$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft File: D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft (raw, json) Hash identifier: HiFOaP81VJYwmrzFHcZBrLudIYwIRJQo4amRRC9EHd0= Subject key identifier: D2:7F:81:EF:06:A8:79:E1:DC:B5:AE:74:B9:34:61:65:56:1F:17:B5 Authority key identifier: D5:85:C9:65:DE:AE:D8:ED:3E:CA:AF:E1:89:BB:A5:88:38:99:D4:DB Certificate issuer: /CN=D585C965DEAED8ED3ECAAFE189BBA5883899D4DB Certificate serial: 0DD733DC2BCCD46FAF93C1FE46148AB87A2EDFC0 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft Manifest number: AB Signing time: Thu 13 Mar 2025 12:51:12 +0000 Manifest this update: Thu 13 Mar 2025 12:46:12 +0000 Manifest next update: Fri 14 Mar 2025 15:37:12 +0000 Files and hashes: 1: 326130363a313238373a3a2f34382d3438203d3e203236303036.roa (hash: thL3dmlPHCJX1QS3/ZL6JUaOsctEk/xQ5Wem6QfHJSw=) 2: D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.crl (hash: JGp1s/gTZ9WKBZjUhnd1etrwBbAxjYXe/pf3hoBk3Ck=) 3: 326130363a313238373a313a3a2f34382d3438203d3e203236303036.roa (hash: RRFtJdru0BMWcPpyQm75lctxeDIcv7Yna91EEvrVE94=) 4: 326130363a313238373a323a3a2f34382d3438203d3e203236303036.roa (hash: xMjHyR2jjzGKsZBr54akxLyksZAzhwNtCuo7fa289pA=) 5: 326130363a313238373a353a3a2f34382d3438203d3e203236303036.roa (hash: epec3uw8M1QNqA9uXsJCI0b7PlJjYk15VpY2YlD1pmo=) 6: 326130363a313238373a613030303a3a2f33362d3336203d3e2030.roa (hash: FjsYrEo0wEgNS89VaZKiwt5EudZo4T5v9dS11TtDpgA=) 7: 326130363a313238373a333a3a2f34382d3438203d3e203236303036.roa (hash: w5l+CabII55oIdXWCx1z3Pe4YPAruD0IwV5kDPe/Izw=) 8: 326130363a313238373a343a3a2f34382d3438203d3e203236303036.roa (hash: Ctd56m2rWeHWuAb0S/ld3PRKI+krAr55ECb4mHWz0ec=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.crl rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Mar 2025 15:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d7:33:dc:2b:cc:d4:6f:af:93:c1:fe:46:14:8a:b8:7a:2e:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D585C965DEAED8ED3ECAAFE189BBA5883899D4DB Validity Not Before: Mar 13 12:46:12 2025 GMT Not After : Mar 14 15:37:12 2025 GMT Subject: CN=D27F81EF06A879E1DCB5AE74B9346165561F17B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a0:a3:ee:0c:66:01:4a:f7:87:a8:c8:4e:5d: 2f:eb:52:da:c1:60:1f:d5:c0:7b:a1:5f:50:65:a4: cb:01:7e:c7:ab:16:9b:77:6b:9f:c4:60:c6:32:a8: 3a:6a:85:86:91:24:61:ad:3d:7e:57:18:13:19:04: 2b:20:ce:ee:67:17:75:8a:23:7b:90:c4:f0:29:9e: 39:3f:f4:ef:da:d6:7d:c1:ed:da:c2:81:bb:bd:ac: e5:54:10:0c:b7:05:7e:7c:70:46:68:e3:9e:5c:0f: e4:e0:b5:c9:c1:a3:71:71:54:18:c6:d3:2b:f3:98: 89:33:d4:48:33:00:fb:03:26:70:41:9b:54:ba:04: 45:75:5f:67:2d:a2:d4:ff:b3:2d:65:3e:ac:af:e4: 59:8d:fb:af:c0:69:63:2f:1e:9b:4b:50:2a:23:8a: cf:8c:43:39:45:16:49:81:5a:d0:d8:2e:6e:cc:96: f9:ea:27:4c:d2:e3:74:ae:09:a9:42:fd:72:d9:72: 5d:ca:18:96:92:45:76:5b:c3:2e:82:52:39:25:20: 5f:26:9d:d0:74:42:a2:32:91:a8:b2:80:26:ef:41: c0:ea:42:25:9b:4c:3b:1c:64:38:60:d5:a0:a6:bd: 18:19:b3:32:ce:61:38:c0:77:27:63:04:b4:21:60: 3e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7F:81:EF:06:A8:79:E1:DC:B5:AE:74:B9:34:61:65:56:1F:17:B5 X509v3 Authority Key Identifier: keyid:D5:85:C9:65:DE:AE:D8:ED:3E:CA:AF:E1:89:BB:A5:88:38:99:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:91:10:1f:fe:f5:47:25:cd:33:2a:4c:9e:2b:7c:34:83:c5: c7:61:a2:fb:23:e8:f2:e9:82:ab:11:4f:60:2f:bd:63:5c:f9: 71:7d:ff:bb:cd:04:b5:9c:8e:65:b6:85:98:99:e8:11:d7:25: 1c:be:3e:86:12:81:6b:80:68:38:9a:35:49:35:40:44:08:9c: 0a:d8:6e:78:db:75:76:82:3a:92:95:ba:e3:bc:ca:e6:ba:69: 44:67:7e:ac:c7:d9:eb:26:50:60:82:dc:65:7a:28:b9:c2:c3: 9a:d0:08:b1:07:b1:1a:9f:5b:28:19:76:4b:d7:87:43:aa:9a: 85:4c:66:01:e8:21:85:3c:76:cf:ea:56:b2:51:33:6b:c1:b5: 75:c6:db:dd:1a:ac:97:d8:85:30:e2:a1:39:90:09:30:da:c4: ad:00:0b:42:d9:95:75:66:d0:d0:23:02:98:13:58:35:94:88: 5d:5a:06:37:b6:13:67:6b:cb:0e:37:2a:bf:ea:71:3e:19:9d: 51:79:8c:fe:d4:c7:b5:d3:ec:b6:fe:36:d9:9c:aa:7c:94:de: be:87:24:6e:b1:f8:f1:65:9b:53:e5:35:b1:ef:cb:a6:7e:9a: b2:37:53:dc:8d:96:3f:e8:c2:6e:5e:32:bd:dd:99:23:75:30: f1:7d:dc:d1 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUDdcz3CvM1G+vk8H+RhSKuHou38AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU4NUM5NjVERUFFRDhFRDNFQ0FBRkUxODlCQkE1ODgz ODk5RDREQjAeFw0yNTAzMTMxMjQ2MTJaFw0yNTAzMTQxNTM3MTJaMDMxMTAvBgNV BAMTKEQyN0Y4MUVGMDZBODc5RTFEQ0I1QUU3NEI5MzQ2MTY1NTYxRjE3QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4oKPuDGYBSveHqMhOXS/rUtrB YB/VwHuhX1BlpMsBfserFpt3a5/EYMYyqDpqhYaRJGGtPX5XGBMZBCsgzu5nF3WK I3uQxPApnjk/9O/a1n3B7drCgbu9rOVUEAy3BX58cEZo455cD+TgtcnBo3FxVBjG 0yvzmIkz1EgzAPsDJnBBm1S6BEV1X2ctotT/sy1lPqyv5FmN+6/AaWMvHptLUCoj is+MQzlFFkmBWtDYLm7MlvnqJ0zS43SuCalC/XLZcl3KGJaSRXZbwy6CUjklIF8m ndB0QqIykaiygCbvQcDqQiWbTDscZDhg1aCmvRgZszLOYTjAdydjBLQhYD6FAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU0n+B7waoeeHcta50uTRhZVYfF7UwHwYDVR0j BBgwFoAU1YXJZd6u2O0+yq/hibuliDiZ1NswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTUzNjIzYzQtMzNiZC00MzhhLWE5M2UtMDE4ZDY1YzRl ODM3LzEvRDU4NUM5NjVERUFFRDhFRDNFQ0FBRkUxODlCQkE1ODgzODk5RDREQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvRDU4NUM5NjVERUFFRDhFRDNFQ0FBRkUxODlCQkE1ODgzODk5 RDREQi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81NTM2MjNjNC0z M2JkLTQzOGEtYTkzZS0wMThkNjVjNGU4MzcvMS9ENTg1Qzk2NURFQUVEOEVEM0VD QUFGRTE4OUJCQTU4ODM4OTlENERCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJEQH/71RyXNMypMnit8 NIPFx2Gi+yPo8umCqxFPYC+9Y1z5cX3/u80EtZyOZbaFmJnoEdclHL4+hhKBa4Bo OJo1STVARAicCthueNt1doI6kpW647zK5rppRGd+rMfZ6yZQYILcZXooucLDmtAI sQexGp9bKBl2S9eHQ6qahUxmAeghhTx2z+pWslEza8G1dcbb3Rqsl9iFMOKhOZAJ MNrErQALQtmVdWbQ0CMCmBNYNZSIXVoGN7YTZ2vLDjcqv+pxPhmdUXmM/tTHtdPs tv422ZyqfJTevockbrH48WWbU+U1se/Lpn6asjdT3I2WP+jCbl4yvd2ZI3Uw8X3c 0Q== -----END CERTIFICATE-----Generated at Thu Mar 13 23:23:57 2025 by rpki-client