$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft File: FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft (raw, json) Hash identifier: ddlOoh4kz2xNZnjAsOy+Ibo/GieMCljB+wedbM0CF8w= Subject key identifier: 5A:A5:BA:17:6C:0B:2B:B2:12:0B:9E:64:F0:2C:F7:FC:DA:E1:8B:54 Authority key identifier: FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B Certificate issuer: /CN=FA8F32A0B21DD2779315422B5A2184C649E03C0B Certificate serial: 4583CA93F5C97E82F1308D90C8A596152BF5DE40 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft Manifest number: 03AC Signing time: Fri 04 Apr 2025 17:21:15 +0000 Manifest this update: Fri 04 Apr 2025 17:16:15 +0000 Manifest next update: Sat 05 Apr 2025 20:19:15 +0000 Files and hashes: 1: FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl (hash: cuFkVcBAJ6tS4lIM6DvA/zHSJHtrIdqvddMCbCk5DNk=) 2: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: /CFUhpNUUZNwoRgflpnALQIis6DpR20ZsBTAXpcqHGA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 20:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:83:ca:93:f5:c9:7e:82:f1:30:8d:90:c8:a5:96:15:2b:f5:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA8F32A0B21DD2779315422B5A2184C649E03C0B Validity Not Before: Apr 4 17:16:15 2025 GMT Not After : Apr 5 20:19:15 2025 GMT Subject: CN=5AA5BA176C0B2BB2120B9E64F02CF7FCDAE18B54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:a9:ce:ef:61:b8:5f:c4:0d:70:a8:07:11: 85:15:be:95:68:2d:80:88:65:af:06:f1:6f:92:a3: 84:28:b7:c8:45:eb:a8:ba:83:e5:e2:c9:f2:26:42: 7f:51:58:90:24:8d:b7:cd:ed:64:61:20:33:e2:89: 6b:db:e6:ab:0a:40:a5:8b:22:05:44:d1:13:f6:b7: 32:60:90:6c:13:cf:15:24:06:96:52:8e:28:e7:91: 48:d6:62:1c:15:37:b4:2c:7a:b0:47:15:08:29:b4: e3:d6:ad:73:f8:54:ad:55:8b:d7:b1:66:17:95:2a: 05:62:85:a4:af:b7:d5:89:12:17:62:26:31:c2:4c: 4a:24:04:bc:59:3f:fe:f7:09:29:d3:0c:1b:40:ef: 84:56:6a:4c:13:42:81:e0:cc:fb:69:08:ac:57:4a: a7:69:1d:df:d9:1a:2d:24:34:47:45:f9:61:bc:2e: c5:85:d5:a5:ec:14:d3:c5:29:f6:76:40:c6:0e:f9: 2d:d2:b5:4e:6b:fc:ce:ee:d0:f9:57:08:38:99:c4: 34:f8:4f:44:8c:4b:ce:5d:68:22:38:e9:e5:cf:a2: df:32:bf:d0:39:5f:17:37:4f:e6:11:07:8c:b7:c4: 0b:e6:a4:eb:51:88:05:c0:12:11:62:95:fa:70:e9: df:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A5:BA:17:6C:0B:2B:B2:12:0B:9E:64:F0:2C:F7:FC:DA:E1:8B:54 X509v3 Authority Key Identifier: keyid:FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:1f:fa:86:85:86:18:c9:4b:47:56:c4:b8:50:8e:00:83:17: 95:82:51:d1:04:38:c6:fc:35:3d:b0:51:e0:39:aa:2c:86:4a: 3b:d3:9f:41:74:b6:48:7c:1d:91:16:bf:15:3a:09:45:73:b4: f1:0e:38:05:5e:b8:43:e2:9a:7b:35:62:fc:3f:7f:07:4d:29: 0f:31:51:63:c8:d4:1a:81:5d:3e:2c:cc:d9:b9:2a:a7:e8:de: 01:64:80:69:65:3b:b6:f0:86:10:a6:05:88:b8:78:ee:85:6f: d3:7b:dc:7c:5a:c2:60:ea:fd:fc:55:c4:31:20:a4:6a:73:68: e9:fe:85:db:1b:37:d4:13:aa:da:ac:61:74:be:a3:14:11:b6: ba:10:40:9c:b0:d2:14:6d:16:80:f0:71:43:9e:4a:ab:f8:97: fa:62:d7:f9:90:59:ec:8d:90:23:55:77:fc:66:21:f6:f6:90: d0:11:d3:77:bf:30:7c:88:33:ca:53:a5:ed:6a:51:b6:84:67: 88:e3:8b:ab:f3:19:c5:55:b1:ce:b3:03:14:d4:f2:a1:1e:fb: 32:7e:f4:4c:3b:23:5d:2a:52:3f:0f:c4:bd:30:bd:fa:29:6d: df:93:3d:e1:49:78:e0:ce:cf:06:18:b1:a1:02:e1:94:3d:06: 73:69:7a:86 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURYPKk/XJfoLxMI2QyKWWFSv13kAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE4RjMyQTBCMjFERDI3NzkzMTU0MjJCNUEyMTg0QzY0 OUUwM0MwQjAeFw0yNTA0MDQxNzE2MTVaFw0yNTA0MDUyMDE5MTVaMDMxMTAvBgNV BAMTKDVBQTVCQTE3NkMwQjJCQjIxMjBCOUU2NEYwMkNGN0ZDREFFMThCNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5MKnO72G4X8QNcKgHEYUVvpVo LYCIZa8G8W+So4Qot8hF66i6g+XiyfImQn9RWJAkjbfN7WRhIDPiiWvb5qsKQKWL IgVE0RP2tzJgkGwTzxUkBpZSjijnkUjWYhwVN7QserBHFQgptOPWrXP4VK1Vi9ex ZheVKgVihaSvt9WJEhdiJjHCTEokBLxZP/73CSnTDBtA74RWakwTQoHgzPtpCKxX SqdpHd/ZGi0kNEdF+WG8LsWF1aXsFNPFKfZ2QMYO+S3StU5r/M7u0PlXCDiZxDT4 T0SMS85daCI46eXPot8yv9A5Xxc3T+YRB4y3xAvmpOtRiAXAEhFilfpw6d9TAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUWqW6F2wLK7ISC55k8Cz3/Nrhi1QwHwYDVR0j BBgwFoAU+o8yoLId0neTFUIrWiGExkngPAswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzEvRkE4RjMyQTBCMjFERDI3NzkzMTU0MjJCNUEyMTg0QzY0OUUwM0MwQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9GQThGMzJBMEIyMUREMjc3OTMxNTQyMkI1 QTIxODRDNjQ5RTAzQzBCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8xL0ZBOEYzMkEw QjIxREQyNzc5MzE1NDIyQjVBMjE4NEM2NDlFMDNDMEIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBUH/qG hYYYyUtHVsS4UI4AgxeVglHRBDjG/DU9sFHgOaoshko7059BdLZIfB2RFr8VOglF c7TxDjgFXrhD4pp7NWL8P38HTSkPMVFjyNQagV0+LMzZuSqn6N4BZIBpZTu28IYQ pgWIuHjuhW/Te9x8WsJg6v38VcQxIKRqc2jp/oXbGzfUE6rarGF0vqMUEba6EECc sNIUbRaA8HFDnkqr+Jf6Ytf5kFnsjZAjVXf8ZiH29pDQEdN3vzB8iDPKU6XtalG2 hGeI44ur8xnFVbHOswMU1PKhHvsyfvRMOyNdKlI/D8S9ML36KW3fkz3hSXjgzs8G GLGhAuGUPQZzaXqG -----END CERTIFICATE-----Generated at Sat Apr 5 07:38:59 2025 by rpki-client