$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft File: FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft (raw, json) Hash identifier: x7gvc64bqHXM0xPRut6kJD6oLS/LQVSWe4EG1McdbW8= Subject key identifier: BB:BC:E4:02:15:98:C8:5C:5B:37:57:F3:A4:88:C0:F3:74:E4:84:D6 Authority key identifier: FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B Certificate issuer: /CN=FA8F32A0B21DD2779315422B5A2184C649E03C0B Certificate serial: 2444D2C932FE38166B7A0611E5BC32E1B834F447 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft Manifest number: 03DF Signing time: Tue 13 May 2025 03:38:38 +0000 Manifest this update: Tue 13 May 2025 03:33:38 +0000 Manifest next update: Wed 14 May 2025 07:24:38 +0000 Files and hashes: 1: FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl (hash: 80szEwUGWiDg0M6uHPwz/15kDmAqnNeAIf5qHaD+g9o=) 2: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: /CFUhpNUUZNwoRgflpnALQIis6DpR20ZsBTAXpcqHGA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 May 2025 17:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:44:d2:c9:32:fe:38:16:6b:7a:06:11:e5:bc:32:e1:b8:34:f4:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA8F32A0B21DD2779315422B5A2184C649E03C0B Validity Not Before: May 13 03:33:38 2025 GMT Not After : May 14 07:24:38 2025 GMT Subject: CN=BBBCE4021598C85C5B3757F3A488C0F374E484D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3a:8b:87:50:44:17:e5:9a:dd:33:84:3c:76: 57:c7:34:5c:c0:2a:91:93:ca:c8:41:45:d5:53:d5: 15:c7:56:2e:f6:48:04:b2:80:59:9d:70:3d:19:0c: 40:a7:07:3a:60:bf:18:72:0d:a4:2c:3e:33:76:09: 40:94:e3:6f:06:91:21:7d:5f:4c:23:00:3c:32:cb: bc:15:93:63:b4:45:e6:02:11:c1:50:73:6e:b2:8f: a6:c5:a9:a3:61:39:96:f8:c7:82:f1:3e:49:bd:19: f5:c9:8e:51:51:ed:0d:6a:ac:4c:b6:bc:2e:25:22: 73:77:77:b6:9e:9a:3d:3b:9d:b6:40:ff:67:56:cc: 3d:8c:fa:71:92:69:e6:af:ff:4e:c6:49:4c:ea:6d: 46:a5:88:ea:62:d1:77:c5:1a:5e:87:b7:82:75:06: 12:43:e9:4c:08:d5:e0:00:08:93:48:26:97:2f:01: 32:78:01:05:72:04:83:60:c0:ba:7a:2c:42:96:68: cf:72:5c:f4:01:8c:28:13:88:c8:ff:43:67:a6:df: 8f:43:e3:ca:ca:59:67:8c:35:0a:1d:46:c8:57:e3: 00:de:b8:c0:96:c1:44:ed:7f:c7:37:16:5e:dc:3f: 92:3d:04:22:d4:69:1f:59:cc:df:fc:b8:08:53:4e: a3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BC:E4:02:15:98:C8:5C:5B:37:57:F3:A4:88:C0:F3:74:E4:84:D6 X509v3 Authority Key Identifier: keyid:FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b7:75:6f:24:7b:43:0f:24:7a:48:5d:2c:d5:27:11:ef:fd: 49:ff:98:12:52:36:da:13:21:45:d6:8d:90:f1:ae:5d:91:93: 66:af:22:27:5c:8f:43:39:bf:a0:ec:78:22:ca:00:09:ad:cb: 52:af:2f:af:d5:ec:bf:b4:fe:44:d1:99:0c:e1:69:85:ea:e7: c7:0a:94:89:6d:82:2f:64:0d:7e:e4:9e:c1:f4:f2:03:5e:5a: ef:03:82:a9:8e:2c:a9:fc:6e:c5:c5:fe:50:aa:2c:11:4c:ea: b6:b1:a9:fc:34:16:6f:2f:b6:2d:85:7d:b3:ad:00:0f:14:e3: 08:31:f7:a6:39:b8:e2:a4:cc:f6:04:d0:f2:ef:41:7b:c1:a9: b7:8f:e3:a5:c0:18:8f:01:bc:1e:83:03:50:62:f2:00:8c:e0: 53:e5:a5:33:90:f3:96:26:e1:6a:04:90:ea:50:70:fd:80:2c: 0e:db:24:77:dc:da:06:2d:40:21:90:ff:39:d5:cc:2f:72:a6: 8b:7c:a4:92:c3:48:30:e2:1f:fb:a8:b5:44:93:f3:f9:34:91: 5b:92:f3:d2:5b:75:b4:5e:43:a6:91:d1:9e:04:9b:1e:ec:47: fd:7e:b0:3a:e4:6e:e1:be:d9:0f:54:a1:8d:43:e0:96:90:be: bc:08:7c:4c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJETSyTL+OBZregYR5bwy4bg09EcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE4RjMyQTBCMjFERDI3NzkzMTU0MjJCNUEyMTg0QzY0 OUUwM0MwQjAeFw0yNTA1MTMwMzMzMzhaFw0yNTA1MTQwNzI0MzhaMDMxMTAvBgNV BAMTKEJCQkNFNDAyMTU5OEM4NUM1QjM3NTdGM0E0ODhDMEYzNzRFNDg0RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLOouHUEQX5ZrdM4Q8dlfHNFzA KpGTyshBRdVT1RXHVi72SASygFmdcD0ZDECnBzpgvxhyDaQsPjN2CUCU428GkSF9 X0wjADwyy7wVk2O0ReYCEcFQc26yj6bFqaNhOZb4x4LxPkm9GfXJjlFR7Q1qrEy2 vC4lInN3d7aemj07nbZA/2dWzD2M+nGSaeav/07GSUzqbUaliOpi0XfFGl6Ht4J1 BhJD6UwI1eAACJNIJpcvATJ4AQVyBINgwLp6LEKWaM9yXPQBjCgTiMj/Q2em349D 48rKWWeMNQodRshX4wDeuMCWwUTtf8c3Fl7cP5I9BCLUaR9ZzN/8uAhTTqMXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUu7zkAhWYyFxbN1fzpIjA83TkhNYwHwYDVR0j BBgwFoAU+o8yoLId0neTFUIrWiGExkngPAswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzEvRkE4RjMyQTBCMjFERDI3NzkzMTU0MjJCNUEyMTg0QzY0OUUwM0MwQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9GQThGMzJBMEIyMUREMjc3OTMxNTQyMkI1 QTIxODRDNjQ5RTAzQzBCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8xL0ZBOEYzMkEw QjIxREQyNzc5MzE1NDIyQjVBMjE4NEM2NDlFMDNDMEIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBwt3Vv JHtDDyR6SF0s1ScR7/1J/5gSUjbaEyFF1o2Q8a5dkZNmryInXI9DOb+g7HgiygAJ rctSry+v1ey/tP5E0ZkM4WmF6ufHCpSJbYIvZA1+5J7B9PIDXlrvA4Kpjiyp/G7F xf5QqiwRTOq2san8NBZvL7YthX2zrQAPFOMIMfemObjipMz2BNDy70F7wam3j+Ol wBiPAbwegwNQYvIAjOBT5aUzkPOWJuFqBJDqUHD9gCwO2yR33NoGLUAhkP851cwv cqaLfKSSw0gw4h/7qLVEk/P5NJFbkvPSW3W0XkOmkdGeBJse7Ef9frA65G7hvtkP VKGNQ+CWkL68CHxM -----END CERTIFICATE-----Generated at Tue May 13 06:30:34 2025 by rpki-client