$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft File: 6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft (raw, json) Hash identifier: XF2doN0RifbJ2Ge/OsUAx6Ifiv+7xdPc/LMzCSTkB2I= Subject key identifier: 3B:CE:0A:80:A9:C7:51:BA:C6:3F:D8:EF:ED:11:88:8E:FC:84:06:E4 Authority key identifier: 62:03:32:7B:6A:4B:0A:FB:98:2B:64:0B:8B:FF:2A:92:B1:C7:33:43 Certificate issuer: /CN=6203327B6A4B0AFB982B640B8BFF2A92B1C73343 Certificate serial: 6A8799CF92680A2116FD77217D12231943B14F70 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft Manifest number: 4E Signing time: Fri 04 Apr 2025 16:05:17 +0000 Manifest this update: Fri 04 Apr 2025 16:00:17 +0000 Manifest next update: Sat 05 Apr 2025 16:43:17 +0000 Files and hashes: 1: 6203327B6A4B0AFB982B640B8BFF2A92B1C73343.crl (hash: CbwC7TdGi4qKQHEkw4uXOyH+26/t/bQZQhOdVoIi84s=) 2: 326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa (hash: 1uuqh7vWgIM0zB+uNA1obgzEdiTwrJmrg/6SIClfVTE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.crl rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 16:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:87:99:cf:92:68:0a:21:16:fd:77:21:7d:12:23:19:43:b1:4f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6203327B6A4B0AFB982B640B8BFF2A92B1C73343 Validity Not Before: Apr 4 16:00:17 2025 GMT Not After : Apr 5 16:43:17 2025 GMT Subject: CN=3BCE0A80A9C751BAC63FD8EFED11888EFC8406E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4e:36:f3:d7:ff:61:7c:58:f4:bd:4f:2b:4b: a3:fb:7d:08:55:55:4a:c0:c5:8a:5d:21:e8:83:c8: 2c:0e:a7:68:bb:b0:53:c4:fc:1d:e5:e5:7c:19:cf: 58:61:b3:e0:95:ea:f1:49:7f:21:4e:ba:68:ea:0b: 1a:05:d3:8f:33:78:68:9d:45:53:e0:fb:0f:d8:2a: b0:9f:bd:ba:f8:a8:78:94:23:fe:16:9e:46:26:f0: ef:72:45:d2:83:a0:57:bc:8b:32:93:9b:b1:fa:03: 60:c1:a7:4a:d3:2d:c5:1d:10:69:a4:da:f0:0d:50: a8:6d:9e:ad:3c:40:39:02:01:eb:a3:ba:0b:05:cd: a1:7d:67:f7:cb:35:03:3c:77:f9:75:92:48:b9:78: 05:9a:68:eb:62:d6:39:c6:f4:5a:c3:6c:0b:df:e3: d9:cd:eb:22:47:cf:5d:af:84:81:aa:b2:8a:81:79: 70:87:f6:ea:da:ff:88:e3:f2:ab:17:ec:2e:09:c8: ba:2e:a4:77:4d:39:79:89:ce:02:a1:e2:9b:7c:ee: 94:a9:32:52:26:7d:a8:47:16:14:76:d3:76:f5:93: db:34:af:ee:8c:46:b2:34:b1:59:e7:f5:bf:21:49: a7:5e:ee:cb:3b:18:de:aa:4b:7a:cc:b0:26:20:40: 75:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CE:0A:80:A9:C7:51:BA:C6:3F:D8:EF:ED:11:88:8E:FC:84:06:E4 X509v3 Authority Key Identifier: keyid:62:03:32:7B:6A:4B:0A:FB:98:2B:64:0B:8B:FF:2A:92:B1:C7:33:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:30:50:d8:96:3d:ad:be:67:17:08:97:ab:06:00:63:e9:10: c0:62:45:28:bb:9e:8e:d8:dd:69:eb:7c:ba:37:e3:44:ba:98: 2a:52:6f:22:56:76:42:8d:78:02:5b:e8:85:5a:17:9b:b5:30: c0:3d:35:08:1a:e8:ce:b4:82:c6:0e:f7:bf:df:66:4a:09:20: 45:cb:9c:de:14:da:3b:a4:f6:12:3c:7c:d9:d0:56:6a:fc:88: 75:df:ef:b9:b8:8f:1f:ba:ce:52:da:ba:5c:41:68:59:ae:01: 3a:73:bb:65:e8:1c:62:36:b5:b5:ea:56:2d:ce:d7:23:d1:9f: 94:46:96:fd:67:58:05:ff:2d:10:57:6a:3d:19:80:a1:28:65: ad:91:1d:4d:f6:73:ea:71:82:76:d6:f8:ca:58:ad:ce:1a:c5: cc:d1:9e:63:d1:82:c8:77:47:d4:8f:30:c8:54:11:53:f3:a9: e9:18:9b:95:e8:d1:45:b4:42:b7:4a:c5:41:4a:dd:60:aa:90: be:1f:ec:f7:b7:24:e3:ff:a6:fe:ac:20:13:62:6e:d8:4f:a4: eb:e4:5f:0d:05:cf:75:09:fa:90:a5:a5:fc:90:6c:4b:77:1a: e2:c2:1e:12:91:77:b5:4c:a0:a4:f3:c0:39:e1:20:03:38:be: f8:11:d6:08 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaoeZz5JoCiEW/XchfRIjGUOxT3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIwMzMyN0I2QTRCMEFGQjk4MkI2NDBCOEJGRjJBOTJC MUM3MzM0MzAeFw0yNTA0MDQxNjAwMTdaFw0yNTA0MDUxNjQzMTdaMDMxMTAvBgNV BAMTKDNCQ0UwQTgwQTlDNzUxQkFDNjNGRDhFRkVEMTE4ODhFRkM4NDA2RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChTjbz1/9hfFj0vU8rS6P7fQhV VUrAxYpdIeiDyCwOp2i7sFPE/B3l5XwZz1hhs+CV6vFJfyFOumjqCxoF048zeGid RVPg+w/YKrCfvbr4qHiUI/4WnkYm8O9yRdKDoFe8izKTm7H6A2DBp0rTLcUdEGmk 2vANUKhtnq08QDkCAeujugsFzaF9Z/fLNQM8d/l1kki5eAWaaOti1jnG9FrDbAvf 49nN6yJHz12vhIGqsoqBeXCH9ura/4jj8qsX7C4JyLoupHdNOXmJzgKh4pt87pSp MlImfahHFhR203b1k9s0r+6MRrI0sVnn9b8hSade7ss7GN6qS3rMsCYgQHWfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUO84KgKnHUbrGP9jv7RGIjvyEBuQwHwYDVR0j BBgwFoAUYgMye2pLCvuYK2QLi/8qkrHHM0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmVjYmM0MDQtYWM0My00NDliLThjN2UtOGYxZTk5ZDlh YzQ5LzMvNjIwMzMyN0I2QTRCMEFGQjk4MkI2NDBCOEJGRjJBOTJCMUM3MzM0My5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy82MjAzMzI3QjZBNEIwQUZCOTgyQjY0MEI4 QkZGMkE5MkIxQzczMzQzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZlY2JjNDA0LWFjNDMtNDQ5Yi04YzdlLThmMWU5OWQ5YWM0OS8zLzYyMDMzMjdC NkE0QjBBRkI5ODJCNjQwQjhCRkYyQTkyQjFDNzMzNDMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7MFDY lj2tvmcXCJerBgBj6RDAYkUou56O2N1p63y6N+NEupgqUm8iVnZCjXgCW+iFWheb tTDAPTUIGujOtILGDve/32ZKCSBFy5zeFNo7pPYSPHzZ0FZq/Ih13++5uI8fus5S 2rpcQWhZrgE6c7tl6BxiNrW16lYtztcj0Z+URpb9Z1gF/y0QV2o9GYChKGWtkR1N 9nPqcYJ21vjKWK3OGsXM0Z5j0YLId0fUjzDIVBFT86npGJuV6NFFtEK3SsVBSt1g qpC+H+z3tyTj/6b+rCATYm7YT6Tr5F8NBc91CfqQpaX8kGxLdxriwh4SkXe1TKCk 88A54SADOL74EdYI -----END CERTIFICATE-----Generated at Sat Apr 5 05:22:12 2025 by rpki-client