$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft File: DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft (raw, json) Hash identifier: 0qfv6zRxwuydywwhxdpJwiTsjxMqeaq2rVNMm27IBYA= Subject key identifier: 5B:F0:DE:70:AA:15:CF:C2:B8:7F:6A:0E:6D:59:08:35:70:20:FF:A4 Authority key identifier: DA:8C:B3:58:12:CA:1F:A3:A1:BD:6D:38:69:38:50:72:79:3E:C5:0E Certificate issuer: /CN=DA8CB35812CA1FA3A1BD6D3869385072793EC50E Certificate serial: 0527421B1D60225FA3AE48D94B042048D518E3F7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft Manifest number: 49 Signing time: Tue 06 May 2025 14:18:18 +0000 Manifest this update: Tue 06 May 2025 14:13:18 +0000 Manifest next update: Wed 07 May 2025 15:22:18 +0000 Files and hashes: 1: 326130613a363034343a626330313a3a2f34382d3634203d3e20313939373633.roa (hash: 3n+4yNulEMaksO5/ZQTRg4MIPlOtdwvsGLaK42kyDMc=) 2: 326130613a363034343a626366663a3a2f34382d3634203d3e20313939373633.roa (hash: 7YCpwymksWPwg5ziGzmWS9FgFbgvTAl7aySk1Jpj/x4=) 3: DA8CB35812CA1FA3A1BD6D3869385072793EC50E.crl (hash: 6Ae8rDVWz+0Zz+It5UvJ6/BBRnCMMeOV18QSXIiikis=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.crl rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 14:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:27:42:1b:1d:60:22:5f:a3:ae:48:d9:4b:04:20:48:d5:18:e3:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8CB35812CA1FA3A1BD6D3869385072793EC50E Validity Not Before: May 6 14:13:18 2025 GMT Not After : May 7 15:22:18 2025 GMT Subject: CN=5BF0DE70AA15CFC2B87F6A0E6D5908357020FFA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fb:29:24:60:45:ed:9b:ae:0e:49:86:ca:42: ee:04:50:a3:64:0a:16:53:fc:17:53:c2:30:fd:92: fe:7c:bc:9c:d9:ff:78:a2:9d:bf:f2:de:c8:90:5a: 7b:48:68:77:b6:93:04:9a:a7:28:56:e2:54:b8:46: d9:89:96:8b:71:5c:d8:96:be:2c:85:5b:67:47:2f: 0d:33:99:b8:e3:56:cf:c1:3c:62:a6:b0:03:9f:06: 89:15:ff:b9:51:b3:1f:d0:4a:8e:65:1f:67:1e:d1: ce:73:64:a3:f7:0b:c3:8c:36:19:dd:74:18:96:50: 59:03:f6:57:98:a9:9f:4d:3e:b1:50:cb:6a:75:43: d4:c7:fe:46:2b:8a:cf:84:91:8d:40:39:32:6c:64: 85:ec:7d:19:31:c5:70:48:cf:41:1c:60:d2:2c:79: 81:38:89:c7:d7:ed:cf:be:fb:b2:e8:b6:af:f3:c3: 7c:73:10:04:12:d3:68:36:43:df:bb:15:42:d4:f9: 4e:4e:bd:e4:89:49:ea:b3:72:03:45:28:a2:de:fa: e0:e0:88:61:e2:68:cf:e5:cc:86:d2:9f:54:c2:93: b1:0f:ef:5c:a7:7d:6b:2b:8e:53:b0:43:a2:09:5b: 81:34:e7:6c:f7:1c:eb:f9:1b:96:0c:e9:39:11:4d: 44:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F0:DE:70:AA:15:CF:C2:B8:7F:6A:0E:6D:59:08:35:70:20:FF:A4 X509v3 Authority Key Identifier: keyid:DA:8C:B3:58:12:CA:1F:A3:A1:BD:6D:38:69:38:50:72:79:3E:C5:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:8e:a0:24:70:f2:85:b3:1a:1b:52:2e:a5:9a:1b:d9:13:74: b1:2c:74:f9:58:d2:8b:f8:50:cb:e1:bf:b0:54:9f:ea:bf:f5: 9f:08:b6:d5:93:e5:1e:c1:e3:bb:24:73:a5:bf:54:ed:a9:e5: 07:51:90:a3:78:c0:b4:49:96:40:57:dd:a3:8b:c8:71:6f:ea: 08:a7:e1:c7:e5:57:d6:39:c2:9d:0f:b2:bd:60:52:09:7a:85: e3:60:9c:b1:9d:84:4c:6a:78:82:48:71:ea:fa:3d:9b:41:f4: ca:31:3e:75:85:87:8b:c3:60:15:3e:6f:57:80:12:bb:dc:dc: 3e:42:92:3f:cb:75:20:96:57:3e:62:a7:19:3a:4f:6b:65:07: e9:1f:ce:a6:3f:ed:19:d5:4e:62:de:9c:40:90:f1:ef:64:e6: 9a:9a:2f:10:50:c7:04:35:46:d5:9a:bb:d5:fb:dd:1b:c1:89: 7c:ed:34:aa:70:6a:48:17:7e:6d:e0:94:c4:da:59:dd:c4:dd: 12:f8:e7:20:bf:3d:81:34:bb:f4:a6:ba:e6:b7:ab:03:d3:46: 00:f9:a9:d0:9f:16:ce:a0:aa:e4:e5:9b:34:37:dc:6b:f6:bb: ee:cc:68:e6:5a:cc:60:6b:b2:2a:52:30:d6:13:82:12:ce:32: 2f:20:8c:f1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBSdCGx1gIl+jrkjZSwQgSNUY4/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4Q0IzNTgxMkNBMUZBM0ExQkQ2RDM4NjkzODUwNzI3 OTNFQzUwRTAeFw0yNTA1MDYxNDEzMThaFw0yNTA1MDcxNTIyMThaMDMxMTAvBgNV BAMTKDVCRjBERTcwQUExNUNGQzJCODdGNkEwRTZENTkwODM1NzAyMEZGQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE+ykkYEXtm64OSYbKQu4EUKNk ChZT/BdTwjD9kv58vJzZ/3iinb/y3siQWntIaHe2kwSapyhW4lS4RtmJlotxXNiW viyFW2dHLw0zmbjjVs/BPGKmsAOfBokV/7lRsx/QSo5lH2ce0c5zZKP3C8OMNhnd dBiWUFkD9leYqZ9NPrFQy2p1Q9TH/kYris+EkY1AOTJsZIXsfRkxxXBIz0EcYNIs eYE4icfX7c+++7Lotq/zw3xzEAQS02g2Q9+7FULU+U5OveSJSeqzcgNFKKLe+uDg iGHiaM/lzIbSn1TCk7EP71ynfWsrjlOwQ6IJW4E052z3HOv5G5YM6TkRTURfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUW/DecKoVz8K4f2oObVkINXAg/6QwHwYDVR0j BBgwFoAU2oyzWBLKH6OhvW04aThQcnk+xQ4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM4ZDE5ZDAtZDIyMS00NDQ4LTgxMWEtMGUxNjExYTQ2 NDQyLzEvREE4Q0IzNTgxMkNBMUZBM0ExQkQ2RDM4NjkzODUwNzI3OTNFQzUwRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9EQThDQjM1ODEyQ0ExRkEzQTFCRDZEMzg2 OTM4NTA3Mjc5M0VDNTBFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZjOGQxOWQwLWQyMjEtNDQ0OC04MTFhLTBlMTYxMWE0NjQ0Mi8xL0RBOENCMzU4 MTJDQTFGQTNBMUJENkQzODY5Mzg1MDcyNzkzRUM1MEUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAAjqAk cPKFsxobUi6lmhvZE3SxLHT5WNKL+FDL4b+wVJ/qv/WfCLbVk+UeweO7JHOlv1Tt qeUHUZCjeMC0SZZAV92ji8hxb+oIp+HH5VfWOcKdD7K9YFIJeoXjYJyxnYRManiC SHHq+j2bQfTKMT51hYeLw2AVPm9XgBK73Nw+QpI/y3Ugllc+YqcZOk9rZQfpH86m P+0Z1U5i3pxAkPHvZOaami8QUMcENUbVmrvV+90bwYl87TSqcGpIF35t4JTE2lnd xN0S+Ocgvz2BNLv0prrmt6sD00YA+anQnxbOoKrk5Zs0N9xr9rvuzGjmWsxga7Iq UjDWE4ISzjIvIIzx -----END CERTIFICATE-----Generated at Tue May 6 22:40:17 2025 by rpki-client