$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: a4fakNJ2z1T1CeimiV3XPRE90tw5jZhJ2aHHQS8jMJc= Subject key identifier: B8:CB:2B:2E:F0:A7:4E:BC:94:16:10:85:68:AC:2D:84:7D:69:F9:B9 Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 040D497B2A7B0F5174039281CB102D8E8A1E6E80 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: 0174 Signing time: Fri 04 Apr 2025 15:38:44 +0000 Manifest this update: Fri 04 Apr 2025 15:33:44 +0000 Manifest next update: Sat 05 Apr 2025 16:44:44 +0000 Files and hashes: 1: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: Bu8eu+s1xKEjCs05/XkV2x0FQLM16iFsGrYGYNvS9M8=) 2: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: oTHNKPrvFgZMys5+d62ibZqC2HqJGYF2Ki9glygCK/E=) 3: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: HVQR2cbKt8VVrQisjkBAhrhp4KsXJej/OLSmUeqTsY0=) 4: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: 5jLn1tYtti5DJK9TqNkdMibH5mGLzDQe1BN0OVxqnag=) 5: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: pcBpSLX6wjD10TMOktRdBOucXd2A5gfG7C3Lecbh8gI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 14:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0d:49:7b:2a:7b:0f:51:74:03:92:81:cb:10:2d:8e:8a:1e:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: Apr 4 15:33:44 2025 GMT Not After : Apr 5 16:44:44 2025 GMT Subject: CN=B8CB2B2EF0A74EBC9416108568AC2D847D69F9B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:04:e3:5a:0e:9d:39:c7:2d:cb:18:ee:d9:53: d6:7c:c7:ce:2b:30:7d:11:f2:e4:8a:b1:5e:9c:41: 5a:4a:e7:e0:c1:81:05:a9:4d:29:43:64:a9:62:59: 08:3f:3d:a2:80:3b:1c:6b:8d:05:9a:d3:12:f1:06: b8:aa:78:03:d2:1f:2c:54:cd:f5:5d:8a:6e:7c:05: 1f:58:33:b2:50:58:f2:13:0f:0d:68:e9:8a:e6:6a: 09:9c:f8:0c:dd:5d:57:cd:a6:70:7a:44:d7:27:f0: 27:b3:4c:01:2a:8e:40:3d:ee:5e:76:b9:7b:bb:54: 94:11:61:1e:79:88:6d:ca:4c:df:0e:c8:83:7d:a8: a3:0e:99:bd:dc:83:1a:c5:80:2c:25:5f:79:13:3d: 01:bd:a7:f1:13:db:d3:59:e3:24:d8:f6:aa:78:40: eb:89:a6:d8:e5:db:83:9a:04:a5:8e:52:8a:8a:7a: 1e:5b:c0:00:ed:c8:bb:32:9e:ea:af:ba:68:74:0d: c4:7b:9b:0f:c8:96:87:d8:6d:65:f3:37:70:f6:1f: f9:54:db:a6:e4:80:d0:2e:3c:31:1a:c2:51:8d:77: 8e:3a:2e:22:3f:96:d4:29:32:15:66:6d:b3:99:40: 20:54:2e:0a:44:30:ed:a9:7c:d9:6b:f7:3c:91:7c: 21:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CB:2B:2E:F0:A7:4E:BC:94:16:10:85:68:AC:2D:84:7D:69:F9:B9 X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:0b:6f:0c:f2:73:8b:47:98:cf:03:0c:11:98:a2:f2:9e:99: 5b:90:0e:e9:d7:10:ed:09:6e:db:20:17:9c:41:a6:a1:cc:de: 97:f0:bf:7f:67:b2:08:9d:9f:87:4a:c3:1c:d8:3d:38:a0:f1: ed:b1:d2:e8:df:ee:92:cb:fa:dc:1e:6f:49:2c:f7:92:c3:ae: 2f:03:37:cc:01:30:d5:24:92:92:21:b0:cb:0c:7d:3a:aa:dd: 7a:82:6e:7b:8f:60:b7:28:3b:07:cf:76:d3:28:36:b2:f4:06: 07:c9:69:0f:c0:4f:6f:a0:cf:d5:1a:89:5f:d0:0f:32:03:a7: 3d:51:ef:07:67:06:19:23:0f:22:4f:48:15:0e:9e:d8:4b:90: ec:79:12:df:27:73:fd:21:b4:4b:a4:5b:36:17:6e:1f:97:13: 96:3b:f6:89:c1:a6:5d:cb:84:f2:af:bb:e9:2f:33:6d:7e:14: 0c:e3:f0:0b:b2:5b:74:ce:a3:16:94:32:84:30:4d:af:c8:00: 06:c5:60:c9:f7:00:a8:89:9f:5e:08:41:88:a0:bc:de:2a:fe: 72:30:e4:c4:a6:e9:c7:e3:49:f8:b5:7c:30:05:15:67:0e:d5: 39:8f:20:bd:3f:4f:94:10:e6:47:b7:65:b1:2a:ae:c3:c3:cb: df:ef:b3:4a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBA1Jeyp7D1F0A5KByxAtjooeboAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNTA0MDQxNTMzNDRaFw0yNTA0MDUxNjQ0NDRaMDMxMTAvBgNV BAMTKEI4Q0IyQjJFRjBBNzRFQkM5NDE2MTA4NTY4QUMyRDg0N0Q2OUY5QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrBONaDp05xy3LGO7ZU9Z8x84r MH0R8uSKsV6cQVpK5+DBgQWpTSlDZKliWQg/PaKAOxxrjQWa0xLxBriqeAPSHyxU zfVdim58BR9YM7JQWPITDw1o6Yrmagmc+AzdXVfNpnB6RNcn8CezTAEqjkA97l52 uXu7VJQRYR55iG3KTN8OyIN9qKMOmb3cgxrFgCwlX3kTPQG9p/ET29NZ4yTY9qp4 QOuJptjl24OaBKWOUoqKeh5bwADtyLsynuqvumh0DcR7mw/IlofYbWXzN3D2H/lU 26bkgNAuPDEawlGNd446LiI/ltQpMhVmbbOZQCBULgpEMO2pfNlr9zyRfCHjAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUuMsrLvCnTryUFhCFaKwthH1p+bkwHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAzC28M 8nOLR5jPAwwRmKLynplbkA7p1xDtCW7bIBecQaahzN6X8L9/Z7IInZ+HSsMc2D04 oPHtsdLo3+6Sy/rcHm9JLPeSw64vAzfMATDVJJKSIbDLDH06qt16gm57j2C3KDsH z3bTKDay9AYHyWkPwE9voM/VGolf0A8yA6c9Ue8HZwYZIw8iT0gVDp7YS5DseRLf J3P9IbRLpFs2F24flxOWO/aJwaZdy4Tyr7vpLzNtfhQM4/ALslt0zqMWlDKEME2v yAAGxWDJ9wCoiZ9eCEGIoLzeKv5yMOTEpunH40n4tXwwBRVnDtU5jyC9P0+UEOZH t2WxKq7Dw8vf77NK -----END CERTIFICATE-----Generated at Sat Apr 5 04:36:39 2025 by rpki-client