$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft File: 3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft (raw, json) Hash identifier: Ghs9WcruVHvOYbQRwtjyy00srsuozXHvW6iucjK93Cg= Subject key identifier: A2:79:30:DE:F9:6E:62:67:DB:39:A1:23:5C:9E:57:70:F2:F2:41:81 Authority key identifier: 3A:3B:E1:4D:08:68:E3:9E:43:E2:7B:58:56:76:DF:5B:82:A1:22:E3 Certificate issuer: /CN=3A3BE14D0868E39E43E27B585676DF5B82A122E3 Certificate serial: 5089D533F8037F0389BDA170996AABD514D12FAE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft Manifest number: 4E Signing time: Wed 05 Feb 2025 10:43:14 +0000 Manifest this update: Wed 05 Feb 2025 10:38:14 +0000 Manifest next update: Thu 06 Feb 2025 11:05:14 +0000 Files and hashes: 1: 326131343a373538343a346666663a3a2f34382d3438203d3e20323135323838.roa (hash: nsYSNBfymkV5hvBNRaiVnDdkfFTTORy7B18OOzknSjI=) 2: 326131343a373538363a3a2f33322d3438203d3e20323132353136.roa (hash: Vw1WsjcBBDgwNV11ZkFV4v0uL62C3aFoVi1BdXoCeFo=) 3: 326131343a373538343a343030303a3a2f33362d3438203d3e20323132353136.roa (hash: 680SqDiYoq7HVpXkjaThtDMCA8zZT5AGhLNMwTkLjLA=) 4: 326131343a373538343a346662653a3a2f34382d3438203d3e2036353137.roa (hash: xptTc8UfiLJf//oV4oJOzWfdwqREpi/ly50X2yQ1eVw=) 5: 3A3BE14D0868E39E43E27B585676DF5B82A122E3.crl (hash: 2Iw1lOMGI6x4UH1uQ+ft+ALZ1HmBD0K24TLQYhWs3dQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.crl rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Feb 2025 11:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:89:d5:33:f8:03:7f:03:89:bd:a1:70:99:6a:ab:d5:14:d1:2f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3BE14D0868E39E43E27B585676DF5B82A122E3 Validity Not Before: Feb 5 10:38:14 2025 GMT Not After : Feb 6 11:05:14 2025 GMT Subject: CN=A27930DEF96E6267DB39A1235C9E5770F2F24181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ad:ca:86:7a:79:f8:09:e4:94:90:7e:33:52: d4:38:0b:6a:5a:27:31:6f:5c:bc:a4:04:7b:64:ec: 4e:4e:d1:35:31:99:c5:5a:ba:81:78:b0:11:1c:e6: 10:4c:15:c8:50:37:ec:e4:42:09:af:bc:a8:b4:5e: e6:44:c2:11:40:f3:7d:1d:7c:a1:4f:51:f0:91:f1: dc:f5:6f:3c:cf:ee:b2:25:6b:46:e8:4f:f1:9c:3e: c0:cd:e3:5e:98:af:b5:01:07:a3:a2:de:6f:47:8f: 0b:01:01:62:e1:a2:ce:4b:04:ad:b3:e4:79:80:0e: 25:3a:08:88:42:a2:f6:40:8b:98:5e:ae:b7:7b:22: 40:a6:a9:05:b7:c7:1e:a0:15:13:e9:8e:d3:39:fb: a9:5c:af:d6:91:99:8d:e4:f8:77:bc:7d:17:31:c3: 42:24:28:f6:f0:8f:8b:5b:be:3a:87:9c:99:66:62: fd:e7:c0:ef:f1:70:cb:6a:39:23:d8:41:e3:0f:a2: fe:4f:20:43:a5:e6:88:5c:ad:0f:ea:89:88:06:f4: 91:54:25:47:be:c9:d7:f1:02:ca:00:16:94:5e:77: d8:2d:5e:a8:bd:93:98:49:d7:77:22:48:03:c0:8b: 6b:2b:75:2e:f6:03:9f:da:ac:29:7e:03:44:89:b4: 8b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:79:30:DE:F9:6E:62:67:DB:39:A1:23:5C:9E:57:70:F2:F2:41:81 X509v3 Authority Key Identifier: keyid:3A:3B:E1:4D:08:68:E3:9E:43:E2:7B:58:56:76:DF:5B:82:A1:22:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/3A3BE14D0868E39E43E27B585676DF5B82A122E3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/1/3A3BE14D0868E39E43E27B585676DF5B82A122E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:99:69:c2:42:d4:a8:55:7c:23:0f:a1:bd:f6:85:b5:d9:c7: 3e:89:1d:25:a4:dd:cb:72:d0:2c:e1:b5:d6:73:c1:c6:cf:34: 78:0f:4b:02:b4:1c:44:75:98:3d:cc:7d:6e:38:03:0e:bf:d3: df:dd:3d:5c:e0:b6:c6:fc:58:3b:b0:4a:2e:8d:99:b1:94:45: ea:fc:d6:7d:69:c1:ee:18:af:85:b1:bd:cc:ce:f0:cc:2e:3c: 79:50:d8:cd:9f:15:10:4c:90:10:fa:d3:8c:25:ed:9b:5e:9c: 8a:9b:fa:7b:30:86:44:f1:03:a4:e4:0e:01:5f:b3:1f:a5:72: 08:5c:00:83:f5:b0:89:a7:57:4b:e8:61:01:dc:78:9b:57:c8: b1:26:95:2f:48:16:fe:47:9c:97:bc:f2:ff:e7:55:8d:b7:dc: 7e:0a:da:2a:d9:b6:98:b7:7b:b5:64:37:c0:57:b9:69:df:20: 72:d2:cb:f4:ea:cf:82:e1:a4:d1:42:78:ba:d4:a8:d3:ae:ae: a8:1b:c6:6e:01:53:f2:5f:71:3a:29:13:69:93:f1:18:bd:0e: 8a:c1:e7:56:a3:5a:5b:29:ec:fa:5c:ed:15:45:b9:93:15:54: 01:90:1d:ba:84:87:26:5f:95:59:95:34:e4:e8:f1:59:6d:7e: 8e:04:67:7d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUInVM/gDfwOJvaFwmWqr1RTRL64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EzQkUxNEQwODY4RTM5RTQzRTI3QjU4NTY3NkRGNUI4 MkExMjJFMzAeFw0yNTAyMDUxMDM4MTRaFw0yNTAyMDYxMTA1MTRaMDMxMTAvBgNV BAMTKEEyNzkzMERFRjk2RTYyNjdEQjM5QTEyMzVDOUU1NzcwRjJGMjQxODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNrcqGenn4CeSUkH4zUtQ4C2pa JzFvXLykBHtk7E5O0TUxmcVauoF4sBEc5hBMFchQN+zkQgmvvKi0XuZEwhFA830d fKFPUfCR8dz1bzzP7rIla0boT/GcPsDN416Yr7UBB6Oi3m9HjwsBAWLhos5LBK2z 5HmADiU6CIhCovZAi5herrd7IkCmqQW3xx6gFRPpjtM5+6lcr9aRmY3k+He8fRcx w0IkKPbwj4tbvjqHnJlmYv3nwO/xcMtqOSPYQeMPov5PIEOl5ohcrQ/qiYgG9JFU JUe+ydfxAsoAFpRed9gtXqi9k5hJ13ciSAPAi2srdS72A5/arCl+A0SJtIvrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUonkw3vluYmfbOaEjXJ5XcPLyQYEwHwYDVR0j BBgwFoAUOjvhTQho455D4ntYVnbfW4KhIuMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTljODNlNWMtNGI1NS00YTFhLTgwMDMtMWI3ZWNjNTFk NDdhLzEvM0EzQkUxNEQwODY4RTM5RTQzRTI3QjU4NTY3NkRGNUI4MkExMjJFMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zQTNCRTE0RDA4NjhFMzlFNDNFMjdCNTg1 Njc2REY1QjgyQTEyMkUzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU5YzgzZTVjLTRiNTUtNGExYS04MDAzLTFiN2VjYzUxZDQ3YS8xLzNBM0JFMTRE MDg2OEUzOUU0M0UyN0I1ODU2NzZERjVCODJBMTIyRTMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCamWnC QtSoVXwjD6G99oW12cc+iR0lpN3LctAs4bXWc8HGzzR4D0sCtBxEdZg9zH1uOAMO v9Pf3T1c4LbG/Fg7sEoujZmxlEXq/NZ9acHuGK+Fsb3MzvDMLjx5UNjNnxUQTJAQ +tOMJe2bXpyKm/p7MIZE8QOk5A4BX7MfpXIIXACD9bCJp1dL6GEB3HibV8ixJpUv SBb+R5yXvPL/51WNt9x+Ctoq2baYt3u1ZDfAV7lp3yBy0sv06s+C4aTRQni61KjT rq6oG8ZuAVPyX3E6KRNpk/EYvQ6KwedWo1pbKez6XO0VRbmTFVQBkB26hIcmX5VZ lTTk6PFZbX6OBGd9 -----END CERTIFICATE-----Generated at Wed Feb 5 20:05:06 2025 by rpki-client