$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft File: A816FDA8ADEC8085A8A348E698709DE583B219B5.mft (raw, json) Hash identifier: U+Ysrsvj6rMPzl7HbYWVPOn1anwdhxS6exgEWOXmqMI= Subject key identifier: 50:F1:45:1C:83:B0:01:8D:9B:B2:1E:F5:44:99:B5:D4:0C:E4:A0:6C Authority key identifier: A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5 Certificate issuer: /CN=A816FDA8ADEC8085A8A348E698709DE583B219B5 Certificate serial: 3EDAB40601FF9965F966D2D76BCD2FD5C1D7CDA8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft Manifest number: 0312 Signing time: Tue 03 Jun 2025 00:34:46 +0000 Manifest this update: Tue 03 Jun 2025 00:29:46 +0000 Manifest next update: Wed 04 Jun 2025 01:54:46 +0000 Files and hashes: 1: 326130373a353463373a356630303a3a2f34302d3438203d3e20323135353737.roa (hash: Ba5xfWqOndYVE5HvV9FAMJv5ExmemcLNBu1Yv2cHUgw=) 2: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: qaHIJSPkxJsqQxmrUEOF/0vyCpR/vYUBJ2KiKF+IkLk=) 3: 326130373a353463373a353430303a3a2f33382d3338203d3e20323136343535.roa (hash: WgAgPO7m2PRtW/hhLgCh/LUbstT+o0+84QgZ+UQ8JTY=) 4: A816FDA8ADEC8085A8A348E698709DE583B219B5.crl (hash: HlEYAhZjUXF80UXJ0XGymq17rN1y10t8av+mFbH/WZM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 14:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:da:b4:06:01:ff:99:65:f9:66:d2:d7:6b:cd:2f:d5:c1:d7:cd:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A816FDA8ADEC8085A8A348E698709DE583B219B5 Validity Not Before: Jun 3 00:29:46 2025 GMT Not After : Jun 4 01:54:46 2025 GMT Subject: CN=50F1451C83B0018D9BB21EF54499B5D40CE4A06C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:74:db:42:49:40:c0:25:4c:06:3c:02:64:82: 0b:c2:28:45:60:3c:93:a7:8e:92:7c:6b:50:cb:30: ba:11:9a:a2:f5:a1:5f:6c:45:ee:7b:c0:1c:b2:1f: 88:a3:bc:d7:06:f9:21:e8:14:f2:6c:02:41:0b:a8: 6a:3f:a9:1a:70:0f:90:ad:54:bb:55:7f:44:3c:d7: 8b:78:03:ef:8a:2a:59:15:1a:28:96:a6:ad:50:f5: 94:66:61:b3:52:5f:eb:3f:9f:01:a7:ab:fa:19:b0: 5e:ff:dd:a9:25:05:86:2b:de:2f:6f:bc:56:1f:21: ce:3e:6d:51:ff:07:a0:67:f3:f1:be:79:36:d0:5d: a2:46:08:07:01:6e:0c:cb:2c:d4:34:34:e5:8d:12: c6:a6:58:71:71:7b:21:13:3d:ed:dc:21:f4:39:79: c3:20:49:c0:48:4d:a8:93:82:e4:60:ec:00:f1:9c: 87:87:d3:de:b4:99:7d:c6:61:c7:e7:a3:2a:2f:cd: 1e:6f:a3:8f:9a:5f:c2:9a:4c:c3:b6:4b:de:d3:5f: b7:a8:35:0b:e1:78:b8:17:c7:95:d5:4d:00:72:d3: 5c:1b:9f:6f:4d:d1:b5:ba:94:e1:1a:d9:21:8f:b4: ce:4f:67:51:2b:9d:23:0c:61:44:a2:cb:c8:27:2e: fc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F1:45:1C:83:B0:01:8D:9B:B2:1E:F5:44:99:B5:D4:0C:E4:A0:6C X509v3 Authority Key Identifier: keyid:A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:32:ca:0c:51:82:e7:ad:c2:9d:7d:44:18:2a:42:57:cf:66: fe:83:17:92:56:8f:33:41:d2:9e:49:64:89:79:9e:6a:85:b0: 53:67:10:27:36:67:4d:bd:e6:38:54:d6:a8:47:e3:df:d2:6a: 8b:a6:04:6d:4d:f3:f9:a5:78:fd:42:0d:e3:11:45:83:33:c4: ab:bf:8c:8f:7e:67:a4:f6:1a:b1:2a:fc:91:30:87:aa:59:f3: db:22:f0:47:64:4f:d3:10:70:dc:c8:97:7e:50:de:27:bc:f5: 66:c8:08:1a:cb:20:0e:ef:64:82:2a:e4:b1:4c:ef:a5:09:11: 35:0d:3c:68:8f:bb:69:11:a9:a9:fd:9d:47:e1:a6:55:3f:a3: 06:96:22:0b:fc:b7:c6:79:51:aa:06:5d:0e:a8:c2:37:25:af: 82:fc:c8:d0:ab:85:79:e8:f6:95:5d:30:60:b7:69:87:56:cc: 8f:67:14:4c:39:1c:8c:4f:aa:ac:4b:a9:93:cd:d2:9f:14:75: 16:45:f1:85:5c:f9:b0:ff:e4:6a:95:c0:92:df:f2:f2:65:45: 1c:40:02:e8:4d:cd:c2:03:d8:b3:f5:64:1b:2d:ec:b5:d0:43: 4f:0f:ca:cd:a4:9f:18:52:5a:67:09:35:12:cc:5e:da:f5:bc: e0:af:50:d5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPtq0BgH/mWX5ZtLXa80v1cHXzagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgxNkZEQThBREVDODA4NUE4QTM0OEU2OTg3MDlERTU4 M0IyMTlCNTAeFw0yNTA2MDMwMDI5NDZaFw0yNTA2MDQwMTU0NDZaMDMxMTAvBgNV BAMTKDUwRjE0NTFDODNCMDAxOEQ5QkIyMUVGNTQ0OTlCNUQ0MENFNEEwNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTdNtCSUDAJUwGPAJkggvCKEVg PJOnjpJ8a1DLMLoRmqL1oV9sRe57wByyH4ijvNcG+SHoFPJsAkELqGo/qRpwD5Ct VLtVf0Q814t4A++KKlkVGiiWpq1Q9ZRmYbNSX+s/nwGnq/oZsF7/3aklBYYr3i9v vFYfIc4+bVH/B6Bn8/G+eTbQXaJGCAcBbgzLLNQ0NOWNEsamWHFxeyETPe3cIfQ5 ecMgScBITaiTguRg7ADxnIeH0960mX3GYcfnoyovzR5vo4+aX8KaTMO2S97TX7eo NQvheLgXx5XVTQBy01wbn29N0bW6lOEa2SGPtM5PZ1ErnSMMYUSiy8gnLvxHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUUPFFHIOwAY2bsh71RJm11AzkoGwwHwYDVR0j BBgwFoAUqBb9qK3sgIWoo0jmmHCd5YOyGbUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzAvQTgxNkZEQThBREVDODA4NUE4QTM0OEU2OTg3MDlERTU4M0IyMTlCNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9BODE2RkRBOEFERUM4MDg1QThBMzQ4RTY5 ODcwOURFNTgzQjIxOUI1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8wL0E4MTZGREE4 QURFQzgwODVBOEEzNDhFNjk4NzA5REU1ODNCMjE5QjUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBdMsoM UYLnrcKdfUQYKkJXz2b+gxeSVo8zQdKeSWSJeZ5qhbBTZxAnNmdNveY4VNaoR+Pf 0mqLpgRtTfP5pXj9Qg3jEUWDM8Srv4yPfmek9hqxKvyRMIeqWfPbIvBHZE/TEHDc yJd+UN4nvPVmyAgayyAO72SCKuSxTO+lCRE1DTxoj7tpEamp/Z1H4aZVP6MGliIL /LfGeVGqBl0OqMI3Ja+C/MjQq4V56PaVXTBgt2mHVsyPZxRMORyMT6qsS6mTzdKf FHUWRfGFXPmw/+RqlcCS3/LyZUUcQALoTc3CA9iz9WQbLey10ENPD8rNpJ8YUlpn CTUSzF7a9bzgr1DV -----END CERTIFICATE-----Generated at Tue Jun 3 03:21:13 2025 by rpki-client