$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft File: 99D922574ADCFE8B3741930044512F9A57EF91A4.mft (raw, json) Hash identifier: C76r8F9Yo+zoKazvlDOnRJJ5Fv6eOzDBusDNu8tIdkM= Subject key identifier: B3:DD:7D:0D:7A:BB:BF:77:DC:CC:58:A2:F7:0E:88:AB:13:BC:60:14 Authority key identifier: 99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4 Certificate issuer: /CN=99D922574ADCFE8B3741930044512F9A57EF91A4 Certificate serial: 3E417A8F76406308F8E7413F6B244F2E9816F565 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft Manifest number: 01C6 Signing time: Wed 07 May 2025 21:58:11 +0000 Manifest this update: Wed 07 May 2025 21:53:11 +0000 Manifest next update: Thu 08 May 2025 22:20:11 +0000 Files and hashes: 1: 99D922574ADCFE8B3741930044512F9A57EF91A4.crl (hash: KXaivVbke4O8BX88T3SnDZEipKfJ4ryNkogSyNn8/QA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 12:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:41:7a:8f:76:40:63:08:f8:e7:41:3f:6b:24:4f:2e:98:16:f5:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99D922574ADCFE8B3741930044512F9A57EF91A4 Validity Not Before: May 7 21:53:11 2025 GMT Not After : May 8 22:20:11 2025 GMT Subject: CN=B3DD7D0D7ABBBF77DCCC58A2F70E88AB13BC6014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:26:6e:29:00:ad:41:c0:92:9c:48:96:d2: 4b:37:4c:7b:f3:5a:26:2e:1e:c0:04:c4:4d:e6:18: a5:2d:12:17:1e:39:0d:36:d7:17:aa:71:44:2b:96: 06:15:7b:d6:48:4a:17:95:b2:c1:b2:5e:98:e9:ba: 48:39:e4:a9:18:f6:ca:02:94:fe:44:37:0c:c0:f9: 3e:10:7f:c2:db:bd:81:de:e6:54:0d:d8:a7:93:27: de:1a:6d:59:2e:8b:18:ad:c2:58:04:a5:df:68:f5: ce:a6:86:fd:d3:e6:9e:ca:ab:32:75:6a:dc:3c:f1: d2:28:c8:ef:4d:a2:b0:47:5d:8e:8c:d8:31:44:17: 5c:21:05:b3:8b:ce:a8:3b:1c:14:6f:fb:84:0f:04: 3e:82:a9:c8:38:e6:41:fe:85:f8:5e:a5:b6:76:47: 5a:a5:db:93:66:e7:54:50:e7:e6:bf:04:40:40:98: b6:5f:7a:b4:d5:9d:30:0e:5a:38:e0:a3:a2:83:18: 23:a1:37:99:63:20:b6:37:dd:e8:b7:22:ee:60:79: 98:68:22:03:14:16:07:55:b0:92:ee:10:01:76:ed: 0b:aa:df:51:19:e1:75:53:e4:38:50:75:fb:53:43: 0a:2f:8e:60:5b:84:3e:55:c1:a6:0a:a5:50:2a:e4: 84:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DD:7D:0D:7A:BB:BF:77:DC:CC:58:A2:F7:0E:88:AB:13:BC:60:14 X509v3 Authority Key Identifier: keyid:99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c1:6c:4a:bd:4b:d2:af:4a:7d:89:ce:bd:a7:71:2c:2b:b0: ac:25:42:7c:bf:55:ee:b5:63:f6:9a:ea:a4:25:ed:7f:f6:c3: 0e:fb:34:8b:72:62:f6:41:9a:8b:5c:2c:fa:d1:73:56:21:b4: 48:0a:9a:db:dd:c9:65:5c:22:83:5a:66:96:2b:17:7a:3e:d6: d5:5b:d5:37:8c:74:c9:d3:6f:4c:e6:1c:d6:1d:44:a3:29:e1: 53:4e:60:ec:67:96:84:3d:94:80:34:59:f0:2d:d4:87:14:f5: ff:f3:89:5d:24:cb:b6:cc:9f:9c:1b:a6:df:97:f3:49:7f:71: 83:7b:9f:54:a3:39:8a:2c:3a:e6:72:ea:99:0a:46:a8:3a:6d: 4e:9e:07:b1:0c:69:f0:1b:46:4b:6a:3d:c6:41:53:1e:10:3a: 29:17:bd:42:d4:73:f0:35:82:3b:7e:8f:d0:71:38:87:99:68: f7:cf:15:28:74:a1:5f:e8:24:0a:68:d8:1b:3c:2a:3f:24:54: 48:d3:f8:f5:d3:3b:8f:b5:24:85:1f:7a:4c:cc:11:ec:86:de: 1c:b5:c0:3f:fb:96:64:c1:11:2c:35:c3:93:1b:f0:8e:b4:05: a9:17:db:13:bc:88:af:71:03:48:ef:91:27:f1:99:be:06:9f: 43:6a:3b:a3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPkF6j3ZAYwj450E/ayRPLpgW9WUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlEOTIyNTc0QURDRkU4QjM3NDE5MzAwNDQ1MTJGOUE1 N0VGOTFBNDAeFw0yNTA1MDcyMTUzMTFaFw0yNTA1MDgyMjIwMTFaMDMxMTAvBgNV BAMTKEIzREQ3RDBEN0FCQkJGNzdEQ0NDNThBMkY3MEU4OEFCMTNCQzYwMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo8yZuKQCtQcCSnEiW0ks3THvz WiYuHsAExE3mGKUtEhceOQ021xeqcUQrlgYVe9ZISheVssGyXpjpukg55KkY9soC lP5ENwzA+T4Qf8LbvYHe5lQN2KeTJ94abVkuixitwlgEpd9o9c6mhv3T5p7KqzJ1 atw88dIoyO9NorBHXY6M2DFEF1whBbOLzqg7HBRv+4QPBD6Cqcg45kH+hfhepbZ2 R1ql25Nm51RQ5+a/BEBAmLZferTVnTAOWjjgo6KDGCOhN5ljILY33ei3Iu5geZho IgMUFgdVsJLuEAF27Quq31EZ4XVT5DhQdftTQwovjmBbhD5VwaYKpVAq5ISFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUs919DXq7v3fczFii9w6IqxO8YBQwHwYDVR0j BBgwFoAUmdkiV0rc/os3QZMARFEvmlfvkaQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzIvOTlEOTIyNTc0QURDRkU4QjM3NDE5MzAwNDQ1MTJGOUE1N0VGOTFBNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC85OUQ5MjI1NzRBRENGRThCMzc0MTkzMDA0 NDUxMkY5QTU3RUY5MUE0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZmZjdhOTg5LWVjZGYtNDNkNi04NmUxLWY2YzM5MzViOWIzZC8yLzk5RDkyMjU3 NEFEQ0ZFOEIzNzQxOTMwMDQ0NTEyRjlBNTdFRjkxQTQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCSwWxK vUvSr0p9ic69p3EsK7CsJUJ8v1XutWP2muqkJe1/9sMO+zSLcmL2QZqLXCz60XNW IbRICprb3cllXCKDWmaWKxd6PtbVW9U3jHTJ029M5hzWHUSjKeFTTmDsZ5aEPZSA NFnwLdSHFPX/84ldJMu2zJ+cG6bfl/NJf3GDe59UozmKLDrmcuqZCkaoOm1Ongex DGnwG0ZLaj3GQVMeEDopF71C1HPwNYI7fo/QcTiHmWj3zxUodKFf6CQKaNgbPCo/ JFRI0/j10zuPtSSFH3pMzBHsht4ctcA/+5ZkwREsNcOTG/COtAWpF9sTvIivcQNI 75En8Zm+Bp9Dajuj -----END CERTIFICATE-----Generated at Thu May 8 01:58:32 2025 by rpki-client