$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft File: DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft (raw, json) Hash identifier: XoTXvzqRffygjl1BVX831503F6DaB5rDgqIodK3TG+A= Subject key identifier: CE:88:0D:86:30:76:E2:1C:7C:31:12:03:D3:01:0F:EF:9A:C0:59:D1 Authority key identifier: DA:8C:B3:58:12:CA:1F:A3:A1:BD:6D:38:69:38:50:72:79:3E:C5:0E Certificate issuer: /CN=DA8CB35812CA1FA3A1BD6D3869385072793EC50E Certificate serial: 4BC48F3F86E5023B372EB2BDE1A57BE88FD674BC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft Manifest number: 1F Signing time: Sat 05 Apr 2025 00:17:28 +0000 Manifest this update: Sat 05 Apr 2025 00:12:28 +0000 Manifest next update: Sun 06 Apr 2025 04:15:28 +0000 Files and hashes: 1: 326130613a363034343a626366663a3a2f34382d3634203d3e20313939373633.roa (hash: 7YCpwymksWPwg5ziGzmWS9FgFbgvTAl7aySk1Jpj/x4=) 2: 326130613a363034343a626330313a3a2f34382d3634203d3e20313939373633.roa (hash: 3n+4yNulEMaksO5/ZQTRg4MIPlOtdwvsGLaK42kyDMc=) 3: DA8CB35812CA1FA3A1BD6D3869385072793EC50E.crl (hash: MBvKldNILVdWqHH3L3Y9sdvtUiwUcREfJvINSUobuzM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.crl rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 21:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:c4:8f:3f:86:e5:02:3b:37:2e:b2:bd:e1:a5:7b:e8:8f:d6:74:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8CB35812CA1FA3A1BD6D3869385072793EC50E Validity Not Before: Apr 5 00:12:28 2025 GMT Not After : Apr 6 04:15:28 2025 GMT Subject: CN=CE880D863076E21C7C311203D3010FEF9AC059D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:34:9c:9c:38:49:bf:5c:de:e6:d3:f1:46:32: 28:24:8d:78:ed:23:e0:c6:7c:eb:06:29:73:0a:e4: a9:22:63:36:51:70:7b:03:ec:27:41:ac:b1:85:bb: e0:17:73:45:fd:d7:da:57:a1:b4:dd:72:d9:02:33: 94:c8:47:24:94:7d:9a:59:45:8d:5a:7b:ab:7e:3a: cf:51:0e:98:5b:79:5b:3f:02:1e:4f:e4:02:21:7d: 68:d9:e9:64:c1:79:db:7b:83:ad:fb:db:56:dc:f8: 54:37:b7:f1:b8:c0:1b:50:c3:44:2d:91:4c:53:d3: b2:b7:c7:27:af:b3:07:2e:76:55:4f:d8:be:88:42: c1:56:19:f7:c6:06:d8:52:74:d6:d1:b3:e6:7e:ef: 4f:79:25:eb:4d:33:17:5f:bd:8f:d7:ca:78:b6:1f: 6c:09:78:8a:b2:4b:77:72:26:6e:6b:a2:eb:c1:cd: 47:87:95:17:66:dc:2f:4f:95:15:8f:c5:84:b9:f7: 45:a5:f8:49:38:56:d6:98:8e:91:60:76:34:88:1e: 86:1d:8c:5f:3c:35:c8:35:a2:c2:5a:e1:b2:ae:94: 23:d8:12:95:19:d9:16:8c:81:84:6a:79:6f:ea:dd: 65:e0:37:44:1b:21:d6:e7:c0:d1:97:5f:2b:dc:28: d9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:88:0D:86:30:76:E2:1C:7C:31:12:03:D3:01:0F:EF:9A:C0:59:D1 X509v3 Authority Key Identifier: keyid:DA:8C:B3:58:12:CA:1F:A3:A1:BD:6D:38:69:38:50:72:79:3E:C5:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:8b:4e:cd:6f:c9:c4:54:30:ff:62:fd:c0:15:40:92:7c:40: b0:78:98:da:e9:9c:6a:7d:10:98:4c:49:e1:11:c3:2c:aa:fa: f7:1b:d4:22:82:58:a7:a9:47:5b:7c:3e:84:1c:3d:be:e2:13: c4:55:92:fc:51:6f:67:34:11:cf:b5:cc:04:1b:da:8a:3c:9d: 6a:52:aa:45:60:9d:6f:78:ff:73:64:9c:22:95:ea:3e:e4:a1: 01:3d:5c:98:a4:a4:44:cc:20:5c:8f:4f:0e:a0:41:ee:0b:ac: 68:21:38:87:1c:a5:bd:81:33:b7:16:9d:4f:4c:8a:5b:98:8e: db:70:a0:a0:d8:01:d6:b1:18:18:96:e7:cd:6d:5e:56:eb:28: 8b:ca:b1:1d:82:07:f6:21:54:66:f7:ea:45:ba:33:78:d9:62: e8:79:2f:34:20:45:cc:de:f9:b9:50:dc:a5:d1:d0:22:3e:f4: 9e:81:1e:4b:84:d2:27:cb:a3:09:57:c6:4b:de:94:9c:cc:fc: 7b:ec:9b:5f:30:c7:02:f6:fb:a3:ef:06:99:f6:33:c3:88:c5: bc:68:ac:d2:07:ef:ff:60:ad:b1:87:f6:27:6c:c6:31:c4:ff: e3:5d:10:ea:62:03:17:15:19:4e:fe:e0:95:8b:06:be:6a:e3: ba:c6:d2:97 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUS8SPP4blAjs3LrK94aV76I/WdLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4Q0IzNTgxMkNBMUZBM0ExQkQ2RDM4NjkzODUwNzI3 OTNFQzUwRTAeFw0yNTA0MDUwMDEyMjhaFw0yNTA0MDYwNDE1MjhaMDMxMTAvBgNV BAMTKENFODgwRDg2MzA3NkUyMUM3QzMxMTIwM0QzMDEwRkVGOUFDMDU5RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtNJycOEm/XN7m0/FGMigkjXjt I+DGfOsGKXMK5KkiYzZRcHsD7CdBrLGFu+AXc0X919pXobTdctkCM5TIRySUfZpZ RY1ae6t+Os9RDphbeVs/Ah5P5AIhfWjZ6WTBedt7g63721bc+FQ3t/G4wBtQw0Qt kUxT07K3xyevswcudlVP2L6IQsFWGffGBthSdNbRs+Z+7095JetNMxdfvY/Xyni2 H2wJeIqyS3dyJm5rouvBzUeHlRdm3C9PlRWPxYS590Wl+Ek4VtaYjpFgdjSIHoYd jF88Ncg1osJa4bKulCPYEpUZ2RaMgYRqeW/q3WXgN0QbIdbnwNGXXyvcKNnXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUzogNhjB24hx8MRID0wEP75rAWdEwHwYDVR0j BBgwFoAU2oyzWBLKH6OhvW04aThQcnk+xQ4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM4ZDE5ZDAtZDIyMS00NDQ4LTgxMWEtMGUxNjExYTQ2 NDQyLzEvREE4Q0IzNTgxMkNBMUZBM0ExQkQ2RDM4NjkzODUwNzI3OTNFQzUwRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9EQThDQjM1ODEyQ0ExRkEzQTFCRDZEMzg2 OTM4NTA3Mjc5M0VDNTBFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZjOGQxOWQwLWQyMjEtNDQ0OC04MTFhLTBlMTYxMWE0NjQ0Mi8xL0RBOENCMzU4 MTJDQTFGQTNBMUJENkQzODY5Mzg1MDcyNzkzRUM1MEUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBvi07N b8nEVDD/Yv3AFUCSfECweJja6ZxqfRCYTEnhEcMsqvr3G9QiglinqUdbfD6EHD2+ 4hPEVZL8UW9nNBHPtcwEG9qKPJ1qUqpFYJ1veP9zZJwileo+5KEBPVyYpKREzCBc j08OoEHuC6xoITiHHKW9gTO3Fp1PTIpbmI7bcKCg2AHWsRgYlufNbV5W6yiLyrEd ggf2IVRm9+pFujN42WLoeS80IEXM3vm5UNyl0dAiPvSegR5LhNIny6MJV8ZL3pSc zPx77JtfMMcC9vuj7waZ9jPDiMW8aKzSB+//YK2xh/YnbMYxxP/jXRDqYgMXFRlO /uCViwa+auO6xtKX -----END CERTIFICATE-----Generated at Sat Apr 5 06:26:22 2025 by rpki-client