$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.mft File: F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.mft (raw, json) Hash identifier: jfiBMRa4/nFRkDWtw6NEBqrdHq7F3PgfMPQJsQtZm9k= Subject key identifier: 53:F9:C8:92:22:77:9E:32:D6:D5:50:91:AB:8C:CA:29:E5:A0:15:38 Authority key identifier: F8:17:E6:F7:FB:2A:DE:48:7E:A7:B5:C6:D3:6B:E9:D4:5D:69:D1:6B Certificate issuer: /CN=F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B Certificate serial: 040D691D630D704934A448B37D83392A228F9E79 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.mft Manifest number: 0449 Signing time: Thu 17 Apr 2025 09:09:45 +0000 Manifest this update: Thu 17 Apr 2025 09:04:45 +0000 Manifest next update: Fri 18 Apr 2025 10:46:45 +0000 Files and hashes: 1: F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.crl (hash: 2q9rn5X2UVbYEF4xOUTx85lcakiSEsZvDIIJ76+LEpA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Apr 2025 10:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0d:69:1d:63:0d:70:49:34:a4:48:b3:7d:83:39:2a:22:8f:9e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B Validity Not Before: Apr 17 09:04:45 2025 GMT Not After : Apr 18 10:46:45 2025 GMT Subject: CN=53F9C89222779E32D6D55091AB8CCA29E5A01538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:02:4a:72:2f:4c:db:ff:92:15:b5:78:d2:91: 74:f6:b8:15:1c:a6:f6:c6:35:1b:ce:15:d0:3d:d7: e1:4d:ae:13:ed:16:be:1d:c5:7f:fc:8c:8e:b0:07: 21:e0:65:a5:49:28:4c:27:45:cd:77:0c:53:8b:8d: fb:56:d4:7e:4f:5e:ae:e4:e7:17:a2:ab:d1:f4:8b: 00:fd:ea:d4:66:65:44:34:ef:80:b9:ad:cc:4b:89: 43:8b:52:dc:f6:93:ee:b3:2d:f4:df:f9:9c:1e:b8: 15:f4:07:0d:c4:c9:08:22:91:4c:bd:da:bb:75:51: 8c:07:42:7a:60:6e:ab:e4:33:73:ae:18:c6:21:11: 9b:c3:86:19:61:c6:ff:4d:e1:ec:ef:f1:e3:ed:6c: 5e:8a:68:49:fd:9b:2b:9a:3f:06:03:60:fe:ce:34: 29:f7:6e:c8:15:1e:3c:1a:2d:b0:cb:b9:72:46:bb: 9d:49:5b:a0:3e:3b:51:57:90:4f:b1:fb:64:68:71: 1b:86:91:ba:01:02:ff:58:98:43:eb:35:c1:b1:d6: 25:3b:9f:e8:a1:07:54:9b:12:a6:c9:9b:7e:8b:a6: d4:9e:37:ea:87:4e:26:f1:91:92:ea:74:04:17:14: 6c:41:9f:c2:3f:05:61:27:af:2a:ee:a7:a3:7e:a2: fa:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F9:C8:92:22:77:9E:32:D6:D5:50:91:AB:8C:CA:29:E5:A0:15:38 X509v3 Authority Key Identifier: keyid:F8:17:E6:F7:FB:2A:DE:48:7E:A7:B5:C6:D3:6B:E9:D4:5D:69:D1:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/F817E6F7FB2ADE487EA7B5C6D36BE9D45D69D16B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:cf:ed:4e:2c:52:a4:ac:ce:24:d2:70:53:c3:9b:ec:c2:29: 10:49:f7:ca:08:e1:05:84:65:b3:d7:a1:c6:9b:bb:21:73:a1: 0f:8a:08:a3:8e:06:d4:9f:70:72:1e:60:3f:2c:9c:31:45:95: 4f:35:63:9e:f1:2f:7c:d9:1b:7e:05:4e:8f:b0:72:e3:b5:a8: 5a:49:9d:d0:03:f8:1a:26:c8:a8:c7:4c:dc:b5:8c:3b:e5:9b: 82:96:6e:0d:54:c5:4b:bb:47:7a:ba:05:e8:f9:29:a1:93:cf: 23:f3:1b:66:cd:ea:5b:73:2e:d9:0a:77:2c:43:76:3c:9c:a0: 41:6d:73:9a:ae:a2:9d:32:7c:78:33:47:cf:ab:6c:3c:6c:28: 96:79:49:a6:cc:11:2e:05:1a:b0:a3:e2:10:fa:8d:f7:7e:dc: 4f:94:16:06:e3:1e:16:98:15:28:d2:c2:36:19:1e:13:92:75: 3d:b4:49:67:6f:1f:c3:5c:32:21:5e:d6:1a:26:8c:dc:54:dd: 46:a8:27:66:fa:7c:84:71:8d:d0:2b:2b:09:5a:65:32:70:50: 1c:0c:92:77:8f:55:77:16:75:f8:ce:cb:8b:7e:5b:90:67:3b: 86:3f:38:cd:31:0d:45:6a:3c:a8:75:54:04:34:48:91:55:04: e6:0e:f2:c5 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUBA1pHWMNcEk0pEizfYM5KiKPnnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgxN0U2RjdGQjJBREU0ODdFQTdCNUM2RDM2QkU5RDQ1 RDY5RDE2QjAeFw0yNTA0MTcwOTA0NDVaFw0yNTA0MTgxMDQ2NDVaMDMxMTAvBgNV BAMTKDUzRjlDODkyMjI3NzlFMzJENkQ1NTA5MUFCOENDQTI5RTVBMDE1MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtAkpyL0zb/5IVtXjSkXT2uBUc pvbGNRvOFdA91+FNrhPtFr4dxX/8jI6wByHgZaVJKEwnRc13DFOLjftW1H5PXq7k 5xeiq9H0iwD96tRmZUQ074C5rcxLiUOLUtz2k+6zLfTf+ZweuBX0Bw3EyQgikUy9 2rt1UYwHQnpgbqvkM3OuGMYhEZvDhhlhxv9N4ezv8ePtbF6KaEn9myuaPwYDYP7O NCn3bsgVHjwaLbDLuXJGu51JW6A+O1FXkE+x+2RocRuGkboBAv9YmEPrNcGx1iU7 n+ihB1SbEqbJm36LptSeN+qHTibxkZLqdAQXFGxBn8I/BWEnryrup6N+ovr5AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUU/nIkiJ3njLW1VCRq4zKKeWgFTgwHwYDVR0j BBgwFoAU+Bfm9/sq3kh+p7XG02vp1F1p0WswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzQvRjgxN0U2RjdGQjJBREU0ODdFQTdCNUM2RDM2QkU5RDQ1RDY5RDE2Qi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvRjgxN0U2RjdGQjJBREU0ODdFQTdCNUM2RDM2QkU5RDQ1RDY5 RDE2Qi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03 Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvNC9GODE3RTZGN0ZCMkFERTQ4N0VB N0I1QzZEMzZCRTlENDVENjlEMTZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHs/tTixSpKzOJNJwU8Ob 7MIpEEn3ygjhBYRls9ehxpu7IXOhD4oIo44G1J9wch5gPyycMUWVTzVjnvEvfNkb fgVOj7By47WoWkmd0AP4GibIqMdM3LWMO+WbgpZuDVTFS7tHeroF6PkpoZPPI/Mb Zs3qW3Mu2Qp3LEN2PJygQW1zmq6inTJ8eDNHz6tsPGwolnlJpswRLgUasKPiEPqN 937cT5QWBuMeFpgVKNLCNhkeE5J1PbRJZ28fw1wyIV7WGiaM3FTdRqgnZvp8hHGN 0CsrCVplMnBQHAySd49VdxZ1+M7Li35bkGc7hj84zTENRWo8qHVUBDRIkVUE5g7y xQ== -----END CERTIFICATE-----Generated at Thu Apr 17 22:32:46 2025 by rpki-client