f8:7a:f6:d2:14:ef:76:8b:6c:0d:13: a3:9a:39:f9:6c:e5:f0:e4:ad:93:47:04:5c:4d:44:90:88:44: 9c:d1:1a:81:4b:e3:82:17:be:37:6c:29:74:ba:66:86:4b:42: e9:99:52:35:32:70:52:16:fe:4f:22:fc:80:a9:87:4d:f3:a4: bc:e0:a2:4a:e1:b1:e0:3e:dc:41:a4:4e:8d:f0:7f:23:9f:6d: b1:e1:c4:09:8a:78:0f:ad:1b:95:7e:4c:ba:5b:93:a8:70:44: c0:40:b7:b3:3d:d6:db:4d:a2:4c:e1:1e:e9:5b:67:f3:d8:a9: 50:18:e7:82:2b:a8:06:17:4d:22:15:f8:f4:b1:26:03:e2:41: 5b:3f:61:08:c2:a9:dd:35:ad:13:ee:d6:40:b8:93:23:ae:e7: 7a:a3:08:28:6f:3f:29:7d:af:64:56:b1:8a:0b:41:a9:b3:cf: 20:63:c7:df:69:6d:53:40:08:b8:00:9a:87:c8:86:d1:74:db: 0a:c6:62:10:f2:12:b6:d5:cd:00:8c:3c:a9:aa:b3:6b:fa:d3: b8:01:93:35:6a:a1:65:fb:8b:a2:77:52:5c:6a:fe:52:1b:3b: 5c:4a:f2:c2 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIURrSoxTybkrBx7DVT2uyRI9Ms9bQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0 MEIyQjZCNTAeFw0yNTA0MDUyMzE1MDJaFw0yNTA0MDcwMzE3MDJaMDMxMTAvBgNV BAMTKENFNTJCNTk0NDZEMDBBMzJFQTRCNEE0QUI1NDQ2ODEzMjg1NkY5QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChk2Qa5wtqOOar2a7BY3jziXYD ZLBw+0uMd7FckHRAKvu/718tzqURJWnciauW/A0BYDyzbcK/yM0F0x1yfmK82BG7 zbnGSsLWCNzdGeZ/MDm3CBqHiMAr4hEp4io/ztMpizIvgkZ7s6uy/9NM+MV3DzG8 zYfRsb0zol8cuNv1swpfC0a1gQPubCiCeR3b2rSWsYlzfdf+slVEGcHSyk9iCaEz S9Cf+ZHW/jgd6RX8Ctn12gnz3egi/Wd3sg8Dz64b2DETK4H9RGG8EToIO61eN9/b Mql6//FOpDI10J4+VEWEZKM7kPirdGHSwDxjjetkNa2n5kHyXUUqyCHBrp1hAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUzlK1lEbQCjLqS0pKtURoEyhW+bkwHwYDVR0j BBgwFoAUhHE4tUAYMLibUkA8d3cYu0CytrUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzQvODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0MEIyQjZCNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0MEIy QjZCNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03 Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvNC84NDcxMzhCNTQwMTgzMEI4OUI1 MjQwM0M3Nzc3MThCQjQwQjJCNkI1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljPGdHrc6JyWVXPzvQNn /VLYtxNLkNrRSvh69tIU73aLbA0To5o5+Wzl8OStk0cEXE1EkIhEnNEagUvjghe+ N2wpdLpmhktC6ZlSNTJwUhb+TyL8gKmHTfOkvOCiSuGx4D7cQaROjfB/I59tseHE CYp4D60blX5MuluTqHBEwEC3sz3W202iTOEe6Vtn89ipUBjngiuoBhdNIhX49LEm A+JBWz9hCMKp3TWtE+7WQLiTI67neqMIKG8/KX2vZFaxigtBqbPPIGPH32ltU0AI uACah8iG0XTbCsZiEPISttXNAIw8qaqza/rTuAGTNWqhZfuLondSXGr+Uhs7XEry wg== -----END CERTIFICATE-----Generated at Sun Apr 6 14:41:32 2025 by rpki-client