$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft File: 5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft (raw, json) Hash identifier: WBzT208M3Pn6/5AnHxUnNTl0v5RICCbregBDw/A516E= Subject key identifier: 5C:5F:1A:9E:4A:3E:A0:7B:52:CC:0A:99:C8:A3:F8:24:D9:85:8A:A3 Authority key identifier: 5F:95:85:45:0A:7F:92:1A:B3:B8:45:D4:4D:7E:CF:55:EC:DD:F7:A9 Certificate issuer: /CN=5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9 Certificate serial: 0C0D0E5DE294EB41C56E1FA515A106142711A0C0 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft Manifest number: 03 Signing time: Tue 15 Apr 2025 17:02:28 +0000 Manifest this update: Tue 15 Apr 2025 16:57:28 +0000 Manifest next update: Wed 16 Apr 2025 17:45:28 +0000 Files and hashes: 1: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: wCQx6AVbdx3+Kj+Us2aAmoxx84TC0UWyCZ76TDOkAHY=) 2: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: 0unAsI8V1gSzCFkFuiXCKj+qBRO+IDm5TxOFvRQfPXM=) 3: 326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa (hash: GjvfeB16Dq44ljlvPcegJERTdmH8Ubv3C8M2ssZH0r4=) 4: 5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.crl (hash: zZ66JBoaiVZURWITKNkI3akRuGd9akITatowlrW35XQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 16 Apr 2025 13:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:0d:0e:5d:e2:94:eb:41:c5:6e:1f:a5:15:a1:06:14:27:11:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9 Validity Not Before: Apr 15 16:57:28 2025 GMT Not After : Apr 16 17:45:28 2025 GMT Subject: CN=5C5F1A9E4A3EA07B52CC0A99C8A3F824D9858AA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:95:1d:b5:21:27:bf:14:50:c7:0c:58:9a:f2: b1:a6:b1:c0:08:a1:62:27:d8:d9:27:b5:f7:5d:be: fd:e1:f8:16:41:08:63:3e:99:67:60:62:78:84:29: a5:e3:ed:95:ac:7e:dd:39:9b:4a:48:b4:a8:d5:38: fa:87:7e:53:79:0a:ef:56:2a:3f:4c:8c:d7:06:b8: fa:46:01:e1:4c:9c:42:a3:9e:bc:72:a6:ef:ad:07: 5f:ba:5b:e3:d4:d8:12:97:d8:86:dd:aa:b9:47:94: a2:84:10:0f:0f:9d:d2:52:e3:4b:94:d5:cf:5a:90: 8d:89:3c:af:5e:9a:28:44:96:be:b9:60:e8:2d:65: 86:ac:fe:18:f5:da:8b:64:ad:5a:91:0d:55:cb:c4: 0d:d6:a8:02:1c:cf:d1:b0:56:1a:98:7c:97:ea:24: 45:ed:d6:2c:07:e2:3c:be:fb:37:cc:33:8b:40:cc: 6b:74:b6:9f:7b:c5:f5:cb:94:31:07:84:1a:c4:b1: d8:dd:bd:e4:1f:ff:7a:9a:ce:80:b6:cc:f1:30:23: c0:8d:fa:33:0f:d8:51:7f:3f:5b:c7:68:95:2d:56: 8f:38:11:35:d2:c9:10:c8:75:49:10:39:38:fc:17: 74:68:a9:6a:22:97:4b:f6:9c:6c:5a:fb:12:11:f2: ce:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5F:1A:9E:4A:3E:A0:7B:52:CC:0A:99:C8:A3:F8:24:D9:85:8A:A3 X509v3 Authority Key Identifier: keyid:5F:95:85:45:0A:7F:92:1A:B3:B8:45:D4:4D:7E:CF:55:EC:DD:F7:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:38:8a:97:90:ef:fb:39:17:73:48:f0:85:49:ba:44:d2:f4: 66:ba:6f:f3:4e:3f:47:42:bc:ba:4e:e6:bc:3d:18:82:a2:b6: 73:fc:c9:03:09:15:77:8c:af:50:79:35:91:47:41:20:a3:f5: 4f:d4:91:52:e1:0d:87:08:dd:55:30:a5:05:68:f9:a4:b0:02: ce:e0:08:d5:3c:1b:25:bb:4f:1c:d7:2a:e1:47:dd:f1:c8:3b: 1d:6a:9c:14:c1:4b:8a:56:04:14:be:48:69:eb:d4:ef:03:8d: f7:af:a1:d0:fd:87:4b:e2:90:3b:d8:31:27:98:c8:af:0c:b0: c3:56:25:c5:56:df:41:ed:ae:0e:a2:47:1f:70:01:11:21:88: 8d:1b:6a:7f:2e:1c:49:3e:e3:9f:17:20:25:51:c9:04:6d:db: 60:9d:8d:10:2c:f9:1e:0f:ad:c4:7c:5f:ff:86:45:8b:47:60: cb:ab:8e:2b:2e:af:fb:70:cc:ac:3b:47:25:13:16:3c:29:80: a1:76:e7:73:32:4e:b8:23:72:0a:ca:f5:be:55:60:15:70:3e: a2:47:ce:f4:77:0c:f8:f8:64:54:3e:4a:34:f9:58:e9:b3:06: 52:93:24:f6:37:c3:31:c1:c7:54:5d:ce:d8:a9:fa:b0:79:fa: a8:7d:30:f2 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUDA0OXeKU60HFbh+lFaEGFCcRoMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY5NTg1NDUwQTdGOTIxQUIzQjg0NUQ0NEQ3RUNGNTVF Q0RERjdBOTAeFw0yNTA0MTUxNjU3MjhaFw0yNTA0MTYxNzQ1MjhaMDMxMTAvBgNV BAMTKDVDNUYxQTlFNEEzRUEwN0I1MkNDMEE5OUM4QTNGODI0RDk4NThBQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVlR21ISe/FFDHDFia8rGmscAI oWIn2Nkntfddvv3h+BZBCGM+mWdgYniEKaXj7ZWsft05m0pItKjVOPqHflN5Cu9W Kj9MjNcGuPpGAeFMnEKjnrxypu+tB1+6W+PU2BKX2IbdqrlHlKKEEA8PndJS40uU 1c9akI2JPK9emihElr65YOgtZYas/hj12otkrVqRDVXLxA3WqAIcz9GwVhqYfJfq JEXt1iwH4jy++zfMM4tAzGt0tp97xfXLlDEHhBrEsdjdveQf/3qazoC2zPEwI8CN +jMP2FF/P1vHaJUtVo84ETXSyRDIdUkQOTj8F3RoqWoil0v2nGxa+xIR8s7DAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUXF8anko+oHtSzAqZyKP4JNmFiqMwHwYDVR0j BBgwFoAUX5WFRQp/khqzuEXUTX7PVezd96kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzIvNUY5NTg1NDUwQTdGOTIxQUIzQjg0NUQ0NEQ3RUNGNTVFQ0RERjdBOS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNUY5NTg1NDUwQTdGOTIxQUIzQjg0NUQ0NEQ3RUNGNTVFQ0RE RjdBOS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMi81Rjk1ODU0NTBBN0Y5MjFBQjNC ODQ1RDQ0RDdFQ0Y1NUVDRERGN0E5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASziKl5Dv+zkXc0jwhUm6 RNL0Zrpv804/R0K8uk7mvD0YgqK2c/zJAwkVd4yvUHk1kUdBIKP1T9SRUuENhwjd VTClBWj5pLACzuAI1TwbJbtPHNcq4Ufd8cg7HWqcFMFLilYEFL5IaevU7wON96+h 0P2HS+KQO9gxJ5jIrwyww1YlxVbfQe2uDqJHH3ABESGIjRtqfy4cST7jnxcgJVHJ BG3bYJ2NECz5Hg+txHxf/4ZFi0dgy6uOKy6v+3DMrDtHJRMWPCmAoXbnczJOuCNy Csr1vlVgFXA+okfO9HcM+PhkVD5KNPlY6bMGUpMk9jfDMcHHVF3O2Kn6sHn6qH0w 8g== -----END CERTIFICATE-----Generated at Wed Apr 16 06:43:33 2025 by rpki-client