$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.mft File: CDC014669D381152AFB94B76936268BFF73E7D50.mft (raw, json) Hash identifier: jnVcl4wVrlYzLdlELWT5Ay62Kd4wBHXDR7+C3G5Gcdw= Subject key identifier: 15:CB:25:EA:B3:A7:91:D4:3F:EF:51:78:76:91:EF:E3:0C:45:40:73 Authority key identifier: CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50 Certificate issuer: /CN=CDC014669D381152AFB94B76936268BFF73E7D50 Certificate serial: 1ACDCA4CB7BDAF40A4D2D63B20120C8B7B4751D3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.mft Manifest number: 019F Signing time: Sat 18 May 2024 06:54:30 +0000 Manifest this update: Sat 18 May 2024 06:49:30 +0000 Manifest next update: Sun 19 May 2024 07:58:30 +0000 Files and hashes: 1: 326131313a323963303a393030343a3a2f34382d3438203d3e203437323732.roa (hash: JNxHo3Fec11gMCTJE/0npIPuFyfTd85Zh8D323nwuSs=) 2: 326131313a323963303a393061303a3a2f34342d3434203d3e203437323732.roa (hash: sqvA66ugd217ubL8FFsWa3LSVKzJSrp6bwwd0XBoZbg=) 3: 326131313a323963303a393030333a3a2f34382d3438203d3e203437323732.roa (hash: ewz65x0eI0MghrvtTYvlYkIdJgNz+IeIv25zmCyrVc0=) 4: 326131313a323963303a396562303a3a2f34342d3434203d3e20323033303639.roa (hash: WInhbGmfRQKynls9luzccWHyMXhJsk9s09agweZa4us=) 5: 32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.cer (hash: wek+983bGhL1rzAGEQfUwkdPjxaB107zXZnMxNclcBQ=) 6: 326131313a323963303a393030373a3a2f34382d3438203d3e203437323732.roa (hash: mQgf0c2qxO+CSOad0LCnhnhgjq+4MwfgKLn+HDbipdE=) 7: 326131313a323963303a393030303a3a2f34382d3438203d3e203437323732.roa (hash: UwO4hN+ZCdHk2YL18D2u+pPYoRMaN6p481osc8WCbJI=) 8: CDC014669D381152AFB94B76936268BFF73E7D50.crl (hash: aV7D1j+v1g8e+vO1/x9cB8TRiniajVtrEFx22WW4lcc=) 9: 326131313a323963303a396430303a3a2f34302d3430203d3e203537313130.roa (hash: W5ahDU5JyeZJt4qS2B+lziFP3DcHEZMUnP1JLsA2ZQY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.mft rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 May 2024 02:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:cd:ca:4c:b7:bd:af:40:a4:d2:d6:3b:20:12:0c:8b:7b:47:51:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC014669D381152AFB94B76936268BFF73E7D50 Validity Not Before: May 18 06:49:30 2024 GMT Not After : May 19 07:58:30 2024 GMT Subject: CN=15CB25EAB3A791D43FEF51787691EFE30C454073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f6:aa:29:a0:9a:ff:8c:f2:31:6c:d4:96:bc: dd:f2:cb:e2:46:73:41:ab:de:f4:14:fb:c4:75:14: ba:81:76:46:93:67:30:85:73:76:32:4c:c5:a4:b1: 25:65:8a:09:c4:aa:f4:c4:ea:41:dc:be:b0:0f:d0: 2a:65:b4:51:95:15:44:11:b7:f0:19:fc:ae:b5:8d: e5:ee:15:15:8b:79:64:fc:e2:d4:fb:f2:46:fb:3a: d7:e1:48:86:31:01:9c:c9:99:56:51:b3:09:18:8a: 00:db:8f:0d:ed:fd:18:97:f1:f5:78:d5:fd:9c:2c: 82:c3:fa:4d:68:3e:36:87:ba:d2:80:2e:47:3a:98: ca:91:21:16:c4:79:6c:d0:3a:fe:da:83:24:65:94: 41:cd:57:21:0a:1d:c7:18:73:c2:d8:a8:32:5c:98: e0:4a:0a:e6:ee:a7:b2:b6:85:20:05:d4:be:50:37: 31:04:39:47:77:c0:2c:e3:b5:18:b2:de:f1:9e:e3: 00:64:65:f2:d8:95:4f:c3:a9:17:dd:34:60:e7:ba: 3d:4b:ad:65:a9:47:6a:53:86:62:d0:49:85:17:8d: ff:bb:0a:2c:af:80:e9:00:c0:77:d2:87:bd:1b:8d: 93:8c:f7:b0:b1:ae:7c:79:8a:7d:5a:e6:64:06:69: 72:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CB:25:EA:B3:A7:91:D4:3F:EF:51:78:76:91:EF:E3:0C:45:40:73 X509v3 Authority Key Identifier: keyid:CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:3e:fb:46:85:eb:27:22:48:d2:57:a1:50:1a:e2:49:90:36: 80:09:5d:17:72:c9:4f:7d:0d:6e:3a:55:96:fc:a0:24:24:bc: 32:0b:92:05:78:2e:68:79:35:af:cd:70:73:81:26:dd:f4:2c: 6f:3a:59:cb:ed:d1:71:16:e5:c8:62:8b:2d:bd:6c:c2:20:31: 64:6f:aa:6a:e4:f0:7b:fb:e3:5d:2a:5e:67:89:f4:07:f8:3b: b4:1b:3e:03:cc:e6:ab:9c:23:bd:aa:9a:a0:bf:a6:e5:c8:b8: c2:13:a1:30:e6:dd:f1:d0:6c:f7:d4:5a:dc:98:f5:bb:13:35: 58:26:04:1c:93:6f:d3:6a:96:06:94:58:8f:23:e6:c1:4f:eb: 10:af:3a:87:d4:aa:57:9c:60:47:cc:95:32:8b:16:9b:e1:73: f9:4c:2c:2a:36:f4:3e:c7:61:de:e1:99:fb:65:5a:39:e5:ea: 3a:39:8c:9f:7a:24:2b:f2:f1:6f:80:49:24:22:9c:37:f4:a1: ab:79:40:be:29:4b:e6:11:62:9a:93:e5:77:24:e2:3e:a0:d6: 7e:29:76:d7:c2:64:a5:74:8e:1f:73:ff:d0:af:9b:05:e1:e6: 7d:6a:b5:e0:16:d5:8d:8d:1d:d2:18:37:51:c3:ee:55:07:23: 10:9d:b5:33 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGs3KTLe9r0Ck0tY7IBIMi3tHUdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDMDE0NjY5RDM4MTE1MkFGQjk0Qjc2OTM2MjY4QkZG NzNFN0Q1MDAeFw0yNDA1MTgwNjQ5MzBaFw0yNDA1MTkwNzU4MzBaMDMxMTAvBgNV BAMTKDE1Q0IyNUVBQjNBNzkxRDQzRkVGNTE3ODc2OTFFRkUzMEM0NTQwNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc9qopoJr/jPIxbNSWvN3yy+JG c0Gr3vQU+8R1FLqBdkaTZzCFc3YyTMWksSVlignEqvTE6kHcvrAP0CpltFGVFUQR t/AZ/K61jeXuFRWLeWT84tT78kb7OtfhSIYxAZzJmVZRswkYigDbjw3t/RiX8fV4 1f2cLILD+k1oPjaHutKALkc6mMqRIRbEeWzQOv7agyRllEHNVyEKHccYc8LYqDJc mOBKCubup7K2hSAF1L5QNzEEOUd3wCzjtRiy3vGe4wBkZfLYlU/DqRfdNGDnuj1L rWWpR2pThmLQSYUXjf+7CiyvgOkAwHfSh70bjZOM97Cxrnx5in1a5mQGaXIxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFcsl6rOnkdQ/71F4dpHv4wxFQHMwHwYDVR0j BBgwFoAUzcAUZp04EVKvuUt2k2Jov/c+fVAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzIvQ0RDMDE0NjY5RDM4MTE1MkFGQjk0Qjc2OTM2MjY4QkZGNzNFN0Q1MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTExNWJjNi0xMGY2LTRh ZjMtYmEwOS04YjY4N2E1NmZiZjUvMC9DREMwMTQ2NjlEMzgxMTUyQUZCOTRCNzY5 MzYyNjhCRkY3M0U3RDUwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8yL0NEQzAxNDY2 OUQzODExNTJBRkI5NEI3NjkzNjI2OEJGRjczRTdENTAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFPvtG hesnIkjSV6FQGuJJkDaACV0XcslPfQ1uOlWW/KAkJLwyC5IFeC5oeTWvzXBzgSbd 9CxvOlnL7dFxFuXIYostvWzCIDFkb6pq5PB7++NdKl5nifQH+Du0Gz4DzOarnCO9 qpqgv6blyLjCE6Ew5t3x0Gz31FrcmPW7EzVYJgQck2/TapYGlFiPI+bBT+sQrzqH 1KpXnGBHzJUyixab4XP5TCwqNvQ+x2He4Zn7ZVo55eo6OYyfeiQr8vFvgEkkIpw3 9KGreUC+KUvmEWKak+V3JOI+oNZ+KXbXwmSldI4fc//Qr5sF4eZ9arXgFtWNjR3S GDdRw+5VByMQnbUz -----END CERTIFICATE-----Generated at Sat May 18 08:11:48 2024 by rpki-client on console-fra.rpki-client.org