$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft File: 41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft (raw, json) Hash identifier: wTpnNfhUiwrn3H4gttyojd5kRPHHv0pfnyAS+hT8JSA= Subject key identifier: 27:B5:69:1A:96:B9:89:64:D2:15:56:EF:DF:0E:7F:6B:DD:C1:D2:56 Authority key identifier: 41:C6:B5:56:7A:DB:76:46:22:2A:1B:9F:1A:A7:03:8F:0C:2D:4B:4B Certificate issuer: /CN=41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B Certificate serial: 4B3BCB9E8B623937812411CFCB6EE6B88CE876E0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft Manifest number: DE Signing time: Fri 04 Apr 2025 21:03:51 +0000 Manifest this update: Fri 04 Apr 2025 20:58:51 +0000 Manifest next update: Sat 05 Apr 2025 21:49:51 +0000 Files and hashes: 1: 41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl (hash: /i9F5jXDUohO/dBOAJ5c/f/BVolgnlWax5JxaSYchlw=) 2: 326131343a373538303a623030303a3a2f34382d3438203d3e20323134343531.roa (hash: SuZwoUCzEEGoRhFnO51tkIZKxv3we3OJQ/xM024HKiQ=) 3: 326131343a373538353a3a2f34382d3438203d3e20323134343531.roa (hash: 1/nE4baiMVs2LRMXh5sGVXRwRPcJEy8duBZuI+RSScs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 14:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:3b:cb:9e:8b:62:39:37:81:24:11:cf:cb:6e:e6:b8:8c:e8:76:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B Validity Not Before: Apr 4 20:58:51 2025 GMT Not After : Apr 5 21:49:51 2025 GMT Subject: CN=27B5691A96B98964D21556EFDF0E7F6BDDC1D256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9e:c6:4c:5c:af:cb:0a:07:09:35:ab:be:ef: 95:bb:31:a4:b3:73:bd:3c:fd:ea:33:de:47:46:9b: 39:36:e5:bb:56:1e:ca:45:13:25:31:42:80:54:48: f7:6d:bd:a4:bc:d3:01:a0:06:9c:55:b0:07:32:b1: 68:11:1b:9c:aa:3b:ab:c9:68:ff:f9:48:93:b7:56: e3:1a:d2:fd:59:04:94:c0:8e:51:26:19:12:2a:e9: e7:6e:71:b5:e8:bf:46:0c:32:5a:8f:e6:f5:41:95: ff:12:5f:1b:11:3a:c5:cc:99:02:3f:b5:75:cf:4c: a2:86:eb:54:57:64:e7:be:1b:ff:ef:8c:ad:c7:11: d5:2f:e9:bc:f1:94:f1:dc:eb:36:92:00:f2:a1:3c: c5:29:63:23:ef:46:59:a9:1f:eb:0e:8d:29:02:71: c1:3c:72:37:3f:6b:44:1d:dc:03:f0:88:8d:7d:05: 32:0a:a3:12:cb:43:c5:27:a4:4b:f5:2a:15:6c:e8: 32:c7:ba:a6:79:00:33:9f:bb:da:f0:21:d0:ee:da: ca:77:23:ec:9e:ea:ad:e0:82:b2:3d:e5:4c:39:9b: b1:e9:78:b2:c3:2f:4c:93:79:b7:19:df:4d:62:41: a5:d6:c6:e6:4d:ed:5b:ec:e2:34:58:98:b3:48:0e: 87:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B5:69:1A:96:B9:89:64:D2:15:56:EF:DF:0E:7F:6B:DD:C1:D2:56 X509v3 Authority Key Identifier: keyid:41:C6:B5:56:7A:DB:76:46:22:2A:1B:9F:1A:A7:03:8F:0C:2D:4B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:b6:08:a8:1c:0c:66:c2:ed:4d:15:ae:98:fd:ea:22:65:10: 3d:70:82:08:55:ef:53:e2:e1:26:ed:6d:d6:dc:94:8a:c7:87: 73:8b:21:c8:59:22:0c:9f:24:f0:fa:54:99:69:78:09:14:e5: db:29:34:f1:43:ef:ed:d2:0a:57:11:8f:f1:8c:0f:fd:3c:db: 89:b7:db:c6:e9:69:4e:02:5f:2d:e5:0f:a9:9f:98:8e:ea:5e: 2c:64:50:9e:7f:41:6b:ed:a1:3e:68:40:a2:20:c5:31:3d:b5: b2:7d:2b:f8:53:e9:e7:e8:b2:12:31:07:2b:2b:ca:6c:96:5d: 52:e2:b3:2d:c9:7c:81:34:e6:da:3e:6a:49:83:89:08:44:f2: 27:6a:32:54:39:7a:d7:28:9c:24:25:55:d4:c8:38:18:4a:0f: 2d:f8:98:c0:f1:6e:52:74:59:9e:6a:58:a4:14:ba:e9:82:0a: 32:b0:62:a2:48:86:59:69:2b:91:42:a4:63:dd:a2:64:0a:d2: 55:41:4b:d6:2b:22:05:3e:4d:b8:a4:80:f8:0d:ea:bd:ec:cd: 2b:fb:a1:20:ff:e5:01:76:16:3e:bf:1b:f3:6d:c2:05:0d:59: ed:23:35:9e:d9:ed:d7:ed:6b:75:52:b7:8b:4f:32:46:ab:10: f7:9d:e7:d5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSzvLnotiOTeBJBHPy27muIzoduAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFDNkI1NTY3QURCNzY0NjIyMkExQjlGMUFBNzAzOEYw QzJENEI0QjAeFw0yNTA0MDQyMDU4NTFaFw0yNTA0MDUyMTQ5NTFaMDMxMTAvBgNV BAMTKDI3QjU2OTFBOTZCOTg5NjREMjE1NTZFRkRGMEU3RjZCRERDMUQyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvnsZMXK/LCgcJNau+75W7MaSz c708/eoz3kdGmzk25btWHspFEyUxQoBUSPdtvaS80wGgBpxVsAcysWgRG5yqO6vJ aP/5SJO3VuMa0v1ZBJTAjlEmGRIq6educbXov0YMMlqP5vVBlf8SXxsROsXMmQI/ tXXPTKKG61RXZOe+G//vjK3HEdUv6bzxlPHc6zaSAPKhPMUpYyPvRlmpH+sOjSkC ccE8cjc/a0Qd3APwiI19BTIKoxLLQ8UnpEv1KhVs6DLHuqZ5ADOfu9rwIdDu2sp3 I+ye6q3ggrI95Uw5m7HpeLLDL0yTebcZ301iQaXWxuZN7Vvs4jRYmLNIDof/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJ7VpGpa5iWTSFVbv3w5/a93B0lYwHwYDVR0j BBgwFoAUQca1VnrbdkYiKhufGqcDjwwtS0swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl OTUwLzEvNDFDNkI1NTY3QURCNzY0NjIyMkExQjlGMUFBNzAzOEYwQzJENEI0Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MUM2QjU1NjdBREI3NjQ2MjIyQTFCOUYx QUE3MDM4RjBDMkQ0QjRCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyY2Y4YmE3LWNiMDItNDE4Yi1iZTA0LTRkOWYzYTA3ZTk1MC8xLzQxQzZCNTU2 N0FEQjc2NDYyMjJBMUI5RjFBQTcwMzhGMEMyRDRCNEIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDJtgio HAxmwu1NFa6Y/eoiZRA9cIIIVe9T4uEm7W3W3JSKx4dziyHIWSIMnyTw+lSZaXgJ FOXbKTTxQ+/t0gpXEY/xjA/9PNuJt9vG6WlOAl8t5Q+pn5iO6l4sZFCef0Fr7aE+ aECiIMUxPbWyfSv4U+nn6LISMQcrK8psll1S4rMtyXyBNObaPmpJg4kIRPInajJU OXrXKJwkJVXUyDgYSg8t+JjA8W5SdFmealikFLrpggoysGKiSIZZaSuRQqRj3aJk CtJVQUvWKyIFPk24pID4Deq97M0r+6Eg/+UBdhY+vxvzbcIFDVntIzWe2e3X7Wt1 UreLTzJGqxD3nefV -----END CERTIFICATE-----Generated at Sat Apr 5 04:30:16 2025 by rpki-client