$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft File: 178395FF98E8AEA645CFCD7DF742855D46457BAF.mft (raw, json) Hash identifier: BBKRCZRGfyxCh5+XAkNC4g4vPc5FamrcAFwkX0Bxy+s= Subject key identifier: B3:0C:94:61:01:75:BA:E6:A8:E5:18:44:6A:C8:BB:CF:8F:DD:51:36 Authority key identifier: 17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF Certificate issuer: /CN=178395FF98E8AEA645CFCD7DF742855D46457BAF Certificate serial: 5D5E7166F71D8961B8A936D52DFC9E406ABA7418 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft Manifest number: 44 Signing time: Fri 04 Apr 2025 11:03:35 +0000 Manifest this update: Fri 04 Apr 2025 10:58:35 +0000 Manifest next update: Sat 05 Apr 2025 13:25:35 +0000 Files and hashes: 1: 178395FF98E8AEA645CFCD7DF742855D46457BAF.crl (hash: A8CSbADf3Vw6gO731Y4F8rVPeHb7LwkEx+oP8PcAIzM=) 2: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: wALn/kuHRs3MtX4loe3ndPMMd8kJpkWDJTPFOhhGFZ0=) 3: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: DJIGVPPFdKw8WztsRwxSv88N7qWJk5uvTreoiT8psfU=) 4: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: tFQ4zhgC2iPnwqXyLnNzgEkZZIC1LjVxrVLEJzRxX40=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 13:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:5e:71:66:f7:1d:89:61:b8:a9:36:d5:2d:fc:9e:40:6a:ba:74:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=178395FF98E8AEA645CFCD7DF742855D46457BAF Validity Not Before: Apr 4 10:58:35 2025 GMT Not After : Apr 5 13:25:35 2025 GMT Subject: CN=B30C94610175BAE6A8E518446AC8BBCF8FDD5136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:10:ac:aa:0d:8f:4a:cd:1f:7e:5a:9c:32:68: eb:7b:28:c8:c6:dd:51:cc:02:74:7d:c3:a0:a0:ca: 10:05:ff:87:0d:b4:3f:f4:9c:43:eb:fb:6a:dd:7e: 82:a0:69:f2:86:9e:b8:c4:97:04:33:44:1b:a2:88: 65:7a:df:7b:27:32:4c:07:46:6f:f3:e5:b4:a3:a4: 7d:73:ab:31:ce:1e:83:a8:20:1a:14:c0:59:f9:69: fc:d4:0a:08:0e:fa:f8:20:be:1b:29:c1:c4:45:24: 98:1d:c8:cc:0e:7a:f5:81:cc:f1:d9:d1:a5:10:41: d6:9e:14:0b:a8:6c:4f:46:ed:1e:bc:e5:a7:72:16: 01:86:8c:af:05:12:77:18:80:b9:7e:93:a1:d5:59: 51:7e:d3:74:0d:41:ee:e8:cc:b6:44:eb:d1:86:97: 91:66:a6:d1:27:6d:1b:90:84:8e:bd:6e:6b:3c:45: e9:da:87:9d:3d:c1:8a:09:df:4b:04:9a:6b:71:23: d8:7b:50:03:50:bb:58:b8:9d:1e:c7:51:72:12:ee: 39:35:60:db:81:50:cd:8c:a1:52:35:dc:28:04:e4: 51:c5:eb:49:ff:67:5a:cb:2f:4f:c8:71:b0:06:23: 9a:90:84:98:6b:c0:17:c4:7d:d7:24:fe:38:a5:c2: 6b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0C:94:61:01:75:BA:E6:A8:E5:18:44:6A:C8:BB:CF:8F:DD:51:36 X509v3 Authority Key Identifier: keyid:17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e4:45:d8:65:68:6f:d7:37:ef:9e:85:d3:90:0a:f2:41:f0: 52:8a:77:52:e9:f4:63:b7:11:32:c3:c6:3f:38:12:56:9f:ad: 38:43:87:cd:94:23:81:4b:aa:0f:16:b2:a9:3d:bf:5a:a1:54: 24:4a:d2:f9:03:60:e7:ca:4d:92:2d:b7:f6:44:e6:ed:b8:7c: 65:98:87:96:a3:33:91:66:34:3c:f0:4e:b5:a9:eb:84:27:a0: 6d:23:f2:71:44:1a:09:36:bf:6b:bb:b1:50:6c:35:c9:98:3d: 71:6d:7c:37:a8:e8:8b:25:26:69:00:13:2b:fb:ea:56:7e:b0: ad:28:be:80:2c:75:14:75:52:07:f4:4f:f8:75:5f:4f:27:5a: 63:61:70:43:0b:50:fc:c1:10:d4:63:e4:e1:b4:43:b5:a6:7e: ad:6d:b5:17:8a:97:d4:b9:b3:e7:ce:e9:49:c1:3c:53:63:33: 36:20:85:bf:74:8f:99:27:8a:aa:71:6f:f8:0f:51:97:08:1a: 93:ed:dc:c4:be:fc:8e:0f:67:4e:f9:a1:c9:cf:22:71:b0:9e: 5c:57:3a:62:07:f0:fd:0f:90:96:be:5c:69:6b:5c:65:d7:5c: 1a:58:34:57:ab:e4:63:52:ed:85:7d:ff:f9:58:1b:46:02:66: bb:b7:87:0d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXV5xZvcdiWG4qTbVLfyeQGq6dBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc4Mzk1RkY5OEU4QUVBNjQ1Q0ZDRDdERjc0Mjg1NUQ0 NjQ1N0JBRjAeFw0yNTA0MDQxMDU4MzVaFw0yNTA0MDUxMzI1MzVaMDMxMTAvBgNV BAMTKEIzMEM5NDYxMDE3NUJBRTZBOEU1MTg0NDZBQzhCQkNGOEZERDUxMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0EKyqDY9KzR9+WpwyaOt7KMjG 3VHMAnR9w6CgyhAF/4cNtD/0nEPr+2rdfoKgafKGnrjElwQzRBuiiGV633snMkwH Rm/z5bSjpH1zqzHOHoOoIBoUwFn5afzUCggO+vggvhspwcRFJJgdyMwOevWBzPHZ 0aUQQdaeFAuobE9G7R685adyFgGGjK8FEncYgLl+k6HVWVF+03QNQe7ozLZE69GG l5FmptEnbRuQhI69bms8Renah509wYoJ30sEmmtxI9h7UANQu1i4nR7HUXIS7jk1 YNuBUM2MoVI13CgE5FHF60n/Z1rLL0/IcbAGI5qQhJhrwBfEfdck/jilwmvpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUswyUYQF1uuao5RhEasi7z4/dUTYwHwYDVR0j BBgwFoAUF4OV/5jorqZFz81990KFXUZFe68wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzIvMTc4Mzk1RkY5OEU4QUVBNjQ1Q0ZDRDdERjc0Mjg1NUQ0NjQ1N0JBRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy8xNzgzOTVGRjk4RThBRUE2NDVDRkNEN0RG NzQyODU1RDQ2NDU3QkFGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy8yLzE3ODM5NUZG OThFOEFFQTY0NUNGQ0Q3REY3NDI4NTVENDY0NTdCQUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAW5EXY ZWhv1zfvnoXTkAryQfBSindS6fRjtxEyw8Y/OBJWn604Q4fNlCOBS6oPFrKpPb9a oVQkStL5A2Dnyk2SLbf2RObtuHxlmIeWozORZjQ88E61qeuEJ6BtI/JxRBoJNr9r u7FQbDXJmD1xbXw3qOiLJSZpABMr++pWfrCtKL6ALHUUdVIH9E/4dV9PJ1pjYXBD C1D8wRDUY+ThtEO1pn6tbbUXipfUubPnzulJwTxTYzM2IIW/dI+ZJ4qqcW/4D1GX CBqT7dzEvvyOD2dO+aHJzyJxsJ5cVzpiB/D9D5CWvlxpa1xl11waWDRXq+RjUu2F ff/5WBtGAma7t4cN -----END CERTIFICATE-----Generated at Sat Apr 5 04:33:50 2025 by rpki-client