$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: eEn3kKRrmmX8dcQomgxC6Yble3ALpvRl3UmgXKV/NZE= Subject key identifier: 5B:F8:4D:7A:A8:6F:32:CB:7E:D7:77:8B:84:82:78:4F:3A:EB:9C:73 Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 2442B28FD8F063E6CE8D0F750631678244EBD649 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: E4 Signing time: Sat 10 May 2025 07:33:49 +0000 Manifest this update: Sat 10 May 2025 07:28:49 +0000 Manifest next update: Sun 11 May 2025 07:33:49 +0000 Files and hashes: 1: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: OLVw8TnWouRVhh3V4gdyQAvmjgJvCoQ2OWZxVP/ddwo=) 2: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: liZtkDCXL4DmjNQ78r1O/4djDEbWR26m7nKfEkWRmh4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 07:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:42:b2:8f:d8:f0:63:e6:ce:8d:0f:75:06:31:67:82:44:eb:d6:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: May 10 07:28:49 2025 GMT Not After : May 11 07:33:49 2025 GMT Subject: CN=5BF84D7AA86F32CB7ED7778B8482784F3AEB9C73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:9c:f0:eb:89:ee:b1:d8:fd:ff:db:49:b5: 6c:b7:bd:9c:48:6e:7e:19:a1:b1:68:f7:d9:ab:68: 2c:43:b2:d3:45:a3:e2:23:b1:46:ec:29:6a:9f:48: c5:11:53:1f:7c:f2:ce:eb:95:ba:52:3e:5d:99:9c: 6b:21:22:a3:24:d6:2b:4c:7f:34:9c:27:aa:2a:54: 31:99:30:0f:54:6d:c3:63:5c:fa:4e:f3:7a:e9:31: f4:eb:bc:99:42:a2:8f:6c:79:9b:72:54:f9:0e:09: 58:3e:14:5e:3b:fe:57:7e:9f:1b:ff:d7:9b:ab:be: 1f:09:e6:5a:28:d0:22:28:be:4d:fa:92:dd:10:79: e1:cd:66:d6:d8:dc:52:c1:44:e5:b2:b3:d0:45:28: d8:0b:b8:e8:4d:a4:f7:f5:18:e2:4e:27:68:44:7b: 2a:a3:6b:91:c7:6d:cb:94:4e:8c:ce:14:12:32:46: a4:a5:dc:ac:a2:36:fd:84:ba:1b:36:48:f8:61:b4: dc:fb:82:9e:2e:0d:23:c9:19:8c:39:e4:1a:f2:04: 3b:84:c6:b5:51:85:79:27:af:79:0e:17:0f:6b:58: 80:1e:cc:fb:db:67:d5:b4:35:ab:c0:4a:87:e9:a2: 7a:a9:8f:77:d2:26:82:5e:fb:ca:d1:c4:05:88:71: 15:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F8:4D:7A:A8:6F:32:CB:7E:D7:77:8B:84:82:78:4F:3A:EB:9C:73 X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:cb:a6:03:97:e9:64:fa:4e:fe:95:ab:24:a4:88:fe:06:90: b5:d2:a1:c5:b6:b4:dd:aa:00:ca:cb:ba:ca:22:94:5c:e3:29: ca:c5:3e:ce:0b:83:8e:67:62:08:4d:e9:e2:4e:ba:bd:0a:27: 9e:91:30:24:b1:69:f5:29:87:48:a1:1c:aa:35:e5:4c:f4:21: 85:ae:9e:47:7d:07:28:98:05:b2:ee:74:d2:c7:01:25:ec:ca: d9:41:55:b7:fa:f2:1c:25:a5:2d:01:d4:ea:de:e9:d3:40:44: 78:d7:f2:f1:51:a4:f9:90:c2:04:06:a6:b4:3c:91:28:eb:b7: ba:9d:2c:e7:0b:30:90:cb:a1:b5:f4:e8:c5:8a:1e:c7:d0:b6: 99:e2:dc:35:54:56:70:31:a9:c4:9a:ea:1a:83:25:d6:a3:92: 2b:89:ac:1a:0d:ff:84:20:e4:49:60:3b:14:c2:46:c1:a0:ec: 78:eb:ba:2f:42:dc:49:0e:97:47:16:4a:fe:0b:b6:1c:47:9d: 36:e1:d8:b6:d7:73:94:06:c0:cf:8c:dc:53:03:b8:e5:8f:ff: 40:df:17:69:2d:23:23:36:20:0e:71:bf:ba:bc:09:88:2b:c5: 19:af:dd:07:a5:65:58:f4:8a:e9:d5:1a:fb:e6:4b:4b:ea:40: f6:8e:74:d3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJEKyj9jwY+bOjQ91BjFngkTr1kkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNTA1MTAwNzI4NDlaFw0yNTA1MTEwNzMzNDlaMDMxMTAvBgNV BAMTKDVCRjg0RDdBQTg2RjMyQ0I3RUQ3Nzc4Qjg0ODI3ODRGM0FFQjlDNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzOpzw64nusdj9/9tJtWy3vZxI bn4ZobFo99mraCxDstNFo+IjsUbsKWqfSMURUx988s7rlbpSPl2ZnGshIqMk1itM fzScJ6oqVDGZMA9UbcNjXPpO83rpMfTrvJlCoo9seZtyVPkOCVg+FF47/ld+nxv/ 15urvh8J5loo0CIovk36kt0QeeHNZtbY3FLBROWys9BFKNgLuOhNpPf1GOJOJ2hE eyqja5HHbcuUTozOFBIyRqSl3KyiNv2Euhs2SPhhtNz7gp4uDSPJGYw55BryBDuE xrVRhXknr3kOFw9rWIAezPvbZ9W0NavASofponqpj3fSJoJe+8rRxAWIcRXrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUW/hNeqhvMst+13eLhIJ4TzrrnHMwHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAGy6YD l+lk+k7+laskpIj+BpC10qHFtrTdqgDKy7rKIpRc4ynKxT7OC4OOZ2IITeniTrq9 CieekTAksWn1KYdIoRyqNeVM9CGFrp5HfQcomAWy7nTSxwEl7MrZQVW3+vIcJaUt AdTq3unTQER41/LxUaT5kMIEBqa0PJEo67e6nSznCzCQy6G19OjFih7H0LaZ4tw1 VFZwManEmuoagyXWo5IriawaDf+EIORJYDsUwkbBoOx467ovQtxJDpdHFkr+C7Yc R5024di213OUBsDPjNxTA7jlj/9A3xdpLSMjNiAOcb+6vAmIK8UZr90HpWVY9Irp 1Rr75ktL6kD2jnTT -----END CERTIFICATE-----Generated at Sat May 10 17:02:31 2025 by rpki-client