$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/5525312E5618E22B2B49F909064A0B8CBCA2022E.mft File: 5525312E5618E22B2B49F909064A0B8CBCA2022E.mft (raw, json) Hash identifier: kDuY4oP8TOLC3GVx9xYrt6x2LHAeLbdyDNtvXdL1WbE= Subject key identifier: 38:F6:46:1D:B4:B1:41:A9:33:10:13:BA:62:ED:76:67:30:02:21:AD Authority key identifier: 55:25:31:2E:56:18:E2:2B:2B:49:F9:09:06:4A:0B:8C:BC:A2:02:2E Certificate issuer: /CN=5525312E5618E22B2B49F909064A0B8CBCA2022E Certificate serial: 634CF1D04F37CCE53A37787F661D1D8F1A29B7E0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/5525312E5618E22B2B49F909064A0B8CBCA2022E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/5525312E5618E22B2B49F909064A0B8CBCA2022E.mft Manifest number: 54 Signing time: Sat 05 Apr 2025 11:31:52 +0000 Manifest this update: Sat 05 Apr 2025 11:26:52 +0000 Manifest next update: Sun 06 Apr 2025 15:06:52 +0000 Files and hashes: 1: 326130363a313238313a393030303a3a2f33362d3438203d3e20313938303136.roa (hash: qkbQOCJ0PlesBWvopdoDJCVvu5pk0A8D98qBSxBUcYg=) 2: 5525312E5618E22B2B49F909064A0B8CBCA2022E.crl (hash: W0cgUxEArH7PeIXz9FM7Q//5YZGPtz9y9r/y96oOR7Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/5525312E5618E22B2B49F909064A0B8CBCA2022E.crl rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/5525312E5618E22B2B49F909064A0B8CBCA2022E.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/5525312E5618E22B2B49F909064A0B8CBCA2022E.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:4c:f1:d0:4f:37:cc:e5:3a:37:78:7f:66:1d:1d:8f:1a:29:b7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5525312E5618E22B2B49F909064A0B8CBCA2022E Validity Not Before: Apr 5 11:26:52 2025 GMT Not After : Apr 6 15:06:52 2025 GMT Subject: CN=38F6461DB4B141A9331013BA62ED7667300221AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bb:22:24:3f:5c:68:c0:6d:c2:1d:96:f2:d0: b8:42:e5:a8:81:1f:3b:1d:50:19:7f:a6:27:10:d7: a2:0e:7c:19:4b:d5:ff:7b:fe:55:76:fa:6d:4e:3e: 39:9a:5c:c5:07:6e:0f:91:d7:c3:94:1e:f4:90:39: cb:ca:f5:98:dd:b6:78:8a:f5:3f:08:75:a3:da:77: dd:31:77:2e:9d:27:60:d7:33:f3:33:f5:da:9f:9c: e6:79:b3:7c:45:ab:54:ca:1e:25:2a:07:d0:12:aa: f6:50:fe:99:15:b2:f0:d7:3e:67:80:c6:95:d9:eb: 52:4f:f7:84:ef:69:13:26:89:cc:44:19:0b:d8:c6: 69:b7:92:b2:06:ed:96:09:3f:73:2b:92:31:e9:19: 60:72:75:aa:00:74:3c:32:3c:17:b9:32:52:9b:ee: a7:47:2f:25:73:25:be:d8:58:92:e9:6b:e1:93:3e: a9:66:cc:23:68:39:6b:93:f6:e2:75:26:38:ae:a4: 49:b5:e4:29:2e:2e:43:42:d4:8b:8f:58:a5:e0:7e: 96:b7:09:9c:96:7f:49:07:9f:b1:03:76:86:08:4d: 10:f8:79:b1:60:34:db:1c:49:5e:52:94:a8:85:11: 3b:ab:a6:6a:5b:22:f9:fa:26:fc:5d:db:39:a5:81: b1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F6:46:1D:B4:B1:41:A9:33:10:13:BA:62:ED:76:67:30:02:21:AD X509v3 Authority Key Identifier: keyid:55:25:31:2E:56:18:E2:2B:2B:49:F9:09:06:4A:0B:8C:BC:A2:02:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/5525312E5618E22B2B49F909064A0B8CBCA2022E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/5525312E5618E22B2B49F909064A0B8CBCA2022E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/2/5525312E5618E22B2B49F909064A0B8CBCA2022E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:d2:1d:e8:eb:1d:04:18:f5:50:45:0b:ee:54:9f:ac:d9:20: 17:f9:f6:71:a7:c5:35:3e:dd:ee:22:8d:39:41:2c:0f:b4:ec: d6:5e:be:85:46:9e:ed:ca:c5:a1:96:a2:d9:0a:61:9d:0f:6f: d3:0b:3f:19:10:b0:20:14:06:9c:39:8f:3a:34:dd:4f:71:4d: 86:28:b2:2a:18:92:16:7b:99:83:09:16:a4:7b:78:1b:dd:2f: 7d:dc:73:f3:f6:71:e5:1d:23:20:4f:01:d0:af:12:81:ad:4a: ac:55:8a:81:68:d9:da:a4:de:04:d2:8f:ae:22:4b:9e:98:d0: ef:69:28:0e:7e:a4:de:8f:85:11:3a:41:c8:74:54:41:41:7d: 6d:57:86:05:49:9f:72:86:b5:8c:bf:70:c7:3a:9a:8a:7f:46: b7:68:0f:aa:87:07:73:26:2f:7d:19:98:38:9d:c7:9d:52:77: 72:c7:b5:32:e6:5d:a7:25:7e:e3:fc:b2:92:66:5b:04:88:a8: 29:a4:80:42:87:e5:5d:92:6f:eb:06:61:4c:a6:0f:39:e1:b1: f0:1b:df:c1:af:5a:8a:85:1d:71:71:68:be:d1:10:8b:61:56: 17:a6:77:f5:21:d5:68:c6:c8:3f:25:5b:26:47:37:f7:4f:e0: 5a:8f:fb:cc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUY0zx0E83zOU6N3h/Zh0djxopt+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyNTMxMkU1NjE4RTIyQjJCNDlGOTA5MDY0QTBCOENC Q0EyMDIyRTAeFw0yNTA0MDUxMTI2NTJaFw0yNTA0MDYxNTA2NTJaMDMxMTAvBgNV BAMTKDM4RjY0NjFEQjRCMTQxQTkzMzEwMTNCQTYyRUQ3NjY3MzAwMjIxQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCguyIkP1xowG3CHZby0LhC5aiB HzsdUBl/picQ16IOfBlL1f97/lV2+m1OPjmaXMUHbg+R18OUHvSQOcvK9ZjdtniK 9T8IdaPad90xdy6dJ2DXM/Mz9dqfnOZ5s3xFq1TKHiUqB9ASqvZQ/pkVsvDXPmeA xpXZ61JP94TvaRMmicxEGQvYxmm3krIG7ZYJP3MrkjHpGWBydaoAdDwyPBe5MlKb 7qdHLyVzJb7YWJLpa+GTPqlmzCNoOWuT9uJ1JjiupEm15CkuLkNC1IuPWKXgfpa3 CZyWf0kHn7EDdoYITRD4ebFgNNscSV5SlKiFETurpmpbIvn6Jvxd2zmlgbEHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUOPZGHbSxQakzEBO6Yu12ZzACIa0wHwYDVR0j BBgwFoAUVSUxLlYY4isrSfkJBkoLjLyiAi4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTkyZWJjODMtZDc2Yy00YWUyLTg0ZWItZTZiZmYzZDM0 MmIxLzIvNTUyNTMxMkU1NjE4RTIyQjJCNDlGOTA5MDY0QTBCOENCQ0EyMDIyRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy81NTI1MzEyRTU2MThFMjJCMkI0OUY5MDkw NjRBMEI4Q0JDQTIwMjJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2U5MmViYzgzLWQ3NmMtNGFlMi04NGViLWU2YmZmM2QzNDJiMS8yLzU1MjUzMTJF NTYxOEUyMkIyQjQ5RjkwOTA2NEEwQjhDQkNBMjAyMkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBX0h3o 6x0EGPVQRQvuVJ+s2SAX+fZxp8U1Pt3uIo05QSwPtOzWXr6FRp7tysWhlqLZCmGd D2/TCz8ZELAgFAacOY86NN1PcU2GKLIqGJIWe5mDCRake3gb3S993HPz9nHlHSMg TwHQrxKBrUqsVYqBaNnapN4E0o+uIkuemNDvaSgOfqTej4UROkHIdFRBQX1tV4YF SZ9yhrWMv3DHOpqKf0a3aA+qhwdzJi99GZg4ncedUndyx7Uy5l2nJX7j/LKSZlsE iKgppIBCh+Vdkm/rBmFMpg854bHwG9/Br1qKhR1xcWi+0RCLYVYXpnf1IdVoxsg/ JVsmRzf3T+Baj/vM -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:44 2025 by rpki-client