$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: u0Qd6J22k+yufBtOcODC5LbdlaH832qJ8qVrVgYEQRc= Subject key identifier: 6C:1F:69:A9:65:92:AB:F5:F1:CD:92:05:F0:F7:CB:C4:A1:CB:1D:48 Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 0FBA6FEB28AE1DC2B6D4F1CD383BA84D4A84073E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 012B Signing time: Fri 04 Apr 2025 16:22:04 +0000 Manifest this update: Fri 04 Apr 2025 16:17:04 +0000 Manifest next update: Sat 05 Apr 2025 16:40:04 +0000 Files and hashes: 1: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: R+o6n+RjWkxiRu/ckQJHanWEp0DumqtvHG3oGP82QQ8=) 2: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: qaSkHyfIC3Of6YS1GmRXMy6UQpB4zOLzBenZm87doQo=) 3: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: xL09RaMvNnk3zcTxJYCpyR11r2WfajekNMt0OPCzbqM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 12:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ba:6f:eb:28:ae:1d:c2:b6:d4:f1:cd:38:3b:a8:4d:4a:84:07:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Apr 4 16:17:04 2025 GMT Not After : Apr 5 16:40:04 2025 GMT Subject: CN=6C1F69A96592ABF5F1CD9205F0F7CBC4A1CB1D48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9e:94:11:9f:14:fd:70:56:24:6a:58:ce:e2: cc:9a:f3:70:5d:96:e9:46:2c:5b:40:f4:e8:59:c6: 2b:03:6f:59:64:fc:bb:eb:ea:8b:a6:ec:80:5e:3b: 7a:f9:00:56:94:8c:80:2f:e3:36:e4:d1:29:6d:01: 5c:72:b4:fa:b5:c2:e3:fe:e0:17:9b:6c:51:c0:16: 37:81:c6:51:b9:9b:39:d6:b9:77:12:62:c2:81:77: e0:89:93:25:77:b0:64:d7:b0:88:7c:98:dc:a7:64: 4c:b5:bd:b5:01:a1:59:80:a4:b1:26:6d:80:84:08: 98:ae:cf:c7:74:cf:c7:62:13:30:6b:37:f2:da:9a: 9e:d2:25:4a:fd:4e:e8:ac:c9:b0:1f:42:04:f7:5f: a3:e4:cf:16:46:3d:09:73:2b:ea:28:43:7c:aa:a7: d7:01:9a:ad:af:54:01:03:8e:25:a8:14:30:dc:3e: ac:16:e9:0d:3a:9a:0a:e5:27:bf:ac:3b:4d:1a:54: 05:54:07:38:38:6d:89:a6:dd:8f:b6:36:4b:2c:44: 35:f1:99:a8:28:dd:08:b1:fd:31:c6:76:ac:43:50: e9:dd:48:dd:21:f2:cb:35:87:a4:fe:58:ec:7f:94: 00:eb:e1:55:7b:3d:f3:24:ae:17:16:81:d3:67:fd: 7a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1F:69:A9:65:92:AB:F5:F1:CD:92:05:F0:F7:CB:C4:A1:CB:1D:48 X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:73:24:ad:0d:78:4b:13:8f:35:69:d8:10:61:ac:dc:26:d1: 49:60:df:b9:cf:2e:0f:86:9c:54:af:b2:68:b5:24:9b:18:48: 5d:b6:23:29:76:a4:c3:53:ef:e6:1b:da:13:b8:7a:7c:3b:5d: 80:77:3f:97:b7:f5:f4:34:9d:72:a2:97:bc:21:cc:38:d9:6a: 53:c6:a1:6a:1d:a6:4d:ce:63:94:8e:ac:87:15:77:4e:91:67: bb:b6:8a:b5:36:04:7f:0f:56:a8:ef:81:ba:99:83:97:b9:07: bf:a5:29:52:42:86:af:ef:8b:bc:2b:87:f7:ac:21:a2:68:83: 95:c4:99:e5:50:8a:a4:a8:ac:d7:29:99:b7:7c:e5:6d:8f:eb: 4a:84:87:b5:62:0a:93:39:fe:c0:88:58:ce:6c:39:70:ae:57: 26:6e:0a:ba:d2:1c:e3:9c:68:15:23:11:80:fb:ca:b0:f3:25: 75:5f:17:3d:f6:98:f6:6f:43:7a:92:9b:b3:73:b7:47:bf:df: db:b5:b0:9d:3e:47:aa:59:ea:52:9b:62:38:37:fb:d9:77:43: 90:23:3d:48:14:51:ed:47:d2:86:ce:9b:61:b9:a7:9b:bb:9f: 6f:77:7f:9f:a6:40:e6:0f:86:ff:a1:b0:ca:71:8d:8d:72:51: e1:d8:05:5d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUD7pv6yiuHcK21PHNODuoTUqEBz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNTA0MDQxNjE3MDRaFw0yNTA0MDUxNjQwMDRaMDMxMTAvBgNV BAMTKDZDMUY2OUE5NjU5MkFCRjVGMUNEOTIwNUYwRjdDQkM0QTFDQjFENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwnpQRnxT9cFYkaljO4sya83Bd lulGLFtA9OhZxisDb1lk/Lvr6oum7IBeO3r5AFaUjIAv4zbk0SltAVxytPq1wuP+ 4BebbFHAFjeBxlG5mznWuXcSYsKBd+CJkyV3sGTXsIh8mNynZEy1vbUBoVmApLEm bYCECJiuz8d0z8diEzBrN/Lamp7SJUr9TuisybAfQgT3X6PkzxZGPQlzK+ooQ3yq p9cBmq2vVAEDjiWoFDDcPqwW6Q06mgrlJ7+sO00aVAVUBzg4bYmm3Y+2NkssRDXx mago3Qix/THGdqxDUOndSN0h8ss1h6T+WOx/lADr4VV7PfMkrhcWgdNn/XoTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUbB9pqWWSq/XxzZIF8PfLxKHLHUgwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCScySt DXhLE481adgQYazcJtFJYN+5zy4PhpxUr7JotSSbGEhdtiMpdqTDU+/mG9oTuHp8 O12Adz+Xt/X0NJ1yope8Icw42WpTxqFqHaZNzmOUjqyHFXdOkWe7toq1NgR/D1ao 74G6mYOXuQe/pSlSQoav74u8K4f3rCGiaIOVxJnlUIqkqKzXKZm3fOVtj+tKhIe1 YgqTOf7AiFjObDlwrlcmbgq60hzjnGgVIxGA+8qw8yV1Xxc99pj2b0N6kpuzc7dH v9/btbCdPkeqWepSm2I4N/vZd0OQIz1IFFHtR9KGzpthuaebu59vd3+fpkDmD4b/ obDKcY2NclHh2AVd -----END CERTIFICATE-----Generated at Sat Apr 5 03:50:00 2025 by rpki-client