$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft File: 847138B5401830B89B52403C777718BB40B2B6B5.mft (raw, json) Hash identifier: NykdYeUIhObq4bXIT7TfDuvc0OxU4dCcff9Ao6grJLA= Subject key identifier: 6B:E1:BC:4B:73:74:9E:8E:0D:27:81:02:F8:04:A5:B7:06:A7:79:88 Authority key identifier: 84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5 Certificate issuer: /CN=847138B5401830B89B52403C777718BB40B2B6B5 Certificate serial: 1B994F4FD88B3E97BBAF7B1FB56B40D2E00A1D07 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft Manifest number: 04E4 Signing time: Wed 07 May 2025 13:05:18 +0000 Manifest this update: Wed 07 May 2025 13:00:18 +0000 Manifest next update: Thu 08 May 2025 14:04:18 +0000 Files and hashes: 1: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: HYPQYH9q04uUtQ2nRIqre2hb3Qbqb6C2ZO6Rxb9EvzQ=) 2: BE8A7AC02556C14368364036D5427F53187B6D9D.cer (hash: DgZZLJZ9Eml763gunc/aU0nCab1SiHrkxw0oRdopVbY=) 3: 847138B5401830B89B52403C777718BB40B2B6B5.crl (hash: UpYUxDgkpfWMRV8SCnRZ+kykchkKMrqXfkoRN6z8T7E=) 4: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: nMmiIj2RlJjYPT/1+XLEzvCEDF/otDgwrHV2q/RTde4=) 5: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: lqIlXTFIWSBiRqL977xA8LwWmhjqpimo3uxiYjVeS/M=) 6: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: B/V5ud+StvDXjqEGvB3k810Cv5LJwyUE9nhfaTbPqMk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 13:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:99:4f:4f:d8:8b:3e:97:bb:af:7b:1f:b5:6b:40:d2:e0:0a:1d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847138B5401830B89B52403C777718BB40B2B6B5 Validity Not Before: May 7 13:00:18 2025 GMT Not After : May 8 14:04:18 2025 GMT Subject: CN=6BE1BC4B73749E8E0D278102F804A5B706A77988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a3:c9:b0:ac:ab:81:5d:56:39:b6:3c:f4:4c: 5f:38:0f:6f:f4:35:ae:24:30:20:ea:01:53:2e:e6: 63:d0:40:b2:6c:ef:53:d7:f0:fa:69:9d:a5:81:51: f8:90:25:94:46:2d:cc:70:7c:d4:9c:94:7a:e9:06: 0d:ae:54:e5:d5:3b:07:e3:07:63:3c:75:b9:34:75: b3:f7:3f:1d:7d:38:30:95:b3:12:2b:73:ee:45:12: 5d:01:5b:bb:11:31:85:5a:b5:2a:49:cc:39:20:7e: c9:4f:9d:7e:d6:aa:3d:a8:66:ca:50:36:90:1f:71: a1:0b:53:68:fc:3f:dd:20:35:55:1c:72:55:7c:47: a5:a1:d5:f5:cb:fe:db:e2:90:fd:43:82:ea:f2:5d: c9:96:a9:36:f4:46:3d:24:d6:18:74:3e:e7:76:34: 4d:6c:81:f2:41:e0:4c:20:93:e6:b8:c1:6a:b5:e8: 03:45:3f:03:df:87:66:94:58:6a:c1:ba:2e:32:ea: 0d:5a:f2:12:54:f6:b5:a3:40:4e:dd:4c:e8:b5:12: b1:9a:b0:c5:b9:df:22:fb:36:9c:76:23:f4:03:c8: cb:e0:14:ac:5d:65:60:70:eb:ec:bc:10:5c:7e:1a: 02:2a:23:d2:6e:a9:84:87:9c:c8:cf:85:46:26:de: b7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E1:BC:4B:73:74:9E:8E:0D:27:81:02:F8:04:A5:B7:06:A7:79:88 X509v3 Authority Key Identifier: keyid:84:71:38:B5:40:18:30:B8:9B:52:40:3C:77:77:18:BB:40:B2:B6:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/847138B5401830B89B52403C777718BB40B2B6B5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/4/847138B5401830B89B52403C777718BB40B2B6B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b3:7d:76:c1:ea:94:07:9e:17:cf:0d:54:3f:10:b8:ea:ef: 6e:0a:fb:35:73:3c:5d:42:da:b5:92:cf:22:a4:6d:c3:1e:b7: 36:dd:f2:9a:a4:ce:10:ce:ca:1b:f3:47:4c:e1:ca:2c:e5:a0: eb:3b:8d:26:99:12:3f:3c:46:55:40:70:bc:04:68:ab:dd:1c: 86:a4:32:7d:37:68:10:53:3a:88:12:ca:8d:ab:17:64:ee:4d: 8c:e0:07:bb:a8:e6:af:e7:9e:31:aa:80:db:81:c8:fd:2b:00: 18:dc:dc:4a:3a:51:e5:20:e6:92:41:30:3e:95:9e:f9:68:7d: ff:f5:11:50:d7:fd:36:5f:26:49:5b:30:33:09:d1:1b:cd:be: 67:a6:6b:ba:2d:71:95:12:19:02:43:3f:dd:af:86:4c:db:b9: 40:70:85:b6:10:bf:22:bf:35:d3:da:7e:75:d3:35:53:54:37: 82:6c:91:2d:83:ea:6f:11:4a:dc:ab:b3:a7:e1:93:d7:31:1e: 3b:d6:fa:87:f0:02:ef:f3:d5:fe:93:38:53:ed:94:17:19:d2: 70:6f:77:54:81:2a:be:28:bf:0c:29:6b:f6:8b:52:bb:ce:cb: c6:98:80:ed:4d:69:45:b1:ea:9a:72:1d:b3:3d:e0:38:77:d3: 08:e4:0a:89 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUG5lPT9iLPpe7r3sftWtA0uAKHQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0 MEIyQjZCNTAeFw0yNTA1MDcxMzAwMThaFw0yNTA1MDgxNDA0MThaMDMxMTAvBgNV BAMTKDZCRTFCQzRCNzM3NDlFOEUwRDI3ODEwMkY4MDRBNUI3MDZBNzc5ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJo8mwrKuBXVY5tjz0TF84D2/0 Na4kMCDqAVMu5mPQQLJs71PX8PppnaWBUfiQJZRGLcxwfNSclHrpBg2uVOXVOwfj B2M8dbk0dbP3Px19ODCVsxIrc+5FEl0BW7sRMYVatSpJzDkgfslPnX7Wqj2oZspQ NpAfcaELU2j8P90gNVUcclV8R6Wh1fXL/tvikP1DguryXcmWqTb0Rj0k1hh0Pud2 NE1sgfJB4Ewgk+a4wWq16ANFPwPfh2aUWGrBui4y6g1a8hJU9rWjQE7dTOi1ErGa sMW53yL7Npx2I/QDyMvgFKxdZWBw6+y8EFx+GgIqI9JuqYSHnMjPhUYm3rcJAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUa+G8S3N0no4NJ4EC+ASltwaneYgwHwYDVR0j BBgwFoAUhHE4tUAYMLibUkA8d3cYu0CytrUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzQvODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0MEIyQjZCNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvODQ3MTM4QjU0MDE4MzBCODlCNTI0MDNDNzc3NzE4QkI0MEIy QjZCNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03 Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvNC84NDcxMzhCNTQwMTgzMEI4OUI1 MjQwM0M3Nzc3MThCQjQwQjJCNkI1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbN9dsHqlAeeF88NVD8Q uOrvbgr7NXM8XULatZLPIqRtwx63Nt3ymqTOEM7KG/NHTOHKLOWg6zuNJpkSPzxG VUBwvARoq90chqQyfTdoEFM6iBLKjasXZO5NjOAHu6jmr+eeMaqA24HI/SsAGNzc SjpR5SDmkkEwPpWe+Wh9//URUNf9Nl8mSVswMwnRG82+Z6Zrui1xlRIZAkM/3a+G TNu5QHCFthC/Ir8109p+ddM1U1Q3gmyRLYPqbxFK3Kuzp+GT1zEeO9b6h/AC7/PV /pM4U+2UFxnScG93VIEqvii/DClr9otSu87LxpiA7U1pRbHqmnIdsz3gOHfTCOQK iQ== -----END CERTIFICATE-----Generated at Wed May 7 20:54:14 2025 by rpki-client