$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft File: 41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft (raw, json) Hash identifier: TfdQq+LsWU+iGz34GLTP+zdxqI/ODjRR6ozqo6iDQj0= Subject key identifier: 83:12:AF:49:FC:59:0C:EE:85:EE:F2:EF:5D:5A:C9:68:1C:CA:00:91 Authority key identifier: 41:C6:B5:56:7A:DB:76:46:22:2A:1B:9F:1A:A7:03:8F:0C:2D:4B:4B Certificate issuer: /CN=41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B Certificate serial: 2EB0A5123BF2A62282DE230C79674E31220FC179 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft Manifest number: 010C Signing time: Thu 08 May 2025 15:55:09 +0000 Manifest this update: Thu 08 May 2025 15:50:09 +0000 Manifest next update: Fri 09 May 2025 17:30:09 +0000 Files and hashes: 1: 326131343a373538353a3a2f34382d3438203d3e20323134343531.roa (hash: 1/nE4baiMVs2LRMXh5sGVXRwRPcJEy8duBZuI+RSScs=) 2: 41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl (hash: lKLDPJWdxzfGPNGoJhYvgIzgFZZAxEH//eubvNpaL+E=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 17:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b0:a5:12:3b:f2:a6:22:82:de:23:0c:79:67:4e:31:22:0f:c1:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B Validity Not Before: May 8 15:50:09 2025 GMT Not After : May 9 17:30:09 2025 GMT Subject: CN=8312AF49FC590CEE85EEF2EF5D5AC9681CCA0091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5d:74:60:90:78:ab:24:66:77:6b:da:63:10: 3f:cb:fc:cd:db:95:b2:7d:c0:33:99:bf:9d:32:5c: 06:19:51:bb:d4:99:19:db:e4:31:92:a8:01:72:48: 27:75:c7:d8:52:74:ca:ed:31:1e:11:26:69:94:84: 76:f1:09:be:e5:54:03:16:37:0d:22:65:06:bb:c7: b4:03:2c:9d:31:c3:6b:8c:bb:70:91:57:41:37:f5: 5b:62:d2:c9:36:04:df:c5:d2:27:91:76:22:fc:27: da:ca:1d:f2:be:d6:06:74:e2:5b:29:a8:ff:af:9b: 83:d2:80:6f:98:1f:e3:c7:6a:8f:ef:28:65:d7:49: d6:75:89:d4:a8:00:e5:f9:c8:2a:c7:a0:51:3c:8e: 4c:33:2f:27:ba:2d:23:60:c6:e8:d4:08:25:4c:f7: b4:bb:95:4d:e8:8d:f5:4b:f3:f1:6d:0a:fb:81:e2: fa:ab:07:15:66:82:e5:62:16:f6:a2:10:40:a4:fa: b2:94:a4:97:f0:b7:f9:ab:e7:b3:66:5e:f0:88:05: 49:f2:66:03:e6:22:90:32:f2:55:82:1b:d8:c9:05: e0:ad:82:22:54:69:3f:dc:86:e4:30:51:01:70:67: 57:40:1a:51:72:26:7e:61:32:53:db:e6:b1:de:b0: 81:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:12:AF:49:FC:59:0C:EE:85:EE:F2:EF:5D:5A:C9:68:1C:CA:00:91 X509v3 Authority Key Identifier: keyid:41:C6:B5:56:7A:DB:76:46:22:2A:1B:9F:1A:A7:03:8F:0C:2D:4B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:6c:17:b8:dc:f7:ba:b9:0c:fc:20:3d:f9:4a:4b:41:e7:bf: fd:75:1a:2e:76:cc:6d:87:82:6a:6e:58:2f:c1:3d:a8:ab:38: f4:7d:27:bf:65:77:a9:83:07:6d:1e:b8:7a:2d:17:6a:27:3c: 41:19:a2:00:bb:d5:cb:c0:e6:f4:f7:4b:93:f3:7f:e8:f0:41: 2f:32:d4:f1:e4:63:13:b8:12:1a:9c:49:ae:1f:58:a6:46:d2: a6:cf:7c:82:ae:4c:3f:be:78:10:66:97:87:46:64:db:75:ba: fa:b7:4b:2d:2d:a4:e5:d3:b6:ff:54:59:c9:4e:7e:93:3d:08: e9:d4:ed:b3:37:d5:06:45:c3:b7:eb:c8:cf:2c:21:04:04:16: a5:a8:05:73:c9:94:8e:68:6f:5a:8d:6c:06:bd:8e:6e:54:92: aa:0c:78:f8:40:4d:20:37:b1:5b:11:3d:be:6e:39:b4:71:22: 03:1e:73:69:82:c4:f3:a2:ab:df:4d:fb:fb:62:9a:bc:ca:27: 74:1f:33:d5:2d:50:97:31:42:0b:10:13:f9:dc:8d:9d:0a:78: eb:cd:ef:48:d9:d8:c7:d2:6d:f3:02:7e:38:75:7b:61:fe:77: a5:4b:f8:e2:36:b3:47:17:1a:01:18:77:ff:97:1b:ee:6b:36: b5:65:4b:ce -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULrClEjvypiKC3iMMeWdOMSIPwXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFDNkI1NTY3QURCNzY0NjIyMkExQjlGMUFBNzAzOEYw QzJENEI0QjAeFw0yNTA1MDgxNTUwMDlaFw0yNTA1MDkxNzMwMDlaMDMxMTAvBgNV BAMTKDgzMTJBRjQ5RkM1OTBDRUU4NUVFRjJFRjVENUFDOTY4MUNDQTAwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhXXRgkHirJGZ3a9pjED/L/M3b lbJ9wDOZv50yXAYZUbvUmRnb5DGSqAFySCd1x9hSdMrtMR4RJmmUhHbxCb7lVAMW Nw0iZQa7x7QDLJ0xw2uMu3CRV0E39Vti0sk2BN/F0ieRdiL8J9rKHfK+1gZ04lsp qP+vm4PSgG+YH+PHao/vKGXXSdZ1idSoAOX5yCrHoFE8jkwzLye6LSNgxujUCCVM 97S7lU3ojfVL8/FtCvuB4vqrBxVmguViFvaiEECk+rKUpJfwt/mr57NmXvCIBUny ZgPmIpAy8lWCG9jJBeCtgiJUaT/chuQwUQFwZ1dAGlFyJn5hMlPb5rHesIHvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUgxKvSfxZDO6F7vLvXVrJaBzKAJEwHwYDVR0j BBgwFoAUQca1VnrbdkYiKhufGqcDjwwtS0swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl OTUwLzEvNDFDNkI1NTY3QURCNzY0NjIyMkExQjlGMUFBNzAzOEYwQzJENEI0Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MUM2QjU1NjdBREI3NjQ2MjIyQTFCOUYx QUE3MDM4RjBDMkQ0QjRCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyY2Y4YmE3LWNiMDItNDE4Yi1iZTA0LTRkOWYzYTA3ZTk1MC8xLzQxQzZCNTU2 N0FEQjc2NDYyMjJBMUI5RjFBQTcwMzhGMEMyRDRCNEIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMbBe4 3Pe6uQz8ID35SktB57/9dRoudsxth4JqblgvwT2oqzj0fSe/ZXepgwdtHrh6LRdq JzxBGaIAu9XLwOb090uT83/o8EEvMtTx5GMTuBIanEmuH1imRtKmz3yCrkw/vngQ ZpeHRmTbdbr6t0stLaTl07b/VFnJTn6TPQjp1O2zN9UGRcO368jPLCEEBBalqAVz yZSOaG9ajWwGvY5uVJKqDHj4QE0gN7FbET2+bjm0cSIDHnNpgsTzoqvfTfv7Ypq8 yid0HzPVLVCXMUILEBP53I2dCnjrze9I2djH0m3zAn44dXth/nelS/jiNrNHFxoB GHf/lxvuaza1ZUvO -----END CERTIFICATE-----Generated at Fri May 9 08:33:22 2025 by rpki-client