$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: fClLm44YBt3kuYuDV0hGu/v1MDbicCALIDshkh8BLus= Subject key identifier: 4A:90:6C:F3:76:27:0C:8B:AC:21:9E:87:BA:23:1F:58:0C:FA:D7:9D Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 2CD60BED8CF9C3390F180401857AE5DBBC571382 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 01D7 Signing time: Sat 18 May 2024 16:42:08 +0000 Manifest this update: Sat 18 May 2024 16:37:08 +0000 Manifest next update: Sun 19 May 2024 20:14:08 +0000 Files and hashes: 1: 36322e3131322e3134342e302f32302d3234203d3e20383334.roa (hash: S7iHHJHyJElKMEwWwHT1DGXMGXU8xr7QuzhNClFeTPM=) 2: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: oMXp2/l5KkMSfFsxhWbaERnhfNn9+sT2I7U3nAxd+WE=) 3: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: hEz6L4pZSnFZE7TsLhCQI100L3+Wt4g9WGFWFDZ1RzQ=) 4: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: FKiu19v3Hkj5Qs6P/azaWmAsLtNKahx6VwLt7vWw5HQ=) 5: 3138352e322e3136322e302f32332d3234203d3e203631333137.roa (hash: xuGHb5eFyDpCiqjUnIbYBR/C7LQ6gO7xQmGZCCQydXc=) 6: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: mD9rj17VokpJCsZ9H9Ae95tSKaSHLOh9aSfK+NPmDqE=) 7: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: YgvvK/zBdCtbBPNw66EY7ndL/w4D6VPizjCm/P3Lbtg=) 8: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: yHuc6hkl8kJZ1Q4Kq8/vGQ+ttjQnfZvI1todeXtkvr8=) 9: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: vK1uTf3qqZSPswjNCNPaGtlQPbroJTPr1O6doLBqosU=) 10: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: 4OD07bikEzVW0f0iJwddTiHo4kOtaHyua4YRDwBLj8A=) 11: 3138352e322e3136302e302f32332d3233203d3e203130313033.roa (hash: 33zUHby3oxz4wj8BYiAKDnKFZKq7ahMTMDVjb6Xaft8=) 12: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: f5jrt2CWljY9HqbxEbBNBNyfysfYPVh05SyiS6Jp5fI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 May 2024 11:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d6:0b:ed:8c:f9:c3:39:0f:18:04:01:85:7a:e5:db:bc:57:13:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: May 18 16:37:08 2024 GMT Not After : May 19 20:14:08 2024 GMT Subject: CN=4A906CF376270C8BAC219E87BA231F580CFAD79D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cb:8c:ed:d9:da:5a:2e:d0:85:af:5e:e0:d5: 2a:52:ac:62:bb:5b:34:fb:fe:ea:c8:bf:a8:73:a0: 16:b0:12:af:09:44:f0:07:8e:a6:f4:10:2f:5b:c8: 86:f8:3a:93:e9:f3:f6:1d:45:67:6d:e0:bc:c6:fb: 62:77:af:fa:88:c7:78:6e:ac:76:aa:7c:01:a0:1c: 47:c1:87:85:5a:51:a7:b7:ef:ba:76:27:05:e4:bc: d8:d5:7d:32:e3:8d:3b:ae:c1:c5:62:11:ad:35:1a: 3f:de:92:2e:a8:5e:3b:a3:9a:42:c9:6c:43:a9:59: 20:52:c7:d9:5e:f5:6e:65:d6:0b:95:75:37:20:f3: cc:06:99:a0:01:de:aa:b6:0c:8b:43:ca:4f:21:8a: 40:d9:ad:76:24:df:13:5e:85:1f:09:1f:cc:56:4a: 7c:c4:68:aa:b2:ea:cf:0c:37:33:4d:41:0a:61:e9: 3a:9b:cd:3f:f8:1e:b4:7c:b8:62:c6:f1:9c:e4:5c: c5:81:ee:fb:67:73:7d:f9:84:6d:97:6d:4f:c6:42: ad:b4:d7:49:98:cb:61:d5:31:e8:4d:3d:67:38:f4: 75:c1:39:ff:d2:a3:47:f4:9d:1d:e9:66:57:42:32: 97:38:fa:c2:e6:92:ec:2e:6b:7d:32:0a:32:14:0f: 2e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:90:6C:F3:76:27:0C:8B:AC:21:9E:87:BA:23:1F:58:0C:FA:D7:9D X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:5f:56:36:1c:bf:7c:d3:fa:bb:29:9b:85:c3:b7:78:21:3c: 13:e3:85:d0:83:72:a0:1d:eb:15:d7:d6:9a:ab:f4:25:46:3f: 14:d5:45:04:f8:4c:a9:07:d9:fb:d4:ee:31:3a:d0:d0:e6:db: 92:35:e1:6d:0d:6a:89:45:96:a2:e2:38:6b:db:68:8d:6d:cb: 75:90:8b:ad:90:5d:79:3a:0e:b8:11:46:3b:f6:c3:64:3c:12: f1:c7:ab:6b:40:80:0a:67:e8:4d:e2:f5:72:38:52:5b:29:df: c8:fc:ae:95:b2:e5:2c:8c:7b:d7:17:2a:4d:39:d1:a0:2e:c7: 76:e4:94:78:e7:84:f4:7c:38:99:56:8b:10:16:ed:26:af:50: 84:61:dc:f3:7a:ec:01:6a:7e:f4:21:a5:74:9d:8d:3d:16:19: b6:a9:b3:87:f5:ef:37:7b:8c:de:16:d9:9c:f4:21:10:4b:9c: 3e:05:be:24:e0:b0:81:14:b4:6a:39:ee:ac:28:ed:a2:e8:c7: 45:4a:d1:70:19:65:74:08:b1:9e:84:17:72:41:4f:d9:77:ad: f4:8e:1b:4a:8d:de:ff:06:91:b7:05:0c:5a:77:65:cd:af:a8: 10:54:19:99:86:9d:7c:2c:34:4b:ab:08:b4:f3:c8:de:95:8e: e1:83:a9:f3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULNYL7Yz5wzkPGAQBhXrl27xXE4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNDA1MTgxNjM3MDhaFw0yNDA1MTkyMDE0MDhaMDMxMTAvBgNV BAMTKDRBOTA2Q0YzNzYyNzBDOEJBQzIxOUU4N0JBMjMxRjU4MENGQUQ3OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcy4zt2dpaLtCFr17g1SpSrGK7 WzT7/urIv6hzoBawEq8JRPAHjqb0EC9byIb4OpPp8/YdRWdt4LzG+2J3r/qIx3hu rHaqfAGgHEfBh4VaUae377p2JwXkvNjVfTLjjTuuwcViEa01Gj/eki6oXjujmkLJ bEOpWSBSx9le9W5l1guVdTcg88wGmaAB3qq2DItDyk8hikDZrXYk3xNehR8JH8xW SnzEaKqy6s8MNzNNQQph6TqbzT/4HrR8uGLG8ZzkXMWB7vtnc335hG2XbU/GQq20 10mYy2HVMehNPWc49HXBOf/So0f0nR3pZldCMpc4+sLmkuwua30yCjIUDy5PAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUSpBs83YnDIusIZ6HuiMfWAz6150wHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUF9WNhy/fNP6uymbhcO3 eCE8E+OF0INyoB3rFdfWmqv0JUY/FNVFBPhMqQfZ+9TuMTrQ0ObbkjXhbQ1qiUWW ouI4a9tojW3LdZCLrZBdeToOuBFGO/bDZDwS8cera0CACmfoTeL1cjhSWynfyPyu lbLlLIx71xcqTTnRoC7HduSUeOeE9Hw4mVaLEBbtJq9QhGHc83rsAWp+9CGldJ2N PRYZtqmzh/XvN3uM3hbZnPQhEEucPgW+JOCwgRS0ajnurCjtoujHRUrRcBlldAix noQXckFP2Xet9I4bSo3e/waRtwUMWndlza+oEFQZmYadfCw0S6sItPPI3pWO4YOp 8w== -----END CERTIFICATE-----Generated at Sat May 18 17:26:22 2024 by rpki-client on console-ams.rpki-client.org