$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft File: 926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json) Hash identifier: 6QqZGT8Ui8UyKASM/BnGhOMu0Zey6r6AwjYn6WMv0CE= Subject key identifier: 56:8D:20:31:43:70:62:DD:DD:83:05:48:CE:95:E9:CC:34:6E:A4:AE Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 Certificate issuer: /CN=926cb33722a3493216283dc80cae0ee9d58874f2 Certificate serial: 723044D1A73413B0015EBC1A67589346F357FFF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft Manifest number: 0460 Signing time: Fri 04 Apr 2025 21:50:48 +0000 Manifest this update: Fri 04 Apr 2025 21:45:48 +0000 Manifest next update: Sun 06 Apr 2025 01:47:48 +0000 Files and hashes: 1: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: pktYTgA92otlTGVOSNvHQdjXYZXK+2nKasQjb0mFL0s=) 2: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: vwSEUgdFJ5PPtETvmVfTCVmULHvCJLz5jSqlSjdS13k=) 3: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: Dh1mwlUTMlGkbPsv2oKAQuUKQelXQm9TWTzWrXvc/xw=) 4: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: G0pJKexFl5iJSj7RvTDDHGwylbeAPcm6mkIGuJ7MB4g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:30:44:d1:a7:34:13:b0:01:5e:bc:1a:67:58:93:46:f3:57:ff:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2 Validity Not Before: Apr 4 21:45:48 2025 GMT Not After : Apr 6 01:47:48 2025 GMT Subject: CN=568D2031437062DDDD830548CE95E9CC346EA4AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:13:c5:31:bc:bc:54:ec:eb:b7:5c:4b:8e:61: 18:80:1b:01:5d:2a:1d:f9:91:34:18:11:7c:b4:df: 84:7e:2d:7e:5f:16:ca:b3:9f:bb:55:d4:5a:ca:60: 31:3f:96:d3:88:3e:4b:d7:48:30:e0:0d:d7:d4:cc: d3:5b:04:42:b9:c2:ed:63:15:f9:f6:7d:1e:c7:3f: c5:10:32:6e:f0:76:c4:ac:45:79:76:75:1e:94:43: bd:39:d4:f9:e1:45:c5:ad:fc:ba:c3:11:d6:d4:47: a1:15:75:3b:81:18:cc:3c:18:70:cd:96:ab:6b:d5: 2d:58:3d:9a:3f:1c:09:43:cb:70:a3:33:fa:36:23: 3a:44:c3:fa:8d:8e:8e:b3:08:f0:f6:a4:78:48:92: eb:2a:c1:5a:8b:52:1b:b2:82:79:26:c8:a7:99:6d: 8e:55:08:bb:85:24:ff:6e:72:3d:9a:af:13:c0:01: 42:c9:24:39:ad:ab:86:f6:0e:96:c9:38:da:f5:36: 1d:78:f8:48:5f:25:9b:18:95:2f:4c:59:f2:4f:a0: 24:8b:7b:69:03:89:ff:9b:f4:ab:ae:c1:6e:8b:98: 15:e5:fd:71:dc:24:9a:49:79:36:05:bb:83:38:04: fe:f1:dc:81:e7:bc:18:7e:bb:24:10:43:ce:f5:e7: 66:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8D:20:31:43:70:62:DD:DD:83:05:48:CE:95:E9:CC:34:6E:A4:AE X509v3 Authority Key Identifier: keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:82:e8:07:31:e7:9c:d1:dc:d6:9b:38:99:29:99:1a:6a:62: 95:ed:70:45:12:5e:ac:b2:08:fe:6a:50:07:68:64:31:27:d4: 5f:89:e9:50:3c:ed:85:8f:36:66:c7:27:12:76:e6:2f:d3:31: 49:57:57:df:f4:9f:75:cd:86:2d:ba:02:38:e5:84:40:75:5e: 75:3b:ac:9a:dd:f7:54:7c:bb:e1:0d:e4:5a:a5:3e:ef:41:6b: a9:03:a1:3b:b1:a2:7d:b7:8a:eb:c7:9f:fe:44:05:1c:e3:82: 35:4b:14:bb:24:b5:60:51:a5:11:9b:04:59:bd:4e:65:54:72: a3:07:a2:a0:c3:41:4d:70:1b:11:0c:72:d1:66:f0:e1:cc:3a: 4f:bc:83:66:bd:68:ae:a1:b8:ca:40:46:f5:95:c2:f7:0e:2d: 1e:3c:bd:3f:a4:0a:8f:8c:0d:21:b0:d3:f2:62:73:c1:a6:9c: 4d:4c:c5:83:1a:1d:6e:8b:d4:32:df:80:17:17:87:fe:cc:45: bc:19:0f:72:21:7c:1f:31:01:98:14:96:b4:05:1d:09:ad:bd: c7:32:bd:fd:6e:e9:33:f6:bb:f6:75:80:1d:20:df:0f:ac:c9: d5:2c:4d:26:80:21:93:2c:54:83:01:5d:c4:77:59:41:9a:4b: e8:ab:27:57 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcjBE0ac0E7ABXrwaZ1iTRvNX//IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI2Y2IzMzcyMmEzNDkzMjE2MjgzZGM4MGNhZTBlZTlk NTg4NzRmMjAeFw0yNTA0MDQyMTQ1NDhaFw0yNTA0MDYwMTQ3NDhaMDMxMTAvBgNV BAMTKDU2OEQyMDMxNDM3MDYyRERERDgzMDU0OENFOTVFOUNDMzQ2RUE0QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHE8UxvLxU7Ou3XEuOYRiAGwFd Kh35kTQYEXy034R+LX5fFsqzn7tV1FrKYDE/ltOIPkvXSDDgDdfUzNNbBEK5wu1j Ffn2fR7HP8UQMm7wdsSsRXl2dR6UQ7051PnhRcWt/LrDEdbUR6EVdTuBGMw8GHDN lqtr1S1YPZo/HAlDy3CjM/o2IzpEw/qNjo6zCPD2pHhIkusqwVqLUhuygnkmyKeZ bY5VCLuFJP9ucj2arxPAAULJJDmtq4b2DpbJONr1Nh14+EhfJZsYlS9MWfJPoCSL e2kDif+b9KuuwW6LmBXl/XHcJJpJeTYFu4M4BP7x3IHnvBh+uyQQQ87152Y9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUVo0gMUNwYt3dgwVIzpXpzDRupK4wHwYDVR0j BBgwFoAUkmyzNyKjSTIWKD3IDK4O6dWIdPIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NlMDBjZjktMDRhNS00M2QxLThiODktZWRmYTYwY2Q4 ZDRhLzIvOTI2Q0IzMzcyMkEzNDkzMjE2MjgzREM4MENBRTBFRTlENTg4NzRGMi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2tteXpOeUtqU1RJV0tEM0lESzRPNmRX SWRQSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jY2UwMGNmOS0w NGE1LTQzZDEtOGI4OS1lZGZhNjBjZDhkNGEvMi85MjZDQjMzNzIyQTM0OTMyMTYy ODNEQzgwQ0FFMEVFOUQ1ODg3NEYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz4LoBzHnnNHc1ps4mSmZ Gmpile1wRRJerLII/mpQB2hkMSfUX4npUDzthY82ZscnEnbmL9MxSVdX3/Sfdc2G LboCOOWEQHVedTusmt33VHy74Q3kWqU+70FrqQOhO7GifbeK68ef/kQFHOOCNUsU uyS1YFGlEZsEWb1OZVRyoweioMNBTXAbEQxy0Wbw4cw6T7yDZr1orqG4ykBG9ZXC 9w4tHjy9P6QKj4wNIbDT8mJzwaacTUzFgxodbovUMt+AFxeH/sxFvBkPciF8HzEB mBSWtAUdCa29xzK9/W7pM/a79nWAHSDfD6zJ1SxNJoAhkyxUgwFdxHdZQZpL6Ksn Vw== -----END CERTIFICATE-----Generated at Sat Apr 5 04:42:15 2025 by rpki-client