$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft File: D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft (raw, json) Hash identifier: I/XWHUnbRpGAXE+QfbYFGlzNgnRBmFvtGho55+7gMf4= Subject key identifier: 3F:03:82:8E:79:8A:6D:4C:07:B4:B8:B8:F8:E9:16:9E:B7:38:53:95 Authority key identifier: D5:85:C9:65:DE:AE:D8:ED:3E:CA:AF:E1:89:BB:A5:88:38:99:D4:DB Certificate issuer: /CN=D585C965DEAED8ED3ECAAFE189BBA5883899D4DB Certificate serial: 3B51B8D2D8B6D3076C12AD1B6FF53790700D810F Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft Manifest number: D4 Signing time: Sun 13 Apr 2025 15:46:51 +0000 Manifest this update: Sun 13 Apr 2025 15:41:51 +0000 Manifest next update: Mon 14 Apr 2025 18:09:51 +0000 Files and hashes: 1: D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.crl (hash: J12gRF6WQV2mwvnNDNuxzpJKP1scYwtuAZE3wFhN5FU=) 2: 326130363a313238373a353a3a2f34382d3438203d3e203236303036.roa (hash: epec3uw8M1QNqA9uXsJCI0b7PlJjYk15VpY2YlD1pmo=) 3: 326130363a313238373a323a3a2f34382d3438203d3e203236303036.roa (hash: xMjHyR2jjzGKsZBr54akxLyksZAzhwNtCuo7fa289pA=) 4: 326130363a313238373a3a2f34382d3438203d3e203236303036.roa (hash: thL3dmlPHCJX1QS3/ZL6JUaOsctEk/xQ5Wem6QfHJSw=) 5: 326130363a313238373a333a3a2f34382d3438203d3e203236303036.roa (hash: w5l+CabII55oIdXWCx1z3Pe4YPAruD0IwV5kDPe/Izw=) 6: 326130363a313238373a613030303a3a2f33362d3336203d3e2030.roa (hash: FjsYrEo0wEgNS89VaZKiwt5EudZo4T5v9dS11TtDpgA=) 7: 326130363a313238373a313a3a2f34382d3438203d3e203236303036.roa (hash: RRFtJdru0BMWcPpyQm75lctxeDIcv7Yna91EEvrVE94=) 8: 326130363a313238373a343a3a2f34382d3438203d3e203236303036.roa (hash: Ctd56m2rWeHWuAb0S/ld3PRKI+krAr55ECb4mHWz0ec=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.crl rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 14 Apr 2025 17:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:51:b8:d2:d8:b6:d3:07:6c:12:ad:1b:6f:f5:37:90:70:0d:81:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D585C965DEAED8ED3ECAAFE189BBA5883899D4DB Validity Not Before: Apr 13 15:41:51 2025 GMT Not After : Apr 14 18:09:51 2025 GMT Subject: CN=3F03828E798A6D4C07B4B8B8F8E9169EB7385395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:41:6e:63:7a:0b:95:27:97:47:72:05:e5:c4: 6c:35:2c:92:1e:3c:e0:b0:a9:3c:06:1b:c8:21:6f: c5:00:0f:07:d1:bf:4c:b1:95:8e:f9:eb:98:61:a3: 65:39:0b:55:89:ff:7f:00:ec:b7:fd:4c:15:53:a7: b6:12:6c:9f:6b:27:26:4f:f9:e3:93:ec:bc:1d:00: 4a:7e:46:29:d9:46:e7:8e:63:1e:af:09:ee:71:f4: 42:c8:5e:7b:74:20:cd:ac:fb:4b:5b:1d:63:cb:8d: 77:3d:ce:aa:04:c8:fc:0b:03:f6:14:01:91:08:fd: b0:2e:74:e6:1d:2e:cf:7d:ad:48:2b:f8:92:13:af: 76:e7:ae:f3:63:c0:97:8e:67:7c:f6:ac:8b:85:20: 82:c9:7e:bd:3f:f3:ba:cd:cb:fa:70:15:55:58:29: 52:b3:aa:65:52:dd:e2:6c:22:e0:75:ba:49:df:83: 1d:bc:65:84:67:14:39:f6:1e:9c:58:f5:c2:6d:df: 84:07:22:82:f5:01:d8:9a:33:ae:fe:32:1e:fb:27: e9:0b:b7:e1:99:dc:29:ae:c6:1e:d1:8d:e8:aa:5f: dc:3d:8f:2c:f4:e8:66:55:7a:29:1b:5b:5d:e0:f6: 7d:be:22:01:f9:45:45:93:ef:6c:1e:cc:92:cf:48: 0c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:03:82:8E:79:8A:6D:4C:07:B4:B8:B8:F8:E9:16:9E:B7:38:53:95 X509v3 Authority Key Identifier: keyid:D5:85:C9:65:DE:AE:D8:ED:3E:CA:AF:E1:89:BB:A5:88:38:99:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:dc:01:66:af:c1:2f:3d:88:8d:1f:ea:08:dc:cf:e7:20:11: 25:14:3f:f3:af:82:59:fd:25:5f:e5:83:4f:1e:a9:7b:3a:04: 33:12:88:3d:3d:08:da:f8:46:a5:cd:c9:1c:6d:86:ae:f6:e7: 1e:ef:c5:db:c0:73:db:2c:31:6d:8d:ab:ae:5f:9f:64:73:2c: 56:2d:1e:55:d8:42:4f:e9:75:74:ac:f9:64:a0:c9:4f:92:72: 3b:26:d8:9a:b8:5a:a2:10:27:24:1b:78:a9:38:96:04:88:2e: b3:04:f3:fe:51:19:01:cb:f2:05:0e:3c:5f:a1:06:0d:43:6e: ed:ff:6b:35:cc:48:93:43:20:7b:81:2e:19:ef:20:e0:b0:ca: bf:2a:74:03:05:ef:e6:6a:54:17:c4:ee:8b:31:bc:32:60:48: fe:fe:11:96:7c:09:37:45:6c:9d:fd:3f:51:de:b2:d3:01:81: a1:63:40:e3:26:fb:d1:36:4c:c2:36:1e:e1:2f:d4:05:58:08: 45:78:ba:37:0e:84:08:8e:1b:8d:d9:6d:dc:df:2c:b8:8c:ad: e9:a0:11:4e:d5:ef:4c:4f:c9:88:be:2e:b0:7a:99:ec:72:69: 5f:3b:94:1b:55:da:6a:f8:ce:ee:af:60:a8:dd:1e:83:e4:c5: d4:f0:7b:06 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUO1G40ti20wdsEq0bb/U3kHANgQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU4NUM5NjVERUFFRDhFRDNFQ0FBRkUxODlCQkE1ODgz ODk5RDREQjAeFw0yNTA0MTMxNTQxNTFaFw0yNTA0MTQxODA5NTFaMDMxMTAvBgNV BAMTKDNGMDM4MjhFNzk4QTZENEMwN0I0QjhCOEY4RTkxNjlFQjczODUzOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqQW5jeguVJ5dHcgXlxGw1LJIe POCwqTwGG8ghb8UADwfRv0yxlY7565hho2U5C1WJ/38A7Lf9TBVTp7YSbJ9rJyZP +eOT7LwdAEp+RinZRueOYx6vCe5x9ELIXnt0IM2s+0tbHWPLjXc9zqoEyPwLA/YU AZEI/bAudOYdLs99rUgr+JITr3bnrvNjwJeOZ3z2rIuFIILJfr0/87rNy/pwFVVY KVKzqmVS3eJsIuB1uknfgx28ZYRnFDn2HpxY9cJt34QHIoL1AdiaM67+Mh77J+kL t+GZ3Cmuxh7RjeiqX9w9jyz06GZVeikbW13g9n2+IgH5RUWT72wezJLPSAzlAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUPwOCjnmKbUwHtLi4+OkWnrc4U5UwHwYDVR0j BBgwFoAU1YXJZd6u2O0+yq/hibuliDiZ1NswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTUzNjIzYzQtMzNiZC00MzhhLWE5M2UtMDE4ZDY1YzRl ODM3LzEvRDU4NUM5NjVERUFFRDhFRDNFQ0FBRkUxODlCQkE1ODgzODk5RDREQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvRDU4NUM5NjVERUFFRDhFRDNFQ0FBRkUxODlCQkE1ODgzODk5 RDREQi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81NTM2MjNjNC0z M2JkLTQzOGEtYTkzZS0wMThkNjVjNGU4MzcvMS9ENTg1Qzk2NURFQUVEOEVEM0VD QUFGRTE4OUJCQTU4ODM4OTlENERCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNwBZq/BLz2IjR/qCNzP 5yARJRQ/86+CWf0lX+WDTx6pezoEMxKIPT0I2vhGpc3JHG2GrvbnHu/F28Bz2ywx bY2rrl+fZHMsVi0eVdhCT+l1dKz5ZKDJT5JyOybYmrhaohAnJBt4qTiWBIguswTz /lEZAcvyBQ48X6EGDUNu7f9rNcxIk0Mge4EuGe8g4LDKvyp0AwXv5mpUF8TuizG8 MmBI/v4RlnwJN0Vsnf0/Ud6y0wGBoWNA4yb70TZMwjYe4S/UBVgIRXi6Nw6ECI4b jdlt3N8suIyt6aARTtXvTE/JiL4usHqZ7HJpXzuUG1XaavjO7q9gqN0eg+TF1PB7 Bg== -----END CERTIFICATE-----Generated at Mon Apr 14 00:59:50 2025 by rpki-client