$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: jXrhi/hxFOygDmMN+I3aG3Bu+xoZ0/UVJP/j6u37Vsk= Subject key identifier: F8:EB:3F:CC:F7:0A:2A:33:37:B2:A6:D3:7C:DB:7E:D4:A4:71:44:EF Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 5BCF5FD1BDBA8DB5B72C73A6AA72B1FF374150FE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: 2C Signing time: Thu 08 May 2025 08:47:19 +0000 Manifest this update: Thu 08 May 2025 08:42:19 +0000 Manifest next update: Fri 09 May 2025 09:38:19 +0000 Files and hashes: 1: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: dh1FvGT3uR1ehQQnsY54ZA7eV6ctDSlf95TKJ7erKMc=) 2: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: BFT8GbG7CSJ9YmzS1PjnMDrg1nwAcfXEJPEfuo5FzQk=) 3: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: ypgUGD6Euz3HGS0A9GoVgCiVtLF78aI6ZX/YlUyvGd8=) 4: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: XxS9zprV7IX1JjrBQQ+JptkD2bW89WKl615fH9J1hzc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:cf:5f:d1:bd:ba:8d:b5:b7:2c:73:a6:aa:72:b1:ff:37:41:50:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: May 8 08:42:19 2025 GMT Not After : May 9 09:38:19 2025 GMT Subject: CN=F8EB3FCCF70A2A3337B2A6D37CDB7ED4A47144EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:bb:d2:0d:94:ae:70:9d:4d:4a:6a:8d:e1: e8:37:e5:24:70:02:e5:0f:54:a7:a7:27:d5:d3:21: ad:e0:03:a2:14:5d:fa:29:b7:52:b5:12:bd:72:d8: fb:7e:22:16:b9:97:20:24:92:34:3a:fe:24:50:22: bd:d3:d6:81:69:6c:f9:d3:ec:59:91:34:c2:f5:24: 5b:b0:87:4d:be:18:c9:94:1c:ff:89:a4:08:a8:fc: a1:5d:dd:b4:88:75:30:07:a5:f1:83:20:90:04:17: 04:d7:9a:ce:96:6e:2f:c3:fb:c2:e6:00:44:0e:6a: 9d:13:ad:13:18:4a:ad:e0:92:e4:86:82:ef:28:04: 07:a3:bf:a3:ae:39:c0:bd:7f:99:c6:ea:95:dc:5c: 70:6d:cc:c1:92:66:26:98:39:bd:9c:e2:65:9c:74: d6:c3:40:6a:57:10:1f:96:a4:ee:d5:9c:d9:27:3e: 9a:1f:ae:b8:fd:59:30:37:9c:33:ee:cd:2d:af:ad: 2e:7a:99:48:37:e4:53:86:cc:12:6f:41:dd:09:40: 3b:33:b5:49:56:63:43:2e:85:84:d9:3c:d7:8f:0c: f5:a2:03:08:a3:cb:d6:6d:bc:03:e5:94:08:a0:de: b5:c3:cf:5d:4b:91:a5:c3:86:51:d5:4d:26:3c:70: c5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EB:3F:CC:F7:0A:2A:33:37:B2:A6:D3:7C:DB:7E:D4:A4:71:44:EF X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f2:c7:3c:f3:06:06:1a:bb:33:0f:ab:08:1e:35:81:9f:17: ec:3f:35:d8:e7:47:d3:55:b4:19:00:ea:fb:0c:8d:ce:83:dd: 1d:55:e7:05:ca:46:c5:d0:9c:83:4f:2b:e4:2e:bf:13:eb:66: 67:3f:e1:6f:ec:cd:46:f5:0c:11:9e:90:f9:91:c4:c1:13:1b: 4d:1e:d2:0b:99:38:b5:54:35:7d:de:02:48:b1:ab:92:15:3b: c1:6b:85:a2:a0:f1:ec:90:b4:df:b9:19:b9:80:3e:23:bb:a2: f0:ed:c5:0d:95:9b:0f:ab:a5:4e:01:da:5f:5e:76:5d:01:2e: 7e:77:c0:49:82:c0:4a:08:8e:8e:4b:66:49:7c:6e:f8:c3:eb: 52:7d:7d:77:e0:51:f9:85:4a:07:fc:d4:ea:59:32:57:b1:c6: fb:64:55:a6:8a:aa:57:1f:cc:55:8d:b1:dd:9a:a9:bc:83:55: 8b:8e:11:16:90:f1:b9:7d:d8:74:33:35:4a:8d:71:4a:25:fe: a2:90:a7:f0:ec:d5:b7:01:eb:77:c3:1f:c6:4a:af:cf:08:40: 33:3c:00:87:3e:a3:0a:82:7d:41:58:b2:ab:b1:85:24:fd:3b: ae:da:cc:4c:be:fc:e0:43:d0:c1:d5:5e:a2:a1:5c:89:43:22: 3f:18:9b:9f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUW89f0b26jbW3LHOmqnKx/zdBUP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNTA1MDgwODQyMTlaFw0yNTA1MDkwOTM4MTlaMDMxMTAvBgNV BAMTKEY4RUIzRkNDRjcwQTJBMzMzN0IyQTZEMzdDREI3RUQ0QTQ3MTQ0RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0i7vSDZSucJ1NSmqN4eg35SRw AuUPVKenJ9XTIa3gA6IUXfopt1K1Er1y2Pt+Iha5lyAkkjQ6/iRQIr3T1oFpbPnT 7FmRNML1JFuwh02+GMmUHP+JpAio/KFd3bSIdTAHpfGDIJAEFwTXms6Wbi/D+8Lm AEQOap0TrRMYSq3gkuSGgu8oBAejv6OuOcC9f5nG6pXcXHBtzMGSZiaYOb2c4mWc dNbDQGpXEB+WpO7VnNknPpofrrj9WTA3nDPuzS2vrS56mUg35FOGzBJvQd0JQDsz tUlWY0MuhYTZPNePDPWiAwijy9ZtvAPllAig3rXDz11LkaXDhlHVTSY8cMXJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU+Os/zPcKKjM3sqbTfNt+1KRxRO8wHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCG8sc8 8wYGGrszD6sIHjWBnxfsPzXY50fTVbQZAOr7DI3Og90dVecFykbF0JyDTyvkLr8T 62ZnP+Fv7M1G9QwRnpD5kcTBExtNHtILmTi1VDV93gJIsauSFTvBa4WioPHskLTf uRm5gD4ju6Lw7cUNlZsPq6VOAdpfXnZdAS5+d8BJgsBKCI6OS2ZJfG74w+tSfX13 4FH5hUoH/NTqWTJXscb7ZFWmiqpXH8xVjbHdmqm8g1WLjhEWkPG5fdh0MzVKjXFK Jf6ikKfw7NW3Aet3wx/GSq/PCEAzPACHPqMKgn1BWLKrsYUk/Tuu2sxMvvzgQ9DB 1V6ioVyJQyI/GJuf -----END CERTIFICATE-----Generated at Thu May 8 17:42:12 2025 by rpki-client