$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft File: D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft (raw, json) Hash identifier: oHGdON8N6dHHh/DNCgA1pbfi2czx/zwA2u3hHbpslu0= Subject key identifier: 9C:5A:9B:6D:07:22:6A:46:D2:D4:F4:59:C6:29:23:B0:5F:0E:E3:F7 Authority key identifier: D5:85:C9:65:DE:AE:D8:ED:3E:CA:AF:E1:89:BB:A5:88:38:99:D4:DB Certificate issuer: /CN=D585C965DEAED8ED3ECAAFE189BBA5883899D4DB Certificate serial: 4AD7CA4BE966B62F469B27A1405CD7398925A7A0 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft Manifest number: F5 Signing time: Thu 08 May 2025 13:20:49 +0000 Manifest this update: Thu 08 May 2025 13:15:49 +0000 Manifest next update: Fri 09 May 2025 15:01:49 +0000 Files and hashes: 1: 326130363a313238373a333a3a2f34382d3438203d3e203236303036.roa (hash: w5l+CabII55oIdXWCx1z3Pe4YPAruD0IwV5kDPe/Izw=) 2: 326130363a313238373a323a3a2f34382d3438203d3e203236303036.roa (hash: xMjHyR2jjzGKsZBr54akxLyksZAzhwNtCuo7fa289pA=) 3: 326130363a313238373a613030303a3a2f33362d3336203d3e2030.roa (hash: FjsYrEo0wEgNS89VaZKiwt5EudZo4T5v9dS11TtDpgA=) 4: 326130363a313238373a3a2f34382d3438203d3e203236303036.roa (hash: thL3dmlPHCJX1QS3/ZL6JUaOsctEk/xQ5Wem6QfHJSw=) 5: 326130363a313238373a353a3a2f34382d3438203d3e203236303036.roa (hash: epec3uw8M1QNqA9uXsJCI0b7PlJjYk15VpY2YlD1pmo=) 6: 326130363a313238373a343a3a2f34382d3438203d3e203236303036.roa (hash: Ctd56m2rWeHWuAb0S/ld3PRKI+krAr55ECb4mHWz0ec=) 7: D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.crl (hash: 0YCcRUYXHvCJv7kDL1sh4EyVzjKLJh2WNeuX5mrm3cE=) 8: 326130363a313238373a313a3a2f34382d3438203d3e203236303036.roa (hash: RRFtJdru0BMWcPpyQm75lctxeDIcv7Yna91EEvrVE94=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.crl rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 15:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d7:ca:4b:e9:66:b6:2f:46:9b:27:a1:40:5c:d7:39:89:25:a7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D585C965DEAED8ED3ECAAFE189BBA5883899D4DB Validity Not Before: May 8 13:15:49 2025 GMT Not After : May 9 15:01:49 2025 GMT Subject: CN=9C5A9B6D07226A46D2D4F459C62923B05F0EE3F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:19:34:a8:13:8b:ae:04:43:e4:88:36:5f:76: b2:30:ec:ba:1a:ec:df:6c:b4:6f:94:7f:32:d0:4a: c6:2a:b1:30:8a:da:29:9e:2d:89:da:32:79:9d:4b: 7a:5a:27:2d:0c:80:34:bf:6d:ef:26:2f:e7:73:ee: 13:c6:a7:6c:0f:ef:87:d3:5c:d0:68:7f:cf:09:a0: cd:fb:4e:e9:64:f7:20:a6:39:39:68:a2:89:c8:24: 88:fc:42:a8:c8:0b:97:dc:14:24:c8:8d:fa:e9:0a: 53:f7:8a:f8:e5:73:45:e0:6a:93:72:0c:ca:40:4c: ef:82:1f:c2:b0:05:87:b3:1e:71:ef:e3:15:40:00: 09:6d:a4:fe:01:ba:30:1a:ca:51:e2:29:61:aa:db: d0:c5:48:5d:27:94:b1:8b:83:5a:d6:e3:34:a1:9d: 7c:cd:ee:6e:91:3e:ab:2c:dc:09:f2:65:ef:64:db: c8:6b:27:8f:f7:90:00:ed:9c:fd:e1:0e:ad:c2:af: 97:87:46:3a:cf:57:df:28:02:29:68:eb:6d:26:31: f2:89:a8:66:20:dc:43:fa:ea:f6:a3:b7:cc:5e:f6: 54:3d:14:11:8c:ea:2a:0a:9d:08:19:7b:b0:e7:cd: 6b:52:ec:f6:4f:72:d1:3b:10:73:84:18:3f:f7:9d: 27:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5A:9B:6D:07:22:6A:46:D2:D4:F4:59:C6:29:23:B0:5F:0E:E3:F7 X509v3 Authority Key Identifier: keyid:D5:85:C9:65:DE:AE:D8:ED:3E:CA:AF:E1:89:BB:A5:88:38:99:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/1/D585C965DEAED8ED3ECAAFE189BBA5883899D4DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:b7:dc:2c:d8:b8:62:55:6a:f0:01:95:00:ea:8e:88:7e:e4: 55:89:ec:e3:6d:cc:65:61:9b:a8:1f:67:03:a3:2a:7b:82:47: 12:d7:c8:15:01:d3:aa:dc:cc:76:e1:95:8e:2c:9e:d7:43:e7: 3c:dc:83:42:60:44:1a:27:2d:ee:a6:fb:7f:32:05:6f:1e:fb: a7:12:1f:f9:71:27:c5:8a:b6:d8:e9:fa:ea:00:7b:79:92:d0: a8:dd:21:b9:2b:80:4a:81:47:68:0d:80:c2:f5:07:4f:96:cc: 67:2d:d3:31:aa:c2:cd:5a:43:f7:06:53:4e:2f:aa:89:45:cd: 07:6d:26:38:20:6d:93:6b:cf:1e:85:20:97:84:4e:7f:0e:c2: 48:96:79:0c:d4:10:a0:1b:3d:81:c5:f4:67:d3:ee:1e:b1:80: ca:d5:11:a3:89:d3:55:fb:07:5e:cd:8f:ef:28:4b:7d:a9:2e: d6:86:40:dc:63:89:c7:45:0d:f0:32:af:f3:01:07:75:dd:71: 8d:5a:e6:2d:02:03:7f:28:17:9a:81:48:03:04:58:e8:23:01: d4:55:e9:6a:5e:0b:c8:2c:7a:05:12:5d:e5:cf:99:6b:96:5f: a0:e2:ed:fd:5e:18:f8:67:79:1b:bb:34:cd:81:17:b5:a1:ae: f3:74:fb:6d -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUStfKS+lmti9GmyehQFzXOYklp6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU4NUM5NjVERUFFRDhFRDNFQ0FBRkUxODlCQkE1ODgz ODk5RDREQjAeFw0yNTA1MDgxMzE1NDlaFw0yNTA1MDkxNTAxNDlaMDMxMTAvBgNV BAMTKDlDNUE5QjZEMDcyMjZBNDZEMkQ0RjQ1OUM2MjkyM0IwNUYwRUUzRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+GTSoE4uuBEPkiDZfdrIw7Loa 7N9stG+UfzLQSsYqsTCK2imeLYnaMnmdS3paJy0MgDS/be8mL+dz7hPGp2wP74fT XNBof88JoM37Tulk9yCmOTlooonIJIj8QqjIC5fcFCTIjfrpClP3ivjlc0XgapNy DMpATO+CH8KwBYezHnHv4xVAAAltpP4BujAaylHiKWGq29DFSF0nlLGLg1rW4zSh nXzN7m6RPqss3AnyZe9k28hrJ4/3kADtnP3hDq3Cr5eHRjrPV98oAilo620mMfKJ qGYg3EP66vajt8xe9lQ9FBGM6ioKnQgZe7DnzWtS7PZPctE7EHOEGD/3nSc5AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUnFqbbQciakbS1PRZxikjsF8O4/cwHwYDVR0j BBgwFoAU1YXJZd6u2O0+yq/hibuliDiZ1NswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTUzNjIzYzQtMzNiZC00MzhhLWE5M2UtMDE4ZDY1YzRl ODM3LzEvRDU4NUM5NjVERUFFRDhFRDNFQ0FBRkUxODlCQkE1ODgzODk5RDREQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvRDU4NUM5NjVERUFFRDhFRDNFQ0FBRkUxODlCQkE1ODgzODk5 RDREQi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81NTM2MjNjNC0z M2JkLTQzOGEtYTkzZS0wMThkNjVjNGU4MzcvMS9ENTg1Qzk2NURFQUVEOEVEM0VD QUFGRTE4OUJCQTU4ODM4OTlENERCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsLfcLNi4YlVq8AGVAOqO iH7kVYns423MZWGbqB9nA6Mqe4JHEtfIFQHTqtzMduGVjiye10PnPNyDQmBEGict 7qb7fzIFbx77pxIf+XEnxYq22On66gB7eZLQqN0huSuASoFHaA2AwvUHT5bMZy3T MarCzVpD9wZTTi+qiUXNB20mOCBtk2vPHoUgl4ROfw7CSJZ5DNQQoBs9gcX0Z9Pu HrGAytURo4nTVfsHXs2P7yhLfaku1oZA3GOJx0UN8DKv8wEHdd1xjVrmLQIDfygX moFIAwRY6CMB1FXpal4LyCx6BRJd5c+Za5ZfoOLt/V4Y+Gd5G7s0zYEXtaGu83T7 bQ== -----END CERTIFICATE-----Generated at Thu May 8 22:24:07 2025 by rpki-client