$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: MDz0//iIxiR4CQub3J2CjvZngeOEujLklVTJKag9nos= Subject key identifier: B9:A4:AB:A5:B9:DB:C5:C9:08:44:41:07:1A:43:47:73:27:D4:3B:DE Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 762B850AFDE51DAA86AF43F989981A02E6A91B40 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 0142 Signing time: Sat 05 Apr 2025 01:31:44 +0000 Manifest this update: Sat 05 Apr 2025 01:26:44 +0000 Manifest next update: Sun 06 Apr 2025 05:15:44 +0000 Files and hashes: 1: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: tezZfjQIJSEoaPdienMyz3PTigWBtWV225R5RVQQguw=) 2: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: 0Augomo0JPTrdfBB/3ITj/ZgfSBftNdAdE/vOPCbcS0=) 3: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: Khrq1GF88zBjscf6FycufjoSlfeQh2hDYn+4eHW8buU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 15:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:2b:85:0a:fd:e5:1d:aa:86:af:43:f9:89:98:1a:02:e6:a9:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Apr 5 01:26:44 2025 GMT Not After : Apr 6 05:15:44 2025 GMT Subject: CN=B9A4ABA5B9DBC5C9084441071A43477327D43BDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f4:a7:59:06:dd:d1:4d:22:78:e0:fb:f4:d1: 5c:50:01:67:27:8a:d2:59:b1:38:08:99:b0:22:7e: 60:65:3a:ea:6b:4f:fd:68:50:d0:af:ec:64:a9:43: 12:36:47:fe:a4:45:a1:11:92:d5:e6:43:b8:2f:b7: b1:c4:39:5f:1f:9c:29:6f:de:3b:31:f2:79:78:bd: 47:a0:1f:7e:03:55:04:b6:b8:86:0b:1a:c5:37:47: a1:0b:59:25:cc:a1:88:8f:b8:ed:94:8c:31:47:99: ee:4e:86:2c:a3:30:23:84:58:ce:1c:c8:a8:e2:3b: b3:f6:b2:bc:bf:cf:9d:dc:db:81:b1:2c:a7:4e:3b: d8:59:68:0b:50:c4:5a:ca:f0:1b:ad:1c:ea:64:96: ba:0a:e2:68:43:72:45:db:ff:d5:1f:7a:7d:59:75: bc:5d:83:d2:c9:3f:7c:6f:46:7d:c0:27:ae:a6:e4: 0b:a3:77:d5:2f:52:1c:c6:6c:4f:c0:42:f2:d7:e9: 95:f1:a6:73:c5:12:74:e2:7b:14:4c:03:3d:52:78: bb:1e:92:8c:d9:ca:a6:84:dd:76:ea:f8:dc:b8:03: c2:7d:a3:15:63:93:e7:11:1f:fb:5b:22:41:8d:1f: fd:8f:9f:0e:31:74:11:f0:a9:85:64:11:73:f4:ae: 4d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A4:AB:A5:B9:DB:C5:C9:08:44:41:07:1A:43:47:73:27:D4:3B:DE X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:96:db:e1:ce:ca:46:c0:50:68:50:73:e7:d2:bd:99:17:d6: 7d:a1:26:0f:72:50:49:c7:5e:c3:86:00:4e:b9:5d:e5:63:ca: 75:54:50:bb:3b:5e:8c:54:54:86:be:07:d5:00:ae:3c:2f:12: 21:f2:d9:ba:21:6b:68:41:06:a9:ef:b4:21:1e:e2:92:8e:b5: 30:db:ed:b9:cb:36:8a:cc:0b:ee:e9:ae:45:08:b4:d2:3a:cc: 91:82:6c:0d:9b:5b:01:0d:16:c6:f2:4e:ed:5d:29:3b:1c:6b: 1e:d9:0b:0c:97:01:88:7a:66:e5:eb:13:b9:97:33:48:02:57: 98:0e:92:23:0f:8a:d9:f1:3d:1c:b5:c1:4c:b1:7d:54:f0:1c: 41:e9:2b:f2:39:83:f7:9f:d1:3d:14:ad:59:f5:2e:40:23:c9: 06:9f:28:67:39:66:e4:c2:18:52:6d:10:23:bb:fa:74:7a:9b: 87:4d:c1:a1:73:36:ac:96:3c:f7:2f:5b:65:8b:aa:6d:31:11: a0:b4:c2:e0:80:f7:81:90:a1:61:0b:a5:54:18:23:53:27:ff: 4e:e3:70:af:ce:04:d3:6f:86:78:da:4c:b6:19:1a:98:f5:7a: 77:8c:c6:fe:48:72:dd:59:1b:19:65:b4:a2:d9:30:b1:ce:2a: 5d:29:c4:09 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdiuFCv3lHaqGr0P5iZgaAuapG0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNTA0MDUwMTI2NDRaFw0yNTA0MDYwNTE1NDRaMDMxMTAvBgNV BAMTKEI5QTRBQkE1QjlEQkM1QzkwODQ0NDEwNzFBNDM0NzczMjdENDNCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe9KdZBt3RTSJ44Pv00VxQAWcn itJZsTgImbAifmBlOuprT/1oUNCv7GSpQxI2R/6kRaERktXmQ7gvt7HEOV8fnClv 3jsx8nl4vUegH34DVQS2uIYLGsU3R6ELWSXMoYiPuO2UjDFHme5OhiyjMCOEWM4c yKjiO7P2sry/z53c24GxLKdOO9hZaAtQxFrK8ButHOpklroK4mhDckXb/9Ufen1Z dbxdg9LJP3xvRn3AJ66m5Aujd9UvUhzGbE/AQvLX6ZXxpnPFEnTiexRMAz1SeLse kozZyqaE3Xbq+Ny4A8J9oxVjk+cRH/tbIkGNH/2Pnw4xdBHwqYVkEXP0rk3bAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUuaSrpbnbxckIREEHGkNHcyfUO94wHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCtltvh zspGwFBoUHPn0r2ZF9Z9oSYPclBJx17DhgBOuV3lY8p1VFC7O16MVFSGvgfVAK48 LxIh8tm6IWtoQQap77QhHuKSjrUw2+25yzaKzAvu6a5FCLTSOsyRgmwNm1sBDRbG 8k7tXSk7HGse2QsMlwGIembl6xO5lzNIAleYDpIjD4rZ8T0ctcFMsX1U8BxB6Svy OYP3n9E9FK1Z9S5AI8kGnyhnOWbkwhhSbRAju/p0epuHTcGhczasljz3L1tli6pt MRGgtMLggPeBkKFhC6VUGCNTJ/9O43CvzgTTb4Z42ky2GRqY9Xp3jMb+SHLdWRsZ ZbSi2TCxzipdKcQJ -----END CERTIFICATE-----Generated at Sat Apr 5 06:26:16 2025 by rpki-client