$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft File: C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json) Hash identifier: 1icFPB97JRjIw+3xIz2cIbw3a1Q+KHIzMz+ARXHmlEc= Subject key identifier: CB:34:7D:C2:CA:41:F2:8F:53:91:87:F4:E7:0F:FA:12:1D:4C:7F:A1 Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Certificate serial: 241513E0E475871A6CF46AFADAE09EC6C1E714EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft Manifest number: 0438 Signing time: Fri 04 Apr 2025 21:25:43 +0000 Manifest this update: Fri 04 Apr 2025 21:20:43 +0000 Manifest next update: Sat 05 Apr 2025 21:53:43 +0000 Files and hashes: 1: 3139332e3234362e342e302f32342d3234203d3e203231383539.roa (hash: iisXo7tt/EOoR40Zq4dWFrL4aQJ5N/mysm6fOdjl4Ag=) 2: 3139332e3234362e3130322e302f32342d3234203d3e203630373831.roa (hash: DsxMlBpnaDBCTZCwZ+4l21L/Mim9agw8EK48LHeXcxw=) 3: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: nX0GAkSp6LzvWt/IpZy/MUFcQuEDfpfqxg75WG3C4E4=) 4: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: C9UN/z7rRSIBHXCw3Mn5S1vnSskjCCo5azhWVB5o2V8=) 5: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (hash: hv8+1ab3SlqVr0lUzuXGkIAi200jEC6ydrdZg2cy0KU=) 6: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: Pj3RR3td0yNm1QOeg5LragFKYjC/rqVSM8KV2N8Hv4A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 21:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:15:13:e0:e4:75:87:1a:6c:f4:6a:fa:da:e0:9e:c6:c1:e7:14:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf Validity Not Before: Apr 4 21:20:43 2025 GMT Not After : Apr 5 21:53:43 2025 GMT Subject: CN=CB347DC2CA41F28F539187F4E70FFA121D4C7FA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5d:08:3b:96:20:32:24:be:d7:dc:34:d2:f1: f8:07:71:1f:ad:51:d4:dd:74:e7:cd:45:5f:ce:d3: 98:7a:33:98:44:86:1a:64:b6:26:62:6d:ed:87:5a: 2e:c0:3c:63:21:c9:d6:d8:52:29:80:cf:0b:ec:7c: 27:56:41:fb:d5:1a:31:d5:a0:e8:79:d4:43:f7:67: 4d:b2:fb:19:83:50:18:b1:f5:d8:ef:a2:34:91:6e: 31:06:cf:7b:f1:3d:e2:1a:c5:ad:2c:71:4e:c8:71: 43:80:09:d2:ae:e9:94:04:39:a9:e4:6b:07:71:44: 5e:f1:05:56:9c:f9:bd:02:f8:5c:31:09:d9:10:7b: eb:2e:f7:60:84:3f:86:bf:88:36:3e:38:13:6b:9b: 9b:82:3a:b2:bf:55:d5:a1:6e:8e:50:e7:7f:60:47: 63:07:32:23:60:db:93:a1:27:10:bd:cd:3f:29:94: 30:97:af:5c:eb:e7:e4:ef:6a:c4:8c:d2:65:a2:7b: 2b:92:3a:2c:0d:4d:67:f0:94:98:85:8b:27:13:e3: a5:a0:47:45:2c:e0:53:9a:b4:1e:5f:50:52:14:09: 56:23:83:c2:21:86:94:ed:f3:99:9d:b7:c2:3f:57: 4c:6a:83:6b:b9:0a:4b:99:00:dd:f1:94:ac:6e:4e: ab:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:34:7D:C2:CA:41:F2:8F:53:91:87:F4:E7:0F:FA:12:1D:4C:7F:A1 X509v3 Authority Key Identifier: keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:32:85:18:a3:00:b2:9c:57:2c:67:79:46:4c:91:29:a5:a5: 9a:16:67:dd:0a:f3:17:2e:ca:6b:24:75:c6:79:c4:16:7c:01: 65:b1:ae:87:c2:88:c1:1c:d1:f0:00:27:c3:99:37:95:ec:9f: d6:1c:8d:43:0e:11:1a:97:32:20:23:ef:ed:66:98:52:70:c8: 69:92:e4:a2:da:83:36:fc:a0:41:cb:27:37:3d:50:61:18:f1: 4f:4d:8f:d6:3a:8a:e2:0c:c5:0b:70:ba:37:cb:4f:ae:85:a0: 7b:7c:7c:30:37:4e:b3:af:88:59:7a:0a:d1:d3:cf:d2:20:73: 25:3b:70:7f:28:96:46:2a:9b:54:4d:8f:fb:49:c5:2a:4b:b3: 6c:f9:ad:75:3f:fd:b2:8f:34:d9:95:57:ef:71:cf:9b:d0:f8: 59:d6:40:d5:38:e0:d5:3b:7f:1f:f3:b6:d0:7b:fa:a6:5e:97: a6:24:94:28:14:6b:71:a1:f5:2a:d5:4b:6d:2e:7d:79:cf:54: 8e:ca:bc:2c:84:d6:ce:2b:a9:c5:63:8e:af:6b:bb:8a:b7:33: 62:26:d0:e2:69:45:84:9f:be:76:86:d2:89:d9:e2:91:f0:9a: d6:28:f6:cd:c4:5d:06:2a:97:36:e0:b6:a8:8e:97:91:1d:89: 39:b5:94:37 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJBUT4OR1hxps9Gr62uCexsHnFO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi NDk0YTdiZjAeFw0yNTA0MDQyMTIwNDNaFw0yNTA0MDUyMTUzNDNaMDMxMTAvBgNV BAMTKENCMzQ3REMyQ0E0MUYyOEY1MzkxODdGNEU3MEZGQTEyMUQ0QzdGQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvXQg7liAyJL7X3DTS8fgHcR+t UdTddOfNRV/O05h6M5hEhhpktiZibe2HWi7APGMhydbYUimAzwvsfCdWQfvVGjHV oOh51EP3Z02y+xmDUBix9djvojSRbjEGz3vxPeIaxa0scU7IcUOACdKu6ZQEOank awdxRF7xBVac+b0C+FwxCdkQe+su92CEP4a/iDY+OBNrm5uCOrK/VdWhbo5Q539g R2MHMiNg25OhJxC9zT8plDCXr1zr5+TvasSM0mWieyuSOiwNTWfwlJiFiycT46Wg R0Us4FOatB5fUFIUCVYjg8IhhpTt85mdt8I/V0xqg2u5CkuZAN3xlKxuTqtpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUyzR9wspB8o9TkYf05w/6Eh1Mf6EwHwYDVR0j BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0 ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT VXA3OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOTBhOTM1YS1h NzRkLTRiOTgtOTQzMC1iYzdhZTVjMjRmMjgvMC9DNzlEMDJDNjE4ODYxQUQ0NUJB Rjc4Q0UzOTAyM0NCQ0I0OTRBN0JGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzKFGKMAspxXLGd5RkyR KaWlmhZn3QrzFy7KayR1xnnEFnwBZbGuh8KIwRzR8AAnw5k3leyf1hyNQw4RGpcy ICPv7WaYUnDIaZLkotqDNvygQcsnNz1QYRjxT02P1jqK4gzFC3C6N8tProWge3x8 MDdOs6+IWXoK0dPP0iBzJTtwfyiWRiqbVE2P+0nFKkuzbPmtdT/9so802ZVX73HP m9D4WdZA1Tjg1Tt/H/O20Hv6pl6XpiSUKBRrcaH1KtVLbS59ec9Ujsq8LITWziup xWOOr2u7irczYibQ4mlFhJ++dobSidnikfCa1ij2zcRdBiqXNuC2qI6XkR2JObWU Nw== -----END CERTIFICATE-----Generated at Sat Apr 5 06:20:40 2025 by rpki-client