$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: GLqBtCb3ykpB6vOD5XisYcMujmqVF8l6VqhpKdzTNR4= Subject key identifier: AE:9A:A9:3E:E8:81:A4:A0:27:DA:21:9B:78:5C:B8:F2:98:3C:13:DB Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 4722FC3601AFC127ADAA7028DA8224860FA84179 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 17 Signing time: Sat 28 Sep 2024 18:40:38 +0000 Manifest this update: Sat 28 Sep 2024 18:35:38 +0000 Manifest next update: Sun 29 Sep 2024 19:28:38 +0000 Files and hashes: 1: 326131343a316563373a633030303a3a2f33362d3336203d3e203438373030.roa (hash: 5bvhGfPTiCosJMAK7OpDyyn5frDaDKuKNZVt3xzUXao=) 2: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: CMOKCDOU0vqBRlIS7lTUCaxjCILMZmbJOxVAPkBza4Q=) 3: 326131343a316563313a3a2f33322d3332203d3e203438373030.roa (hash: W4camszVXGn7Ri/sxMMWE4JNxTYk5QT9tVo/DlSSiBA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Sep 2024 14:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:22:fc:36:01:af:c1:27:ad:aa:70:28:da:82:24:86:0f:a8:41:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Sep 28 18:35:38 2024 GMT Not After : Sep 29 19:28:38 2024 GMT Subject: CN=AE9AA93EE881A4A027DA219B785CB8F2983C13DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a2:d6:cb:f7:5b:ea:85:4f:9d:59:6e:0a:2d: 34:9c:d0:b7:fc:80:39:3b:22:fd:ef:05:f1:17:04: f0:e7:78:4f:d1:d5:d5:17:47:42:fd:46:6f:d2:01: 0c:25:c1:8d:03:ea:f1:b5:a2:56:41:57:26:c8:34: 59:c2:57:8b:c7:62:f0:8a:5b:62:30:15:22:c8:93: f8:cb:1f:50:ef:6c:e2:d1:e6:90:77:82:a5:02:37: 4c:21:2b:07:b7:c1:e5:a8:4a:08:fb:98:0e:f5:be: 6d:6c:c9:07:eb:89:18:db:45:d1:17:89:cd:89:67: ba:2d:97:1d:cf:84:db:38:82:e1:13:43:a6:46:eb: 93:55:0e:35:9c:12:87:80:96:18:5d:78:a2:cf:0d: 24:2f:3c:fc:47:5a:e8:08:1c:09:42:e2:32:03:1a: 0a:7b:50:5f:6f:4c:1c:6c:8a:f4:1e:e4:3f:f0:ea: 0d:d3:af:48:28:0b:a8:44:a8:a9:bd:13:6f:e0:2c: d6:78:d0:ad:10:31:de:6c:f8:4d:a7:5a:ea:35:75: c5:25:e2:11:0b:dc:7d:0e:da:8a:ba:91:e6:d7:21: cc:5b:45:af:5e:fc:3e:0c:f0:ce:7b:2f:4a:84:5d: 28:de:41:ca:9a:25:a4:c7:65:72:7e:f6:54:f2:05: 75:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9A:A9:3E:E8:81:A4:A0:27:DA:21:9B:78:5C:B8:F2:98:3C:13:DB X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:01:5a:e8:2c:04:16:59:8f:18:eb:48:db:67:ea:34:c5:94: 4a:56:72:f2:cf:08:c5:8a:9d:90:a3:52:ed:1d:89:b0:1e:7c: 41:45:7a:c2:31:dc:ed:ce:ac:f6:3c:c8:a1:00:d9:09:24:73: 7c:9d:33:f2:71:d5:29:73:e4:7b:90:a8:a9:a5:3c:f1:c3:87: 59:9e:2c:55:6b:c2:e0:8c:96:58:5e:01:41:8a:47:c7:9d:06: da:28:42:0d:7e:c9:15:ab:53:1f:85:5c:3c:e7:80:05:6e:f6: 47:3c:4f:1f:ca:95:45:f8:14:b3:3c:2e:65:e7:f6:ea:37:0f: 29:81:fc:22:46:23:7c:0b:f2:7a:c7:e1:8d:fe:36:ec:1d:5e: 64:5b:8b:5a:5a:ab:31:ad:8c:f0:1d:9b:a0:7a:71:19:87:38: 64:74:f1:cf:39:11:27:3e:93:2a:b8:74:7f:81:fb:9f:81:38: b0:d2:45:0e:b7:94:c0:1f:2e:82:60:85:13:ee:67:ee:5e:1d: f0:cf:80:8e:3a:26:69:b2:51:31:fb:37:53:18:35:e8:e3:62: 98:5b:5f:d0:2c:c7:77:be:1c:0d:38:50:3d:a2:65:b4:20:ba: 6d:14:d2:4e:db:0d:80:1a:7f:98:72:27:fb:b8:09:1a:87:4a: b5:18:52:7f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURyL8NgGvwSetqnAo2oIkhg+oQXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNDA5MjgxODM1MzhaFw0yNDA5MjkxOTI4MzhaMDMxMTAvBgNV BAMTKEFFOUFBOTNFRTg4MUE0QTAyN0RBMjE5Qjc4NUNCOEYyOTgzQzEzREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEotbL91vqhU+dWW4KLTSc0Lf8 gDk7Iv3vBfEXBPDneE/R1dUXR0L9Rm/SAQwlwY0D6vG1olZBVybINFnCV4vHYvCK W2IwFSLIk/jLH1DvbOLR5pB3gqUCN0whKwe3weWoSgj7mA71vm1syQfriRjbRdEX ic2JZ7otlx3PhNs4guETQ6ZG65NVDjWcEoeAlhhdeKLPDSQvPPxHWugIHAlC4jID Ggp7UF9vTBxsivQe5D/w6g3Tr0goC6hEqKm9E2/gLNZ40K0QMd5s+E2nWuo1dcUl 4hEL3H0O2oq6kebXIcxbRa9e/D4M8M57L0qEXSjeQcqaJaTHZXJ+9lTyBXWXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUrpqpPuiBpKAn2iGbeFy48pg8E9swHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGAVro LAQWWY8Y60jbZ+o0xZRKVnLyzwjFip2Qo1LtHYmwHnxBRXrCMdztzqz2PMihANkJ JHN8nTPycdUpc+R7kKippTzxw4dZnixVa8LgjJZYXgFBikfHnQbaKEINfskVq1Mf hVw854AFbvZHPE8fypVF+BSzPC5l5/bqNw8pgfwiRiN8C/J6x+GN/jbsHV5kW4ta WqsxrYzwHZugenEZhzhkdPHPOREnPpMquHR/gfufgTiw0kUOt5TAHy6CYIUT7mfu Xh3wz4COOiZpslEx+zdTGDXo42KYW1/QLMd3vhwNOFA9omW0ILptFNJO2w2AGn+Y cif7uAkah0q1GFJ/ -----END CERTIFICATE-----Generated at Sat Sep 28 19:49:33 2024 by rpki-client on console-fra.rpki-client.org