$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/D9227930A3E025CD3EE91059F57EFC7573645142.mft File: D9227930A3E025CD3EE91059F57EFC7573645142.mft (raw, json) Hash identifier: E6t1c1YRX40Uo1kl9kBDl50DX1IgeUxbH+OJ2lyncug= Subject key identifier: 66:1F:37:5A:F5:C4:B4:E9:BF:EF:73:17:C9:17:5E:75:A3:A5:0D:82 Authority key identifier: D9:22:79:30:A3:E0:25:CD:3E:E9:10:59:F5:7E:FC:75:73:64:51:42 Certificate issuer: /CN=D9227930A3E025CD3EE91059F57EFC7573645142 Certificate serial: 3E7CF6B621845ABE9D26E2CE91B290C2EBD97A7F Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D9227930A3E025CD3EE91059F57EFC7573645142.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/D9227930A3E025CD3EE91059F57EFC7573645142.mft Manifest number: 34 Signing time: Wed 05 Feb 2025 07:22:09 +0000 Manifest this update: Wed 05 Feb 2025 07:17:09 +0000 Manifest next update: Thu 06 Feb 2025 08:35:09 +0000 Files and hashes: 1: 326130623a396534343a3a2f34342d3434203d3e20323134343531.roa (hash: gA7AKko1OAfo6xCnsM9aOOaXUGb50l0SxaUxR4/Y/Kk=) 2: 326130623a396534303a3a2f34382d3438203d3e20323134343531.roa (hash: fbWYhfhqjbEWnM2+gYr8ssviqiMh6Pzbyx5cODHJjkI=) 3: D9227930A3E025CD3EE91059F57EFC7573645142.crl (hash: mHsGPpuF6pW5yyTLAKsyCfEtCBxYDkjFw7HJDnyhfZs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/D9227930A3E025CD3EE91059F57EFC7573645142.crl rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/D9227930A3E025CD3EE91059F57EFC7573645142.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D9227930A3E025CD3EE91059F57EFC7573645142.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Feb 2025 08:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:7c:f6:b6:21:84:5a:be:9d:26:e2:ce:91:b2:90:c2:eb:d9:7a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9227930A3E025CD3EE91059F57EFC7573645142 Validity Not Before: Feb 5 07:17:09 2025 GMT Not After : Feb 6 08:35:09 2025 GMT Subject: CN=661F375AF5C4B4E9BFEF7317C9175E75A3A50D82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5d:d5:b2:9f:91:1e:d7:9c:34:02:1b:0b:b1: 88:a9:51:23:cb:86:1a:c4:4e:49:46:f4:d7:77:1c: 18:98:31:0f:1f:57:1e:00:71:eb:ec:93:4d:11:ea: fe:3f:26:e0:05:28:ec:78:83:44:3b:48:34:43:00: 74:ee:a9:fe:f4:d0:ed:8f:7a:d1:1f:99:69:ec:ac: 1e:89:96:c1:ae:59:21:60:22:f2:58:97:67:dd:c6: ee:3d:3c:f5:02:9d:08:d1:98:ef:3e:f4:98:c7:03: 7d:ba:64:87:12:7d:d7:66:3f:4f:51:c7:1d:a4:4e: e6:d3:95:a9:36:3f:9c:fb:ca:95:3f:57:50:31:f8: 68:ba:86:12:16:a7:93:24:a6:53:16:ab:a3:34:9d: 88:e5:ea:2a:b3:32:a6:27:a6:8b:91:49:06:b8:2f: 09:0c:96:aa:8d:82:83:2d:1a:ca:54:2c:e4:21:f9: a1:00:1e:98:88:92:b7:11:5c:b9:3b:86:80:24:a3: ed:9e:65:44:81:b1:12:35:57:08:9c:3f:6f:7f:76: 76:6a:b1:d7:6e:51:a8:31:ed:b9:16:dd:84:ca:82: 1f:00:35:9f:43:28:12:29:e9:03:ff:83:27:a2:ec: 79:a2:34:03:1c:3a:5a:a4:b9:f7:f0:40:b7:70:96: 84:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1F:37:5A:F5:C4:B4:E9:BF:EF:73:17:C9:17:5E:75:A3:A5:0D:82 X509v3 Authority Key Identifier: keyid:D9:22:79:30:A3:E0:25:CD:3E:E9:10:59:F5:7E:FC:75:73:64:51:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/D9227930A3E025CD3EE91059F57EFC7573645142.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D9227930A3E025CD3EE91059F57EFC7573645142.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/D9227930A3E025CD3EE91059F57EFC7573645142.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:9b:66:73:4c:cb:86:47:77:b2:ec:f8:26:f4:bc:74:c6:c7: 34:ac:c0:b4:fc:15:f7:87:2e:db:c4:f4:0c:a9:fd:58:6e:e4: cb:17:0c:a1:7e:9c:53:2b:ba:7d:1d:7a:77:1d:df:26:d3:f7: ae:bd:e2:07:ad:88:1c:9d:40:6f:87:16:1d:8e:38:00:1a:22: eb:d8:6b:95:21:1e:69:1e:d0:d0:ae:fb:43:e7:0c:1d:e8:ec: bc:8e:d3:2d:b7:f4:c5:42:ea:46:3a:9b:88:1d:91:41:2f:b4: d6:1a:b0:4f:02:37:2e:d8:57:c3:1b:28:a9:81:67:37:ce:b8: fd:24:c3:ca:37:cf:e2:c5:d6:dc:e7:84:d3:94:e8:d4:2a:de: b3:5b:15:83:11:ac:c7:ea:dc:b3:5a:ce:25:73:8e:73:7b:c4: 3c:c9:f3:1a:fc:3e:4f:d3:8f:50:63:11:9d:f6:06:9c:4a:00: e6:ce:79:08:70:43:b0:62:cb:08:01:a6:99:b6:e7:2e:e3:bd: ad:82:47:c8:2b:bb:a9:64:7a:4d:1d:18:ef:30:50:0f:ab:e6: de:27:46:2e:4f:ed:e7:9c:66:e1:2b:b4:fb:fa:60:85:4a:c5: 49:16:f1:9a:07:7a:a7:26:29:99:b0:86:a6:aa:35:38:9d:cd: a1:cc:c1:b1 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUPnz2tiGEWr6dJuLOkbKQwuvZen8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkyMjc5MzBBM0UwMjVDRDNFRTkxMDU5RjU3RUZDNzU3 MzY0NTE0MjAeFw0yNTAyMDUwNzE3MDlaFw0yNTAyMDYwODM1MDlaMDMxMTAvBgNV BAMTKDY2MUYzNzVBRjVDNEI0RTlCRkVGNzMxN0M5MTc1RTc1QTNBNTBEODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsXdWyn5Ee15w0AhsLsYipUSPL hhrETklG9Nd3HBiYMQ8fVx4Acevsk00R6v4/JuAFKOx4g0Q7SDRDAHTuqf700O2P etEfmWnsrB6JlsGuWSFgIvJYl2fdxu49PPUCnQjRmO8+9JjHA326ZIcSfddmP09R xx2kTubTlak2P5z7ypU/V1Ax+Gi6hhIWp5MkplMWq6M0nYjl6iqzMqYnpouRSQa4 LwkMlqqNgoMtGspULOQh+aEAHpiIkrcRXLk7hoAko+2eZUSBsRI1VwicP29/dnZq sdduUagx7bkW3YTKgh8ANZ9DKBIp6QP/gyei7HmiNAMcOlqkuffwQLdwloRzAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUZh83WvXEtOm/73MXyRdedaOlDYIwHwYDVR0j BBgwFoAU2SJ5MKPgJc0+6RBZ9X78dXNkUUIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl OTUwLzQvRDkyMjc5MzBBM0UwMjVDRDNFRTkxMDU5RjU3RUZDNzU3MzY0NTE0Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvRDkyMjc5MzBBM0UwMjVDRDNFRTkxMDU5RjU3RUZDNzU3MzY0 NTE0Mi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMmNmOGJhNy1j YjAyLTQxOGItYmUwNC00ZDlmM2EwN2U5NTAvNC9EOTIyNzkzMEEzRTAyNUNEM0VF OTEwNTlGNTdFRkM3NTczNjQ1MTQyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfptmc0zLhkd3suz4JvS8 dMbHNKzAtPwV94cu28T0DKn9WG7kyxcMoX6cUyu6fR16dx3fJtP3rr3iB62IHJ1A b4cWHY44ABoi69hrlSEeaR7Q0K77Q+cMHejsvI7TLbf0xULqRjqbiB2RQS+01hqw TwI3LthXwxsoqYFnN864/STDyjfP4sXW3OeE05To1Cres1sVgxGsx+rcs1rOJXOO c3vEPMnzGvw+T9OPUGMRnfYGnEoA5s55CHBDsGLLCAGmmbbnLuO9rYJHyCu7qWR6 TR0Y7zBQD6vm3idGLk/t55xm4Su0+/pghUrFSRbxmgd6pyYpmbCGpqo1OJ3NoczB sQ== -----END CERTIFICATE-----Generated at Wed Feb 5 20:38:21 2025 by rpki-client