$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft File: A816FDA8ADEC8085A8A348E698709DE583B219B5.mft (raw, json) Hash identifier: M/mJq0App9ai7aG+xS+aWeu7RhjTB0yB0sIPIFHVSWo= Subject key identifier: 16:C3:1F:66:60:AD:09:23:1E:F5:DE:BD:23:2D:5B:1D:0A:67:1F:C1 Authority key identifier: A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5 Certificate issuer: /CN=A816FDA8ADEC8085A8A348E698709DE583B219B5 Certificate serial: 0FAD69D692160831B12C33D68977FB9655902627 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft Manifest number: 02C2 Signing time: Fri 04 Apr 2025 11:29:12 +0000 Manifest this update: Fri 04 Apr 2025 11:24:12 +0000 Manifest next update: Sat 05 Apr 2025 15:08:12 +0000 Files and hashes: 1: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: qaHIJSPkxJsqQxmrUEOF/0vyCpR/vYUBJ2KiKF+IkLk=) 2: A816FDA8ADEC8085A8A348E698709DE583B219B5.crl (hash: YLR7CemhzclkJMebF7UEKKUP0mooOydejVyHjGNWQuU=) 3: 326130373a353463373a356630303a3a2f34302d3438203d3e20323135353737.roa (hash: Ba5xfWqOndYVE5HvV9FAMJv5ExmemcLNBu1Yv2cHUgw=) 4: 326130373a353463373a353430303a3a2f33382d3338203d3e20323136343535.roa (hash: WgAgPO7m2PRtW/hhLgCh/LUbstT+o0+84QgZ+UQ8JTY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 15:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ad:69:d6:92:16:08:31:b1:2c:33:d6:89:77:fb:96:55:90:26:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A816FDA8ADEC8085A8A348E698709DE583B219B5 Validity Not Before: Apr 4 11:24:12 2025 GMT Not After : Apr 5 15:08:12 2025 GMT Subject: CN=16C31F6660AD09231EF5DEBD232D5B1D0A671FC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:51:63:97:ab:96:83:05:2e:6a:77:1f:f4:83: 63:7a:a6:f3:33:b0:f5:b7:c7:6d:d6:03:84:f8:77: ef:b1:a3:58:e9:5b:e8:62:76:7a:dd:f9:a8:4b:fa: 8d:3c:f4:85:4e:9d:6e:ac:98:cb:65:d3:8e:85:cc: 0a:f0:3d:dd:03:e9:ba:4b:14:ef:67:dc:51:8e:b3: 15:81:70:b8:e4:67:0e:62:60:ab:db:e4:f3:35:3d: 19:72:e9:f6:fb:b9:6d:bc:08:6d:88:28:d5:d6:21: 07:55:49:8b:b7:27:7a:10:68:fa:7b:d8:d4:31:48: 52:30:18:53:45:26:8d:c6:81:75:6a:7a:27:73:f4: b1:ae:1a:98:df:ef:60:ba:47:7f:2e:58:67:c1:0c: dc:02:cc:37:77:de:3c:7c:db:07:e0:4b:36:d2:84: 77:fa:59:a6:c3:30:49:74:d3:07:59:7a:c0:35:05: 00:2f:34:22:e0:b4:77:bc:ff:dd:6b:39:58:a9:a7: a0:1c:88:47:d8:81:b6:45:3c:96:72:37:e1:ea:9c: 28:4b:75:81:a9:19:8f:77:2d:64:69:56:a9:c3:64: 2c:9a:19:a5:a4:4e:c3:8a:40:66:63:d6:b8:29:f0: 94:c3:0c:1d:e6:b8:71:d9:7f:c1:24:c2:88:01:05: b1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C3:1F:66:60:AD:09:23:1E:F5:DE:BD:23:2D:5B:1D:0A:67:1F:C1 X509v3 Authority Key Identifier: keyid:A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a3:4d:12:6a:95:99:24:e7:6f:f0:f1:b0:66:24:1a:06:98: 27:23:39:9e:02:9c:cd:f1:9a:78:4c:df:6a:2c:92:57:9b:ca: 3b:6d:3b:d3:e9:9e:95:79:05:21:b2:27:7b:93:84:ca:fc:2f: 6e:4f:c6:4e:7f:bf:a0:4a:28:de:49:12:c3:15:06:ed:b3:4f: d8:49:40:68:96:d2:65:d1:be:ba:95:4d:5e:ab:8d:cf:f3:eb: c3:a1:67:01:ed:3d:7e:0b:82:3e:91:36:fe:02:b5:88:4a:09: 13:91:f1:1e:e4:75:1f:f6:33:9b:94:cb:58:40:e6:4d:07:ca: 15:8d:61:57:1c:ca:13:54:be:97:02:9d:c7:18:bf:5f:c0:7d: c9:8a:e3:a4:a5:18:38:a5:5b:e0:22:9f:e9:22:01:bd:8c:e1: 3d:7b:b5:ea:36:e1:1c:cf:81:68:94:17:f6:6b:e1:99:4f:24: 51:e3:5f:6f:5c:a4:78:9a:34:c1:6f:f1:b6:da:0c:8d:b6:a9: c1:55:58:e0:7e:fc:c3:14:f5:e2:b4:d1:3f:33:76:47:62:e1: fc:3a:47:73:d8:cb:9d:eb:b3:ba:d6:0d:99:73:d6:ff:95:7c: 6e:eb:80:52:57:68:03:13:15:56:58:42:7b:61:0a:03:3e:28: 0f:38:b3:fe -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUD61p1pIWCDGxLDPWiXf7llWQJicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgxNkZEQThBREVDODA4NUE4QTM0OEU2OTg3MDlERTU4 M0IyMTlCNTAeFw0yNTA0MDQxMTI0MTJaFw0yNTA0MDUxNTA4MTJaMDMxMTAvBgNV BAMTKDE2QzMxRjY2NjBBRDA5MjMxRUY1REVCRDIzMkQ1QjFEMEE2NzFGQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTUWOXq5aDBS5qdx/0g2N6pvMz sPW3x23WA4T4d++xo1jpW+hidnrd+ahL+o089IVOnW6smMtl046FzArwPd0D6bpL FO9n3FGOsxWBcLjkZw5iYKvb5PM1PRly6fb7uW28CG2IKNXWIQdVSYu3J3oQaPp7 2NQxSFIwGFNFJo3GgXVqeidz9LGuGpjf72C6R38uWGfBDNwCzDd33jx82wfgSzbS hHf6WabDMEl00wdZesA1BQAvNCLgtHe8/91rOVipp6AciEfYgbZFPJZyN+HqnChL dYGpGY93LWRpVqnDZCyaGaWkTsOKQGZj1rgp8JTDDB3muHHZf8EkwogBBbHnAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFsMfZmCtCSMe9d69Iy1bHQpnH8EwHwYDVR0j BBgwFoAUqBb9qK3sgIWoo0jmmHCd5YOyGbUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzAvQTgxNkZEQThBREVDODA4NUE4QTM0OEU2OTg3MDlERTU4M0IyMTlCNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9BODE2RkRBOEFERUM4MDg1QThBMzQ4RTY5 ODcwOURFNTgzQjIxOUI1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8wL0E4MTZGREE4 QURFQzgwODVBOEEzNDhFNjk4NzA5REU1ODNCMjE5QjUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6o00S apWZJOdv8PGwZiQaBpgnIzmeApzN8Zp4TN9qLJJXm8o7bTvT6Z6VeQUhsid7k4TK /C9uT8ZOf7+gSijeSRLDFQbts0/YSUBoltJl0b66lU1eq43P8+vDoWcB7T1+C4I+ kTb+ArWISgkTkfEe5HUf9jOblMtYQOZNB8oVjWFXHMoTVL6XAp3HGL9fwH3JiuOk pRg4pVvgIp/pIgG9jOE9e7XqNuEcz4FolBf2a+GZTyRR419vXKR4mjTBb/G22gyN tqnBVVjgfvzDFPXitNE/M3ZHYuH8Okdz2Mud67O61g2Zc9b/lXxu64BSV2gDExVW WEJ7YQoDPigPOLP+ -----END CERTIFICATE-----Generated at Sat Apr 5 06:18:29 2025 by rpki-client