$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft File: 6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft (raw, json) Hash identifier: lQOMJiN0+LQSckav4D6/gdgn260rWBQ+CSsoTCApiCc= Subject key identifier: 1C:CE:39:E2:F5:FF:54:50:E6:7B:F2:70:34:D3:F1:67:A9:2C:8A:91 Authority key identifier: 62:03:32:7B:6A:4B:0A:FB:98:2B:64:0B:8B:FF:2A:92:B1:C7:33:43 Certificate issuer: /CN=6203327B6A4B0AFB982B640B8BFF2A92B1C73343 Certificate serial: 25C9E44FCCA0E3784187508F4EB4C82BBA266D06 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft Manifest number: 7E Signing time: Sat 10 May 2025 15:38:55 +0000 Manifest this update: Sat 10 May 2025 15:33:55 +0000 Manifest next update: Sun 11 May 2025 17:55:55 +0000 Files and hashes: 1: 6203327B6A4B0AFB982B640B8BFF2A92B1C73343.crl (hash: ZXXNQ2T2JHTa9LboSZAGLx7njjbWl/V7sWgOooMtzto=) 2: 326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa (hash: 1uuqh7vWgIM0zB+uNA1obgzEdiTwrJmrg/6SIClfVTE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.crl rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 08:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c9:e4:4f:cc:a0:e3:78:41:87:50:8f:4e:b4:c8:2b:ba:26:6d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6203327B6A4B0AFB982B640B8BFF2A92B1C73343 Validity Not Before: May 10 15:33:55 2025 GMT Not After : May 11 17:55:55 2025 GMT Subject: CN=1CCE39E2F5FF5450E67BF27034D3F167A92C8A91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:09:88:30:ff:a4:20:00:ab:95:f2:64:d9:73: b5:26:af:6c:4e:76:06:e9:0f:ec:b8:b3:7f:6f:e0: e2:5c:f0:9d:d6:84:de:79:2d:41:45:98:0f:5e:e9: c8:62:60:91:11:68:20:0f:be:60:c9:38:1d:ac:e9: 9f:a0:8a:0b:55:47:54:96:95:77:9b:14:d4:21:2f: bd:de:fb:03:df:e2:60:4a:29:0b:1a:10:03:af:40: 75:2f:18:30:00:69:9d:9d:37:f2:71:3e:8e:b5:1d: ec:b6:90:19:d4:8d:a0:ce:63:c5:29:7f:b7:8e:0c: 23:25:3d:93:79:00:16:b2:a0:38:5f:a9:ae:7a:ae: de:a2:aa:f1:6f:33:5a:0b:1b:ca:26:fe:e0:86:f5: 48:c2:d2:e1:72:97:a2:7c:5d:82:73:56:f1:1b:d4: dd:c3:d6:2a:d5:6e:f0:87:bb:e9:9c:3d:71:e5:3d: 26:a3:35:7c:96:b1:c2:ef:0f:48:a7:3f:33:e2:6c: 4c:48:ee:44:90:4b:3a:a7:ef:73:62:52:60:7a:26: 6b:26:95:22:f6:9b:e8:ab:29:11:36:03:55:6a:0b: ce:43:c7:a2:fa:75:cb:f8:6f:bf:22:38:d9:09:e0: fc:31:a2:d2:d5:a2:b2:2e:95:d2:aa:0c:e7:db:33: 55:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CE:39:E2:F5:FF:54:50:E6:7B:F2:70:34:D3:F1:67:A9:2C:8A:91 X509v3 Authority Key Identifier: keyid:62:03:32:7B:6A:4B:0A:FB:98:2B:64:0B:8B:FF:2A:92:B1:C7:33:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/3/6203327B6A4B0AFB982B640B8BFF2A92B1C73343.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:ae:ef:b9:38:a2:39:96:c4:9e:6f:40:9a:0c:b1:71:13:c1: a9:d7:ef:13:76:44:92:64:9b:59:2b:f1:67:ee:f3:44:93:f9: 2b:cf:b8:33:d5:f3:3f:15:49:9a:bc:3f:5e:6c:0b:b1:64:0c: 26:6b:34:1e:25:2c:20:71:9f:a6:9e:b7:d5:79:06:16:dd:eb: a8:4b:03:61:3f:41:d7:b3:19:96:7f:4e:dc:c1:db:6c:5a:2e: 1d:f7:0a:29:73:95:e8:e8:c0:eb:ed:cc:2e:dc:72:92:75:1f: bd:4b:63:48:57:70:45:6e:54:91:14:f3:0e:79:3c:6e:1e:eb: b6:86:27:04:bf:cc:e7:94:60:98:0a:09:fe:66:aa:2b:3e:a5: b3:13:d2:f8:c6:ae:db:28:c0:4d:61:8f:4d:65:d0:ff:b4:7f: dd:88:bb:92:e9:ef:78:f4:a6:80:6a:6a:80:3f:dd:ea:df:94: 3d:3a:f6:d3:a0:01:0e:e6:bd:aa:90:5c:fd:7b:90:eb:2e:c1: 86:dd:6d:f5:c3:6f:9f:da:07:6a:45:1c:e3:a0:79:e5:15:c2: fa:c7:9a:b4:8c:2e:c9:88:b6:5c:0e:57:7d:d5:e7:0b:c6:8b: 0e:38:9a:27:e6:e7:d1:28:35:59:3f:81:b6:53:b9:db:66:be: f7:4b:4a:55 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJcnkT8yg43hBh1CPTrTIK7ombQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjIwMzMyN0I2QTRCMEFGQjk4MkI2NDBCOEJGRjJBOTJC MUM3MzM0MzAeFw0yNTA1MTAxNTMzNTVaFw0yNTA1MTExNzU1NTVaMDMxMTAvBgNV BAMTKDFDQ0UzOUUyRjVGRjU0NTBFNjdCRjI3MDM0RDNGMTY3QTkyQzhBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNCYgw/6QgAKuV8mTZc7Umr2xO dgbpD+y4s39v4OJc8J3WhN55LUFFmA9e6chiYJERaCAPvmDJOB2s6Z+gigtVR1SW lXebFNQhL73e+wPf4mBKKQsaEAOvQHUvGDAAaZ2dN/JxPo61Hey2kBnUjaDOY8Up f7eODCMlPZN5ABayoDhfqa56rt6iqvFvM1oLG8om/uCG9UjC0uFyl6J8XYJzVvEb 1N3D1irVbvCHu+mcPXHlPSajNXyWscLvD0inPzPibExI7kSQSzqn73NiUmB6Jmsm lSL2m+irKRE2A1VqC85Dx6L6dcv4b78iONkJ4PwxotLVorIuldKqDOfbM1U5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUHM454vX/VFDme/JwNNPxZ6ksipEwHwYDVR0j BBgwFoAUYgMye2pLCvuYK2QLi/8qkrHHM0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmVjYmM0MDQtYWM0My00NDliLThjN2UtOGYxZTk5ZDlh YzQ5LzMvNjIwMzMyN0I2QTRCMEFGQjk4MkI2NDBCOEJGRjJBOTJCMUM3MzM0My5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy82MjAzMzI3QjZBNEIwQUZCOTgyQjY0MEI4 QkZGMkE5MkIxQzczMzQzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZlY2JjNDA0LWFjNDMtNDQ5Yi04YzdlLThmMWU5OWQ5YWM0OS8zLzYyMDMzMjdC NkE0QjBBRkI5ODJCNjQwQjhCRkYyQTkyQjFDNzMzNDMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDHru+5 OKI5lsSeb0CaDLFxE8Gp1+8TdkSSZJtZK/Fn7vNEk/krz7gz1fM/FUmavD9ebAux ZAwmazQeJSwgcZ+mnrfVeQYW3euoSwNhP0HXsxmWf07cwdtsWi4d9wopc5Xo6MDr 7cwu3HKSdR+9S2NIV3BFblSRFPMOeTxuHuu2hicEv8znlGCYCgn+ZqorPqWzE9L4 xq7bKMBNYY9NZdD/tH/diLuS6e949KaAamqAP93q35Q9OvbToAEO5r2qkFz9e5Dr LsGG3W31w2+f2gdqRRzjoHnlFcL6x5q0jC7JiLZcDld91ecLxosOOJon5ufRKDVZ P4G2U7nbZr73S0pV -----END CERTIFICATE-----Generated at Sat May 10 21:14:14 2025 by rpki-client