$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft File: D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft (raw, json) Hash identifier: mqAsnrmqJp7KsewNJ4JtS6S6T96ijTmmi/BdgTa6nkE= Subject key identifier: 66:C0:1F:8A:B8:99:E7:11:DF:6D:B6:EE:64:8A:AB:95:53:61:3E:7D Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44 Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444 Certificate serial: 79952C075FDE469B6C78CF0FB01193348967485D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft Manifest number: 021D Signing time: Sat 11 May 2024 07:51:43 +0000 Manifest this update: Sat 11 May 2024 07:46:43 +0000 Manifest next update: Sun 12 May 2024 08:37:43 +0000 Files and hashes: 1: 34352e38362e39332e302f32342d3234203d3e203631333137.roa (hash: F7r2zHxoMB3WUrCAP4In4YqzyOjtZGc+2V2Sm86c1V8=) 2: 39332e39322e31372e302f32342d3234203d3e20383334.roa (hash: zYO7rH3wgw4PJa0ndeiSVUjotjSFZqWFpe0dvDG59e4=) 3: 34352e38362e39322e302f32342d3234203d3e20323039313831.roa (hash: DCKpF3JINbgiAv97896vm066RnUP6QrNVn+tVh6X8tM=) 4: 39332e39322e32302e302f32342d3234203d3e203536393133.roa (hash: fIX5zJSySlHx0b0BWzgddsVi98YzEM6JXt48wh14/i8=) 5: 34352e38362e39352e302f32342d3234203d3e2031323939.roa (hash: sHNUjx1C5zDVVNYZO6LMRJJnO0yFg6+u79okyr4JNqE=) 6: 37382e32342e3132362e302f32332d3234203d3e2037303138.roa (hash: Ewgl0Q5XKiwc3+RtnMTYpJnZfZzrujAGTUlH9m1GeCQ=) 7: 37382e32342e3132342e302f32332d3234203d3e20383334.roa (hash: vZOAtz3IRBLhZ2Tf333wCxyx4PpIHXx//TgcLbjfhcI=) 8: 39332e39322e31392e302f32342d3234203d3e203631333137.roa (hash: V6Z86uxrACipTWOrp3TXH6UNEJgsUWNL4dYbXMpslac=) 9: 37382e32342e3132332e302f32342d3234203d3e2037303138.roa (hash: ZsJGAAYEYqLUIow7dg0/imQDjPe3T5XhlieP0sVxzm4=) 10: 39332e39322e32312e302f32342d3234203d3e203631333137.roa (hash: AyhTLJhQIvRykhLJ0WDBmN+nDinIPxiWxR2A63QTjMo=) 11: 39332e39322e31382e302f32342d3234203d3e203534333339.roa (hash: 0oE5Xz8hSZVVCK191bZ+YhoVSBj4Q8M0iZuBlgrVyfo=) 12: 37382e32342e3132352e302f32342d3234203d3e203534333339.roa (hash: tTS+9WB6aAj3UkraYdy6dDyOFX6va3IxmxhXvq1u9m8=) 13: D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl (hash: F5ARn71n6/sm1/kDmI5CMVZyo6p1kZ2AkgTsLYZ5tJs=) 14: 39332e39322e32322e302f32332d3234203d3e203534333339.roa (hash: UmTKWU8Rjfv1oqZAY+cQX/Xz6npt/6m3VOBsULJ1aQE=) 15: 37382e32342e3132342e302f32342d3234203d3e203534333339.roa (hash: oW38565ILIlqFNoVZFzMb6Kfzz1ggNiqsrLP9yBoxEc=) 16: 37382e32342e3132312e302f32342d3234203d3e203631333137.roa (hash: RwfaSxxteSNcESziyQtnuZWAyXx/wSPpPO3hFCuLzuQ=) 17: 37382e32342e3132322e302f32342d3234203d3e2037303138.roa (hash: VqVKoF7iu6oZpBibUU7dIXHyYCOWDkKvo2nEluE8pdI=) 18: 34352e38362e39342e302f32342d3234203d3e2039303039.roa (hash: rKfZougU8FJmyo76eGgyF3kpeC1vK03Kb0a4e2CX1MU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 12 May 2024 04:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:95:2c:07:5f:de:46:9b:6c:78:cf:0f:b0:11:93:34:89:67:48:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444 Validity Not Before: May 11 07:46:43 2024 GMT Not After : May 12 08:37:43 2024 GMT Subject: CN=66C01F8AB899E711DF6DB6EE648AAB9553613E7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ec:e3:2e:74:73:08:66:11:3f:80:ef:36:c6: 77:66:02:b1:b2:60:e9:ca:48:12:6d:77:48:a9:8c: 31:8e:6d:0e:bd:53:ff:40:bb:e5:2c:be:3e:cf:ad: cc:ed:b9:9e:fa:e1:6a:82:56:d1:84:f3:3a:f1:a3: 3c:57:7b:e6:19:ac:31:6a:2b:ec:7f:c8:b7:f6:59: 01:e7:f1:3e:44:54:51:40:3e:ff:fd:ed:1f:d6:dc: 01:f5:1e:b3:8d:9a:03:e3:7b:4d:38:f1:8a:ce:51: a7:66:ad:7f:74:c1:ec:c7:95:dd:5a:5d:14:78:45: 99:6e:51:6d:30:20:a6:33:27:ad:14:7a:d3:04:5d: 33:65:19:66:52:a4:ee:22:f9:8d:52:8b:99:04:08: 5b:9d:63:56:0c:46:51:5a:9f:97:a6:cf:6b:8a:31: 4a:3f:cd:a7:27:3f:82:d2:78:ac:bd:19:55:bf:a7: 56:39:80:3c:49:80:f0:31:1b:d5:d7:d6:c7:c9:21: dd:2a:23:39:72:8f:8f:56:0e:dc:c0:52:49:e1:9e: 2e:89:20:88:17:fe:5c:14:9d:f4:a2:5c:8d:14:7a: 54:3c:df:95:ca:2d:11:4c:b5:00:98:3e:bc:c6:48: 0b:95:fb:33:26:49:8c:42:3c:27:c2:77:cd:93:cd: ba:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C0:1F:8A:B8:99:E7:11:DF:6D:B6:EE:64:8A:AB:95:53:61:3E:7D X509v3 Authority Key Identifier: keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:64:8c:f8:0f:03:9d:79:d8:a3:e7:7c:25:45:60:d4:89:86: f5:d4:f1:ea:79:71:3b:c4:91:61:4c:f2:fa:d5:4d:0f:76:e0: 3c:a4:e3:86:38:d5:91:eb:a7:ae:81:31:fe:ed:46:e1:e1:c3: c4:fa:13:31:2e:6c:20:1a:18:53:ab:b0:86:ce:ad:86:f0:4f: fa:ff:3b:bb:56:92:2f:90:6c:1d:99:3a:66:74:5a:87:12:4d: 3c:a0:10:86:fc:f6:73:51:96:3e:ff:a7:88:78:38:1b:df:68: b2:b7:34:d7:74:af:20:33:2a:0c:2f:1e:dd:8b:6b:62:8e:fc: c0:00:25:3d:59:72:5a:b4:79:12:e7:ac:a7:95:24:65:c1:6c: 2a:cf:38:32:cf:eb:75:c5:50:c3:77:52:bf:68:a9:ce:f1:02: a2:76:52:ed:af:4c:1c:31:ac:62:88:7a:e6:e9:bb:c9:f2:f1: 46:f8:9f:2a:42:6a:6c:72:f6:4f:9f:ae:cd:c5:de:bf:4d:6e: e0:53:3a:d8:b7:fa:cd:ec:fa:8b:34:c2:f9:03:2a:fa:ce:af: 28:fb:b6:0c:26:19:5d:1e:90:41:4e:e8:79:fc:a8:c3:f5:7c: 7b:27:33:56:4b:c7:cc:30:f8:28:24:84:49:08:20:3f:bd:0d: 26:51:f1:b9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUeZUsB1/eRptseM8PsBGTNIlnSF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDAxYmEwMTNiYzFlNmQ4NmYwZDZkNThlYWZhNTRlMjdm YWRhMzQ0NDAeFw0yNDA1MTEwNzQ2NDNaFw0yNDA1MTIwODM3NDNaMDMxMTAvBgNV BAMTKDY2QzAxRjhBQjg5OUU3MTFERjZEQjZFRTY0OEFBQjk1NTM2MTNFN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv7OMudHMIZhE/gO82xndmArGy YOnKSBJtd0ipjDGObQ69U/9Au+Usvj7PrcztuZ764WqCVtGE8zrxozxXe+YZrDFq K+x/yLf2WQHn8T5EVFFAPv/97R/W3AH1HrONmgPje0048YrOUadmrX90wezHld1a XRR4RZluUW0wIKYzJ60UetMEXTNlGWZSpO4i+Y1Si5kECFudY1YMRlFan5emz2uK MUo/zacnP4LSeKy9GVW/p1Y5gDxJgPAxG9XX1sfJId0qIzlyj49WDtzAUknhni6J IIgX/lwUnfSiXI0UelQ835XKLRFMtQCYPrzGSAuV+zMmSYxCPCfCd82TzbpXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUZsAfiriZ5xHfbbbuZIqrlVNhPn0wHwYDVR0j BBgwFoAU0BugE7webYbw1tWOr6VOJ/raNEQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYtNjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5 NDMxLzEvRDAxQkEwMTNCQzFFNkQ4NkYwRDZENThFQUZBNTRFMjdGQURBMzQ0NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBCdWdFN3dlYllidzF0V09yNlZPSl9y YU5FUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNTIyYTUyZi02 NTM0LTQxNjUtYTZhNy1lZjlmNzRlZjk0MzEvMS9EMDFCQTAxM0JDMUU2RDg2RjBE NkQ1OEVBRkE1NEUyN0ZBREEzNDQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADGSM+A8DnXnYo+d8JUVg 1ImG9dTx6nlxO8SRYUzy+tVND3bgPKTjhjjVkeunroEx/u1G4eHDxPoTMS5sIBoY U6uwhs6thvBP+v87u1aSL5BsHZk6ZnRahxJNPKAQhvz2c1GWPv+niHg4G99osrc0 13SvIDMqDC8e3YtrYo78wAAlPVlyWrR5Euesp5UkZcFsKs84Ms/rdcVQw3dSv2ip zvEConZS7a9MHDGsYoh65um7yfLxRvifKkJqbHL2T5+uzcXev01u4FM62Lf6zez6 izTC+QMq+s6vKPu2DCYZXR6QQU7oefyow/V8eyczVkvHzDD4KCSESQggP70NJlHx uQ== -----END CERTIFICATE-----Generated at Sat May 11 09:15:08 2024 by rpki-client on console-ams.rpki-client.org