$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft File: D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft (raw, json) Hash identifier: Uz9Y5H9zF9p/5PWDYPvmnDgdEaNFDXOOus5op31/vOU= Subject key identifier: 8C:4D:29:49:27:40:47:C5:8B:9B:32:3A:30:A9:F3:DE:9C:27:E5:F8 Authority key identifier: D5:85:C9:65:DE:AE:D8:ED:3E:CA:AF:E1:89:BB:A5:88:38:99:D4:DB Certificate issuer: /CN=D585C965DEAED8ED3ECAAFE189BBA5883899D4DB Certificate serial: 70D618C57826E1F4C96F7131C5368F0CFD5736FA Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft Manifest number: 8A Signing time: Sat 15 Feb 2025 23:42:44 +0000 Manifest this update: Sat 15 Feb 2025 23:37:44 +0000 Manifest next update: Mon 17 Feb 2025 03:40:44 +0000 Files and hashes: 1: 326130363a313238373a313a3a2f34382d3438203d3e203236303036.roa (hash: RRFtJdru0BMWcPpyQm75lctxeDIcv7Yna91EEvrVE94=) 2: 326130363a313238373a343a3a2f34382d3438203d3e203236303036.roa (hash: Ctd56m2rWeHWuAb0S/ld3PRKI+krAr55ECb4mHWz0ec=) 3: 326130363a313238373a333a3a2f34382d3438203d3e203236303036.roa (hash: w5l+CabII55oIdXWCx1z3Pe4YPAruD0IwV5kDPe/Izw=) 4: D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.crl (hash: O+qLQEhqF8bTcLEkl/4/GDkQnE5BTJhzMS9RfTCmyME=) 5: 326130363a313238373a3a2f34382d3438203d3e203236303036.roa (hash: thL3dmlPHCJX1QS3/ZL6JUaOsctEk/xQ5Wem6QfHJSw=) 6: 326130363a313238373a613030303a3a2f33362d3336203d3e2030.roa (hash: FjsYrEo0wEgNS89VaZKiwt5EudZo4T5v9dS11TtDpgA=) 7: 326130363a313238373a353a3a2f34382d3438203d3e203236303036.roa (hash: epec3uw8M1QNqA9uXsJCI0b7PlJjYk15VpY2YlD1pmo=) 8: 326130363a313238373a323a3a2f34382d3438203d3e203236303036.roa (hash: xMjHyR2jjzGKsZBr54akxLyksZAzhwNtCuo7fa289pA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.crl rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Feb 2025 03:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d6:18:c5:78:26:e1:f4:c9:6f:71:31:c5:36:8f:0c:fd:57:36:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D585C965DEAED8ED3ECAAFE189BBA5883899D4DB Validity Not Before: Feb 15 23:37:44 2025 GMT Not After : Feb 17 03:40:44 2025 GMT Subject: CN=8C4D2949274047C58B9B323A30A9F3DE9C27E5F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b7:6a:a6:e1:fa:9f:32:bd:ff:6a:62:ea:2c: e9:44:6e:51:5f:70:f7:6d:62:b6:d3:4c:1b:79:22: c5:67:49:db:50:e6:66:9d:3d:8f:d9:2c:fa:38:47: 4c:fa:70:4d:b9:6f:33:39:77:5c:f7:df:df:fb:74: 83:b7:71:9d:c7:0a:34:d5:c7:3f:33:c8:6a:bc:eb: 9e:c1:19:3f:ac:19:48:ed:97:ca:28:3d:bc:99:64: 3f:46:b7:e3:cd:9f:7a:6e:7d:31:12:bf:5d:96:b3: b1:f6:84:e9:43:67:85:93:2b:1b:8d:98:60:21:5b: e0:39:f4:18:1a:b0:fc:0b:d7:f1:b1:28:85:44:4b: 7c:46:38:e1:82:8a:7f:2e:69:c0:e8:a8:a3:a4:ef: d5:d6:12:b8:c3:da:3c:24:26:c7:63:67:d6:d8:44: ee:bd:f6:8c:9c:46:b1:38:5a:71:2a:b3:3c:1f:7d: 2c:31:29:a4:ea:09:66:00:1b:a1:a4:a4:2f:6b:c0: d4:1d:72:df:90:ef:fe:a5:19:4f:d1:01:f7:c6:ed: 36:1b:a6:f8:bf:1a:c1:45:12:62:f9:68:f4:58:74: 88:d5:c8:b9:b1:a3:aa:8e:d0:4e:0a:6d:70:ec:ce: c1:86:cb:a8:65:f7:c6:42:cb:0a:d5:da:e8:40:7b: fd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4D:29:49:27:40:47:C5:8B:9B:32:3A:30:A9:F3:DE:9C:27:E5:F8 X509v3 Authority Key Identifier: keyid:D5:85:C9:65:DE:AE:D8:ED:3E:CA:AF:E1:89:BB:A5:88:38:99:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:27:17:42:f0:35:66:03:07:b6:11:23:9e:9b:73:23:99:58: 58:1a:e2:21:41:49:90:77:1d:f9:f9:fc:a4:0a:7f:95:2d:41: 4b:cd:75:50:cf:9b:52:54:9e:78:a2:97:2f:e9:a4:f8:8a:13: aa:50:57:f7:2b:5e:2a:e5:95:c0:3b:d6:fe:df:30:d0:97:4c: b7:4b:83:6d:9b:e6:bb:3f:67:cf:64:3d:ff:67:15:77:6c:0a: 24:fd:8b:1d:07:de:a1:64:46:9c:4a:8e:5f:c7:ae:a6:d2:43: 74:9e:8d:34:c9:3f:4e:92:94:30:fe:5c:58:ec:b4:8f:7f:c0: ab:c8:d7:47:82:0f:3b:44:d1:42:ce:41:0c:d2:13:69:0c:a6: 67:1e:37:a5:c2:fb:38:4f:ee:77:c1:a0:61:fb:8f:b6:d7:6c: 0d:c4:7c:11:10:37:bc:b9:18:dd:16:49:de:0f:24:9f:bc:1f: 02:02:81:8d:1f:9a:fb:ac:ff:cd:ee:50:32:11:93:4e:05:44: 85:9c:99:69:39:ac:22:ee:a3:3e:dd:96:8a:b0:1b:63:63:15: fb:84:db:01:16:fc:d2:b0:73:d4:d4:bb:26:8c:32:2c:8d:77: eb:9a:3d:d1:f6:4a:02:31:55:b2:f8:29:d0:e0:0a:cb:fa:35: 59:ce:7c:8f -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUcNYYxXgm4fTJb3ExxTaPDP1XNvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU4NUM5NjVERUFFRDhFRDNFQ0FBRkUxODlCQkE1ODgz ODk5RDREQjAeFw0yNTAyMTUyMzM3NDRaFw0yNTAyMTcwMzQwNDRaMDMxMTAvBgNV BAMTKDhDNEQyOTQ5Mjc0MDQ3QzU4QjlCMzIzQTMwQTlGM0RFOUMyN0U1RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpt2qm4fqfMr3/amLqLOlEblFf cPdtYrbTTBt5IsVnSdtQ5madPY/ZLPo4R0z6cE25bzM5d1z339/7dIO3cZ3HCjTV xz8zyGq8657BGT+sGUjtl8ooPbyZZD9Gt+PNn3pufTESv12Ws7H2hOlDZ4WTKxuN mGAhW+A59BgasPwL1/GxKIVES3xGOOGCin8uacDoqKOk79XWErjD2jwkJsdjZ9bY RO699oycRrE4WnEqszwffSwxKaTqCWYAG6GkpC9rwNQdct+Q7/6lGU/RAffG7TYb pvi/GsFFEmL5aPRYdIjVyLmxo6qO0E4KbXDszsGGy6hl98ZCywrV2uhAe/25AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUjE0pSSdAR8WLmzI6MKnz3pwn5fgwHwYDVR0j BBgwFoAU1YXJZd6u2O0+yq/hibuliDiZ1NswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTUzNjIzYzQtMzNiZC00MzhhLWE5M2UtMDE4ZDY1YzRl ODM3LzEvRDU4NUM5NjVERUFFRDhFRDNFQ0FBRkUxODlCQkE1ODgzODk5RDREQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvRDU4NUM5NjVERUFFRDhFRDNFQ0FBRkUxODlCQkE1ODgzODk5 RDREQi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81NTM2MjNjNC0z M2JkLTQzOGEtYTkzZS0wMThkNjVjNGU4MzcvMS9ENTg1Qzk2NURFQUVEOEVEM0VD QUFGRTE4OUJCQTU4ODM4OTlENERCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCcXQvA1ZgMHthEjnptz I5lYWBriIUFJkHcd+fn8pAp/lS1BS811UM+bUlSeeKKXL+mk+IoTqlBX9yteKuWV wDvW/t8w0JdMt0uDbZvmuz9nz2Q9/2cVd2wKJP2LHQfeoWRGnEqOX8euptJDdJ6N NMk/TpKUMP5cWOy0j3/Aq8jXR4IPO0TRQs5BDNITaQymZx43pcL7OE/ud8GgYfuP ttdsDcR8ERA3vLkY3RZJ3g8kn7wfAgKBjR+a+6z/ze5QMhGTTgVEhZyZaTmsIu6j Pt2WirAbY2MV+4TbARb80rBz1NS7JowyLI1365o90fZKAjFVsvgp0OAKy/o1Wc58 jw== -----END CERTIFICATE-----Generated at Sun Feb 16 20:17:37 2025 by rpki-client