$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft File: E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json) Hash identifier: h2uD9Y6gBC1E3kcwHxPtOxxfBwiAH6FWHPaY6vWov+o= Subject key identifier: B9:DC:D1:F4:29:BA:47:4B:7B:D9:E1:B8:AC:9C:90:32:68:BE:0D:35 Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Certificate serial: 702176E8C553FDED9CDCBE5FFF2DB3BFDC72F16B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft Manifest number: 2C Signing time: Fri 04 Apr 2025 22:05:45 +0000 Manifest this update: Fri 04 Apr 2025 22:00:45 +0000 Manifest next update: Sat 05 Apr 2025 22:33:45 +0000 Files and hashes: 1: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: vkf1mjHp/rNuQdlorYW9jdws3qgBfMRPV6TjpWK2vZI=) 2: 326130663a356663303a626565663a3a2f34382d3438203d3e203438393831.roa (hash: e3YPpDvHx8rPIAwM+wwNU0p7blaAVCCQT3k3Y+xIeS4=) 3: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: UjFw0WQQLm//XoiWgykA8VWz+amzh0YCKaelwGihPq4=) 4: 39312e3230392e35382e302f32342d3234203d3e203634323637.roa (hash: vVPhAwxMoGbJX95BZTqrmZCi086rlFMNDRhMBQEniYs=) 5: 39312e3230392e34302e302f32342d3234203d3e20313337383937.roa (hash: eXBnQ+s+mB7Cc4NOSlBtRRCSpKfKjJW6/ZyNzVf/Dqo=) 6: 326130663a356663303a646561643a3a2f34382d3438203d3e203339363733.roa (hash: gO+lPcmBJ3b3FFlaD55CICvRL4LDSg56OGDANGd62H4=) 7: 39312e3230392e34302e302f32342d3234203d3e2034353135.roa (hash: CC7fp5nOaibQP3hFHxX7FW2H/9NjDOElJ2PAdK2zC6Y=) 8: 39312e3230392e34382e302f32342d3234203d3e2035353131.roa (hash: pWHUy4sfDHhMYcXOwCmnLzzNUiYAcTbJlR4z9A6zTiI=) 9: 326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa (hash: K3dsxrFQ81jShWe7HJ7EQUeBE0EnGjXf57qbgrA7Yxc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:21:76:e8:c5:53:fd:ed:9c:dc:be:5f:ff:2d:b3:bf:dc:72:f1:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Validity Not Before: Apr 4 22:00:45 2025 GMT Not After : Apr 5 22:33:45 2025 GMT Subject: CN=B9DCD1F429BA474B7BD9E1B8AC9C903268BE0D35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fc:81:d0:10:87:d3:3b:19:77:a0:52:13:da: e2:d1:22:c0:23:98:84:4c:e8:f0:1c:78:ca:0a:50: f9:3a:05:ff:0a:11:66:19:16:4d:9d:2b:ee:f0:25: 19:d0:44:2a:ea:10:81:04:61:cc:0e:e4:c4:cb:a4: 0e:98:18:a7:8b:d8:1c:31:21:f4:31:2a:77:30:02: 78:b3:83:8e:1f:05:bd:4f:db:d8:27:92:e4:13:29: 7c:eb:79:3a:a5:89:77:f3:08:7e:2f:40:d0:28:0e: 40:79:95:9c:11:5c:62:3a:61:d9:3a:dd:80:40:cf: 5c:df:09:fe:4b:5e:72:13:18:e5:eb:f4:91:d9:fa: 5d:e5:fd:0b:64:8d:f1:bc:ab:5b:24:a3:4c:44:6d: 5a:38:f1:bd:72:66:d5:55:7e:17:83:a2:e6:c6:e8: b1:78:61:26:6b:1a:9f:96:7e:34:e3:ca:81:a9:1b: 6c:3f:c1:94:6f:88:3e:6f:51:22:eb:0b:ac:64:75: d6:af:e6:ea:94:8a:3c:88:88:83:be:7f:ba:35:a9: 83:52:16:b6:cb:a7:48:1e:3c:65:3a:ed:c6:95:d7: 1f:5a:6c:d1:6d:c3:86:a5:07:5e:ec:0e:87:a7:f9: 1a:01:78:bb:50:c1:51:7c:4a:9f:4b:18:e1:dc:31: 17:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DC:D1:F4:29:BA:47:4B:7B:D9:E1:B8:AC:9C:90:32:68:BE:0D:35 X509v3 Authority Key Identifier: keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:41:47:1d:e4:bd:2b:ce:69:12:46:34:32:c0:b8:c5:9f:36: 81:f1:c2:d0:2c:09:3e:f5:7c:a1:de:4d:fb:59:ce:69:1b:5f: 5f:58:6c:eb:c7:a4:9e:d6:85:4b:3c:ed:99:1c:bf:65:d1:7e: 47:00:ce:dd:6a:61:55:33:2e:a8:bc:10:0e:73:21:23:59:6a: 2d:7b:f9:ba:6f:cd:a7:4c:97:90:6f:00:33:70:78:8c:e5:86: 16:62:2b:a4:cc:93:d9:56:8c:d7:9a:ce:b9:27:a9:4e:4d:3a: 54:27:0a:26:38:3d:65:1a:4f:92:10:fc:c9:94:50:68:b8:31: e6:2e:83:a0:0a:dc:fb:c1:b3:09:ce:7a:27:c3:32:a0:17:71: 3c:d7:83:40:ee:39:45:70:10:63:94:2d:45:b6:ff:8f:fd:aa: 84:cb:0b:f8:b2:f0:4a:2b:cb:bc:48:dc:b9:8a:ff:f8:29:08: fe:e9:18:e4:66:f2:d7:ef:7a:10:c8:ac:5b:da:1a:fb:b1:d6: ab:83:ba:16:fa:05:80:86:7f:16:49:cb:71:f0:56:68:0f:d7: b9:b6:fa:44:19:ae:d4:34:86:4e:f1:1d:08:97:6d:df:85:12: 76:20:bc:ca:89:08:d6:10:42:a5:01:e7:c6:8e:9b:1e:5a:90: c9:cc:30:2a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcCF26MVT/e2c3L5f/y2zv9xy8WswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3 NjI2MDBlNjAeFw0yNTA0MDQyMjAwNDVaFw0yNTA0MDUyMjMzNDVaMDMxMTAvBgNV BAMTKEI5RENEMUY0MjlCQTQ3NEI3QkQ5RTFCOEFDOUM5MDMyNjhCRTBEMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ/IHQEIfTOxl3oFIT2uLRIsAj mIRM6PAceMoKUPk6Bf8KEWYZFk2dK+7wJRnQRCrqEIEEYcwO5MTLpA6YGKeL2Bwx IfQxKncwAnizg44fBb1P29gnkuQTKXzreTqliXfzCH4vQNAoDkB5lZwRXGI6Ydk6 3YBAz1zfCf5LXnITGOXr9JHZ+l3l/QtkjfG8q1sko0xEbVo48b1yZtVVfheDoubG 6LF4YSZrGp+WfjTjyoGpG2w/wZRviD5vUSLrC6xkddav5uqUijyIiIO+f7o1qYNS FrbLp0gePGU67caV1x9abNFtw4alB17sDoen+RoBeLtQwVF8Sp9LGOHcMRflAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUudzR9Cm6R0t72eG4rJyQMmi+DTUwHwYDVR0j BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1 N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ bUFPWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjBiZTNlMS04 NTRlLTQ2NjItOTJlOC0wMjg5NTBmZjU3ZmUvMC9FMjA1RUJGMDY1RkM0OTI5RjE4 MDI2NjJBRTYyRDdGOTc2MjYwMEU2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArUFHHeS9K85pEkY0MsC4 xZ82gfHC0CwJPvV8od5N+1nOaRtfX1hs68ekntaFSzztmRy/ZdF+RwDO3WphVTMu qLwQDnMhI1lqLXv5um/Np0yXkG8AM3B4jOWGFmIrpMyT2VaM15rOuSepTk06VCcK Jjg9ZRpPkhD8yZRQaLgx5i6DoArc+8GzCc56J8MyoBdxPNeDQO45RXAQY5QtRbb/ j/2qhMsL+LLwSivLvEjcuYr/+CkI/ukY5Gby1+96EMisW9oa+7HWq4O6FvoFgIZ/ FknLcfBWaA/Xubb6RBmu1DSGTvEdCJdt34USdiC8yokI1hBCpQHnxo6bHlqQycww Kg== -----END CERTIFICATE-----Generated at Sat Apr 5 04:56:07 2025 by rpki-client