$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft File: 5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft (raw, json) Hash identifier: 1O7QKz1ao9EmxVtJyJO7xzHHhzYxzYXDNVGY+XTszLs= Subject key identifier: A4:67:48:5B:B2:90:AE:E0:56:DF:96:C5:71:7B:8D:EB:C8:2C:96:B5 Authority key identifier: 5F:95:85:45:0A:7F:92:1A:B3:B8:45:D4:4D:7E:CF:55:EC:DD:F7:A9 Certificate issuer: /CN=5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9 Certificate serial: 6080A180A45AD926556DAA5108EE5035A2817DEC Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft Manifest number: 24 Signing time: Sat 10 May 2025 23:50:23 +0000 Manifest this update: Sat 10 May 2025 23:45:23 +0000 Manifest next update: Mon 12 May 2025 01:43:23 +0000 Files and hashes: 1: 5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.crl (hash: t91ZYyLu60OHdZLnhWnNg+wUiRpK5VNg/vM0XR0a0pQ=) 2: 326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa (hash: GjvfeB16Dq44ljlvPcegJERTdmH8Ubv3C8M2ssZH0r4=) 3: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: 0unAsI8V1gSzCFkFuiXCKj+qBRO+IDm5TxOFvRQfPXM=) 4: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: wCQx6AVbdx3+Kj+Us2aAmoxx84TC0UWyCZ76TDOkAHY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 20:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:80:a1:80:a4:5a:d9:26:55:6d:aa:51:08:ee:50:35:a2:81:7d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9 Validity Not Before: May 10 23:45:23 2025 GMT Not After : May 12 01:43:23 2025 GMT Subject: CN=A467485BB290AEE056DF96C5717B8DEBC82C96B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5f:32:93:bd:04:7f:df:2c:2f:e5:bf:52:13: 39:da:11:15:5d:4a:ea:c6:38:e4:b2:48:da:cf:f2: ec:5d:6a:cf:91:b8:14:60:d6:a0:f8:9e:27:e0:3a: 6d:b0:cb:81:6f:1b:37:aa:13:09:35:96:9f:e6:53: 17:b6:4b:28:d9:cf:03:91:74:36:d7:21:0a:76:3c: 5f:42:25:c1:ca:1f:9d:4e:73:e9:51:33:5e:51:c9: f9:cf:20:14:e2:bc:83:58:39:9f:14:e0:4f:6f:e3: 11:94:5e:2b:96:22:f2:bd:78:48:a3:7b:69:22:d5: 3a:8d:d7:24:68:26:bd:ea:fa:c0:85:d1:95:09:e2: b8:30:1c:46:a3:b2:8f:a8:a1:b3:22:db:d9:51:08: c2:f8:a3:4e:06:bf:89:19:47:c1:2c:23:5a:b5:56: 3c:59:86:12:85:a2:97:0b:89:38:e2:f1:30:cf:2e: 4c:cf:6f:d4:61:ce:71:e7:28:00:bd:84:07:e7:0d: dd:de:0f:30:36:9a:15:58:98:8e:db:76:13:90:69: ed:12:53:d3:30:91:5e:60:32:69:30:5a:32:d0:7e: fd:31:4d:85:61:0f:67:61:79:53:94:9b:6e:f5:b4: a4:26:7c:d3:4b:1c:b2:66:2f:fc:83:a0:db:fb:ed: ad:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:67:48:5B:B2:90:AE:E0:56:DF:96:C5:71:7B:8D:EB:C8:2C:96:B5 X509v3 Authority Key Identifier: keyid:5F:95:85:45:0A:7F:92:1A:B3:B8:45:D4:4D:7E:CF:55:EC:DD:F7:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/2/5F9585450A7F921AB3B845D44D7ECF55ECDDF7A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c6:03:18:82:cd:78:f0:d6:5e:96:fd:e5:22:a6:a7:4a:7f: 48:61:e6:11:5c:24:6e:bb:aa:f2:cc:ae:c0:3c:17:35:7f:8c: 6e:31:e6:68:87:7a:5a:cf:47:4d:c7:bd:da:24:bf:bb:93:a3: bf:41:4d:98:c0:b7:7a:ec:81:20:2c:32:4f:dd:e7:dc:0d:b3: 3c:7a:fe:1d:80:74:b5:56:da:84:cf:45:df:1f:1c:83:c6:41: 65:58:17:35:ed:c1:5e:87:d1:26:ab:e2:24:71:c3:46:9e:f2: 35:80:e4:92:1b:91:70:4e:d8:73:fa:49:02:27:32:82:46:7d: c5:43:80:0a:db:83:66:89:01:96:03:9b:18:c5:dc:76:1e:a2: 4e:4d:16:ba:48:e2:58:2f:70:5c:7e:12:68:80:c7:52:50:77: 58:66:d8:00:af:2b:0d:7b:03:f7:85:d5:a6:5c:06:e2:33:20: 85:7a:68:20:e8:21:03:d7:40:cc:71:5b:68:8e:cf:05:84:b5: 4f:e3:67:e7:60:6b:52:24:68:ab:e9:41:3f:25:47:c4:9d:42: 41:37:6b:10:c3:6c:0f:b5:00:0b:cc:90:ea:23:60:53:5e:08: ea:46:ce:5b:cf:8b:f6:8a:ae:ac:b4:49:a9:e9:3c:58:6c:59: d0:fd:9d:7f -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUYIChgKRa2SZVbapRCO5QNaKBfewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY5NTg1NDUwQTdGOTIxQUIzQjg0NUQ0NEQ3RUNGNTVF Q0RERjdBOTAeFw0yNTA1MTAyMzQ1MjNaFw0yNTA1MTIwMTQzMjNaMDMxMTAvBgNV BAMTKEE0Njc0ODVCQjI5MEFFRTA1NkRGOTZDNTcxN0I4REVCQzgyQzk2QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXzKTvQR/3ywv5b9SEznaERVd SurGOOSySNrP8uxdas+RuBRg1qD4nifgOm2wy4FvGzeqEwk1lp/mUxe2SyjZzwOR dDbXIQp2PF9CJcHKH51Oc+lRM15RyfnPIBTivINYOZ8U4E9v4xGUXiuWIvK9eEij e2ki1TqN1yRoJr3q+sCF0ZUJ4rgwHEajso+oobMi29lRCML4o04Gv4kZR8EsI1q1 VjxZhhKFopcLiTji8TDPLkzPb9RhznHnKAC9hAfnDd3eDzA2mhVYmI7bdhOQae0S U9MwkV5gMmkwWjLQfv0xTYVhD2dheVOUm271tKQmfNNLHLJmL/yDoNv77a2jAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUpGdIW7KQruBW35bFcXuN68gslrUwHwYDVR0j BBgwFoAUX5WFRQp/khqzuEXUTX7PVezd96kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzIvNUY5NTg1NDUwQTdGOTIxQUIzQjg0NUQ0NEQ3RUNGNTVFQ0RERjdBOS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNUY5NTg1NDUwQTdGOTIxQUIzQjg0NUQ0NEQ3RUNGNTVFQ0RE RjdBOS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMi81Rjk1ODU0NTBBN0Y5MjFBQjNC ODQ1RDQ0RDdFQ0Y1NUVDRERGN0E5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsYDGILNePDWXpb95SKm p0p/SGHmEVwkbruq8syuwDwXNX+MbjHmaId6Ws9HTce92iS/u5Ojv0FNmMC3euyB ICwyT93n3A2zPHr+HYB0tVbahM9F3x8cg8ZBZVgXNe3BXofRJqviJHHDRp7yNYDk khuRcE7Yc/pJAicygkZ9xUOACtuDZokBlgObGMXcdh6iTk0WukjiWC9wXH4SaIDH UlB3WGbYAK8rDXsD94XVplwG4jMghXpoIOghA9dAzHFbaI7PBYS1T+Nn52BrUiRo q+lBPyVHxJ1CQTdrEMNsD7UAC8yQ6iNgU14I6kbOW8+L9oqurLRJqek8WGxZ0P2d fw== -----END CERTIFICATE-----Generated at Sun May 11 11:55:43 2025 by rpki-client