$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft File: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft (raw, json) Hash identifier: TMaw5/8OhDOvsLrpteaVvCYdwr/vWF1AEwrM8dKPSrw= Subject key identifier: 15:89:0E:F4:E1:EE:D8:13:DD:EB:2D:86:96:52:64:BC:17:7A:49:16 Authority key identifier: 94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C Certificate issuer: /CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Certificate serial: 68F3BBFAB4F11252FBFFD5893BCB20489C257061 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft Manifest number: 31 Signing time: Fri 09 May 2025 23:17:11 +0000 Manifest this update: Fri 09 May 2025 23:12:11 +0000 Manifest next update: Sun 11 May 2025 01:49:11 +0000 Files and hashes: 1: 326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa (hash: MnToG5/hHH9Scp/i63sn6+7U3FU6WhprF2dCg9QmzZ4=) 2: 326131343a373538343a333030313a3a2f34382d3438203d3e20313532333638.roa (hash: RycjpThYIZhrgAMUdYbKLisjcTcczyRyV0B6ob/yXcs=) 3: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl (hash: AdZmo8rwWR292OeNcLGcQg2qR3pld+fqTr2CeqH/mIg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 13:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f3:bb:fa:b4:f1:12:52:fb:ff:d5:89:3b:cb:20:48:9c:25:70:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Validity Not Before: May 9 23:12:11 2025 GMT Not After : May 11 01:49:11 2025 GMT Subject: CN=15890EF4E1EED813DDEB2D86965264BC177A4916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:6e:4c:3c:ca:68:85:9b:f1:e1:2b:98:4d: 4a:c6:7a:9c:1a:4d:cd:4d:13:65:99:8d:7c:62:c8: 90:26:c6:a8:99:a5:25:b0:39:ea:cc:ca:40:20:69: d5:f9:6f:67:f4:1e:b2:c9:a3:ee:06:f7:e6:c7:66: 6b:6e:7a:a9:c1:2e:7c:ff:11:d6:31:b3:be:0d:e2: ae:87:ad:42:55:22:8d:b7:0e:1e:15:37:d9:e1:ef: 43:2f:e3:3c:68:ac:2a:71:3e:0e:cc:fc:b7:7c:81: c6:ab:fd:f0:dd:2c:f7:1a:a3:e2:0a:8a:a5:1e:ae: 97:89:24:d2:f1:a5:60:9e:cd:e1:9a:85:42:05:db: b6:55:3a:02:17:81:c8:08:03:d5:5d:9d:2b:ae:3e: f0:38:8d:1e:f4:0f:a1:ba:32:b8:0b:9c:bd:ab:6d: ac:a1:bb:b0:78:a0:4c:51:42:07:3e:2b:1f:2d:57: 1b:91:43:16:29:4f:8c:65:61:65:4b:96:3e:d1:48: 32:b5:6f:22:f8:9f:df:69:24:5c:51:69:c5:f9:31: 23:54:45:4f:35:43:27:d8:4d:bb:36:5b:71:e0:f0: 5a:ad:e5:34:d5:71:9e:66:f5:42:6c:98:45:36:8a: cf:72:4c:d3:d5:9f:62:fe:a9:df:92:57:3d:9f:40: a1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:89:0E:F4:E1:EE:D8:13:DD:EB:2D:86:96:52:64:BC:17:7A:49:16 X509v3 Authority Key Identifier: keyid:94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:eb:e9:7c:14:cd:d0:51:9e:b5:32:dd:ae:cf:6f:00:45:57: 60:52:a2:e8:bf:e0:45:2f:60:2a:78:d7:33:97:4e:0e:67:51: df:8f:09:a7:7b:c6:4a:96:ba:14:ad:d1:24:e5:4a:b5:a3:69: 0f:d5:5f:bc:f6:47:a0:e1:f1:b3:01:88:92:96:4e:fc:e4:c3: 09:3a:84:7e:e1:47:62:17:c1:f5:64:6d:e5:2d:b4:d6:6e:f7: 03:26:7f:b6:b0:6d:28:0e:91:6e:57:6e:e8:52:a6:7b:e0:23: 7e:9e:c0:e0:00:22:45:b7:26:40:7b:b8:4f:85:6e:cf:c5:c5: 0c:c6:72:1e:1d:4f:b1:28:0a:25:32:c2:00:95:cd:34:4f:52: 38:6c:31:20:c9:86:d9:20:50:24:5b:d5:47:9a:94:95:a8:77: 76:fb:8c:59:81:3f:4b:bb:bd:6b:0d:a4:e1:5f:39:99:c4:8c: a4:b7:f0:d5:8d:c3:fc:02:ed:cd:cf:d8:2c:e7:2e:c1:f7:ae: fb:df:c8:f2:3e:18:63:e5:ac:83:9b:8c:a3:14:a9:40:47:70: 59:41:7c:61:b1:cc:43:9d:31:60:59:e3:ad:52:8f:ca:91:85: b4:f8:46:7b:e9:99:8e:2c:98:a9:21:c5:13:c9:5a:ca:ab:1b: 3c:59:5f:dd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaPO7+rTxElL7/9WJO8sgSJwlcGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkx QjI3QUQ5QzAeFw0yNTA1MDkyMzEyMTFaFw0yNTA1MTEwMTQ5MTFaMDMxMTAvBgNV BAMTKDE1ODkwRUY0RTFFRUQ4MTNEREVCMkQ4Njk2NTI2NEJDMTc3QTQ5MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPi25MPMpohZvx4SuYTUrGepwa Tc1NE2WZjXxiyJAmxqiZpSWwOerMykAgadX5b2f0HrLJo+4G9+bHZmtueqnBLnz/ EdYxs74N4q6HrUJVIo23Dh4VN9nh70Mv4zxorCpxPg7M/Ld8gcar/fDdLPcao+IK iqUerpeJJNLxpWCezeGahUIF27ZVOgIXgcgIA9VdnSuuPvA4jR70D6G6MrgLnL2r bayhu7B4oExRQgc+Kx8tVxuRQxYpT4xlYWVLlj7RSDK1byL4n99pJFxRacX5MSNU RU81QyfYTbs2W3Hg8Fqt5TTVcZ5m9UJsmEU2is9yTNPVn2L+qd+SVz2fQKErAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFYkO9OHu2BPd6y2GllJkvBd6SRYwHwYDVR0j BBgwFoAUlG3hXTS+riTinqFqP+HmWRsnrZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzcvOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkxQjI3QUQ5Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85NDZERTE1RDM0QkVBRTI0RTI5RUExNkEz RkUxRTY1OTFCMjdBRDlDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzFiZDMwNmI0LWU1YzMtNDhmOS1iMmVlLTM2YTliZGRlZDhjNC83Lzk0NkRFMTVE MzRCRUFFMjRFMjlFQTE2QTNGRTFFNjU5MUIyN0FEOUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCa6+l8 FM3QUZ61Mt2uz28ARVdgUqLov+BFL2AqeNczl04OZ1Hfjwmne8ZKlroUrdEk5Uq1 o2kP1V+89keg4fGzAYiSlk785MMJOoR+4UdiF8H1ZG3lLbTWbvcDJn+2sG0oDpFu V27oUqZ74CN+nsDgACJFtyZAe7hPhW7PxcUMxnIeHU+xKAolMsIAlc00T1I4bDEg yYbZIFAkW9VHmpSVqHd2+4xZgT9Lu71rDaThXzmZxIykt/DVjcP8Au3Nz9gs5y7B 967738jyPhhj5ayDm4yjFKlAR3BZQXxhscxDnTFgWeOtUo/KkYW0+EZ76ZmOLJip IcUTyVrKqxs8WV/d -----END CERTIFICATE-----Generated at Sat May 10 04:05:44 2025 by rpki-client