$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft File: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft (raw, json) Hash identifier: 5KJOp2Tl4Vw46L7ZtxugWSU5vFmm3t9Q3TWgd23NBRQ= Subject key identifier: 06:AE:CE:A4:83:D6:24:DD:E7:F2:CF:6F:BF:C5:B0:EC:9B:EA:7A:1F Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 Certificate issuer: /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Certificate serial: 33315AA56424578C3348AF8ED015D1532F6793E8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft Manifest number: 0295 Signing time: Fri 04 Apr 2025 16:40:26 +0000 Manifest this update: Fri 04 Apr 2025 16:35:26 +0000 Manifest next update: Sat 05 Apr 2025 17:57:26 +0000 Files and hashes: 1: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl (hash: YwzHka2BdOGMdtMOXx0oSi83M8C97efkZeQnNvZD+m8=) 2: 326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (hash: pLh45pB1svAQHP5Xv38naFs3vwEc4Ksu1QAkru4X3nA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 17:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:31:5a:a5:64:24:57:8c:33:48:af:8e:d0:15:d1:53:2f:67:93:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52 Validity Not Before: Apr 4 16:35:26 2025 GMT Not After : Apr 5 17:57:26 2025 GMT Subject: CN=06AECEA483D624DDE7F2CF6FBFC5B0EC9BEA7A1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2e:df:02:31:1d:f7:b8:89:01:81:eb:64:a4: 5b:9b:43:b2:52:7c:6e:9a:bf:f8:97:2c:0e:b3:89: 6b:d2:46:93:44:3f:dc:dd:a2:ca:96:b5:ae:d0:91: 98:3c:97:f2:ea:16:7b:42:05:3f:fc:47:2a:44:00: 8f:b9:c0:36:bf:76:59:16:e9:fc:5b:b8:06:d4:00: 77:e9:48:ff:b7:69:61:39:1b:5c:83:f4:90:ff:a2: 32:ff:3b:9d:26:88:29:23:b6:01:eb:6d:0b:2d:74: c4:ae:ef:40:74:11:64:44:2e:32:3a:24:b5:1e:26: ba:de:9d:b7:01:76:49:ef:5b:17:9f:3f:c3:6e:16: 9a:33:6f:b3:d7:e6:17:13:de:e3:df:9f:bc:c5:30: d2:42:ba:88:42:f9:ac:59:0b:cb:9e:d4:cf:d0:af: 13:3c:99:07:3b:83:b7:82:de:93:c0:7d:cc:eb:ad: 7b:64:68:1f:1b:22:3d:a2:ef:dc:0f:2f:3c:1a:a5: 00:1a:dc:9f:b7:a8:f9:c6:fd:10:09:99:71:60:c7: 5c:85:c5:90:3e:58:ab:fb:8a:d6:80:68:2f:fa:25: 87:2b:78:d1:2b:79:ce:f3:ba:57:37:ee:1f:e3:1a: be:f7:2e:ef:c4:bc:94:57:ff:67:20:6f:84:24:b0: 32:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AE:CE:A4:83:D6:24:DD:E7:F2:CF:6F:BF:C5:B0:EC:9B:EA:7A:1F X509v3 Authority Key Identifier: keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:00:93:d3:4e:6e:db:8a:a8:2b:15:cc:53:e7:d3:7b:91:72: de:03:8b:5f:45:d0:95:15:a8:4f:0e:d3:6e:68:8b:6b:5f:ea: e8:0e:ce:02:38:50:30:39:37:64:c5:1b:44:6a:37:39:7c:33: 43:e2:dc:2f:2e:d0:73:39:5c:f8:af:9f:fd:97:7b:68:22:7b: f1:74:05:f3:20:e4:0f:bd:f6:aa:54:fa:59:9d:71:98:c9:e4: 6b:a5:e3:70:53:c4:bf:e3:3f:b3:03:59:0d:41:04:bb:dd:70: 8d:c7:13:46:3f:82:60:57:27:ad:70:a8:24:6d:b5:28:6c:7e: 5b:9c:5b:7a:14:c5:24:1b:ff:dd:4c:9b:93:64:4e:61:9a:73: c6:b1:0e:03:98:b9:90:51:cc:a6:0d:fa:77:79:d6:79:ff:69: c6:01:3d:a8:ff:6e:a0:d0:db:05:b8:18:ab:8f:4d:f0:22:52: ab:28:6e:9a:ba:bb:38:a7:b8:da:44:58:ee:ab:aa:07:80:dc: 08:c6:24:06:ab:e8:ad:dc:79:38:8b:45:93:cb:2d:29:43:a3: e4:a0:55:01:ba:a4:11:78:7a:df:f2:7c:1c:e4:12:2a:58:81: 95:9b:f3:67:64:e2:96:14:6c:6a:4d:f4:71:75:7c:2a:7a:46: d2:60:e3:7b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMzFapWQkV4wzSK+O0BXRUy9nk+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNC OUVFREU1MjAeFw0yNTA0MDQxNjM1MjZaFw0yNTA0MDUxNzU3MjZaMDMxMTAvBgNV BAMTKDA2QUVDRUE0ODNENjI0RERFN0YyQ0Y2RkJGQzVCMEVDOUJFQTdBMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnLt8CMR33uIkBgetkpFubQ7JS fG6av/iXLA6ziWvSRpNEP9zdosqWta7QkZg8l/LqFntCBT/8RypEAI+5wDa/dlkW 6fxbuAbUAHfpSP+3aWE5G1yD9JD/ojL/O50miCkjtgHrbQstdMSu70B0EWRELjI6 JLUeJrrenbcBdknvWxefP8NuFpozb7PX5hcT3uPfn7zFMNJCuohC+axZC8ue1M/Q rxM8mQc7g7eC3pPAfczrrXtkaB8bIj2i79wPLzwapQAa3J+3qPnG/RAJmXFgx1yF xZA+WKv7itaAaC/6JYcreNErec7zulc37h/jGr73Lu/EvJRX/2cgb4QksDJVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUBq7OpIPWJN3n8s9vv8Ww7Jvqeh8wHwYDVR0j BBgwFoAU7rn7mjKd21uU/F4kJOVy7Lnu3lIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzEvRUVCOUZCOUEzMjlEREI1Qjk0RkM1RTI0MjRFNTcyRUNCOUVFREU1Mi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9FRUI5RkI5QTMyOUREQjVCOTRGQzVFMjQy NEU1NzJFQ0I5RUVERTUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS8xL0VFQjlGQjlB MzI5RERCNUI5NEZDNUUyNDI0RTU3MkVDQjlFRURFNTIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCCAJPT Tm7biqgrFcxT59N7kXLeA4tfRdCVFahPDtNuaItrX+roDs4COFAwOTdkxRtEajc5 fDND4twvLtBzOVz4r5/9l3toInvxdAXzIOQPvfaqVPpZnXGYyeRrpeNwU8S/4z+z A1kNQQS73XCNxxNGP4JgVyetcKgkbbUobH5bnFt6FMUkG//dTJuTZE5hmnPGsQ4D mLmQUcymDfp3edZ5/2nGAT2o/26g0NsFuBirj03wIlKrKG6aurs4p7jaRFjuq6oH gNwIxiQGq+it3Hk4i0WTyy0pQ6PkoFUBuqQReHrf8nwc5BIqWIGVm/NnZOKWFGxq TfRxdXwqekbSYON7 -----END CERTIFICATE-----Generated at Sat Apr 5 06:20:25 2025 by rpki-client