$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft File: 178395FF98E8AEA645CFCD7DF742855D46457BAF.mft (raw, json) Hash identifier: xzZ1dBLP3BjhNmFWHx0exvHfkOdPLmgURlPoOHJD/Ko= Subject key identifier: 9F:19:4D:2E:05:51:B0:4F:44:D3:11:CE:CD:7A:A8:44:AB:0F:8E:FF Authority key identifier: 17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF Certificate issuer: /CN=178395FF98E8AEA645CFCD7DF742855D46457BAF Certificate serial: 7EBFC151490BDE3DE3F900D619C51ACF83E0064B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft Manifest number: 73 Signing time: Fri 09 May 2025 11:27:11 +0000 Manifest this update: Fri 09 May 2025 11:22:11 +0000 Manifest next update: Sat 10 May 2025 13:23:11 +0000 Files and hashes: 1: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: DJIGVPPFdKw8WztsRwxSv88N7qWJk5uvTreoiT8psfU=) 2: 178395FF98E8AEA645CFCD7DF742855D46457BAF.crl (hash: f9/osL1G47rGyPNHRthuAEe183WzXMFWykhT/u1vjFY=) 3: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: wALn/kuHRs3MtX4loe3ndPMMd8kJpkWDJTPFOhhGFZ0=) 4: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: tFQ4zhgC2iPnwqXyLnNzgEkZZIC1LjVxrVLEJzRxX40=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 12:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:bf:c1:51:49:0b:de:3d:e3:f9:00:d6:19:c5:1a:cf:83:e0:06:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=178395FF98E8AEA645CFCD7DF742855D46457BAF Validity Not Before: May 9 11:22:11 2025 GMT Not After : May 10 13:23:11 2025 GMT Subject: CN=9F194D2E0551B04F44D311CECD7AA844AB0F8EFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b0:de:cb:92:6a:47:22:2e:04:d0:51:59:9d: 26:1b:4b:63:f6:47:bc:37:45:2a:3b:02:1c:e5:a8: e2:40:36:51:1e:a3:e1:9e:c2:9d:06:4b:e0:5c:3d: 91:9e:99:2a:b3:ae:c8:62:f5:2b:d8:67:9a:cc:0e: 77:a4:53:c9:7c:e7:c1:36:9e:94:6a:e3:b0:12:6c: 10:10:1f:e5:31:9f:e1:39:36:d7:51:7d:32:98:4f: 9e:30:bc:f4:5f:a6:05:b4:b8:83:19:a8:d9:cc:f8: f7:1a:4a:99:0c:02:f5:97:cf:dc:71:d6:82:8f:66: 61:d2:36:21:fc:f8:e4:43:5b:24:94:93:0c:08:b5: 31:1d:d9:5b:77:e9:a0:c3:bf:f0:58:68:79:6a:db: f3:75:f7:5c:06:ec:63:62:52:94:dc:90:17:c1:7c: c3:12:36:1b:75:a7:04:22:1c:be:f1:1f:02:03:f6: 9c:29:67:b5:5e:87:6e:63:57:a6:06:e4:8f:09:ca: b0:15:bf:3c:2b:9e:74:01:53:3e:09:5a:0f:de:8f: 6a:c9:a6:24:fe:9f:d6:86:39:ab:78:73:df:65:d4: 9b:22:e8:4a:5c:88:95:b0:9d:a0:ed:6a:c9:b6:bc: 96:4f:2a:11:a9:6f:37:52:10:aa:9a:37:70:64:b8: 00:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:19:4D:2E:05:51:B0:4F:44:D3:11:CE:CD:7A:A8:44:AB:0F:8E:FF X509v3 Authority Key Identifier: keyid:17:83:95:FF:98:E8:AE:A6:45:CF:CD:7D:F7:42:85:5D:46:45:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/178395FF98E8AEA645CFCD7DF742855D46457BAF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/2/178395FF98E8AEA645CFCD7DF742855D46457BAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:26:44:8e:1a:3d:39:b3:f5:83:ce:d6:19:3a:24:74:d7:bb: f1:05:15:29:86:1e:39:ff:cc:52:aa:eb:55:c2:2e:fe:23:ef: c5:83:7f:95:7a:30:74:92:e6:c4:71:19:e3:8f:3d:79:56:5d: f7:a5:22:10:43:fb:f3:83:d0:98:75:a2:c1:f1:6d:6e:9e:fd: 8c:64:1b:b3:11:b3:8a:6b:f3:d9:0f:3f:54:dd:b7:6c:d2:9f: 1c:0a:c8:00:97:35:c1:d5:a5:b3:c0:23:2b:8c:44:7a:77:34: 0f:19:6b:9e:c7:0c:20:20:de:37:53:07:f7:cc:d2:81:f3:3f: 6c:9f:05:28:26:6f:95:19:e0:7a:76:f7:8d:f2:56:be:cf:45: 76:82:e6:72:6f:2d:a0:5a:f6:0b:93:47:c1:4f:f3:11:70:cc: 87:97:87:6b:44:f0:3f:50:42:31:7b:a6:76:f0:48:5c:fd:a7: a7:42:2b:87:62:e5:a1:7c:15:bd:b7:62:18:0c:f4:06:4c:41: d8:76:d1:e8:6a:f3:1c:97:80:56:ec:44:af:dd:e7:e1:44:64: aa:72:30:e1:2b:37:a5:10:68:ff:0d:aa:54:9b:69:7f:6f:01: 37:39:1c:79:4c:49:20:cd:38:2f:bd:02:c9:ac:32:93:d0:54: 2d:57:ea:4c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfr/BUUkL3j3j+QDWGcUaz4PgBkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc4Mzk1RkY5OEU4QUVBNjQ1Q0ZDRDdERjc0Mjg1NUQ0 NjQ1N0JBRjAeFw0yNTA1MDkxMTIyMTFaFw0yNTA1MTAxMzIzMTFaMDMxMTAvBgNV BAMTKDlGMTk0RDJFMDU1MUIwNEY0NEQzMTFDRUNEN0FBODQ0QUIwRjhFRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgsN7LkmpHIi4E0FFZnSYbS2P2 R7w3RSo7AhzlqOJANlEeo+Gewp0GS+BcPZGemSqzrshi9SvYZ5rMDnekU8l858E2 npRq47ASbBAQH+Uxn+E5NtdRfTKYT54wvPRfpgW0uIMZqNnM+PcaSpkMAvWXz9xx 1oKPZmHSNiH8+ORDWySUkwwItTEd2Vt36aDDv/BYaHlq2/N191wG7GNiUpTckBfB fMMSNht1pwQiHL7xHwID9pwpZ7Veh25jV6YG5I8JyrAVvzwrnnQBUz4JWg/ej2rJ piT+n9aGOat4c99l1Jsi6EpciJWwnaDtasm2vJZPKhGpbzdSEKqaN3BkuADDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUnxlNLgVRsE9E0xHOzXqoRKsPjv8wHwYDVR0j BBgwFoAUF4OV/5jorqZFz81990KFXUZFe68wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzIvMTc4Mzk1RkY5OEU4QUVBNjQ1Q0ZDRDdERjc0Mjg1NUQ0NjQ1N0JBRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy8xNzgzOTVGRjk4RThBRUE2NDVDRkNEN0RG NzQyODU1RDQ2NDU3QkFGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy8yLzE3ODM5NUZG OThFOEFFQTY0NUNGQ0Q3REY3NDI4NTVENDY0NTdCQUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBeJkSO Gj05s/WDztYZOiR017vxBRUphh45/8xSqutVwi7+I+/Fg3+VejB0kubEcRnjjz15 Vl33pSIQQ/vzg9CYdaLB8W1unv2MZBuzEbOKa/PZDz9U3bds0p8cCsgAlzXB1aWz wCMrjER6dzQPGWuexwwgIN43Uwf3zNKB8z9snwUoJm+VGeB6dveN8la+z0V2guZy by2gWvYLk0fBT/MRcMyHl4drRPA/UEIxe6Z28Ehc/aenQiuHYuWhfBW9t2IYDPQG TEHYdtHoavMcl4BW7ESv3efhRGSqcjDhKzelEGj/DapUm2l/bwE3ORx5TEkgzTgv vQLJrDKT0FQtV+pM -----END CERTIFICATE-----Generated at Sat May 10 00:38:42 2025 by rpki-client