$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft File: 090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft (raw, json) Hash identifier: C9FN9p0vW+y5p69xxktHWatL94poY+5tvcuGlhB1liw= Subject key identifier: 74:58:0F:AC:CF:36:D1:84:F2:B8:AE:AB:8E:CB:30:D1:5A:19:08:2F Authority key identifier: 09:0F:FD:E4:0B:60:29:CD:7F:E3:1A:6E:DB:46:7E:1A:53:84:B1:E1 Certificate issuer: /CN=090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1 Certificate serial: 07C3B30A3A1600662A3AC4C5E4AA2170AD8E9747 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft Manifest number: 0304 Signing time: Mon 02 Jun 2025 14:33:13 +0000 Manifest this update: Mon 02 Jun 2025 14:28:13 +0000 Manifest next update: Tue 03 Jun 2025 17:27:13 +0000 Files and hashes: 1: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: /6TLbLr5yUGE6+8nz6p2on3lwleCpU2rYt4G5JE9rDk=) 2: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: QnZhS/jyMu2GcYAJct7dnCIK9fFoWaGlnE/9lHFVCZk=) 3: 090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl (hash: mhK4YxsFlW3i9cuQ7gs4vAh71yGvsABPlLXeXSKDfJs=) 4: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: q03Pj7BB4FvQqVgWTNPLCqf6FWIvUGBqto+KCXVBKFQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 14:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c3:b3:0a:3a:16:00:66:2a:3a:c4:c5:e4:aa:21:70:ad:8e:97:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1 Validity Not Before: Jun 2 14:28:13 2025 GMT Not After : Jun 3 17:27:13 2025 GMT Subject: CN=74580FACCF36D184F2B8AEAB8ECB30D15A19082F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d7:2e:99:f2:cb:4c:f0:17:1f:f4:80:15:dd: 8d:82:fb:1d:fd:4d:10:c7:06:bd:a4:61:82:3a:f0: 79:4e:6c:8f:75:e1:6a:53:82:4b:f0:28:03:3f:a5: 42:e3:f6:50:7e:aa:2c:46:c8:da:c4:fa:b5:b3:f0: 57:2f:3c:aa:a0:31:b2:da:46:14:0b:d9:60:d7:e6: c8:b4:e7:b4:7c:58:be:22:ca:50:41:4c:df:85:11: c8:e2:ff:e8:26:45:a0:ce:9f:e9:a0:34:cb:98:c6: b5:56:e2:a4:50:98:a6:0c:f8:c8:9f:25:95:51:cc: f3:94:87:8d:1c:5d:b7:32:c0:37:1b:76:28:fa:6f: 5f:5e:3e:cd:7f:d5:ff:c9:2a:f4:1e:c5:6a:89:a5: 18:46:f4:c8:d7:ab:c0:3c:fd:53:a3:84:39:a6:e7: 6c:c4:1d:cb:12:76:92:f0:88:3c:9d:f8:83:4e:b3: f1:3d:40:68:fa:a0:5e:c8:95:85:ca:c6:18:97:b6: 68:d3:0a:ea:4e:90:ff:c6:4f:1b:c2:5f:a2:dc:b6: 74:29:31:6f:2a:df:aa:b8:8b:38:20:08:bb:24:19: 3c:a6:72:a5:7c:35:04:7c:28:e0:ac:37:38:44:2c: 44:b8:10:23:7b:55:6c:5d:db:08:3c:c5:3d:2e:66: 22:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:58:0F:AC:CF:36:D1:84:F2:B8:AE:AB:8E:CB:30:D1:5A:19:08:2F X509v3 Authority Key Identifier: keyid:09:0F:FD:E4:0B:60:29:CD:7F:E3:1A:6E:DB:46:7E:1A:53:84:B1:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:a0:6d:d1:9c:ac:20:c3:f4:d1:fb:46:72:3f:69:a4:09:18: 8b:de:06:1e:da:29:d9:ac:2f:2e:ab:f5:a9:07:e7:72:4b:b3: 21:17:21:e3:8e:1b:d8:7b:b1:44:49:8e:b6:0e:86:c3:3e:ed: 5a:6f:9c:01:69:bc:61:d4:73:5b:d9:f1:b0:58:b5:4a:e0:4e: 42:45:eb:c0:e0:1f:41:7d:ff:55:66:78:6c:f3:a5:cd:ef:de: 30:d4:7c:7e:77:a3:93:dd:2d:cf:ba:01:00:9d:8a:a7:48:a3: 7e:4e:62:d6:9b:f2:0c:9e:6b:65:da:9f:48:27:2c:a7:aa:73: 0b:b4:df:c4:65:3c:4d:91:7d:0b:ce:ad:f8:e5:d8:25:a5:1e: 46:9a:f2:66:37:ac:df:8c:a4:da:db:c9:a2:f6:a3:fd:c2:06: 53:60:b2:a1:7e:95:23:b8:12:f7:3d:d7:75:68:de:54:7d:eb: 50:50:6e:a5:6c:8e:7c:39:37:e0:d1:d7:ac:0f:1a:44:2b:cd: c4:d8:47:0b:c5:15:3e:64:17:a5:c8:3f:ca:ba:54:6b:2c:84: 9e:81:35:47:b4:3c:a7:ce:f9:67:9b:eb:8c:12:95:67:72:ef: f7:e2:73:ef:c0:cc:d3:06:89:27:fd:69:e4:37:c2:8b:f6:fe: 2f:1d:3f:51 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUB8OzCjoWAGYqOsTF5KohcK2Ol0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkwRkZERTQwQjYwMjlDRDdGRTMxQTZFREI0NjdFMUE1 Mzg0QjFFMTAeFw0yNTA2MDIxNDI4MTNaFw0yNTA2MDMxNzI3MTNaMDMxMTAvBgNV BAMTKDc0NTgwRkFDQ0YzNkQxODRGMkI4QUVBQjhFQ0IzMEQxNUExOTA4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe1y6Z8stM8Bcf9IAV3Y2C+x39 TRDHBr2kYYI68HlObI914WpTgkvwKAM/pULj9lB+qixGyNrE+rWz8FcvPKqgMbLa RhQL2WDX5si057R8WL4iylBBTN+FEcji/+gmRaDOn+mgNMuYxrVW4qRQmKYM+Mif JZVRzPOUh40cXbcywDcbdij6b19ePs1/1f/JKvQexWqJpRhG9MjXq8A8/VOjhDmm 52zEHcsSdpLwiDyd+INOs/E9QGj6oF7IlYXKxhiXtmjTCupOkP/GTxvCX6LctnQp MW8q36q4izggCLskGTymcqV8NQR8KOCsNzhELES4ECN7VWxd2wg8xT0uZiJ/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUdFgPrM820YTyuK6rjssw0VoZCC8wHwYDVR0j BBgwFoAUCQ/95AtgKc1/4xpu20Z+GlOEseEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzUvMDkwRkZERTQwQjYwMjlDRDdGRTMxQTZFREI0NjdFMUE1Mzg0QjFFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC8wOTBGRkRFNDBCNjAyOUNEN0ZFMzFBNkVE QjQ2N0UxQTUzODRCMUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC81LzA5MEZGREU0 MEI2MDI5Q0Q3RkUzMUE2RURCNDY3RTFBNTM4NEIxRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCsoG3R nKwgw/TR+0ZyP2mkCRiL3gYe2inZrC8uq/WpB+dyS7MhFyHjjhvYe7FESY62DobD Pu1ab5wBabxh1HNb2fGwWLVK4E5CRevA4B9Bff9VZnhs86XN794w1Hx+d6OT3S3P ugEAnYqnSKN+TmLWm/IMnmtl2p9IJyynqnMLtN/EZTxNkX0Lzq345dglpR5GmvJm N6zfjKTa28mi9qP9wgZTYLKhfpUjuBL3Pdd1aN5UfetQUG6lbI58OTfg0desDxpE K83E2EcLxRU+ZBelyD/KulRrLISegTVHtDynzvlnm+uMEpVncu/34nPvwMzTBokn /WnkN8KL9v4vHT9R -----END CERTIFICATE-----Generated at Tue Jun 3 03:56:15 2025 by rpki-client