$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft File: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json) Hash identifier: 2wE7tjVqZAB2Hrdh3QmZkGyVxDye7/IhyI+8kGXk45M= Subject key identifier: CF:0F:60:74:0B:7F:DC:B4:59:B2:4F:F2:88:51:F5:65:EB:93:A2:49 Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Certificate serial: 66975A30E6C16624F7576ED633E03DFE45FEB206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft Manifest number: 02D0 Signing time: Wed 22 May 2024 12:37:09 +0000 Manifest this update: Wed 22 May 2024 12:32:09 +0000 Manifest next update: Thu 23 May 2024 14:39:09 +0000 Files and hashes: 1: 3139332e39332e3135322e302f32342d3234203d3e20313939363134.roa (hash: nT7gvnfkgYFNmxNunVHYHFHUN5YuSFJyH0PB1mpE4/s=) 2: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: PKF76IZOxqo5GWZy7dmGRVquVo/ra5iazBlfAc1i8ZQ=) 3: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: 7h9c3ic2ijne7bcZtVDKPsbHR6LZDseAyEQRvPPRo0U=) 4: 3139332e39332e3135342e302f32342d3234203d3e20323131343135.roa (hash: xMcsrC67odGaWyaR2hxgrCfYPETddSEG0xxrhNfldwA=) 5: 3139332e39332e3135352e302f32342d3234203d3e203631333137.roa (hash: CQ8GZzI1c7CqTnsVBjS8FkgsO1OVVGRKDoqwe+OZXuU=) 6: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: MLoOg0WMNnQbU5WWUbDbyND1vsRkEBjaulJny3LgQq0=) 7: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: 3UlnCQXkfXu+2GZ5Bl7s6bSNz4Mx8TSa01kcYDPKMyM=) 8: 3139332e39332e3135332e302f32342d3234203d3e203631333137.roa (hash: f6JGNjZsAgaozmDw79IJKGiOd+NS/amYN159buCKF+w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 May 2024 08:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:97:5a:30:e6:c1:66:24:f7:57:6e:d6:33:e0:3d:fe:45:fe:b2:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Validity Not Before: May 22 12:32:09 2024 GMT Not After : May 23 14:39:09 2024 GMT Subject: CN=CF0F60740B7FDCB459B24FF28851F565EB93A249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a9:ee:8e:84:2c:24:b6:20:cd:16:cf:2d:01: cd:4b:c7:48:77:56:65:f9:ba:8b:1a:89:10:cf:40: 14:5a:ee:bc:d0:4b:b9:25:2a:14:92:77:49:72:6e: a3:7f:06:e8:93:1a:3c:19:07:bb:0e:d5:a0:0e:2f: be:6b:53:fd:db:1a:8a:45:8b:92:29:70:db:b7:3f: f0:fd:88:ab:d3:03:bd:6a:4b:22:c5:de:04:e2:32: 67:59:b5:98:e8:29:81:0b:66:db:45:76:76:8e:6b: d6:8f:6d:5c:a2:da:88:74:7c:59:1b:d1:85:61:15: 51:d6:f9:9f:3a:9e:d5:67:21:bc:c1:04:17:a9:2f: 3e:07:0b:34:be:01:c7:0a:fc:b1:ef:11:a9:89:0e: 22:c1:2c:5b:44:e1:d8:11:99:b8:7c:c1:cf:6f:99: 6b:cf:5a:6d:8f:9c:c7:00:c0:4d:80:b0:5a:de:83: be:04:9d:c2:16:83:48:2c:ee:71:92:00:cf:51:b8: 8e:a3:ec:4b:7f:00:54:a8:1d:0a:91:d4:7f:57:7b: 68:3f:3e:09:f4:0b:af:27:34:a0:66:ee:2b:49:58: 53:7d:4c:c3:69:87:57:3f:13:e4:09:2c:85:1e:d5: 71:b4:cc:bd:6d:c4:91:ee:f7:7f:c5:c8:a4:3f:bd: 50:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0F:60:74:0B:7F:DC:B4:59:B2:4F:F2:88:51:F5:65:EB:93:A2:49 X509v3 Authority Key Identifier: keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ed:1d:1d:6d:69:c4:76:62:28:8a:94:78:70:05:a3:6d:e5: f1:09:c6:7c:c9:4a:34:1b:9c:bd:ff:7f:4a:6c:41:fd:55:c2: d0:21:d9:95:ca:f3:ee:1a:b8:44:7e:25:52:7d:80:c8:5f:34: 2d:17:8c:ee:15:17:f9:f2:d4:da:fd:6d:0f:51:dc:92:12:80: e2:7d:2b:2b:bb:c1:0a:9d:da:ae:af:de:32:2b:34:20:db:6b: b5:cf:c1:f3:e4:dc:4e:7d:3b:23:e9:64:91:a7:1c:f5:7e:29: c6:e5:7e:aa:14:83:cb:f9:28:e9:8c:48:e3:d8:1a:18:fb:07: 29:47:11:e3:e4:64:70:a6:d1:ca:97:46:8b:35:1d:24:36:7d: bf:d9:67:86:22:28:f1:cb:7e:a3:00:0d:f0:81:8c:0c:a2:b5: 98:20:01:05:bb:f3:c0:6e:2a:8d:90:6d:14:9d:8b:f5:83:fd: f8:74:72:29:17:5a:46:55:f7:58:4e:e4:20:a1:ac:51:5b:a8: 0e:72:35:7c:f1:3e:d4:ba:e8:94:5c:7a:fa:a9:ca:98:8a:f3: a5:d8:84:6c:51:38:53:75:14:22:0f:f7:01:ac:97:6d:16:4f: d7:02:33:7f:cf:16:ad:e2:a6:2e:15:3c:e5:e1:25:41:bf:ac: 34:0f:7e:4a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZpdaMObBZiT3V27WM+A9/kX+sgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx NjJlMWFhZDAeFw0yNDA1MjIxMjMyMDlaFw0yNDA1MjMxNDM5MDlaMDMxMTAvBgNV BAMTKENGMEY2MDc0MEI3RkRDQjQ1OUIyNEZGMjg4NTFGNTY1RUI5M0EyNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9qe6OhCwktiDNFs8tAc1Lx0h3 VmX5uosaiRDPQBRa7rzQS7klKhSSd0lybqN/BuiTGjwZB7sO1aAOL75rU/3bGopF i5IpcNu3P/D9iKvTA71qSyLF3gTiMmdZtZjoKYELZttFdnaOa9aPbVyi2oh0fFkb 0YVhFVHW+Z86ntVnIbzBBBepLz4HCzS+AccK/LHvEamJDiLBLFtE4dgRmbh8wc9v mWvPWm2PnMcAwE2AsFreg74EncIWg0gs7nGSAM9RuI6j7Et/AFSoHQqR1H9Xe2g/ Pgn0C68nNKBm7itJWFN9TMNph1c/E+QJLIUe1XG0zL1txJHu93/FyKQ/vVCzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzw9gdAt/3LRZsk/yiFH1ZeuTokkwHwYDVR0j BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0 OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ dUdxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjUyZDgxNC0z ZDJmLTRkZjQtODE0MC1kZmI1MzBmNzQ5MTIvMC9GMjlGQkFCNERCODY3RjZCRDlB N0VGRjZBQTU1RDk4QzE2MkUxQUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHO0dHW1pxHZiKIqUeHAF o23l8QnGfMlKNBucvf9/SmxB/VXC0CHZlcrz7hq4RH4lUn2AyF80LReM7hUX+fLU 2v1tD1HckhKA4n0rK7vBCp3arq/eMis0INtrtc/B8+TcTn07I+lkkacc9X4pxuV+ qhSDy/ko6YxI49gaGPsHKUcR4+RkcKbRypdGizUdJDZ9v9lnhiIo8ct+owAN8IGM DKK1mCABBbvzwG4qjZBtFJ2L9YP9+HRyKRdaRlX3WE7kIKGsUVuoDnI1fPE+1Lro lFx6+qnKmIrzpdiEbFE4U3UUIg/3AayXbRZP1wIzf88WreKmLhU85eElQb+sNA9+ Sg== -----END CERTIFICATE-----Generated at Wed May 22 16:10:54 2024 by rpki-client on console-fra.rpki-client.org