$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft File: 090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft (raw, json) Hash identifier: 3KqyBSSgQInYoqL/Sr/0hw/szDS2gk4L+YJQDKnfdjI= Subject key identifier: 7E:55:60:FE:E3:CA:83:BC:7E:26:5F:1F:82:87:18:82:A7:36:D8:FC Authority key identifier: 09:0F:FD:E4:0B:60:29:CD:7F:E3:1A:6E:DB:46:7E:1A:53:84:B1:E1 Certificate issuer: /CN=090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1 Certificate serial: 4FFD29C91C1BEC79F0BEB881157052295B7924A2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft Manifest number: 02BB Signing time: Wed 09 Apr 2025 14:53:08 +0000 Manifest this update: Wed 09 Apr 2025 14:48:08 +0000 Manifest next update: Thu 10 Apr 2025 15:05:08 +0000 Files and hashes: 1: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: /6TLbLr5yUGE6+8nz6p2on3lwleCpU2rYt4G5JE9rDk=) 2: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: q03Pj7BB4FvQqVgWTNPLCqf6FWIvUGBqto+KCXVBKFQ=) 3: 090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl (hash: pFmAZclo53FI3Eimgf17up/R1kL3Tm3tWKiswx/aBQU=) 4: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: QnZhS/jyMu2GcYAJct7dnCIK9fFoWaGlnE/9lHFVCZk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Apr 2025 14:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:fd:29:c9:1c:1b:ec:79:f0:be:b8:81:15:70:52:29:5b:79:24:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1 Validity Not Before: Apr 9 14:48:08 2025 GMT Not After : Apr 10 15:05:08 2025 GMT Subject: CN=7E5560FEE3CA83BC7E265F1F82871882A736D8FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5f:28:f2:43:f7:b6:67:08:c1:3e:7b:1a:9c: e1:b8:9b:f9:c3:5e:4a:d8:cf:57:b1:e5:d5:38:42: 0f:a6:f6:ef:03:57:8c:87:97:09:17:21:3a:ae:5f: ed:09:1a:e4:55:fe:95:30:82:33:e9:ae:a3:9b:37: 01:d5:f9:73:2a:91:93:0b:49:c9:c3:f4:0a:41:75: 0f:3c:c4:3b:bc:de:56:dc:46:d7:c9:49:75:ce:6c: 20:b3:9d:5f:49:e2:a7:6a:5e:65:58:69:09:19:64: b4:6a:4f:e9:f7:a4:1f:46:d8:e6:5d:7a:7f:68:f2: 16:5d:b6:2a:30:8b:20:c9:b2:ff:42:d9:46:41:34: ba:bc:2f:f9:02:3e:a0:de:3d:31:7d:7f:f2:e6:5d: 2a:90:68:97:9b:ea:b8:a8:d0:ec:a7:51:e8:45:18: e0:82:05:dd:b1:62:d2:3f:52:6e:7c:61:a6:60:a2: a5:ab:72:0a:0a:c9:34:0c:b1:ed:38:da:d2:73:19: dd:23:e0:b8:89:ec:16:56:9f:81:71:14:1e:e7:5d: 20:ac:e4:41:ec:77:cb:10:59:66:aa:d3:f3:41:76: ca:7d:a0:3f:33:e9:87:1b:93:f2:c1:cc:4b:e1:58: 83:e2:01:7d:f0:d6:ba:a6:64:ff:f5:62:70:e3:a3: 23:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:55:60:FE:E3:CA:83:BC:7E:26:5F:1F:82:87:18:82:A7:36:D8:FC X509v3 Authority Key Identifier: keyid:09:0F:FD:E4:0B:60:29:CD:7F:E3:1A:6E:DB:46:7E:1A:53:84:B1:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f9:03:8a:71:a0:2a:87:6b:54:ad:eb:1e:df:f6:88:12:0a: 76:da:3e:f5:31:ec:fd:42:0c:dc:e4:75:5c:d1:ce:58:5d:84: 9f:44:3b:2b:71:90:98:c7:09:f9:d9:bc:3f:04:34:4b:26:a5: 10:db:76:f8:15:54:dc:92:b9:57:d2:2e:87:fb:61:59:eb:a6: 6e:85:07:9a:27:28:01:47:72:c2:e4:33:2b:e1:d2:c8:82:42: 26:28:1b:3d:f6:11:c2:a7:4a:b6:e8:10:11:f7:ef:46:cd:69: 46:9e:9e:7f:a0:28:99:00:a7:05:9a:d2:0a:c0:9f:bb:dc:f9: ae:39:1a:81:1c:b8:a1:62:aa:7a:84:0c:ed:da:d1:26:7d:2e: 6d:bc:b4:b2:f8:1e:c8:82:da:82:0f:5a:c7:94:01:83:73:fc: fa:af:6a:a8:18:f7:78:64:42:d4:92:c5:3b:9e:81:b0:80:0c: 29:cf:32:ba:61:b3:7d:72:77:29:ee:ad:b4:78:4b:d9:21:5a: 02:5b:6d:0e:5d:b7:a1:db:6e:fd:2c:c9:4a:fa:6c:b8:28:8c: 6e:3a:b6:29:b0:4f:90:2c:bf:5c:06:84:63:7f:de:d9:f1:11: 64:5e:90:08:d6:e8:9c:5b:2f:8c:68:47:97:a9:5a:11:40:2a: 86:b6:56:12 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUT/0pyRwb7HnwvriBFXBSKVt5JKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkwRkZERTQwQjYwMjlDRDdGRTMxQTZFREI0NjdFMUE1 Mzg0QjFFMTAeFw0yNTA0MDkxNDQ4MDhaFw0yNTA0MTAxNTA1MDhaMDMxMTAvBgNV BAMTKDdFNTU2MEZFRTNDQTgzQkM3RTI2NUYxRjgyODcxODgyQTczNkQ4RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChXyjyQ/e2ZwjBPnsanOG4m/nD XkrYz1ex5dU4Qg+m9u8DV4yHlwkXITquX+0JGuRV/pUwgjPprqObNwHV+XMqkZML ScnD9ApBdQ88xDu83lbcRtfJSXXObCCznV9J4qdqXmVYaQkZZLRqT+n3pB9G2OZd en9o8hZdtiowiyDJsv9C2UZBNLq8L/kCPqDePTF9f/LmXSqQaJeb6rio0OynUehF GOCCBd2xYtI/Um58YaZgoqWrcgoKyTQMse042tJzGd0j4LiJ7BZWn4FxFB7nXSCs 5EHsd8sQWWaq0/NBdsp9oD8z6Ycbk/LBzEvhWIPiAX3w1rqmZP/1YnDjoyMxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUflVg/uPKg7x+Jl8fgocYgqc22PwwHwYDVR0j BBgwFoAUCQ/95AtgKc1/4xpu20Z+GlOEseEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzUvMDkwRkZERTQwQjYwMjlDRDdGRTMxQTZFREI0NjdFMUE1Mzg0QjFFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC8wOTBGRkRFNDBCNjAyOUNEN0ZFMzFBNkVE QjQ2N0UxQTUzODRCMUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC81LzA5MEZGREU0 MEI2MDI5Q0Q3RkUzMUE2RURCNDY3RTFBNTM4NEIxRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA3+QOK caAqh2tUrese3/aIEgp22j71Mez9Qgzc5HVc0c5YXYSfRDsrcZCYxwn52bw/BDRL JqUQ23b4FVTckrlX0i6H+2FZ66ZuhQeaJygBR3LC5DMr4dLIgkImKBs99hHCp0q2 6BAR9+9GzWlGnp5/oCiZAKcFmtIKwJ+73PmuORqBHLihYqp6hAzt2tEmfS5tvLSy +B7IgtqCD1rHlAGDc/z6r2qoGPd4ZELUksU7noGwgAwpzzK6YbN9cncp7q20eEvZ IVoCW20OXbeh2279LMlK+my4KIxuOrYpsE+QLL9cBoRjf97Z8RFkXpAI1uicWy+M aEeXqVoRQCqGtlYS -----END CERTIFICATE-----Generated at Wed Apr 9 22:32:08 2025 by rpki-client