$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: Yu8nLheXonS+wyH0qrzzOSiYygobnzHzJF7xsm81v6k= Subject key identifier: CA:AA:A4:E4:2A:43:D2:F1:10:06:CF:12:11:B6:C9:64:36:B4:C0:01 Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 21E78162A318883F1CDC7762871697BDA48A7802 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 0144 Signing time: Fri 04 Apr 2025 20:21:09 +0000 Manifest this update: Fri 04 Apr 2025 20:16:09 +0000 Manifest next update: Sat 05 Apr 2025 23:50:09 +0000 Files and hashes: 1: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: WAEDCXUcEyZrm+AiMC7S/4c05J5m88q64rRSqxpIjho=) 2: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: AYXGWHv3W2xaqsiRmkXqV46GcqH7N1Qd7edE5OSfi30=) 3: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: GOSro5bSH04/LhFcp3jWcxc9uL2by5TiBmqbWGnAjdA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 14:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e7:81:62:a3:18:88:3f:1c:dc:77:62:87:16:97:bd:a4:8a:78:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Apr 4 20:16:09 2025 GMT Not After : Apr 5 23:50:09 2025 GMT Subject: CN=CAAAA4E42A43D2F11006CF1211B6C96436B4C001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:e1:c8:c4:6c:b2:d1:92:95:ce:f9:d1:93: e2:cb:6c:34:90:55:e5:5a:24:31:50:78:63:22:2d: 4e:58:1d:f2:d5:d5:e4:6b:a0:57:e3:d5:32:d3:af: 2e:64:2b:af:03:40:0b:18:40:32:d8:8b:02:18:5b: 3b:aa:77:23:59:1d:47:1e:a4:7f:73:9b:09:4c:d1: 79:58:f0:f4:f1:c8:7d:6d:66:f4:62:33:4c:da:68: 4a:07:30:e1:24:b5:84:71:28:0f:3e:7e:23:7b:5d: 98:14:ce:4f:62:86:a6:ad:7d:db:f7:12:f6:98:fd: 91:d8:99:98:c5:8a:68:ee:e2:c1:fc:33:17:29:87: b0:8a:fd:3a:3f:8a:de:11:99:31:f8:d4:8b:2e:4f: c1:9b:92:2c:8b:11:27:b1:b2:3b:5a:65:12:fd:f1: a8:b6:26:42:04:13:a0:a1:76:92:0e:4a:4e:41:65: 97:2b:37:80:20:1e:6d:b7:f2:63:65:e3:3f:e7:b0: 6a:0a:51:de:db:d2:7a:c2:b9:52:49:15:4e:6a:cd: de:c9:b7:2e:0b:d5:ec:83:d7:fb:14:ed:88:53:22: 0d:24:96:48:78:aa:98:42:0d:e5:ab:ed:6e:32:c1: 75:f9:ba:a8:08:48:58:ce:ea:f9:ed:b7:aa:62:e4: 4f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AA:A4:E4:2A:43:D2:F1:10:06:CF:12:11:B6:C9:64:36:B4:C0:01 X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a7:d7:35:d7:c2:62:71:17:31:f5:9f:13:a7:14:29:ad:1a: 63:7b:5a:ba:3e:6e:f3:1e:83:d6:c6:5f:bb:16:ba:d4:d8:84: f1:3a:eb:83:54:a7:8f:f9:2e:1e:df:ac:55:ce:16:83:7e:5f: ce:5f:26:13:b6:29:19:63:a6:b3:aa:27:a3:94:cd:bc:03:ae: 95:7b:01:fb:c2:3f:18:6c:e2:d9:ce:d4:9f:cd:10:1e:07:77: 5f:2f:c4:5b:80:b1:f4:39:2f:65:2b:fa:4c:5e:b5:98:6f:93: 0b:21:3f:ac:c9:d9:6d:3e:fb:17:3b:39:18:82:3a:77:22:63: 7e:50:37:73:37:12:17:e7:89:2a:c8:d8:ac:21:5c:77:42:d9: 39:1a:99:b7:18:f3:ec:57:cc:14:18:6b:ef:f6:5d:4d:b9:04: bf:c8:c9:dd:d3:7d:72:7a:f4:e2:08:2f:a6:18:f7:25:43:22: 34:0b:fe:6b:1a:65:9b:2e:66:fc:8e:97:f2:7c:5f:00:86:fd: 84:42:6c:34:58:af:b7:5b:d3:b8:ee:a5:60:dc:44:06:05:f2: 29:0d:c4:61:c5:bc:db:c7:4b:47:23:f0:d0:7b:0c:26:89:44: b1:91:d6:78:dd:39:24:93:d7:e5:cd:ab:77:b5:47:6f:80:60: 7d:f9:24:7c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIeeBYqMYiD8c3HdihxaXvaSKeAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNTA0MDQyMDE2MDlaFw0yNTA0MDUyMzUwMDlaMDMxMTAvBgNV BAMTKENBQUFBNEU0MkE0M0QyRjExMDA2Q0YxMjExQjZDOTY0MzZCNEMwMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC81OHIxGyy0ZKVzvnRk+LLbDSQ VeVaJDFQeGMiLU5YHfLV1eRroFfj1TLTry5kK68DQAsYQDLYiwIYWzuqdyNZHUce pH9zmwlM0XlY8PTxyH1tZvRiM0zaaEoHMOEktYRxKA8+fiN7XZgUzk9ihqatfdv3 EvaY/ZHYmZjFimju4sH8Mxcph7CK/To/it4RmTH41IsuT8GbkiyLESexsjtaZRL9 8ai2JkIEE6ChdpIOSk5BZZcrN4AgHm238mNl4z/nsGoKUd7b0nrCuVJJFU5qzd7J ty4L1eyD1/sU7YhTIg0klkh4qphCDeWr7W4ywXX5uqgISFjO6vntt6pi5E9PAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUyqqk5CpD0vEQBs8SEbbJZDa0wAEwHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCRp9c1 18JicRcx9Z8TpxQprRpje1q6Pm7zHoPWxl+7FrrU2ITxOuuDVKeP+S4e36xVzhaD fl/OXyYTtikZY6azqiejlM28A66VewH7wj8YbOLZztSfzRAeB3dfL8RbgLH0OS9l K/pMXrWYb5MLIT+sydltPvsXOzkYgjp3ImN+UDdzNxIX54kqyNisIVx3Qtk5Gpm3 GPPsV8wUGGvv9l1NuQS/yMnd031yevTiCC+mGPclQyI0C/5rGmWbLmb8jpfyfF8A hv2EQmw0WK+3W9O47qVg3EQGBfIpDcRhxbzbx0tHI/DQewwmiUSxkdZ43Tkkk9fl zat3tUdvgGB9+SR8 -----END CERTIFICATE-----Generated at Sat Apr 5 04:32:38 2025 by rpki-client