$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/491E7C1B3D725A4C67A798CEC21F6A699D82853A.mft File: 491E7C1B3D725A4C67A798CEC21F6A699D82853A.mft (raw, json) Hash identifier: 1le7/h0BqT7fJ9ngJ3J6s4hBbTYg2+IKkiKMjTMBdpY= Subject key identifier: 14:DD:BF:EA:F4:3B:4F:9D:57:6E:42:05:78:6A:0C:F6:62:05:90:5B Authority key identifier: 49:1E:7C:1B:3D:72:5A:4C:67:A7:98:CE:C2:1F:6A:69:9D:82:85:3A Certificate issuer: /CN=491E7C1B3D725A4C67A798CEC21F6A699D82853A Certificate serial: DDD739C0C1B6D422DF809008B605A58C7079EF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/491E7C1B3D725A4C67A798CEC21F6A699D82853A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/491E7C1B3D725A4C67A798CEC21F6A699D82853A.mft Manifest number: 14 Signing time: Sat 28 Sep 2024 14:10:10 +0000 Manifest this update: Sat 28 Sep 2024 14:05:10 +0000 Manifest next update: Sun 29 Sep 2024 14:12:10 +0000 Files and hashes: 1: 491E7C1B3D725A4C67A798CEC21F6A699D82853A.crl (hash: Je6qmdUhoZDNhOavDgMneGnAMiz+EYXe+2NnLWpgTVM=) 2: 326130613a363034343a633131303a3a2f34342d3434203d3e20323135323431.roa (hash: lVtF5NwM/y4VEdugMwdt8tI1sYxZq/0nAd61eRBWSSE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/491E7C1B3D725A4C67A798CEC21F6A699D82853A.crl rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/491E7C1B3D725A4C67A798CEC21F6A699D82853A.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/491E7C1B3D725A4C67A798CEC21F6A699D82853A.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Sep 2024 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: dd:d7:39:c0:c1:b6:d4:22:df:80:90:08:b6:05:a5:8c:70:79:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491E7C1B3D725A4C67A798CEC21F6A699D82853A Validity Not Before: Sep 28 14:05:10 2024 GMT Not After : Sep 29 14:12:10 2024 GMT Subject: CN=14DDBFEAF43B4F9D576E4205786A0CF66205905B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:75:fb:cb:7e:41:c5:90:2d:e7:eb:87:e1:f7: 79:5f:90:dc:99:10:46:c0:6e:b2:94:e0:fc:24:c0: 81:01:39:f3:16:66:bf:76:14:ec:a2:35:86:4c:24: 6f:61:23:49:59:7d:4c:54:f2:9e:dd:6e:01:93:b3: 64:4a:59:7c:c6:d6:88:05:2e:bc:8c:fb:2d:c5:1f: 2b:18:a0:47:b2:6e:ed:ab:b4:97:25:4a:09:8c:f6: 76:5b:79:c9:f6:27:11:2e:e2:6f:b8:ea:ed:e4:0b: 38:c9:dd:41:16:09:31:1d:01:26:a9:6b:7f:67:81: 8c:f0:11:1d:11:7b:4d:f8:bd:b8:c1:53:6b:7d:a0: f3:6f:9a:f7:1a:71:f1:43:04:cd:ef:15:32:d3:06: 83:91:15:ec:ed:6c:0b:d8:84:78:60:2d:1a:03:12: ed:98:e5:ac:1e:1c:18:94:09:02:24:94:b7:f4:5b: 95:7b:53:5d:01:2b:54:65:a2:27:d8:c3:68:52:30: b3:b6:f1:a7:6e:a0:f7:13:28:e4:2c:7d:0a:76:e1: 33:1b:f9:a8:cf:34:d5:dc:52:63:86:96:6d:9c:2e: d9:0f:93:83:61:60:5d:89:42:15:41:e4:ad:6a:8d: 47:cd:bf:9e:ad:85:5c:e4:9e:33:57:f6:0f:d8:38: 4e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DD:BF:EA:F4:3B:4F:9D:57:6E:42:05:78:6A:0C:F6:62:05:90:5B X509v3 Authority Key Identifier: keyid:49:1E:7C:1B:3D:72:5A:4C:67:A7:98:CE:C2:1F:6A:69:9D:82:85:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/491E7C1B3D725A4C67A798CEC21F6A699D82853A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/491E7C1B3D725A4C67A798CEC21F6A699D82853A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/491E7C1B3D725A4C67A798CEC21F6A699D82853A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:03:f9:f9:b0:a3:97:ee:15:21:58:0b:70:96:00:49:c1:ec: 78:24:70:a5:23:1e:d0:b1:05:9a:11:88:66:1e:a5:09:65:0d: 88:48:cb:ce:37:6a:5a:f8:6b:e2:9a:bb:63:dc:30:ca:7e:ac: e5:18:4b:0c:a4:da:bd:7b:a6:0a:a6:7a:72:44:ab:17:a2:9f: 79:5b:07:87:d5:b4:bc:46:29:f5:47:0d:40:77:69:07:26:d4: 7d:7e:88:e2:8f:ea:f0:ce:64:49:3e:7e:3d:a9:30:84:1a:80: 67:c3:a8:8f:f9:c5:90:20:d0:a9:14:57:0c:a7:a0:cd:a5:6f: 82:4f:fe:57:7b:f4:56:b5:1f:9a:1d:7e:fb:74:39:c8:d9:f6: 72:6c:b9:a9:09:50:92:fe:19:ff:b6:c5:70:2f:9e:31:3c:69: 4d:8f:e2:b8:70:b7:9b:af:d4:5e:c9:d9:ee:23:91:53:22:c9: e0:f8:36:cb:27:36:8a:26:74:dc:d2:b3:e5:fe:df:ca:62:de: f2:c8:ce:18:b1:7b:3c:e1:f2:78:65:1f:ed:5a:ca:0c:bc:03: 7b:58:af:84:14:26:43:55:7d:7e:3f:a9:b4:65:de:87:db:12: c3:ba:c4:b0:af:30:91:0d:16:0a:8b:ab:25:f2:9f:81:48:b9: e4:25:54:88 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUAN3XOcDBttQi34CQCLYFpYxwee8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxRTdDMUIzRDcyNUE0QzY3QTc5OENFQzIxRjZBNjk5 RDgyODUzQTAeFw0yNDA5MjgxNDA1MTBaFw0yNDA5MjkxNDEyMTBaMDMxMTAvBgNV BAMTKDE0RERCRkVBRjQzQjRGOUQ1NzZFNDIwNTc4NkEwQ0Y2NjIwNTkwNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVdfvLfkHFkC3n64fh93lfkNyZ EEbAbrKU4PwkwIEBOfMWZr92FOyiNYZMJG9hI0lZfUxU8p7dbgGTs2RKWXzG1ogF LryM+y3FHysYoEeybu2rtJclSgmM9nZbecn2JxEu4m+46u3kCzjJ3UEWCTEdASap a39ngYzwER0Re034vbjBU2t9oPNvmvcacfFDBM3vFTLTBoORFeztbAvYhHhgLRoD Eu2Y5aweHBiUCQIklLf0W5V7U10BK1RloifYw2hSMLO28aduoPcTKOQsfQp24TMb +ajPNNXcUmOGlm2cLtkPk4NhYF2JQhVB5K1qjUfNv56thVzknjNX9g/YOE5pAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUFN2/6vQ7T51XbkIFeGoM9mIFkFswHwYDVR0j BBgwFoAUSR58Gz1yWkxnp5jOwh9qaZ2ChTowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzRjMTU3MmMtZTk3Yy00MTAwLWFlZmYtMTM3M2Y0ZTk0 MzNhLzEvNDkxRTdDMUIzRDcyNUE0QzY3QTc5OENFQzIxRjZBNjk5RDgyODUzQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC80OTFFN0MxQjNENzI1QTRDNjdBNzk4Q0VD MjFGNkE2OTlEODI4NTNBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzc0YzE1NzJjLWU5N2MtNDEwMC1hZWZmLTEzNzNmNGU5NDMzYS8xLzQ5MUU3QzFC M0Q3MjVBNEM2N0E3OThDRUMyMUY2QTY5OUQ4Mjg1M0EubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAiA/n5 sKOX7hUhWAtwlgBJwex4JHClIx7QsQWaEYhmHqUJZQ2ISMvON2pa+Gvimrtj3DDK fqzlGEsMpNq9e6YKpnpyRKsXop95WweH1bS8Rin1Rw1Ad2kHJtR9fojij+rwzmRJ Pn49qTCEGoBnw6iP+cWQINCpFFcMp6DNpW+CT/5Xe/RWtR+aHX77dDnI2fZybLmp CVCS/hn/tsVwL54xPGlNj+K4cLebr9ReydnuI5FTIsng+DbLJzaKJnTc0rPl/t/K Yt7yyM4YsXs84fJ4ZR/tWsoMvAN7WK+EFCZDVX1+P6m0Zd6H2xLDusSwrzCRDRYK i6sl8p+BSLnkJVSI -----END CERTIFICATE-----Generated at Sat Sep 28 17:45:02 2024 by rpki-client on console-ams.rpki-client.org