$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft File: 1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft (raw, json) Hash identifier: qNuGjR5/updmq+GJ+pvfzxCm34SiQDuulBIPgjxOK5g= Subject key identifier: 99:E2:78:93:4B:AE:15:42:AA:4C:8F:E4:6B:C7:B6:44:F2:2B:F9:29 Authority key identifier: 1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79 Certificate issuer: /CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79 Certificate serial: 51E2E675359435CC4E5C443B8DD03F4E0F6607D6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft Manifest number: 06 Signing time: Tue 06 May 2025 04:49:11 +0000 Manifest this update: Tue 06 May 2025 04:44:11 +0000 Manifest next update: Wed 07 May 2025 06:52:11 +0000 Files and hashes: 1: 1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl (hash: KEMOf1BZZOH3D6T4b7bwRScUrNZRK23cp+SJBo+O8Fk=) 2: 326131343a373538303a3730303a3a2f34302d3430203d3e20313938303235.roa (hash: q6g7NvOylKcoMKHIBFZ0Cue6q0bByY4gqgu482bGvYs=) 3: 326131343a373538303a3730303a3a2f34302d3430203d3e20313531313934.roa (hash: omUm+VClsl1esxeSZas8cPGaOt8NK5P0JK8DttORXSQ=) 4: 326131343a373538303a3730303a3a2f34342d3434203d3e20313938303235.roa (hash: 4L0QSAftYtcw4WDJTyxob29wy6e4AqxikKCoI1U7ltM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 06:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:e2:e6:75:35:94:35:cc:4e:5c:44:3b:8d:d0:3f:4e:0f:66:07:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B8048531CFED25DEDE4EF93CBEEBD37A0053C79 Validity Not Before: May 6 04:44:11 2025 GMT Not After : May 7 06:52:11 2025 GMT Subject: CN=99E278934BAE1542AA4C8FE46BC7B644F22BF929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cd:96:4e:85:9d:46:37:d9:55:b6:81:ff:f1: b8:88:1d:be:48:12:8e:bf:94:74:02:09:9f:0a:c1: b4:f7:70:58:d7:0e:e0:be:00:80:f6:f4:de:cb:e9: 94:a2:73:5b:b8:d1:0e:4d:01:47:71:d2:65:7a:67: 24:27:07:0b:04:7a:0f:91:ae:bf:89:1b:fa:b3:5f: a0:07:ec:0a:4d:0a:84:4c:61:5f:97:e9:43:c0:fc: 54:d4:e3:1b:25:4b:1d:c4:62:91:24:8f:4b:af:aa: 40:9e:06:aa:50:cc:00:8a:e3:0a:c7:43:06:90:2c: e7:3e:91:59:50:dd:02:e5:2a:ef:5d:a0:8c:63:af: 3d:0e:f9:15:cb:72:ff:d8:33:3b:a4:79:52:e8:2d: 24:75:21:ed:fc:58:7f:d5:15:87:85:df:5a:26:d8: 38:46:f0:59:22:dd:4d:66:a0:ce:5f:35:8c:be:55: d3:80:3c:0f:19:31:e2:58:68:16:ff:dc:a0:45:73: bb:69:e5:71:7c:fd:5b:52:55:b8:27:38:40:97:5a: 08:be:8b:27:c4:b6:c9:96:f5:6a:1a:b9:f5:09:7d: ba:1b:b2:29:e6:db:00:72:41:cd:62:74:9c:37:0d: 2a:28:3a:f5:aa:aa:57:8e:2a:6d:56:29:ba:f1:b4: f9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E2:78:93:4B:AE:15:42:AA:4C:8F:E4:6B:C7:B6:44:F2:2B:F9:29 X509v3 Authority Key Identifier: keyid:1B:80:48:53:1C:FE:D2:5D:ED:E4:EF:93:CB:EE:BD:37:A0:05:3C:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/1B8048531CFED25DEDE4EF93CBEEBD37A0053C79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7f:04:ff:5b:90:31:52:42:f9:ed:36:cc:62:ee:18:ea:00: aa:3f:bc:14:07:c4:06:f5:af:76:fb:35:cc:d9:2b:aa:3e:a0: cd:5a:ee:3d:7f:d0:42:98:04:1f:38:bc:07:a5:ba:87:d9:32: 2e:4e:49:65:c5:f1:2f:04:d5:68:fc:47:ef:b7:47:3d:78:81: ea:73:6b:43:d1:de:0e:ec:81:f4:6a:13:67:3d:66:52:78:f9: 5b:45:3c:f0:2f:ae:c5:3f:6e:ab:99:81:1f:ec:72:c0:2f:f4: fc:af:79:c6:10:53:3b:03:bd:92:a7:6f:52:83:59:8e:6d:67: 4c:8b:ad:19:bc:54:1a:62:da:f8:76:ba:7a:60:65:f0:52:71: c1:7a:96:e2:10:8a:5e:6f:8b:3c:c3:3f:db:79:47:cc:70:9b: 4b:0d:df:05:c9:e9:22:14:fa:ee:94:b6:16:6b:19:2b:a1:41: 1f:fa:5b:8d:d1:42:20:f1:09:3e:41:a6:57:81:bf:91:10:89: f6:e6:d8:4d:6c:97:0b:0f:92:46:50:92:b1:fb:09:3d:69:c0: 28:85:a2:fd:d4:1d:49:76:7c:57:26:6d:94:05:c3:dd:e9:c8: 76:98:89:13:06:34:62:9d:93:4c:05:67:f6:aa:fe:88:0e:8f: 83:11:3f:90 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUeLmdTWUNcxOXEQ7jdA/Tg9mB9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI4MDQ4NTMxQ0ZFRDI1REVERTRFRjkzQ0JFRUJEMzdB MDA1M0M3OTAeFw0yNTA1MDYwNDQ0MTFaFw0yNTA1MDcwNjUyMTFaMDMxMTAvBgNV BAMTKDk5RTI3ODkzNEJBRTE1NDJBQTRDOEZFNDZCQzdCNjQ0RjIyQkY5MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFzZZOhZ1GN9lVtoH/8biIHb5I Eo6/lHQCCZ8KwbT3cFjXDuC+AID29N7L6ZSic1u40Q5NAUdx0mV6ZyQnBwsEeg+R rr+JG/qzX6AH7ApNCoRMYV+X6UPA/FTU4xslSx3EYpEkj0uvqkCeBqpQzACK4wrH QwaQLOc+kVlQ3QLlKu9doIxjrz0O+RXLcv/YMzukeVLoLSR1Ie38WH/VFYeF31om 2DhG8Fki3U1moM5fNYy+VdOAPA8ZMeJYaBb/3KBFc7tp5XF8/VtSVbgnOECXWgi+ iyfEtsmW9WoaufUJfbobsinm2wByQc1idJw3DSooOvWqqleOKm1WKbrxtPn1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUmeJ4k0uuFUKqTI/ka8e2RPIr+SkwHwYDVR0j BBgwFoAUG4BIUxz+0l3t5O+Ty+69N6AFPHkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzZmZDRlYTEtYTI2Ni00ZGVhLWI0OGEtMTVkYTM1NDUy MTA5LzIvMUI4MDQ4NTMxQ0ZFRDI1REVERTRFRjkzQ0JFRUJEMzdBMDA1M0M3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xQjgwNDg1MzFDRkVEMjVERURFNEVGOTND QkVFQkQzN0EwMDUzQzc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M2ZmQ0ZWExLWEyNjYtNGRlYS1iNDhhLTE1ZGEzNTQ1MjEwOS8yLzFCODA0ODUz MUNGRUQyNURFREU0RUY5M0NCRUVCRDM3QTAwNTNDNzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBOfwT/ W5AxUkL57TbMYu4Y6gCqP7wUB8QG9a92+zXM2SuqPqDNWu49f9BCmAQfOLwHpbqH 2TIuTkllxfEvBNVo/Efvt0c9eIHqc2tD0d4O7IH0ahNnPWZSePlbRTzwL67FP26r mYEf7HLAL/T8r3nGEFM7A72Sp29Sg1mObWdMi60ZvFQaYtr4drp6YGXwUnHBepbi EIpeb4s8wz/beUfMcJtLDd8FyekiFPrulLYWaxkroUEf+luN0UIg8Qk+QaZXgb+R EIn25thNbJcLD5JGUJKx+wk9acAohaL91B1JdnxXJm2UBcPd6ch2mIkTBjRinZNM BWf2qv6IDo+DET+Q -----END CERTIFICATE-----Generated at Tue May 6 22:34:26 2025 by rpki-client