$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft File: B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft (raw, json) Hash identifier: +Nay/OJsDAePbJufiVgVp/Y6/S9Mit1uSm0Gp4+R6Rs= Subject key identifier: FB:AF:12:EF:2F:BF:95:1D:EA:42:93:41:C7:96:76:C8:BC:4E:7D:E4 Authority key identifier: B9:75:96:A9:0E:CE:84:DC:11:5D:E5:53:E8:98:A9:B2:2A:36:C9:C4 Certificate issuer: /CN=B97596A90ECE84DC115DE553E898A9B22A36C9C4 Certificate serial: 782C1D5C31CE851E02627C1356B6EFE1232721B9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft Manifest number: 5F Signing time: Wed 16 Apr 2025 10:43:15 +0000 Manifest this update: Wed 16 Apr 2025 10:38:15 +0000 Manifest next update: Thu 17 Apr 2025 12:44:15 +0000 Files and hashes: 1: B97596A90ECE84DC115DE553E898A9B22A36C9C4.crl (hash: NF7Sy92QYbp4dDDqHPg8lX9iavK+WgT70/oOipd5hN4=) 2: 326130393a353463333a3a2f33322d3438203d3e20323135313437.roa (hash: Hh49k+Xt2ffEnf+1AdAQ2KRXHiXFSnVa9rayhA3bylc=) 3: 326130393a353463333a613034663a3a2f34382d3438203d3e20323135313437.roa (hash: DYKApsC0Xy9yKLi3q0BaMZa16VHMvjlxYhlK7Vyadxk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 17 Apr 2025 12:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:2c:1d:5c:31:ce:85:1e:02:62:7c:13:56:b6:ef:e1:23:27:21:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B97596A90ECE84DC115DE553E898A9B22A36C9C4 Validity Not Before: Apr 16 10:38:15 2025 GMT Not After : Apr 17 12:44:15 2025 GMT Subject: CN=FBAF12EF2FBF951DEA429341C79676C8BC4E7DE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e0:2c:11:13:3b:63:c7:ca:60:ad:08:0b:7b: 9c:6f:55:ab:03:f7:14:60:c3:f1:a9:ab:90:cc:7d: 12:e9:62:d6:65:27:66:39:bd:d8:8f:99:ed:50:f9: ea:ac:5f:c0:05:1e:4e:88:80:3b:af:52:26:ea:1b: 13:96:b0:7f:19:db:3b:34:b9:46:2b:b5:1d:17:af: 77:46:59:e5:5e:27:fe:b5:75:a1:42:a9:4d:88:6c: a6:87:d3:6a:71:89:43:9e:b5:b6:63:63:ba:c2:23: e3:4d:7d:ee:2d:d0:a2:92:c7:f6:44:6b:54:d2:dc: 0a:78:e7:bf:2b:fa:31:14:35:e9:df:a0:fb:84:d7: 39:dd:c7:38:24:8c:42:7f:e6:ff:a4:81:ce:eb:5b: 92:15:19:c3:ce:3e:02:82:c0:3d:71:ad:ae:23:8f: 4f:3e:dc:ff:e7:28:30:63:6a:25:e5:f3:50:da:53: 04:36:ab:0b:e4:d6:02:50:85:09:8e:7e:3d:45:44: 84:a2:6d:6a:66:18:17:7d:e4:4b:f2:b2:87:e4:d4: c4:01:9c:d6:c5:99:2b:de:97:b3:06:1e:6c:df:d2: 8c:2a:3c:6a:09:29:a2:54:f1:c7:b2:98:b5:b4:af: 2b:b7:c0:e7:14:7b:89:52:8f:e2:c2:cb:d2:a7:48: 21:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AF:12:EF:2F:BF:95:1D:EA:42:93:41:C7:96:76:C8:BC:4E:7D:E4 X509v3 Authority Key Identifier: keyid:B9:75:96:A9:0E:CE:84:DC:11:5D:E5:53:E8:98:A9:B2:2A:36:C9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:60:bc:40:b5:d5:94:a1:a8:89:5d:d1:56:91:ad:5c:6d:4f: e3:62:b6:04:c2:39:72:4f:86:e5:51:7e:03:a8:31:67:fe:99: 54:7a:1b:7f:11:aa:27:fa:02:28:91:57:f8:b9:74:69:b6:07: d7:38:1f:fc:7f:e6:e7:ee:86:4b:24:64:f2:8b:b4:07:1f:e9: 11:c4:5b:8e:f9:88:ae:01:61:b0:df:62:2b:a2:04:5c:8f:e3: f7:a5:ff:43:cd:9c:09:28:a8:78:6e:b1:60:b1:f8:c7:98:67: 54:3c:2a:e7:ec:0f:25:e5:a8:2b:f1:df:b4:62:1d:72:08:8d: e4:f0:5d:90:6b:d8:ba:19:dd:11:d1:ef:b7:35:6c:31:54:61: 67:f2:49:1c:43:71:5b:a8:f2:59:88:fc:e9:3d:fd:dc:3d:34: 0b:08:68:06:ec:ba:d5:e9:80:14:72:35:d9:2e:07:2c:a8:fb: 94:ad:bb:dc:f5:a5:b8:3f:e0:09:85:73:1a:9f:be:7c:f4:03: 99:49:d8:9c:73:d7:dd:1c:22:f3:0f:d3:48:76:21:a7:0f:c7: b0:f5:de:f9:24:68:9d:22:11:39:df:a4:65:8d:07:9b:23:97: d6:f0:fb:d9:c2:ba:84:22:af:29:e9:c5:ed:61:c5:53:e6:a6: 6e:be:16:7c -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUeCwdXDHOhR4CYnwTVrbv4SMnIbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3NTk2QTkwRUNFODREQzExNURFNTUzRTg5OEE5QjIy QTM2QzlDNDAeFw0yNTA0MTYxMDM4MTVaFw0yNTA0MTcxMjQ0MTVaMDMxMTAvBgNV BAMTKEZCQUYxMkVGMkZCRjk1MURFQTQyOTM0MUM3OTY3NkM4QkM0RTdERTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs4CwREztjx8pgrQgLe5xvVasD 9xRgw/Gpq5DMfRLpYtZlJ2Y5vdiPme1Q+eqsX8AFHk6IgDuvUibqGxOWsH8Z2zs0 uUYrtR0Xr3dGWeVeJ/61daFCqU2IbKaH02pxiUOetbZjY7rCI+NNfe4t0KKSx/ZE a1TS3Ap4578r+jEUNenfoPuE1zndxzgkjEJ/5v+kgc7rW5IVGcPOPgKCwD1xra4j j08+3P/nKDBjaiXl81DaUwQ2qwvk1gJQhQmOfj1FRISibWpmGBd95Evysofk1MQB nNbFmSvel7MGHmzf0owqPGoJKaJU8ceymLW0ryu3wOcUe4lSj+LCy9KnSCFtAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU+68S7y+/lR3qQpNBx5Z2yLxOfeQwHwYDVR0j BBgwFoAUuXWWqQ7OhNwRXeVT6Jipsio2ycQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzMvQjk3NTk2QTkwRUNFODREQzExNURFNTUzRTg5OEE5QjIyQTM2QzlDNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQjk3NTk2QTkwRUNFODREQzExNURFNTUzRTg5OEE5QjIyQTM2 QzlDNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1m MDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvMy9COTc1OTZBOTBFQ0U4NERDMTE1 REU1NTNFODk4QTlCMjJBMzZDOUM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmC8QLXVlKGoiV3RVpGt XG1P42K2BMI5ck+G5VF+A6gxZ/6ZVHobfxGqJ/oCKJFX+Ll0abYH1zgf/H/m5+6G SyRk8ou0Bx/pEcRbjvmIrgFhsN9iK6IEXI/j96X/Q82cCSioeG6xYLH4x5hnVDwq 5+wPJeWoK/HftGIdcgiN5PBdkGvYuhndEdHvtzVsMVRhZ/JJHENxW6jyWYj86T39 3D00CwhoBuy61emAFHI12S4HLKj7lK273PWluD/gCYVzGp++fPQDmUnYnHPX3Rwi 8w/TSHYhpw/HsPXe+SRonSIROd+kZY0HmyOX1vD72cK6hCKvKenF7WHFU+ambr4W fA== -----END CERTIFICATE-----Generated at Thu Apr 17 01:12:54 2025 by rpki-client