$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.mft File: 32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.mft (raw, json) Hash identifier: nkgUMVdlNilkbIvre2SbQv1/rmWfOZtH8EW0305VkzI= Subject key identifier: 05:98:06:26:0B:1B:8B:9F:20:8C:49:E1:19:C9:C5:40:A2:06:7D:49 Authority key identifier: 32:39:8A:14:06:A1:C1:D3:23:CA:63:CB:32:0F:FD:1E:B4:D1:B0:C4 Certificate issuer: /CN=32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4 Certificate serial: 09E4F78AFF18637297FB45D66539AFB2EFE0C3D5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.mft Manifest number: 9F Signing time: Sat 25 May 2024 04:33:27 +0000 Manifest this update: Sat 25 May 2024 04:28:27 +0000 Manifest next update: Sun 26 May 2024 07:11:27 +0000 Files and hashes: 1: 326131313a323963303a396562383a3a2f34362d3438203d3e203134363138.roa (hash: VairAG1GH3Nqpnot+beTl4FtLl0ofBKMtMIyfr2b4xQ=) 2: 326131313a323963303a396562383a3a2f34362d3438203d3e203136353039.roa (hash: et596bH8tUxjFHs2a6/cNPZoQPevbHRyR0lQ65/r2nA=) 3: 326131313a323963303a396562653a3a2f34372d3438203d3e203136353039.roa (hash: +Gy89ybA1Z02ZVk1Qb4p4nTUf+b8bekfP/lbqOu4QMw=) 4: 326131313a323963303a396562303a3a2f34342d3438203d3e20323033303639.roa (hash: EzDrSU0tEdoyrWBny4WwvfoAYESt5HomMWAJ483CPZA=) 5: 32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.crl (hash: YzTBvMDgPBA8lv7OZbg1d/FosVuzyetWNFPc0udTR/Y=) 6: 326131313a323963303a396562653a3a2f34372d3438203d3e203134363138.roa (hash: fycC0UeL6liXoK+7uZCbJcRap3WaS0JUMwnW8BsbcDk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.mft rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 May 2024 21:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e4:f7:8a:ff:18:63:72:97:fb:45:d6:65:39:af:b2:ef:e0:c3:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4 Validity Not Before: May 25 04:28:27 2024 GMT Not After : May 26 07:11:27 2024 GMT Subject: CN=059806260B1B8B9F208C49E119C9C540A2067D49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:26:3c:1e:90:7b:09:5b:9b:0f:ae:e6:93: 8f:be:19:85:d5:04:76:9c:14:79:7d:3e:e6:16:2d: bf:86:82:74:cb:fa:c9:55:28:6f:3c:66:bc:8b:7c: 2f:25:8c:ea:81:f5:55:e7:23:3b:cf:24:6a:13:8c: 5f:e8:d6:7e:4b:36:69:4b:0b:8c:6a:1a:37:23:9e: 41:dc:0c:c3:10:43:6a:a7:63:8a:30:e2:2e:a3:0b: 2f:ac:4e:ac:f1:b7:35:cc:6c:d0:e4:69:76:d1:dd: 56:0a:b6:eb:e1:34:e9:a0:b4:01:3a:e8:20:5a:92: 0d:5c:78:79:15:ca:73:78:92:8d:64:c3:c3:0c:50: 13:c6:8c:19:41:30:13:3a:51:93:19:2d:f9:25:1d: 7a:79:04:06:97:f7:03:91:3d:c6:c9:e1:51:1a:18: 49:50:3a:86:f6:3d:33:d1:d4:7b:fb:2f:79:b2:26: 0b:ea:26:27:dc:33:9c:90:c5:ee:d4:62:a8:1b:ab: bf:f3:e1:f4:f1:57:74:33:68:42:23:36:ec:be:86: c5:c1:63:6a:f4:1e:be:6a:56:0a:6c:e6:97:df:f5: b2:b4:25:8c:3c:f4:04:17:79:09:28:88:87:b1:f4: 39:f2:ef:82:39:66:d2:d1:5e:31:bd:c8:82:9a:50: 3b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:98:06:26:0B:1B:8B:9F:20:8C:49:E1:19:C9:C5:40:A2:06:7D:49 X509v3 Authority Key Identifier: keyid:32:39:8A:14:06:A1:C1:D3:23:CA:63:CB:32:0F:FD:1E:B4:D1:B0:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:6d:08:31:1c:df:a7:cf:9c:48:cf:e2:c8:96:d7:01:9a:55: 97:57:ae:00:1f:ff:fd:f0:74:f6:e2:1e:e4:d0:d2:05:f9:83: c1:61:6b:cd:cd:57:01:0b:dc:9c:5a:9f:25:2d:3a:67:84:df: 19:31:4a:f1:0b:40:f9:13:b1:7c:99:9e:1a:63:7c:0a:27:ff: 8c:99:83:0b:28:bb:cd:23:ec:27:c5:e0:00:0f:38:f2:c2:df: 95:df:56:7d:4f:01:1c:9f:2a:1e:a3:12:54:f7:5a:a4:26:c5: e2:32:55:ef:49:dd:26:4b:d0:15:03:f0:47:3d:cf:76:44:9d: 7a:da:7d:79:b8:3c:3d:5b:38:3b:96:8a:fd:11:4b:e5:5a:03: e2:45:02:3e:56:08:26:54:ae:0b:a0:bb:0a:a6:c4:d3:7f:88: 07:a7:99:11:25:bc:dd:97:a7:9f:0d:e9:9b:d8:94:32:63:84: 2b:f7:d1:2c:11:2f:81:8a:74:3b:76:2d:f9:6c:0b:cd:f6:1f: 87:84:19:ce:97:39:d2:6f:5c:27:b9:8b:7a:0a:ac:22:33:e2: b8:71:94:0d:f0:e5:61:4b:72:2b:25:f8:bc:04:27:95:fc:72: 5d:89:a4:ef:17:95:67:1d:01:0f:60:81:fc:c8:29:b6:0b:46: 62:97:60:b8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCeT3iv8YY3KX+0XWZTmvsu/gw9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIzOThBMTQwNkExQzFEMzIzQ0E2M0NCMzIwRkZEMUVC NEQxQjBDNDAeFw0yNDA1MjUwNDI4MjdaFw0yNDA1MjYwNzExMjdaMDMxMTAvBgNV BAMTKDA1OTgwNjI2MEIxQjhCOUYyMDhDNDlFMTE5QzlDNTQwQTIwNjdENDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7QyY8HpB7CVubD67mk4++GYXV BHacFHl9PuYWLb+GgnTL+slVKG88ZryLfC8ljOqB9VXnIzvPJGoTjF/o1n5LNmlL C4xqGjcjnkHcDMMQQ2qnY4ow4i6jCy+sTqzxtzXMbNDkaXbR3VYKtuvhNOmgtAE6 6CBakg1ceHkVynN4ko1kw8MMUBPGjBlBMBM6UZMZLfklHXp5BAaX9wORPcbJ4VEa GElQOob2PTPR1Hv7L3myJgvqJifcM5yQxe7UYqgbq7/z4fTxV3QzaEIjNuy+hsXB Y2r0Hr5qVgps5pff9bK0JYw89AQXeQkoiIex9Dny74I5ZtLRXjG9yIKaUDsNAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUBZgGJgsbi58gjEnhGcnFQKIGfUkwHwYDVR0j BBgwFoAUMjmKFAahwdMjymPLMg/9HrTRsMQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzgvMzIzOThBMTQwNkExQzFEMzIzQ0E2M0NCMzIwRkZEMUVCNEQxQjBDNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMi8zMjM5OEExNDA2QTFDMUQzMjNDQTYzQ0Iz MjBGRkQxRUI0RDFCMEM0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQyYmU0ZS84LzMyMzk4QTE0 MDZBMUMxRDMyM0NBNjNDQjMyMEZGRDFFQjREMUIwQzQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAAbQgx HN+nz5xIz+LIltcBmlWXV64AH//98HT24h7k0NIF+YPBYWvNzVcBC9ycWp8lLTpn hN8ZMUrxC0D5E7F8mZ4aY3wKJ/+MmYMLKLvNI+wnxeAADzjywt+V31Z9TwEcnyoe oxJU91qkJsXiMlXvSd0mS9AVA/BHPc92RJ162n15uDw9Wzg7lor9EUvlWgPiRQI+ VggmVK4LoLsKpsTTf4gHp5kRJbzdl6efDemb2JQyY4Qr99EsES+BinQ7di35bAvN 9h+HhBnOlznSb1wnuYt6CqwiM+K4cZQN8OVhS3IrJfi8BCeV/HJdiaTvF5VnHQEP YIH8yCm2C0Zil2C4 -----END CERTIFICATE-----Generated at Sat May 25 05:51:39 2024 by rpki-client on console-fra.rpki-client.org