$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.mft File: F861C17CCC63A8FE4F54B725229D4182E376702E.mft (raw, json) Hash identifier: rsYovz4DgernWeLqKL4sFkz3BfirXTkKyCvSHn58bnY= Subject key identifier: E7:18:47:97:22:4A:92:98:7D:5C:5E:C5:88:71:05:40:B4:42:36:C5 Authority key identifier: F8:61:C1:7C:CC:63:A8:FE:4F:54:B7:25:22:9D:41:82:E3:76:70:2E Certificate issuer: /CN=F861C17CCC63A8FE4F54B725229D4182E376702E Certificate serial: 7ACFAF6819DB82416C70A083FEAD819D2D75A382 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F861C17CCC63A8FE4F54B725229D4182E376702E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.mft Manifest number: 41 Signing time: Thu 08 May 2025 23:46:31 +0000 Manifest this update: Thu 08 May 2025 23:41:31 +0000 Manifest next update: Sat 10 May 2025 02:25:31 +0000 Files and hashes: 1: F861C17CCC63A8FE4F54B725229D4182E376702E.crl (hash: n9vtmiGhGWgk4wYBrZ3Q35fngkHWNhHMbJxroahm1x8=) 2: 326131343a373538303a373030303a3a2f33362d3336203d3e20323135313038.roa (hash: nEpVXZ4G7eLeVLBw2JFUizV21nv5AkYeo88InoKYBm4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.crl rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F861C17CCC63A8FE4F54B725229D4182E376702E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 01:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:cf:af:68:19:db:82:41:6c:70:a0:83:fe:ad:81:9d:2d:75:a3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F861C17CCC63A8FE4F54B725229D4182E376702E Validity Not Before: May 8 23:41:31 2025 GMT Not After : May 10 02:25:31 2025 GMT Subject: CN=E7184797224A92987D5C5EC588710540B44236C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:65:dc:18:9a:8e:c2:e7:cf:df:3f:9f:85:70: 82:e5:99:e2:ef:b0:c9:99:c4:50:79:be:80:e2:a8: 9e:01:ab:18:ff:8c:33:7d:3f:5f:38:52:e5:99:29: 71:45:02:42:bb:7d:f9:6a:67:fe:cf:4e:af:81:2a: 2a:27:e5:9d:94:e3:5b:29:f1:5c:fe:65:fc:eb:38: 75:c7:be:4a:4f:ee:2e:d4:1b:85:78:be:9a:5a:72: 2e:bf:20:18:0b:4a:bb:09:60:ad:39:56:10:c5:99: 45:21:99:76:30:38:78:d0:c1:a6:29:68:2a:f2:4f: 2e:19:f9:73:5c:2c:d7:75:e3:17:f6:57:2b:08:de: 9c:79:b8:d2:84:23:fa:36:d0:8f:57:20:bf:9f:81: 44:f2:dc:f0:0b:9a:b7:1a:a5:91:34:d6:38:09:e9: b3:5d:88:01:1f:33:65:cc:d8:2c:be:21:3e:f6:cc: 0f:eb:b1:d4:5a:0d:11:7e:8d:05:74:91:0d:20:88: f2:99:f1:3b:11:c7:ba:98:5a:1c:2a:63:89:8c:7d: 5c:f6:11:90:be:c3:46:e0:1a:3b:67:a9:af:c1:39: b6:c3:db:08:4a:54:75:44:0a:2c:ca:1c:b4:f2:94: 10:9e:be:18:85:96:f3:07:b4:9b:2d:50:61:14:cc: 4e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:18:47:97:22:4A:92:98:7D:5C:5E:C5:88:71:05:40:B4:42:36:C5 X509v3 Authority Key Identifier: keyid:F8:61:C1:7C:CC:63:A8:FE:4F:54:B7:25:22:9D:41:82:E3:76:70:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F861C17CCC63A8FE4F54B725229D4182E376702E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:20:1c:06:8b:d0:00:df:e6:c1:36:f1:8e:89:06:6c:48:ab: 9a:03:fa:7f:3c:0e:a4:aa:b6:3a:ff:a6:e3:f2:f8:ef:d4:cc: 48:c2:1d:80:16:22:8d:0d:20:f8:4c:fd:7b:1c:c8:5e:4d:e0: a0:88:03:cf:d0:79:13:4f:c7:78:1e:25:c0:73:b9:cc:29:ca: ea:39:04:bd:c8:72:a4:ec:8d:33:03:b9:cf:5d:38:66:65:04: 57:5c:f5:90:d0:06:9e:c0:87:7e:56:7c:ae:9f:7a:22:df:59: 88:33:e4:11:52:84:c2:04:35:35:f6:fd:55:31:fc:69:27:38: ff:4a:71:a1:b8:af:32:0b:ad:d1:85:0f:21:e8:36:61:e1:83: 95:5d:8b:4c:2f:e3:8c:5f:53:9f:f2:f8:0a:1e:2b:d8:28:fa: c8:c7:a1:9d:de:bb:59:c9:93:69:c3:83:7c:da:3e:04:ad:3a: c8:df:dd:a2:ac:55:b0:52:43:13:a9:92:21:8b:61:82:46:e3: 25:10:6d:f4:fb:88:d1:d4:76:7f:a9:9d:62:30:15:bf:b2:af: c1:42:07:a5:6d:a8:df:90:f7:1e:a8:3d:6b:15:bb:91:45:1f: a5:a3:09:3e:e7:40:82:71:a4:cf:be:02:49:68:21:fc:c0:2d: b6:be:b2:8f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUes+vaBnbgkFscKCD/q2BnS11o4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg2MUMxN0NDQzYzQThGRTRGNTRCNzI1MjI5RDQxODJF Mzc2NzAyRTAeFw0yNTA1MDgyMzQxMzFaFw0yNTA1MTAwMjI1MzFaMDMxMTAvBgNV BAMTKEU3MTg0Nzk3MjI0QTkyOTg3RDVDNUVDNTg4NzEwNTQwQjQ0MjM2QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ZdwYmo7C58/fP5+FcILlmeLv sMmZxFB5voDiqJ4Bqxj/jDN9P184UuWZKXFFAkK7fflqZ/7PTq+BKion5Z2U41sp 8Vz+ZfzrOHXHvkpP7i7UG4V4vppaci6/IBgLSrsJYK05VhDFmUUhmXYwOHjQwaYp aCryTy4Z+XNcLNd14xf2VysI3px5uNKEI/o20I9XIL+fgUTy3PALmrcapZE01jgJ 6bNdiAEfM2XM2Cy+IT72zA/rsdRaDRF+jQV0kQ0giPKZ8TsRx7qYWhwqY4mMfVz2 EZC+w0bgGjtnqa/BObbD2whKVHVECizKHLTylBCevhiFlvMHtJstUGEUzE5zAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU5xhHlyJKkph9XF7FiHEFQLRCNsUwHwYDVR0j BBgwFoAU+GHBfMxjqP5PVLclIp1BguN2cC4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTAyOGVjZGUtMmJiYS00ZTQ2LWEyNDUtZmJjODFkNWMx NDMyLzAvRjg2MUMxN0NDQzYzQThGRTRGNTRCNzI1MjI5RDQxODJFMzc2NzAyRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GODYxQzE3Q0NDNjNBOEZFNEY1NEI3MjUy MjlENDE4MkUzNzY3MDJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEwMjhlY2RlLTJiYmEtNGU0Ni1hMjQ1LWZiYzgxZDVjMTQzMi8wL0Y4NjFDMTdD Q0M2M0E4RkU0RjU0QjcyNTIyOUQ0MTgyRTM3NjcwMkUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFIBwG i9AA3+bBNvGOiQZsSKuaA/p/PA6kqrY6/6bj8vjv1MxIwh2AFiKNDSD4TP17HMhe TeCgiAPP0HkTT8d4HiXAc7nMKcrqOQS9yHKk7I0zA7nPXThmZQRXXPWQ0AaewId+ Vnyun3oi31mIM+QRUoTCBDU19v1VMfxpJzj/SnGhuK8yC63RhQ8h6DZh4YOVXYtM L+OMX1Of8vgKHivYKPrIx6Gd3rtZyZNpw4N82j4ErTrI392irFWwUkMTqZIhi2GC RuMlEG30+4jR1HZ/qZ1iMBW/sq/BQgelbajfkPceqD1rFbuRRR+lowk+50CCcaTP vgJJaCH8wC22vrKP -----END CERTIFICATE-----Generated at Fri May 9 09:30:10 2025 by rpki-client