$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json) Hash identifier: 3683+MUH60PprBn8KdjpLBGINvMMzMqiS+qtBBVL7Cw= Subject key identifier: B7:44:0D:4C:28:A2:7A:88:2B:79:7E:0F:9B:C8:5C:6A:C9:9F:15:BF Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Certificate serial: 686B506B78921597689D0D0FB2B546B4524E643D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft Manifest number: 03AC Signing time: Thu 08 May 2025 08:56:05 +0000 Manifest this update: Thu 08 May 2025 08:51:05 +0000 Manifest next update: Fri 09 May 2025 09:17:05 +0000 Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: pE0hclh1r95JJ4lPMVlmMEct8k1ihbRVmYgyutScu/8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 09:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:6b:50:6b:78:92:15:97:68:9d:0d:0f:b2:b5:46:b4:52:4e:64:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Validity Not Before: May 8 08:51:05 2025 GMT Not After : May 9 09:17:05 2025 GMT Subject: CN=B7440D4C28A27A882B797E0F9BC85C6AC99F15BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5a:fd:35:6c:dc:98:94:9b:3c:a1:18:5b:aa: 76:ff:58:bf:21:7d:f9:ab:df:4f:18:ec:0f:1c:e6: 16:66:76:2c:8e:2d:74:5c:7c:6a:bd:b0:6a:72:1e: 22:f1:c7:cf:d2:b8:5d:94:17:61:88:7c:8a:c4:ae: c0:ea:07:6e:2d:20:e0:66:a9:92:94:04:61:dd:32: 4a:79:3f:82:87:37:c9:38:12:fc:f8:47:53:43:e6: 58:ed:08:fa:a0:22:16:9f:31:83:ba:1a:00:5d:f2: 87:38:f6:83:77:2a:0d:e9:4c:1d:16:49:5d:3b:fa: fc:c3:6b:1b:65:55:f7:5e:e5:08:18:32:0f:63:73: cc:79:e9:0a:3b:d9:7e:83:db:32:ba:f9:00:b6:c4: d6:7a:57:4c:d8:cc:b0:b4:04:bc:67:6b:13:20:2f: 84:22:be:a9:dc:9d:da:db:3e:55:91:ef:92:97:6a: 78:6b:7a:25:92:5d:f3:a4:8e:4d:da:b3:17:41:3f: 15:5f:5a:6a:47:15:c8:54:17:b5:96:84:42:b2:2f: 48:aa:75:92:4b:ee:bf:21:4b:5f:52:23:dd:db:87: ca:45:63:8e:d2:1d:15:3f:55:d3:2c:3c:84:64:87: ff:01:0c:75:86:0c:11:8d:11:78:54:86:b4:7b:48: bc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:44:0D:4C:28:A2:7A:88:2B:79:7E:0F:9B:C8:5C:6A:C9:9F:15:BF X509v3 Authority Key Identifier: keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f4:76:37:28:04:42:8a:a0:22:5d:bb:4a:f3:b5:09:d6:f1: 57:0e:2e:d5:0e:b9:b1:90:e0:1e:f6:1a:12:4b:c2:05:a0:80: 41:45:bf:8f:59:9c:79:0f:3f:a9:3c:20:ff:33:62:73:bd:0f: 8a:2a:7e:07:a0:da:06:d0:ba:19:09:74:d3:a7:6f:7f:7f:b0: d7:76:87:ee:37:bc:65:54:78:37:ed:a5:59:16:7f:42:8f:20: 60:ae:3d:ea:43:39:c7:ca:be:75:ca:fa:1a:f6:0f:cc:b6:55: 5f:49:46:6e:05:b1:23:21:8e:74:cc:e4:f0:e4:3e:9b:e7:be: ad:91:47:d2:22:0c:19:24:89:8a:f2:67:3e:c9:3b:7f:13:f5: 1a:0e:85:a0:2a:ba:26:c6:4c:74:43:36:87:64:61:e7:9a:49: 8c:94:18:c8:d7:11:20:36:a1:dc:ae:36:d5:56:30:aa:26:f6: fb:bf:ce:67:93:4a:66:ca:7b:1c:56:cf:0e:d7:3a:33:95:5c: b8:b2:63:6f:8c:83:b1:ef:49:68:2e:1a:3d:d5:d1:6a:36:53: 36:8a:ab:95:23:bd:ff:fe:32:5a:e2:62:b4:46:7c:db:95:4e: bb:48:0f:a3:a9:b3:8d:47:07:a2:f5:90:08:c7:7c:21:c3:2d: 77:ca:57:e5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaGtQa3iSFZdonQ0PsrVGtFJOZD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUx RDA0MEEzMDAeFw0yNTA1MDgwODUxMDVaFw0yNTA1MDkwOTE3MDVaMDMxMTAvBgNV BAMTKEI3NDQwRDRDMjhBMjdBODgyQjc5N0UwRjlCQzg1QzZBQzk5RjE1QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLWv01bNyYlJs8oRhbqnb/WL8h ffmr308Y7A8c5hZmdiyOLXRcfGq9sGpyHiLxx8/SuF2UF2GIfIrErsDqB24tIOBm qZKUBGHdMkp5P4KHN8k4Evz4R1ND5ljtCPqgIhafMYO6GgBd8oc49oN3Kg3pTB0W SV07+vzDaxtlVfde5QgYMg9jc8x56Qo72X6D2zK6+QC2xNZ6V0zYzLC0BLxnaxMg L4QivqncndrbPlWR75KXanhreiWSXfOkjk3asxdBPxVfWmpHFchUF7WWhEKyL0iq dZJL7r8hS19SI93bh8pFY47SHRU/VdMsPIRkh/8BDHWGDBGNEXhUhrR7SLxHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUt0QNTCiieogreX4Pm8hcasmfFb8wHwYDVR0j BBgwFoAUDk68Qx41E/w/ZB24gOKy/h0ECjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzEvMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUxRDA0MEEzMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00YjFhLTQ2 ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC8wRTRFQkM0MzFFMzUxM0ZDM0Y2NDFEQjg4 MEUyQjJGRTFEMDQwQTMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzgxMTE1YmM2LTEwZjYtNGFmMy1iYTA5LThiNjg3YTU2ZmJmNS8xLzBFNEVCQzQz MUUzNTEzRkMzRjY0MURCODgwRTJCMkZFMUQwNDBBMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBe9HY3 KARCiqAiXbtK87UJ1vFXDi7VDrmxkOAe9hoSS8IFoIBBRb+PWZx5Dz+pPCD/M2Jz vQ+KKn4HoNoG0LoZCXTTp29/f7DXdofuN7xlVHg37aVZFn9CjyBgrj3qQznHyr51 yvoa9g/MtlVfSUZuBbEjIY50zOTw5D6b576tkUfSIgwZJImK8mc+yTt/E/UaDoWg Kromxkx0QzaHZGHnmkmMlBjI1xEgNqHcrjbVVjCqJvb7v85nk0pmynscVs8O1zoz lVy4smNvjIOx70loLho91dFqNlM2iquVI73//jJa4mK0RnzblU67SA+jqbONRwei 9ZAIx3whwy13ylfl -----END CERTIFICATE-----Generated at Thu May 8 22:26:06 2025 by rpki-client