$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft File: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft (raw, json) Hash identifier: eUsYeWws/M6PVCIKbhVQIUuemABQ82DTSRfaiMJAStk= Subject key identifier: FA:AE:9C:54:55:D0:91:52:3C:07:FD:9E:FE:C0:E9:8F:FA:0D:01:25 Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Certificate serial: 7C8E0226FC971F875D27B7F34B1A35858AA9FC3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft Manifest number: 5A Signing time: Sun 11 May 2025 05:33:34 +0000 Manifest this update: Sun 11 May 2025 05:28:34 +0000 Manifest next update: Mon 12 May 2025 08:17:34 +0000 Files and hashes: 1: 326130393a626534303a323830303a3a2f34302d3438203d3e20313939393530.roa (hash: AiP13DNBwIkSFzdQdSir0FYGd4okcKOcyfxhs/nt0mM=) 2: 326130653a666434353a326630303a3a2f34382d3438203d3e20323132393636.roa (hash: fCahoT0DASmE4L0CnNku4FHnUTfBEMsJKaoRBnEvKJY=) 3: 326130393a626534303a323830303a3a2f34302d3438203d3e20323133313730.roa (hash: bGsR+5RlWB67shIeVpz1QNwpCAPKyIXgoOV7T0RQXx8=) 4: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl (hash: RDgZRY+YmEee0K0qASCWE8uaaiwnkgfu1hZxcEbA1Sw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:8e:02:26:fc:97:1f:87:5d:27:b7:f3:4b:1a:35:85:8a:a9:fc:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Validity Not Before: May 11 05:28:34 2025 GMT Not After : May 12 08:17:34 2025 GMT Subject: CN=FAAE9C5455D091523C07FD9EFEC0E98FFA0D0125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:c0:a8:b0:62:88:e7:2f:cc:81:47:a3:f2: 97:d9:9f:30:2a:5e:e8:ef:91:7b:a2:a0:6f:6a:78: 8a:3d:0a:ea:51:05:3c:f6:4e:24:36:2e:30:c8:7c: f6:26:5d:71:6a:cf:74:7b:71:f5:7d:76:75:e6:a5: ae:27:15:e9:b9:d8:59:a5:69:4d:d2:35:82:5e:ca: da:f7:1a:a4:9a:dd:84:1a:7f:d9:6c:e3:cc:55:36: d1:b9:d8:2c:b7:40:85:13:2c:b0:22:3d:07:3a:2b: 42:0e:bf:1e:91:c6:19:ad:c0:53:b4:f0:c0:6f:d9: e9:56:1c:2f:23:d8:c8:c2:21:e5:e2:53:6e:20:8e: c1:dd:15:82:36:65:d0:60:de:3c:6f:7b:da:0c:85: 78:40:9a:8e:48:ca:86:99:18:2d:ae:ce:a9:2f:43: 42:a8:c3:67:fd:c6:a2:2d:b2:61:d5:5b:69:d7:01: da:a7:a6:9d:b5:f5:71:91:e6:3f:77:64:17:ce:0f: 41:b8:47:30:8d:70:be:fb:38:11:85:08:e1:9c:74: 13:02:49:ac:74:c6:71:af:bf:8c:af:87:f4:70:2e: 65:f2:6a:a1:ac:a4:bb:38:0d:06:44:a9:18:65:50: ea:70:56:ba:71:f6:f2:f9:30:0e:a9:59:13:94:3f: 11:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AE:9C:54:55:D0:91:52:3C:07:FD:9E:FE:C0:E9:8F:FA:0D:01:25 X509v3 Authority Key Identifier: keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:76:69:55:31:83:ce:5a:5d:dc:c2:54:50:0a:a8:50:e9:1a: de:1c:52:e7:2a:38:14:25:fe:34:55:bf:5d:5f:71:72:cc:35: 97:58:41:98:d7:f3:c8:7a:85:f2:2b:1d:4a:4a:9f:1c:a2:48: 49:ae:b5:68:b8:ca:c7:a1:24:36:a4:c7:27:69:98:0c:1c:da: 97:10:68:c9:e0:76:83:3e:0c:1b:d1:be:47:13:44:4c:52:b8: 12:81:5b:fc:57:a0:c6:e4:05:f3:04:60:60:86:0e:3c:0f:df: 13:5c:a1:89:3d:73:3c:73:08:9b:04:99:9c:e0:5e:c2:e3:94: 9d:a0:d0:b6:01:65:56:ed:9f:f6:e9:72:28:98:6c:5f:65:48: aa:0f:c7:41:0a:35:9d:02:cc:5b:23:d0:be:3f:54:41:3f:16: 98:23:95:e7:89:89:92:c0:a0:31:80:d4:2b:17:a8:d0:c4:90: 0f:11:32:df:07:d6:44:5b:09:18:f3:b1:e0:4e:20:50:ea:da: bf:71:97:53:c6:81:fb:be:87:a3:b9:f2:33:df:5c:c9:06:4f: 9b:87:a0:3e:80:b6:8c:8c:66:f3:b7:11:15:4c:17:d3:c9:f0: b4:6a:a6:2a:1b:aa:80:8b:65:53:68:f4:0d:dc:d0:55:81:97: 13:b3:ca:98 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfI4CJvyXH4ddJ7fzSxo1hYqp/DswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2YyMTZmNDlhM2I5YTg0YTBlODVlODBhMmM0Mjg3NGYw OWVhMzk4NTAeFw0yNTA1MTEwNTI4MzRaFw0yNTA1MTIwODE3MzRaMDMxMTAvBgNV BAMTKEZBQUU5QzU0NTVEMDkxNTIzQzA3RkQ5RUZFQzBFOThGRkEwRDAxMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAcCosGKI5y/MgUej8pfZnzAq XujvkXuioG9qeIo9CupRBTz2TiQ2LjDIfPYmXXFqz3R7cfV9dnXmpa4nFem52Fml aU3SNYJeytr3GqSa3YQaf9ls48xVNtG52Cy3QIUTLLAiPQc6K0IOvx6RxhmtwFO0 8MBv2elWHC8j2MjCIeXiU24gjsHdFYI2ZdBg3jxve9oMhXhAmo5IyoaZGC2uzqkv Q0Kow2f9xqItsmHVW2nXAdqnpp219XGR5j93ZBfOD0G4RzCNcL77OBGFCOGcdBMC Sax0xnGvv4yvh/RwLmXyaqGspLs4DQZEqRhlUOpwVrpx9vL5MA6pWROUPxExAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+q6cVFXQkVI8B/2e/sDpj/oNASUwHwYDVR0j BBgwFoAUfyFvSaO5qEoOhegKLEKHTwnqOYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmRmYjMwY2EtZTFjMi00OTIxLWIwNTQtZDRhZjA5MTY1 YWYxLzAvN0YyMTZGNDlBM0I5QTg0QTBFODVFODBBMkM0Mjg3NEYwOUVBMzk4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Z5RnZTYU81cUVvT2hlZ0tMRUtIVHdu cU9ZVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZGZiMzBjYS1l MWMyLTQ5MjEtYjA1NC1kNGFmMDkxNjVhZjEvMC83RjIxNkY0OUEzQjlBODRBMEU4 NUU4MEEyQzQyODc0RjA5RUEzOTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3ZpVTGDzlpd3MJUUAqo UOka3hxS5yo4FCX+NFW/XV9xcsw1l1hBmNfzyHqF8isdSkqfHKJISa61aLjKx6Ek NqTHJ2mYDBzalxBoyeB2gz4MG9G+RxNETFK4EoFb/FegxuQF8wRgYIYOPA/fE1yh iT1zPHMImwSZnOBewuOUnaDQtgFlVu2f9ulyKJhsX2VIqg/HQQo1nQLMWyPQvj9U QT8WmCOV54mJksCgMYDUKxeo0MSQDxEy3wfWRFsJGPOx4E4gUOrav3GXU8aB+76H o7nyM99cyQZPm4egPoC2jIxm87cRFUwX08nwtGqmKhuqgItlU2j0DdzQVYGXE7PK mA== -----END CERTIFICATE-----Generated at Sun May 11 16:05:49 2025 by rpki-client