$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft File: 47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json) Hash identifier: CP4JJSRWPxRTTxEkh//B71nK2hL7ce5XU3E3SbRidA8= Subject key identifier: A6:C7:F8:0B:B0:00:A6:92:D4:4E:E5:A9:67:34:C3:01:B5:EB:E0:79 Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 Certificate issuer: /CN=47E9555355C6B007AACD5D45BF41E3383E991641 Certificate serial: 1A1FE6EE03282030EA584C7F4C890B6075F04BE2 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft Manifest number: 03A4 Signing time: Fri 09 May 2025 01:10:03 +0000 Manifest this update: Fri 09 May 2025 01:05:03 +0000 Manifest next update: Sat 10 May 2025 01:27:03 +0000 Files and hashes: 1: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: uANGMPjSqPMYSTheU/6BnDE1XxqFO5trV3yKozSSckY=) 2: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: 3ipGYMDZ54FZdaI4eg46OMa/ZV0a0Q3rHUY9RUekrv8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 10:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1f:e6:ee:03:28:20:30:ea:58:4c:7f:4c:89:0b:60:75:f0:4b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641 Validity Not Before: May 9 01:05:03 2025 GMT Not After : May 10 01:27:03 2025 GMT Subject: CN=A6C7F80BB000A692D44EE5A96734C301B5EBE079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1c:f1:41:12:02:e2:fb:bb:71:06:a4:db:c0: 57:d3:ba:29:15:ac:83:31:e8:c7:48:3e:d4:af:81: ad:a1:77:3b:88:76:ce:4b:99:56:5c:97:c4:62:0f: 24:e3:63:c2:e2:f7:bc:95:f6:7c:7f:4f:cd:c6:3f: 2b:6a:0e:82:3f:8b:b5:57:90:c3:a4:8d:6e:48:9a: 4e:0e:56:89:09:0a:74:ca:cf:da:13:bf:93:9e:50: 68:55:cc:f3:d6:3e:cb:f9:32:35:15:a4:ad:12:89: a9:bd:fa:9c:23:1e:3b:db:52:7f:9d:99:93:16:66: c4:fa:cb:71:b9:9c:c6:e9:ff:ae:49:7d:d5:30:f8: 7e:c1:e8:4a:df:a2:6d:90:45:91:1f:42:c3:55:03: 59:36:43:52:4a:a2:19:c3:ed:8f:ce:77:32:e5:c4: a3:aa:ac:66:b7:b5:0c:45:ca:cb:99:f6:c6:bd:5d: 80:09:7c:6b:02:7b:e7:e0:05:af:40:43:0a:fb:2a: e6:3c:2f:5b:2b:60:17:4a:be:02:55:f6:bf:41:45: 64:ae:85:2e:5b:17:f5:7a:63:8c:f1:50:60:ff:c1: f9:b3:cb:d5:27:c6:5a:ca:8a:fc:be:4c:a2:15:16: c8:36:ef:5c:ce:c9:ff:b0:87:c6:3e:12:e0:80:4b: 08:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C7:F8:0B:B0:00:A6:92:D4:4E:E5:A9:67:34:C3:01:B5:EB:E0:79 X509v3 Authority Key Identifier: keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:0a:5b:e5:1a:fb:19:f1:63:d9:f2:4c:0b:5a:e0:82:c9:53: 5a:fa:40:da:29:ca:bf:48:4d:6d:93:71:c1:07:c8:52:3d:ae: fa:f9:7b:a9:c7:fc:0a:5f:12:ac:ee:f5:e9:c2:c8:9a:4c:9f: 68:af:6a:b0:a0:76:9f:f9:8e:e5:c8:d7:c0:42:6e:d0:77:6b: 9e:a1:48:fd:3c:b9:f6:df:9e:db:b9:c4:49:34:81:98:8c:27: 5b:17:ee:c3:21:b0:a7:52:4f:a2:73:88:0c:75:d2:2c:fc:91: 97:80:f9:e0:5a:95:41:41:d2:68:dd:f9:13:90:db:2a:81:b2: b1:e8:89:9f:0e:d1:ad:b6:f1:c1:8a:30:7c:5f:a0:02:1d:b3: 2f:d6:fe:d1:ab:f3:73:f2:97:86:43:f2:f6:8a:56:cd:92:11: 10:62:f2:42:9a:26:56:d6:4f:91:ec:71:17:46:27:de:28:9c: 23:59:c5:a0:42:80:01:d2:57:0a:c7:fe:56:83:12:07:48:e2: 05:5b:a0:f7:99:da:3f:21:43:b1:76:ea:9e:3e:c2:d7:2f:f9: 79:be:1e:d6:97:42:a6:a7:fd:24:75:a0:15:35:24:cd:c9:de: e2:cd:35:19:4c:2e:a6:64:b8:f5:8e:ef:26:34:97:81:92:c6: 09:62:b1:fb -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUGh/m7gMoIDDqWEx/TIkLYHXwS+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgz RTk5MTY0MTAeFw0yNTA1MDkwMTA1MDNaFw0yNTA1MTAwMTI3MDNaMDMxMTAvBgNV BAMTKEE2QzdGODBCQjAwMEE2OTJENDRFRTVBOTY3MzRDMzAxQjVFQkUwNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeHPFBEgLi+7txBqTbwFfTuikV rIMx6MdIPtSvga2hdzuIds5LmVZcl8RiDyTjY8Li97yV9nx/T83GPytqDoI/i7VX kMOkjW5Imk4OVokJCnTKz9oTv5OeUGhVzPPWPsv5MjUVpK0Siam9+pwjHjvbUn+d mZMWZsT6y3G5nMbp/65JfdUw+H7B6Erfom2QRZEfQsNVA1k2Q1JKohnD7Y/OdzLl xKOqrGa3tQxFysuZ9sa9XYAJfGsCe+fgBa9AQwr7KuY8L1srYBdKvgJV9r9BRWSu hS5bF/V6Y4zxUGD/wfmzy9UnxlrKivy+TKIVFsg271zOyf+wh8Y+EuCASwglAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUpsf4C7AAppLUTuWpZzTDAbXr4HkwHwYDVR0j BBgwFoAUR+lVU1XGsAeqzV1Fv0HjOD6ZFkEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzQvNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgzRTk5MTY0MS5j cmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJnLm5l dC9ycGtpL1JHbmV0LU9VL1ItbFZVMVhHc0FlcXpWMUZ2MEhqT0Q2WkZrRS5jZXIw gZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZTdkNTVmNy1lZTYwLTQwMDUt YmFkNy1iNDI4MThjZjUwZTgvNC80N0U5NTU1MzU1QzZCMDA3QUFDRDVENDVCRjQx RTMzODNFOTkxNjQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQpb5Rr7GfFj2fJMC1rggslTWvpA2inK v0hNbZNxwQfIUj2u+vl7qcf8Cl8SrO716cLImkyfaK9qsKB2n/mO5cjXwEJu0Hdr nqFI/Ty59t+e27nESTSBmIwnWxfuwyGwp1JPonOIDHXSLPyRl4D54FqVQUHSaN35 E5DbKoGyseiJnw7RrbbxwYowfF+gAh2zL9b+0avzc/KXhkPy9opWzZIREGLyQpom VtZPkexxF0Yn3iicI1nFoEKAAdJXCsf+VoMSB0jiBVug95naPyFDsXbqnj7C1y/5 eb4e1pdCpqf9JHWgFTUkzcne4s01GUwupmS49Y7vJjSXgZLGCWKx+w== -----END CERTIFICATE-----Generated at Fri May 9 06:44:22 2025 by rpki-client