$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: GcEdTbwyovu2TZw+OcKEgyY2wNqTUO6xMfoC8WUIQgw= Subject key identifier: E6:72:CF:00:72:42:1E:93:7A:E4:A9:07:A3:9D:41:AC:41:DB:DD:C1 Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 6069222703296057E69B48C1DAF8AD66425EA0CA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 015A Signing time: Thu 08 May 2025 03:52:15 +0000 Manifest this update: Thu 08 May 2025 03:47:15 +0000 Manifest next update: Fri 09 May 2025 05:15:15 +0000 Files and hashes: 1: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: xL09RaMvNnk3zcTxJYCpyR11r2WfajekNMt0OPCzbqM=) 2: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: R+o6n+RjWkxiRu/ckQJHanWEp0DumqtvHG3oGP82QQ8=) 3: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: QlVKew3bqVz5UQBlgT6ut7/lC0ImE+XR5Zl8/xsyIac=) 4: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 05:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:69:22:27:03:29:60:57:e6:9b:48:c1:da:f8:ad:66:42:5e:a0:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: May 8 03:47:15 2025 GMT Not After : May 9 05:15:15 2025 GMT Subject: CN=E672CF0072421E937AE4A907A39D41AC41DBDDC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0c:0b:99:62:05:dc:93:94:6a:9f:a4:12:ef: 1e:06:e4:bb:26:1d:24:b6:ab:e5:07:a6:6c:5c:83: 7c:ba:3e:bd:05:a4:94:57:e7:f1:c4:7e:74:84:9b: b8:2a:b4:05:0e:35:ba:58:31:26:3f:ee:88:71:05: d5:37:92:7f:11:55:f1:16:2c:ac:0f:f8:cb:59:45: b3:25:42:1c:10:d2:9e:4a:f0:33:58:3a:2d:aa:e7: 18:c7:2e:eb:0a:51:d2:48:ff:54:da:25:ee:dd:47: c0:55:d3:77:88:7a:75:01:44:72:46:89:85:a2:1f: a7:14:60:bc:3e:a5:5c:62:74:9f:ba:76:39:a1:b1: 40:35:25:54:6d:8f:df:66:62:67:5b:fb:c9:8a:d7: 33:26:c0:e9:ec:8c:de:57:b0:47:90:54:94:54:02: 02:b9:4c:1e:5e:e6:bf:d7:52:b1:30:b8:66:cc:cc: 68:8c:af:8e:4a:a4:24:d9:f4:3b:bc:e2:f3:96:c2: 87:ef:86:86:1d:2b:9e:18:bf:72:be:a2:6a:4b:7f: 8f:47:10:70:73:7c:af:fa:55:d7:b1:0e:e9:1b:83: 6d:97:d3:aa:a2:52:66:6a:2d:33:90:11:02:98:71: 04:d7:39:83:08:51:c5:8a:f1:24:f0:56:95:ca:51: 13:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:72:CF:00:72:42:1E:93:7A:E4:A9:07:A3:9D:41:AC:41:DB:DD:C1 X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:09:b5:4d:f2:54:74:f1:cc:7b:fa:ee:1e:fc:b1:f0:a1:01: 5b:1c:1c:5a:c6:55:0e:ee:05:6e:15:b0:7b:a7:e6:54:fa:f6: 8e:08:c2:fc:8f:22:f2:04:e3:9a:89:6f:c5:a3:ba:c1:b0:11: 46:53:1d:4b:ef:99:1a:fd:94:c3:55:4d:9d:da:0a:20:7e:20: 78:5d:6f:ef:a1:5b:4d:dd:d1:4b:50:4a:24:50:48:70:0c:34: dd:71:6f:c2:a6:00:27:14:3c:fc:bd:47:cc:f2:fa:1d:aa:6a: 62:f3:35:44:d0:49:66:da:36:bc:36:9f:39:ab:c2:14:83:63: cf:37:4e:9a:2a:36:16:16:c1:89:d4:d0:35:5b:7c:8f:c5:61: 4c:84:ce:62:e1:5e:62:3c:d7:95:d5:58:ab:a3:1f:19:b5:2b: 48:1a:f2:8e:c5:3b:cf:ff:b0:dd:50:59:a5:19:00:60:4c:a7: 87:23:bc:45:18:b8:5f:b3:64:e2:f0:c0:57:3c:0c:6d:bd:fe: 45:85:fa:a1:a1:ed:82:99:76:47:20:53:57:a7:8d:db:da:04: 1c:fa:1c:88:1c:36:2b:03:ae:ed:73:b6:6f:36:e9:05:b6:a0: 51:26:6e:9a:ca:2d:d0:18:49:53:6c:3b:d1:4a:1c:c3:1a:b2: 3e:a7:e9:e4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYGkiJwMpYFfmm0jB2vitZkJeoMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNTA1MDgwMzQ3MTVaFw0yNTA1MDkwNTE1MTVaMDMxMTAvBgNV BAMTKEU2NzJDRjAwNzI0MjFFOTM3QUU0QTkwN0EzOUQ0MUFDNDFEQkREQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMDAuZYgXck5Rqn6QS7x4G5Lsm HSS2q+UHpmxcg3y6Pr0FpJRX5/HEfnSEm7gqtAUONbpYMSY/7ohxBdU3kn8RVfEW LKwP+MtZRbMlQhwQ0p5K8DNYOi2q5xjHLusKUdJI/1TaJe7dR8BV03eIenUBRHJG iYWiH6cUYLw+pVxidJ+6djmhsUA1JVRtj99mYmdb+8mK1zMmwOnsjN5XsEeQVJRU AgK5TB5e5r/XUrEwuGbMzGiMr45KpCTZ9Du84vOWwofvhoYdK54Yv3K+ompLf49H EHBzfK/6VdexDukbg22X06qiUmZqLTOQEQKYcQTXOYMIUcWK8STwVpXKURNfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU5nLPAHJCHpN65KkHo51BrEHb3cEwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAxCbVN 8lR08cx7+u4e/LHwoQFbHBxaxlUO7gVuFbB7p+ZU+vaOCML8jyLyBOOaiW/Fo7rB sBFGUx1L75ka/ZTDVU2d2gogfiB4XW/voVtN3dFLUEokUEhwDDTdcW/CpgAnFDz8 vUfM8vodqmpi8zVE0Elm2ja8Np85q8IUg2PPN06aKjYWFsGJ1NA1W3yPxWFMhM5i 4V5iPNeV1Virox8ZtStIGvKOxTvP/7DdUFmlGQBgTKeHI7xFGLhfs2Ti8MBXPAxt vf5Fhfqhoe2CmXZHIFNXp43b2gQc+hyIHDYrA67tc7ZvNukFtqBRJm6ayi3QGElT bDvRShzDGrI+p+nk -----END CERTIFICATE-----Generated at Thu May 8 17:18:05 2025 by rpki-client