$ rpki-client -vvf rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft File: FF0595CB477C33B6B94C7E477213C842A6067D6B.mft (raw, json) Hash identifier: V1U9gY05yZ+EEQNvXcy/IpdmEx0S9ENgn2SSbqAsQDE= Subject key identifier: 2B:D0:97:87:DA:92:23:BC:DE:27:AA:0D:04:F8:C7:F7:E5:7F:40:05 Authority key identifier: FF:05:95:CB:47:7C:33:B6:B9:4C:7E:47:72:13:C8:42:A6:06:7D:6B Certificate issuer: /CN=FF0595CB477C33B6B94C7E477213C842A6067D6B Certificate serial: 69DDD330C1B8C657921AE19A4EAE2B3D900A2686 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.cer Subject info access: rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft Manifest number: 0523 Signing time: Sat 10 May 2025 14:51:46 +0000 Manifest this update: Sat 10 May 2025 14:46:46 +0000 Manifest next update: Sun 11 May 2025 18:17:46 +0000 Files and hashes: 1: FF0595CB477C33B6B94C7E477213C842A6067D6B.crl (hash: RkpBa9Ie5i7gPof6kg2nVuUx3S5SjtNNXB9x+9JQgJE=) Validation: OK Signature path: rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.crl rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.cer rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 14:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:dd:d3:30:c1:b8:c6:57:92:1a:e1:9a:4e:ae:2b:3d:90:0a:26:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF0595CB477C33B6B94C7E477213C842A6067D6B Validity Not Before: May 10 14:46:46 2025 GMT Not After : May 11 18:17:46 2025 GMT Subject: CN=2BD09787DA9223BCDE27AA0D04F8C7F7E57F4005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4b:c8:8f:28:4b:cc:f4:4d:03:b8:0f:a5:8c: db:59:5c:0b:5c:df:a9:4d:54:f0:36:95:82:f3:72: 6c:7c:fb:9f:23:df:b1:64:b8:ec:cb:fa:84:5b:04: 7f:21:ce:3e:db:16:47:69:04:b6:01:9d:34:2b:50: e7:9e:04:10:90:d4:83:5e:88:e5:2a:df:20:e9:30: 82:3d:7e:d2:d1:cb:c1:57:57:f0:e0:62:67:e0:1f: ca:a3:d2:56:85:5a:ee:e7:bc:77:6a:f3:f4:be:93: a2:7b:71:19:67:ac:a6:e3:42:86:4a:3b:79:cf:e6: f7:6f:2e:cc:4b:fc:13:13:6d:a8:c6:63:d4:d7:fe: 8a:4e:b2:a2:69:1c:38:ac:af:22:b8:db:c7:07:0d: 0e:0a:e1:d3:80:74:67:de:09:6c:2e:31:2c:f5:4b: fc:33:db:2d:50:cb:18:53:29:9b:b0:9c:c7:6a:9d: b1:c8:85:1c:bb:6f:13:03:e3:5e:02:93:cb:7c:75: 3c:67:58:d1:ef:cc:b5:20:7d:79:7a:1d:1e:8b:66: df:d9:f0:ee:78:5c:52:53:68:55:9a:0a:f4:65:6e: c4:65:0a:6a:c3:c7:fb:a6:73:42:b3:6e:3d:9e:14: 8b:be:68:26:3b:1c:05:4b:06:26:8c:a2:f1:5d:78: e0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D0:97:87:DA:92:23:BC:DE:27:AA:0D:04:F8:C7:F7:E5:7F:40:05 X509v3 Authority Key Identifier: keyid:FF:05:95:CB:47:7C:33:B6:B9:4C:7E:47:72:13:C8:42:A6:06:7D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.cer Subject Information Access: Signed Object - URI:rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:19:f8:58:38:99:f7:e1:53:f1:7e:fd:39:dc:50:0a:d9:6d: 53:c2:2c:c8:5f:19:57:88:6e:1b:f8:dd:1c:a7:24:37:b0:af: f5:f1:e2:ec:f9:d8:26:4b:57:2a:cb:92:c2:44:ef:1b:3c:ff: cd:f0:9b:14:07:56:15:c9:bf:20:9b:29:c7:f8:38:fa:b1:88: ed:17:52:95:d1:f0:df:3f:73:ca:6f:16:18:33:c7:7d:a9:9c: 99:3f:a1:b7:87:58:2e:72:0d:55:99:df:b0:b8:5f:d6:f6:0d: 1d:18:ee:b6:82:cb:ea:60:34:70:c5:0e:e5:4a:f9:bc:bf:72: 2a:63:06:cc:52:5b:62:a9:61:bb:10:b6:a6:b9:86:ca:73:7d: 20:02:23:cf:46:75:3f:60:0b:b2:ac:1e:19:34:14:0d:83:55: 39:db:fc:54:76:54:00:90:90:a7:2e:ad:46:2b:24:7b:ab:0f: cf:b4:07:c4:f4:06:15:15:6e:39:23:23:8e:5a:8b:f3:fb:06: cd:40:0e:7c:38:3b:b7:35:51:ec:74:d8:f1:12:74:b1:a4:f2: 16:ea:ce:ec:e1:6f:d8:ee:a7:36:e7:4e:d2:0d:d1:1e:7b:92: 73:bd:d6:b0:86:4f:04:b9:a8:31:82:cf:23:11:ca:ce:2d:dc: 2d:ca:a5:9c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUad3TMMG4xleSGuGaTq4rPZAKJoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYwNTk1Q0I0NzdDMzNCNkI5NEM3RTQ3NzIxM0M4NDJB NjA2N0Q2QjAeFw0yNTA1MTAxNDQ2NDZaFw0yNTA1MTExODE3NDZaMDMxMTAvBgNV BAMTKDJCRDA5Nzg3REE5MjIzQkNERTI3QUEwRDA0RjhDN0Y3RTU3RjQwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrS8iPKEvM9E0DuA+ljNtZXAtc 36lNVPA2lYLzcmx8+58j37FkuOzL+oRbBH8hzj7bFkdpBLYBnTQrUOeeBBCQ1INe iOUq3yDpMII9ftLRy8FXV/DgYmfgH8qj0laFWu7nvHdq8/S+k6J7cRlnrKbjQoZK O3nP5vdvLsxL/BMTbajGY9TX/opOsqJpHDisryK428cHDQ4K4dOAdGfeCWwuMSz1 S/wz2y1QyxhTKZuwnMdqnbHIhRy7bxMD414Ck8t8dTxnWNHvzLUgfXl6HR6LZt/Z 8O54XFJTaFWaCvRlbsRlCmrDx/umc0Kzbj2eFIu+aCY7HAVLBiaMovFdeODtAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUK9CXh9qSI7zeJ6oNBPjH9+V/QAUwHwYDVR0j BBgwFoAU/wWVy0d8M7a5TH5HchPIQqYGfWswDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5xcy5udS9yZXBvL2N5bnRlc3QvMi9G RjA1OTVDQjQ3N0MzM0I2Qjk0QzdFNDc3MjEzQzg0MkE2MDY3RDZCLmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NjZTAwY2Y5LTA0YTUtNDNkMS04Yjg5 LWVkZmE2MGNkOGQ0YS8yL0ZGMDU5NUNCNDc3QzMzQjZCOTRDN0U0NzcyMTNDODQy QTYwNjdENkIuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9ycGtpLnFzLm51L3JlcG8vY3ludGVzdC8yL0ZGMDU5NUNCNDc3QzMzQjZCOTRD N0U0NzcyMTNDODQyQTYwNjdENkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7GfhYOJn34VPxfv053FAK 2W1TwizIXxlXiG4b+N0cpyQ3sK/18eLs+dgmS1cqy5LCRO8bPP/N8JsUB1YVyb8g mynH+Dj6sYjtF1KV0fDfP3PKbxYYM8d9qZyZP6G3h1gucg1Vmd+wuF/W9g0dGO62 gsvqYDRwxQ7lSvm8v3IqYwbMUltiqWG7ELamuYbKc30gAiPPRnU/YAuyrB4ZNBQN g1U52/xUdlQAkJCnLq1GKyR7qw/PtAfE9AYVFW45IyOOWovz+wbNQA58ODu3NVHs dNjxEnSxpPIW6s7s4W/Y7qc2507SDdEee5Jzvdawhk8Euagxgs8jEcrOLdwtyqWc -----END CERTIFICATE-----Generated at Sun May 11 05:33:44 2025 by rpki-client