$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft File: ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft (raw, json) Hash identifier: ln/psF8tvr8Q5F4/fcl8bzZATEMI96GbI8Y6eXi0pbo= Subject key identifier: 9C:6E:EA:64:32:49:07:E8:5A:2A:7D:47:C4:78:5D:7D:D0:CF:A9:23 Authority key identifier: ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29 Certificate issuer: /CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429 Certificate serial: 393FAE18F8C33D326874D1CEC14C612942DF8412 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft Manifest number: 4A Signing time: Sat 05 Apr 2025 19:08:10 +0000 Manifest this update: Sat 05 Apr 2025 19:03:10 +0000 Manifest next update: Sun 06 Apr 2025 20:33:10 +0000 Files and hashes: 1: ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl (hash: FywELModkDpf+dXo0Yrr1fcfKSHys/h7/gw5NRDa+pQ=) 2: 326130613a363034343a363430303a3a2f34302d3438203d3e20323134323233.roa (hash: kcbqbf/G/0reK47vt4i1+26RYj8ReWFmHDw3QOk2VxE=) 3: 326130393a353463373a3a2f33322d3438203d3e20323134323233.roa (hash: QWOB5r3etpLSc4R0itEDyfuQseQqsM2SFHlayJm40Ks=) 4: 326130613a363034343a633131303a3a2f34342d3438203d3e20323134323233.roa (hash: Enu8D36fIY1XUOoVoRq2YTk3FBf2gE3qr2jO5TSYuQo=) 5: 326130613a363034343a616131303a3a2f34382d3438203d3e20323134323233.roa (hash: agSFI/5Czj2ro7LalSLA5VrrKX4OU2U8yBjlSOiILcc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:3f:ae:18:f8:c3:3d:32:68:74:d1:ce:c1:4c:61:29:42:df:84:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED0B8AE03D6250D59EF8E7BE556D94EB49415429 Validity Not Before: Apr 5 19:03:10 2025 GMT Not After : Apr 6 20:33:10 2025 GMT Subject: CN=9C6EEA64324907E85A2A7D47C4785D7DD0CFA923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:26:d0:16:b8:88:4b:2b:d4:d2:cb:10:d9:0b: dc:54:d5:1c:63:b5:ae:53:f7:6f:98:08:09:7f:32: 2a:d0:f7:4f:1c:d9:4c:84:4a:91:5f:9a:04:09:3c: 97:0c:65:08:8a:a8:2d:26:a9:2a:c0:c2:af:89:86: 6a:1a:04:44:f1:26:93:da:64:01:45:42:2c:88:74: 46:88:4b:42:62:95:2f:0c:82:67:cd:31:3d:b1:1a: 05:d2:d4:dd:01:6b:62:50:30:ed:70:e3:80:9e:bb: 79:38:7d:5f:b3:dc:e4:b2:b6:73:67:e4:ef:6c:2f: 41:0f:c9:8b:de:68:59:da:9c:ab:0f:99:83:fa:d2: ce:a2:9e:66:5b:c1:77:10:76:ca:c0:8f:ae:d4:e2: bf:19:95:ce:4a:98:44:cc:3f:fe:ac:63:b8:17:68: 86:1c:39:f8:9f:96:fa:d9:49:14:bb:69:72:cd:18: 73:d5:70:c9:fd:c5:d7:84:00:2d:79:7a:9f:d7:36: 5c:7d:58:ad:65:92:5b:5c:5f:3e:54:97:56:fe:23: 94:77:a1:1c:d8:6d:2d:bf:4e:e2:45:ad:4e:47:28: 62:9f:1b:76:4f:7e:98:d1:37:b3:48:37:35:06:fa: 22:9c:8c:ee:bf:f9:4e:19:69:cd:b5:cc:b6:cc:47: 13:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6E:EA:64:32:49:07:E8:5A:2A:7D:47:C4:78:5D:7D:D0:CF:A9:23 X509v3 Authority Key Identifier: keyid:ED:0B:8A:E0:3D:62:50:D5:9E:F8:E7:BE:55:6D:94:EB:49:41:54:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2f0d4b4e-9f74-4df4-bf5e-0929096dbe04/3/ED0B8AE03D6250D59EF8E7BE556D94EB49415429.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:58:1a:e6:64:2b:99:cf:a7:71:ab:67:7c:ed:25:87:99:69: 90:18:4e:a5:78:f5:8b:81:e6:4b:95:cf:a1:ea:dc:dc:bb:24: 94:ee:c4:0c:33:a7:20:4b:8c:2b:4d:63:e6:15:0d:a3:c6:f6: 2d:05:f3:8d:f7:ce:46:35:fa:db:e8:db:69:b1:c9:84:b7:80: d5:e3:12:68:92:57:8d:05:a0:d4:90:10:fe:e9:b9:7b:3e:be: ea:d2:b5:1c:0e:ab:72:4e:78:f6:0f:13:c1:ee:d8:83:c3:e2: e3:6d:04:f6:90:30:52:1d:2b:58:a9:54:33:33:74:1e:14:8b: 92:2b:0b:bd:ff:18:55:78:f8:ee:1c:13:af:55:f7:0b:8b:43: 8d:1a:56:52:f5:ec:d5:43:bb:44:d2:40:ef:48:2a:95:56:e1: 33:d8:6f:7e:81:1b:e4:47:e7:7c:2e:06:f9:88:50:d9:fd:56: 98:42:e7:17:5d:51:70:da:64:9d:27:76:28:7a:b3:29:09:1b: 97:94:54:07:a0:e6:22:e9:a4:95:f7:7c:5a:bd:d3:7a:d9:e5: 7e:6b:85:2f:c3:da:f6:7a:37:d8:90:6f:08:53:f5:08:01:89: 00:1d:8a:8f:b7:47:e1:02:c5:a8:93:8e:8a:01:9a:9c:81:93: 65:55:bf:42 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOT+uGPjDPTJodNHOwUxhKULfhBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQwQjhBRTAzRDYyNTBENTlFRjhFN0JFNTU2RDk0RUI0 OTQxNTQyOTAeFw0yNTA0MDUxOTAzMTBaFw0yNTA0MDYyMDMzMTBaMDMxMTAvBgNV BAMTKDlDNkVFQTY0MzI0OTA3RTg1QTJBN0Q0N0M0Nzg1RDdERDBDRkE5MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWJtAWuIhLK9TSyxDZC9xU1Rxj ta5T92+YCAl/MirQ908c2UyESpFfmgQJPJcMZQiKqC0mqSrAwq+JhmoaBETxJpPa ZAFFQiyIdEaIS0JilS8MgmfNMT2xGgXS1N0Ba2JQMO1w44Ceu3k4fV+z3OSytnNn 5O9sL0EPyYveaFnanKsPmYP60s6inmZbwXcQdsrAj67U4r8Zlc5KmETMP/6sY7gX aIYcOfiflvrZSRS7aXLNGHPVcMn9xdeEAC15ep/XNlx9WK1lkltcXz5Ul1b+I5R3 oRzYbS2/TuJFrU5HKGKfG3ZPfpjRN7NINzUG+iKcjO6/+U4Zac21zLbMRxMjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUnG7qZDJJB+haKn1HxHhdfdDPqSMwHwYDVR0j BBgwFoAU7QuK4D1iUNWe+Oe+VW2U60lBVCkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmYwZDRiNGUtOWY3NC00ZGY0LWJmNWUtMDkyOTA5NmRi ZTA0LzMvRUQwQjhBRTAzRDYyNTBENTlFRjhFN0JFNTU2RDk0RUI0OTQxNTQyOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9FRDBCOEFFMDNENjI1MEQ1OUVGOEU3QkU1 NTZEOTRFQjQ5NDE1NDI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJmMGQ0YjRlLTlmNzQtNGRmNC1iZjVlLTA5MjkwOTZkYmUwNC8zL0VEMEI4QUUw M0Q2MjUwRDU5RUY4RTdCRTU1NkQ5NEVCNDk0MTU0MjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCPWBrm ZCuZz6dxq2d87SWHmWmQGE6lePWLgeZLlc+h6tzcuySU7sQMM6cgS4wrTWPmFQ2j xvYtBfON985GNfrb6NtpscmEt4DV4xJokleNBaDUkBD+6bl7Pr7q0rUcDqtyTnj2 DxPB7tiDw+LjbQT2kDBSHStYqVQzM3QeFIuSKwu9/xhVePjuHBOvVfcLi0ONGlZS 9ezVQ7tE0kDvSCqVVuEz2G9+gRvkR+d8Lgb5iFDZ/VaYQucXXVFw2mSdJ3YoerMp CRuXlFQHoOYi6aSV93xavdN62eV+a4Uvw9r2ejfYkG8IU/UIAYkAHYqPt0fhAsWo k46KAZqcgZNlVb9C -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:33 2025 by rpki-client