$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft File: B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft (raw, json) Hash identifier: lG0+n485fFEEqACxNjgjKJpPnwq4LPBBWftOdUGKXlk= Subject key identifier: F0:F9:D7:34:39:85:02:E4:C3:C3:E4:00:72:83:D9:6F:95:56:57:EA Authority key identifier: B9:75:96:A9:0E:CE:84:DC:11:5D:E5:53:E8:98:A9:B2:2A:36:C9:C4 Certificate issuer: /CN=B97596A90ECE84DC115DE553E898A9B22A36C9C4 Certificate serial: 0917C10F537B3C82F44C7D0B806D3A286EEB5989 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft Manifest number: 7A Signing time: Wed 07 May 2025 16:51:42 +0000 Manifest this update: Wed 07 May 2025 16:46:42 +0000 Manifest next update: Thu 08 May 2025 17:51:42 +0000 Files and hashes: 1: 326130393a353463333a3a2f33322d3438203d3e20323135313437.roa (hash: Hh49k+Xt2ffEnf+1AdAQ2KRXHiXFSnVa9rayhA3bylc=) 2: B97596A90ECE84DC115DE553E898A9B22A36C9C4.crl (hash: nU/CrYk56RzqUVmwBWb12nspO1GmD4+sLJUZcRm/BIE=) 3: 326130393a353463333a613034663a3a2f34382d3438203d3e20323135313437.roa (hash: DYKApsC0Xy9yKLi3q0BaMZa16VHMvjlxYhlK7Vyadxk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 13:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:17:c1:0f:53:7b:3c:82:f4:4c:7d:0b:80:6d:3a:28:6e:eb:59:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B97596A90ECE84DC115DE553E898A9B22A36C9C4 Validity Not Before: May 7 16:46:42 2025 GMT Not After : May 8 17:51:42 2025 GMT Subject: CN=F0F9D734398502E4C3C3E4007283D96F955657EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:02:e1:d6:ec:1a:57:da:51:85:e8:44:f8: 09:5c:b2:1b:b1:f9:13:e3:f1:c0:f9:8f:45:79:c5: 28:93:c0:07:a5:f8:8f:21:f1:df:20:17:e4:0a:54: 3c:d2:a7:ee:d4:f8:c4:de:e3:d9:43:e2:17:dd:06: 27:12:48:2c:f5:79:8a:b2:82:50:18:09:dc:b5:9d: 1f:f8:b1:68:9a:5f:71:08:04:42:ed:ae:fe:cd:1a: 96:e0:ea:8c:29:d1:5e:7e:ea:38:f3:5c:bc:65:d2: 54:98:3c:30:20:c2:fd:34:d9:21:f9:c7:00:c5:44: 93:07:b9:e0:4b:a1:e0:ae:59:d1:11:a6:fa:99:1e: 9e:98:41:2d:eb:9e:5e:7b:a9:8b:64:6e:b8:20:86: 24:3d:b8:05:9a:97:82:c9:2a:9b:16:ec:d7:8c:b5: 82:5e:3d:bc:f3:a6:3c:4a:eb:2a:c0:19:d5:0a:52: 35:04:ab:6d:2e:04:88:aa:73:5a:a5:a1:d9:46:5a: 3b:84:a5:d5:95:a0:6c:d4:ac:df:ec:01:22:d6:fe: 8a:15:fc:b1:4c:34:82:ef:e8:ac:8e:e1:bf:c3:5c: 05:e7:91:8f:d4:fa:12:31:d6:aa:2a:7a:ae:b7:dc: cd:1b:26:89:64:a5:bb:ae:51:88:3b:e1:28:b2:0d: 5d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F9:D7:34:39:85:02:E4:C3:C3:E4:00:72:83:D9:6F:95:56:57:EA X509v3 Authority Key Identifier: keyid:B9:75:96:A9:0E:CE:84:DC:11:5D:E5:53:E8:98:A9:B2:2A:36:C9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B97596A90ECE84DC115DE553E898A9B22A36C9C4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/3/B97596A90ECE84DC115DE553E898A9B22A36C9C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d4:98:fe:df:d9:06:b7:32:26:6a:71:4c:6e:af:26:6c:72: e7:c7:c9:9d:a5:59:62:79:e0:63:7b:50:e4:a4:5c:96:dd:84: b2:a5:83:48:c9:2d:2f:25:01:d5:36:94:cf:0d:12:c2:63:5b: 6a:6a:f6:a6:2f:33:72:4c:fa:34:c3:05:71:49:4a:77:43:ca: ea:a9:fb:2e:76:37:fd:88:0f:45:0b:f1:a2:ab:2b:25:f6:02: d9:a4:96:2f:6d:9d:15:c6:de:e3:a9:ca:9e:49:39:28:ff:95: 57:d2:c5:a3:a6:d7:7a:33:1b:11:5f:fd:20:b0:22:2b:4a:02: 52:6a:97:6d:3e:68:d4:16:d7:a0:ef:09:b0:34:5a:bb:88:bc: 60:f9:c8:44:a2:31:4a:f0:3b:01:af:74:eb:70:25:0e:0e:88: c9:22:8f:6e:e1:79:10:86:79:59:2a:7e:17:85:62:5b:18:78: 07:29:1c:92:d2:34:32:fb:20:90:65:b7:b4:91:35:3f:27:2c: 4f:c1:ca:b9:24:f2:ba:14:c6:4e:28:f7:e4:0d:4b:0d:5f:af: 73:b1:3c:44:67:41:d1:bb:85:82:cd:3f:ea:8a:5e:42:4b:67: 5e:91:29:71:71:0c:d6:b8:65:76:7d:e9:df:60:70:29:1f:57: b7:ee:af:14 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUCRfBD1N7PIL0TH0LgG06KG7rWYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3NTk2QTkwRUNFODREQzExNURFNTUzRTg5OEE5QjIy QTM2QzlDNDAeFw0yNTA1MDcxNjQ2NDJaFw0yNTA1MDgxNzUxNDJaMDMxMTAvBgNV BAMTKEYwRjlENzM0Mzk4NTAyRTRDM0MzRTQwMDcyODNEOTZGOTU1NjU3RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAgwLh1uwaV9pRhehE+Alcshux +RPj8cD5j0V5xSiTwAel+I8h8d8gF+QKVDzSp+7U+MTe49lD4hfdBicSSCz1eYqy glAYCdy1nR/4sWiaX3EIBELtrv7NGpbg6owp0V5+6jjzXLxl0lSYPDAgwv002SH5 xwDFRJMHueBLoeCuWdERpvqZHp6YQS3rnl57qYtkbrgghiQ9uAWal4LJKpsW7NeM tYJePbzzpjxK6yrAGdUKUjUEq20uBIiqc1qlodlGWjuEpdWVoGzUrN/sASLW/ooV /LFMNILv6KyO4b/DXAXnkY/U+hIx1qoqeq633M0bJolkpbuuUYg74SiyDV2RAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU8PnXNDmFAuTDw+QAcoPZb5VWV+owHwYDVR0j BBgwFoAUuXWWqQ7OhNwRXeVT6Jipsio2ycQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzMvQjk3NTk2QTkwRUNFODREQzExNURFNTUzRTg5OEE5QjIyQTM2QzlDNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQjk3NTk2QTkwRUNFODREQzExNURFNTUzRTg5OEE5QjIyQTM2 QzlDNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1m MDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvMy9COTc1OTZBOTBFQ0U4NERDMTE1 REU1NTNFODk4QTlCMjJBMzZDOUM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONSY/t/ZBrcyJmpxTG6v Jmxy58fJnaVZYnngY3tQ5KRclt2EsqWDSMktLyUB1TaUzw0SwmNbamr2pi8zckz6 NMMFcUlKd0PK6qn7LnY3/YgPRQvxoqsrJfYC2aSWL22dFcbe46nKnkk5KP+VV9LF o6bXejMbEV/9ILAiK0oCUmqXbT5o1BbXoO8JsDRau4i8YPnIRKIxSvA7Aa9063Al Dg6IySKPbuF5EIZ5WSp+F4ViWxh4BykcktI0MvsgkGW3tJE1PycsT8HKuSTyuhTG Tij35A1LDV+vc7E8RGdB0buFgs0/6opeQktnXpEpcXEM1rhldn3p32BwKR9Xt+6v FA== -----END CERTIFICATE-----Generated at Wed May 7 19:06:32 2025 by rpki-client