$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft File: CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft (raw, json) Hash identifier: /r6v2Yk4Y6MKyvlKPnGc+Pok/6euX2pzP8jmDL1cdwI= Subject key identifier: C4:E7:2C:15:5F:FB:FE:50:04:E6:A0:A9:81:06:41:50:EB:4E:12:B9 Authority key identifier: CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD Certificate issuer: /CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD Certificate serial: 5F496AE4E780D43DF4898EBA9728C90105165B75 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft Manifest number: 0141 Signing time: Thu 08 May 2025 19:46:35 +0000 Manifest this update: Thu 08 May 2025 19:41:35 +0000 Manifest next update: Fri 09 May 2025 21:19:35 +0000 Files and hashes: 1: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: 4NAkvNhOgG+FdQOl5H1HgnY8A0ca/GD2rGJr4GFMtSI=) 2: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: ahz6gPUt4YrcLpOD9Ozfm8bYrgH1OTsLIpfe4cqXpMc=) 3: CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl (hash: weI9uO71LBIUkJLqQCdFFLqjanMxSVfLDz9lr4wCigM=) 4: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: vFXjegY0vnmzgiKwFkv4TNQvgCv0y7neNveGux2ZS+w=) 5: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: wTqD67Uqf1W/idPthA4sHinaJ2FPLZ88IN640ixPrCU=) 6: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: Q5gjl44KzFA6g8+tW8lygBoA3oaZ4qvSEamF1iUuuio=) 7: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: Nyn9oM7uD3t9zeyaIzVAMa0fIXr9id1B4aigY0eVgwU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 15:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:49:6a:e4:e7:80:d4:3d:f4:89:8e:ba:97:28:c9:01:05:16:5b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD Validity Not Before: May 8 19:41:35 2025 GMT Not After : May 9 21:19:35 2025 GMT Subject: CN=C4E72C155FFBFE5004E6A0A981064150EB4E12B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7e:99:64:24:09:e0:3e:e9:76:6f:6a:3b:90: 4f:59:c7:f3:88:88:9e:b1:c3:2a:90:2f:01:71:d8: 6a:31:31:42:f1:0e:93:3d:ec:fa:6f:78:94:fb:4d: e1:40:0d:a1:fe:60:b2:90:46:02:f6:9a:7a:cc:64: fc:45:a0:36:ea:d3:ad:26:6d:62:43:22:4d:8e:e6: 04:42:13:6b:01:34:06:f4:8d:41:10:b2:63:f1:87: d4:2b:59:e9:5e:f0:93:f1:51:13:80:b9:61:37:66: 2b:4d:f6:89:69:b8:fb:86:63:e1:8f:6c:60:af:5f: a7:02:99:be:60:dc:fa:ea:fd:84:93:66:2b:fb:d9: 61:dd:91:32:e6:c2:29:76:10:78:3e:82:bb:c3:e1: 58:cf:22:5e:9e:39:b0:f9:de:eb:b5:5f:be:63:8e: 9e:38:d2:ad:fc:8a:27:04:a0:e1:2d:55:8c:e8:17: 6e:5c:eb:9f:db:74:fe:8c:0f:08:bc:c3:54:20:1c: 1a:d5:c5:3b:44:6d:7a:e8:20:b6:86:77:ec:4e:7f: 00:ca:71:4b:b9:f3:3d:b5:c9:8c:84:7f:fe:cf:71: 6c:d2:81:98:b9:f4:68:cc:a0:8d:aa:76:eb:89:cf: 3c:19:4f:fb:53:68:85:59:97:e3:87:cb:91:4b:fe: 14:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E7:2C:15:5F:FB:FE:50:04:E6:A0:A9:81:06:41:50:EB:4E:12:B9 X509v3 Authority Key Identifier: keyid:CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:23:a2:aa:22:cd:2f:3d:99:39:b3:fd:4c:f3:f3:f0:d4:6d: da:7d:b4:b1:70:a4:76:48:3c:b5:75:93:1c:f8:ae:4b:61:1d: 7a:ac:cb:a2:90:8c:64:4d:cb:f4:95:93:73:29:f8:ad:0c:aa: 89:5e:88:bd:51:d4:ee:51:a6:e6:ed:c2:60:c3:a9:df:94:2a: 3b:45:3e:0c:58:79:dd:98:30:d2:4f:ec:96:5f:ae:bb:62:37: 43:a2:64:26:f8:f0:e5:6a:ca:68:66:0a:b2:81:b5:86:a5:00: a2:91:39:7b:1e:30:70:3d:f7:a7:ec:52:68:19:b7:66:62:a2: d2:de:44:6a:d8:46:df:4f:bd:93:11:81:d9:70:6d:96:5d:f3: ab:27:28:82:b1:83:91:9b:ff:b4:9f:68:c9:84:cf:ec:2e:e6: 91:4d:b3:1d:c4:64:16:9b:bf:cf:0d:db:8a:bf:b6:00:68:3c: f3:56:d3:4a:08:35:a7:29:a9:bb:47:c2:bd:f4:67:59:12:44: 23:83:91:31:3f:2e:e4:54:73:e0:65:bc:ae:e7:07:d6:79:ec: 88:32:ad:7f:e3:55:ec:11:66:ee:84:95:39:6d:fa:1c:ef:49: f5:15:d8:d9:ad:c6:70:44:78:51:03:bf:f0:18:b8:db:75:b6: 1a:1b:65:59 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUX0lq5OeA1D30iY66lyjJAQUWW3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgz Rjk1NTFDRDAeFw0yNTA1MDgxOTQxMzVaFw0yNTA1MDkyMTE5MzVaMDMxMTAvBgNV BAMTKEM0RTcyQzE1NUZGQkZFNTAwNEU2QTBBOTgxMDY0MTUwRUI0RTEyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmfplkJAngPul2b2o7kE9Zx/OI iJ6xwyqQLwFx2GoxMULxDpM97PpveJT7TeFADaH+YLKQRgL2mnrMZPxFoDbq060m bWJDIk2O5gRCE2sBNAb0jUEQsmPxh9QrWele8JPxUROAuWE3ZitN9olpuPuGY+GP bGCvX6cCmb5g3Prq/YSTZiv72WHdkTLmwil2EHg+grvD4VjPIl6eObD53uu1X75j jp440q38iicEoOEtVYzoF25c65/bdP6MDwi8w1QgHBrVxTtEbXroILaGd+xOfwDK cUu58z21yYyEf/7PcWzSgZi59GjMoI2qduuJzzwZT/tTaIVZl+OHy5FL/hQhAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUxOcsFV/7/lAE5qCpgQZBUOtOErkwHwYDVR0j BBgwFoAUzhtPQ2e2pV80ypgaDWynWD+VUc0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzEvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1NTFDRC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1 NTFDRC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvMS9DRTFCNEY0MzY3QjZBNTVGMzRD QTk4MUEwRDZDQTc1ODNGOTU1MUNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCOiqiLNLz2ZObP9TPPz 8NRt2n20sXCkdkg8tXWTHPiuS2EdeqzLopCMZE3L9JWTcyn4rQyqiV6IvVHU7lGm 5u3CYMOp35QqO0U+DFh53Zgw0k/sll+uu2I3Q6JkJvjw5WrKaGYKsoG1hqUAopE5 ex4wcD33p+xSaBm3ZmKi0t5EathG30+9kxGB2XBtll3zqycogrGDkZv/tJ9oyYTP 7C7mkU2zHcRkFpu/zw3bir+2AGg881bTSgg1pympu0fCvfRnWRJEI4ORMT8u5FRz 4GW8rucH1nnsiDKtf+NV7BFm7oSVOW36HO9J9RXY2a3GcER4UQO/8Bi423W2Ghtl WQ== -----END CERTIFICATE-----Generated at Thu May 8 21:01:35 2025 by rpki-client