$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft File: 090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft (raw, json) Hash identifier: GYLiaoScE2mdrRUQCv2Nqyp0SU5XFR5Vve3173ta40Q= Subject key identifier: 8E:56:6D:77:40:AA:9C:42:19:55:16:1B:FB:57:8C:76:BD:83:6C:12 Authority key identifier: 09:0F:FD:E4:0B:60:29:CD:7F:E3:1A:6E:DB:46:7E:1A:53:84:B1:E1 Certificate issuer: /CN=090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1 Certificate serial: 532FCB898915EA32F29183324C8A73A535ABE35A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft Manifest number: 02E7 Signing time: Sun 11 May 2025 23:10:17 +0000 Manifest this update: Sun 11 May 2025 23:05:17 +0000 Manifest next update: Mon 12 May 2025 23:11:17 +0000 Files and hashes: 1: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: /6TLbLr5yUGE6+8nz6p2on3lwleCpU2rYt4G5JE9rDk=) 2: 090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl (hash: eg7RuuebUl4xsqmfhKWc7hm9tbtlGchVbP8ms+8mdbA=) 3: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: QnZhS/jyMu2GcYAJct7dnCIK9fFoWaGlnE/9lHFVCZk=) 4: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: q03Pj7BB4FvQqVgWTNPLCqf6FWIvUGBqto+KCXVBKFQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 21:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:2f:cb:89:89:15:ea:32:f2:91:83:32:4c:8a:73:a5:35:ab:e3:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1 Validity Not Before: May 11 23:05:17 2025 GMT Not After : May 12 23:11:17 2025 GMT Subject: CN=8E566D7740AA9C421955161BFB578C76BD836C12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5f:96:a6:aa:32:4c:db:1f:0c:02:79:81:d8: 2a:45:66:34:71:67:09:30:52:b5:52:58:99:96:63: 36:33:0d:68:54:77:c5:a3:b4:72:7b:b5:83:87:f2: 80:c2:33:79:e0:da:8f:c9:2c:bd:95:8d:51:ac:e2: 1d:ad:c7:3d:3f:d7:55:80:96:67:f5:13:a3:f2:a5: 46:c7:0a:12:5c:1f:89:a1:d4:56:7b:12:49:1c:16: e9:79:65:a6:3c:aa:5d:23:fd:a9:8d:19:b3:bb:15: ed:8e:f6:b8:d7:27:2e:ca:21:86:c7:d1:32:e1:6d: e7:99:3b:9f:45:ed:f2:6e:c7:73:5a:8d:e8:92:95: 95:df:e5:e8:3d:05:cf:67:20:fe:69:92:a6:37:86: 17:d6:02:64:98:04:f9:b2:09:52:66:8e:6c:15:66: 5e:f2:06:eb:2a:76:f8:4f:2f:85:88:bb:cd:9a:e7: 6b:7d:32:02:72:ee:d7:08:04:2f:08:73:d3:db:76: ae:60:41:35:99:3d:8e:eb:84:80:c1:be:76:a6:0d: 2c:0f:d5:b3:1f:9d:9f:2b:a7:7b:8a:9e:57:56:e8: 3b:5b:9e:47:d0:6c:1c:44:61:ed:4d:8f:9f:83:7b: 8e:e9:b3:a7:b0:0c:ca:46:be:e6:1f:38:b7:c0:25: f0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:56:6D:77:40:AA:9C:42:19:55:16:1B:FB:57:8C:76:BD:83:6C:12 X509v3 Authority Key Identifier: keyid:09:0F:FD:E4:0B:60:29:CD:7F:E3:1A:6E:DB:46:7E:1A:53:84:B1:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:c9:3b:79:22:65:5b:49:fd:9c:a7:c6:90:1e:14:3e:91:19: d3:c9:82:3f:6b:72:79:25:b6:cd:6c:5e:cd:2d:30:34:63:3b: ae:6f:75:92:a0:e9:58:54:6b:af:68:4e:ed:97:16:aa:81:fa: 91:fd:6a:b5:f7:bd:9d:de:c5:bd:55:12:77:c7:78:be:91:61: f9:44:8c:c1:92:68:bd:c1:44:60:c7:51:8a:a7:bb:ca:ca:c2: 15:22:6b:1a:b3:c7:b2:7b:65:b2:88:3b:0e:02:01:63:01:91: 98:34:e6:f8:f4:ce:fb:43:cb:92:0f:ee:1b:64:d1:7c:00:d7: 3e:d0:b9:a7:83:15:3e:56:21:5f:05:db:5d:1f:db:f8:6d:a1: fb:a1:56:73:09:94:02:62:f6:eb:34:f2:6d:57:50:d9:fa:dc: 83:21:96:ca:54:fe:b3:8c:48:98:fa:0b:09:24:61:51:e3:61: 44:6a:ab:c6:4d:23:09:2b:0e:7f:3f:12:f5:44:58:2c:93:ca: 99:a7:1d:67:72:e2:3a:a3:6f:00:35:ee:4c:f8:e0:ee:78:9f: d9:4a:a6:cf:f2:ab:5e:17:20:b2:29:cd:14:7d:fd:80:9b:e9: 2f:88:bf:79:52:ef:36:4d:c0:18:20:cd:16:31:1e:bb:2b:cb: be:cd:78:ac -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUy/LiYkV6jLykYMyTIpzpTWr41owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkwRkZERTQwQjYwMjlDRDdGRTMxQTZFREI0NjdFMUE1 Mzg0QjFFMTAeFw0yNTA1MTEyMzA1MTdaFw0yNTA1MTIyMzExMTdaMDMxMTAvBgNV BAMTKDhFNTY2RDc3NDBBQTlDNDIxOTU1MTYxQkZCNTc4Qzc2QkQ4MzZDMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiX5amqjJM2x8MAnmB2CpFZjRx ZwkwUrVSWJmWYzYzDWhUd8WjtHJ7tYOH8oDCM3ng2o/JLL2VjVGs4h2txz0/11WA lmf1E6PypUbHChJcH4mh1FZ7EkkcFul5ZaY8ql0j/amNGbO7Fe2O9rjXJy7KIYbH 0TLhbeeZO59F7fJux3NajeiSlZXf5eg9Bc9nIP5pkqY3hhfWAmSYBPmyCVJmjmwV Zl7yBusqdvhPL4WIu82a52t9MgJy7tcIBC8Ic9Pbdq5gQTWZPY7rhIDBvnamDSwP 1bMfnZ8rp3uKnldW6DtbnkfQbBxEYe1Nj5+De47ps6ewDMpGvuYfOLfAJfAzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUjlZtd0CqnEIZVRYb+1eMdr2DbBIwHwYDVR0j BBgwFoAUCQ/95AtgKc1/4xpu20Z+GlOEseEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzUvMDkwRkZERTQwQjYwMjlDRDdGRTMxQTZFREI0NjdFMUE1Mzg0QjFFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC8wOTBGRkRFNDBCNjAyOUNEN0ZFMzFBNkVE QjQ2N0UxQTUzODRCMUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC81LzA5MEZGREU0 MEI2MDI5Q0Q3RkUzMUE2RURCNDY3RTFBNTM4NEIxRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQByyTt5 ImVbSf2cp8aQHhQ+kRnTyYI/a3J5JbbNbF7NLTA0Yzuub3WSoOlYVGuvaE7tlxaq gfqR/Wq1972d3sW9VRJ3x3i+kWH5RIzBkmi9wURgx1GKp7vKysIVImsas8eye2Wy iDsOAgFjAZGYNOb49M77Q8uSD+4bZNF8ANc+0LmngxU+ViFfBdtdH9v4baH7oVZz CZQCYvbrNPJtV1DZ+tyDIZbKVP6zjEiY+gsJJGFR42FEaqvGTSMJKw5/PxL1RFgs k8qZpx1ncuI6o28ANe5M+ODueJ/ZSqbP8qteFyCyKc0Uff2Am+kviL95Uu82TcAY IM0WMR67K8u+zXis -----END CERTIFICATE-----Generated at Mon May 12 04:33:59 2025 by rpki-client